$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.mft File: C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.mft (raw, json) Hash identifier: vDSbHqAoHltuiagHqZwKp1c5/LK6sK3t6Za1GwA8ApU= Subject key identifier: 9E:7F:06:54:E2:BD:92:73:D9:0E:1A:09:01:6E:E8:6B:9A:DC:F6:25 Authority key identifier: C6:40:51:3C:AB:89:8A:7B:4B:1C:A0:EA:B7:CA:AB:03:5A:E5:85:C6 Certificate issuer: /CN=C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6 Certificate serial: 7EA86CCD45730F2A6554648C2EAD17ADD0EEBC3E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.mft Manifest number: 012B Signing time: Sat 01 Nov 2025 10:32:29 +0000 Manifest this update: Sat 01 Nov 2025 10:27:29 +0000 Manifest next update: Wed 05 Nov 2025 19:08:29 +0000 Files and hashes: 1: 323830363a3361633a3a2f33322d3430203d3e20323635363036.roa (hash: FeF+CA1umht/nEYfs8h51BRFJO4YkmcWGH8pjv914xI=) 2: 3230302e37312e3130382e302f32322d3234203d3e20323635363036.roa (hash: cmJBQqqv0NwdJxnmd/33hIR7s29wsLQU4vgOLDqSphc=) 3: C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.crl (hash: o+WRnYoQTefo/+yrXAvq7CGUqAfMR6tu8+bkh8n2U4E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.crl rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a8:6c:cd:45:73:0f:2a:65:54:64:8c:2e:ad:17:ad:d0:ee:bc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6 Validity Not Before: Nov 1 10:27:29 2025 GMT Not After : Nov 5 19:08:29 2025 GMT Subject: CN=9E7F0654E2BD9273D90E1A09016EE86B9ADCF625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:22:a6:a7:6e:cf:51:4f:b1:0e:07:7e:0a: 55:b3:a9:8b:87:a2:f9:7b:54:bf:43:99:13:7d:27: d7:17:7e:e0:f3:83:1f:17:0f:22:9a:15:9f:e2:9e: 00:bd:cc:51:07:0e:9c:30:6a:7f:b6:ed:84:a5:fd: 31:e5:56:d5:b9:c2:6e:b4:b8:4d:06:ec:6f:fe:9e: 92:77:06:d1:7e:6a:6f:93:53:81:61:87:62:3b:a0: eb:b7:1e:0c:0a:c4:7a:fd:92:e5:e0:51:e0:a7:eb: 85:a4:14:b8:60:3d:55:8d:4b:52:ea:18:3f:ed:43: ca:91:db:77:ad:c4:cb:57:d7:38:49:d7:61:1f:59: 74:d4:c5:e9:44:9f:58:4d:fd:79:cc:a9:58:22:e1: 02:dc:92:1b:d6:36:0f:ca:42:57:e3:7c:f4:da:60: 03:3e:68:6a:22:29:16:d3:17:55:54:77:66:79:83: e6:05:26:13:50:cc:a5:ac:cf:3f:ce:47:e3:1d:dd: f6:5b:3f:b0:10:a4:e6:f3:18:7a:ba:e8:23:39:60: 28:de:58:11:6d:c8:06:70:c9:55:7a:7b:40:e1:52: 80:b7:51:86:9f:55:8e:f9:77:f0:2a:b0:b5:ae:4e: 01:70:6c:69:1c:91:cf:72:7c:0e:ff:4a:cf:75:95: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7F:06:54:E2:BD:92:73:D9:0E:1A:09:01:6E:E8:6B:9A:DC:F6:25 X509v3 Authority Key Identifier: keyid:C6:40:51:3C:AB:89:8A:7B:4B:1C:A0:EA:B7:CA:AB:03:5A:E5:85:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:35:d4:82:b1:7f:1a:99:e6:a7:5c:17:9a:bf:ad:a5:9c:db: 5e:58:b2:21:b1:d9:2d:50:a7:57:68:a5:10:5b:94:83:d0:96: 75:5c:4f:2e:19:91:ef:ba:df:a0:00:69:1a:31:2f:3b:83:79: d0:95:e2:4c:5d:75:60:46:b3:18:53:69:e3:1c:b9:13:d7:b8: ee:fb:bd:8c:46:e6:06:62:34:d1:33:f9:57:63:53:cb:1a:1a: c1:1e:c7:c9:77:79:59:28:0c:85:c0:52:11:d8:81:b6:5a:b5: 96:de:db:42:de:6d:ce:7e:fb:ce:07:5e:4d:72:2a:a1:98:e1: 3d:51:f8:2d:e6:da:2f:04:a4:5d:fb:ce:4f:46:77:d3:06:7b: 2d:ed:a3:df:27:c8:98:ce:1f:f3:d0:16:74:59:95:97:fe:af: 6c:15:85:e5:77:d5:80:61:1d:ec:42:f6:d6:3a:8e:a9:06:d8: 97:a6:9b:51:6d:bc:cb:7c:ab:3a:19:3a:26:a9:d9:9f:fc:7d: a0:a1:00:4c:1f:41:41:42:4d:58:a9:9a:7e:9e:97:ac:e8:06: dc:9f:44:63:48:20:fd:fc:e2:f4:e1:e1:fb:ea:2e:50:a0:d3: 69:74:cd:e0:4c:32:07:4c:f9:c8:79:9a:83:f9:e8:be:98:28: 37:44:7a:c7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfqhszUVzDyplVGSMLq0XrdDuvD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY0MDUxM0NBQjg5OEE3QjRCMUNBMEVBQjdDQUFCMDM1 QUU1ODVDNjAeFw0yNTExMDExMDI3MjlaFw0yNTExMDUxOTA4MjlaMDMxMTAvBgNV BAMTKDlFN0YwNjU0RTJCRDkyNzNEOTBFMUEwOTAxNkVFODZCOUFEQ0Y2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGiKmp27PUU+xDgd+ClWzqYuH ovl7VL9DmRN9J9cXfuDzgx8XDyKaFZ/ingC9zFEHDpwwan+27YSl/THlVtW5wm60 uE0G7G/+npJ3BtF+am+TU4Fhh2I7oOu3HgwKxHr9kuXgUeCn64WkFLhgPVWNS1Lq GD/tQ8qR23etxMtX1zhJ12EfWXTUxelEn1hN/XnMqVgi4QLckhvWNg/KQlfjfPTa YAM+aGoiKRbTF1VUd2Z5g+YFJhNQzKWszz/OR+Md3fZbP7AQpObzGHq66CM5YCje WBFtyAZwyVV6e0DhUoC3UYafVY75d/AqsLWuTgFwbGkckc9yfA7/Ss91lXS7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUnn8GVOK9knPZDhoJAW7oa5rc9iUwHwYDVR0j BBgwFoAUxkBRPKuJintLHKDqt8qrA1rlhcYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMEQyMUQxN0Y4QTJEMzhCRjYzRDc2RUMyODk0QTc2N0M1 RkMxRUQ3QkNEMURBMTg2NEMxOTM0QTRFRDE4M0Q5LzAvQzY0MDUxM0NBQjg5OEE3 QjRCMUNBMEVBQjdDQUFCMDM1QUU1ODVDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNjQwNTEzQ0FCODk4QTdCNEIx Q0EwRUFCN0NBQUIwMzVBRTU4NUM2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjBEMjFEMTdGOEEyRDM4QkY2M0Q3NkVDMjg5NEE3NjdDNUZDMUVEN0JD RDFEQTE4NjRDMTkzNEE0RUQxODNEOS8wL0M2NDA1MTNDQUI4OThBN0I0QjFDQTBF QUI3Q0FBQjAzNUFFNTg1QzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJNdSCsX8ameanXBeav62lnNte WLIhsdktUKdXaKUQW5SD0JZ1XE8uGZHvut+gAGkaMS87g3nQleJMXXVgRrMYU2nj HLkT17ju+72MRuYGYjTRM/lXY1PLGhrBHsfJd3lZKAyFwFIR2IG2WrWW3ttC3m3O fvvOB15NciqhmOE9Ufgt5tovBKRd+85PRnfTBnst7aPfJ8iYzh/z0BZ0WZWX/q9s FYXld9WAYR3sQvbWOo6pBtiXpptRbbzLfKs6GTomqdmf/H2goQBMH0FBQk1YqZp+ npes6Abcn0RjSCD9/OL04eH76i5QoNNpdM3gTDIHTPnIeZqD+ei+mCg3RHrH -----END CERTIFICATE-----Generated at Sat Nov 1 22:33:19 2025 by rpki-client