$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft File: 973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft (raw, json) Hash identifier: Wy8zIWnmvedN2r5vG2/7dWHP6XiVBehwcoyptZTDQu8= Subject key identifier: F7:DC:BF:5C:5E:BC:F6:38:A9:62:1A:E8:D6:24:26:A0:EC:7B:43:89 Authority key identifier: 97:3F:CC:E5:E0:F1:73:8C:FE:CC:15:92:89:BB:26:9F:8C:0B:1F:E2 Certificate issuer: /CN=973FCCE5E0F1738CFECC159289BB269F8C0B1FE2 Certificate serial: 3B24854A3FDA60EAE245C53E699958DBC1C22B8B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft Manifest number: 0135 Signing time: Sat 01 Nov 2025 12:48:38 +0000 Manifest this update: Sat 01 Nov 2025 12:43:38 +0000 Manifest next update: Thu 06 Nov 2025 20:43:38 +0000 Files and hashes: 1: 34352e3136322e38322e302f32332d3233203d3e20323637363832.roa (hash: gbLWvXqd/T2upCJcLwG0ybZEXPghql8tAA+ygok/I9U=) 2: 973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl (hash: 8HgbvgK1gkZBSq/xbhdEfRWyFih5OzwfrYlayx4v8xE=) 3: 34352e3136322e38342e302f32342d3234203d3e20323637363832.roa (hash: iowUSCP6nkypTOfxS6/NXCn4qSq2Lozb7RA2QE+TmLI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 20:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:24:85:4a:3f:da:60:ea:e2:45:c5:3e:69:99:58:db:c1:c2:2b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=973FCCE5E0F1738CFECC159289BB269F8C0B1FE2 Validity Not Before: Nov 1 12:43:38 2025 GMT Not After : Nov 6 20:43:38 2025 GMT Subject: CN=F7DCBF5C5EBCF638A9621AE8D62426A0EC7B4389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:b5:2b:f0:4a:4a:d1:10:f3:a3:57:15:6f: 86:cc:17:8c:09:06:7c:fa:c3:70:60:cd:01:bf:3f: b9:85:a4:0e:ba:34:0d:66:74:12:72:e4:ca:67:cd: e0:56:3f:b7:c2:bc:88:71:ea:a9:89:40:ca:8a:16: f2:13:20:bf:21:63:be:7e:ff:b6:7a:67:5f:59:0f: 7d:76:44:26:80:dd:f9:53:e8:45:1c:4d:9a:b9:41: ef:c1:c9:e6:f6:ad:90:be:e2:f3:26:d7:1b:fd:c3: 75:66:79:f5:23:ab:2e:26:f1:de:1a:d5:4c:b0:bb: 4b:fd:1d:d5:19:09:83:d6:4e:bf:db:6c:d1:62:f8: 2f:8e:2d:c6:c2:fa:ad:8d:25:0f:1c:7c:a4:50:d5: ff:74:bb:e7:20:8a:1b:bc:92:bb:f7:76:91:30:f9: a1:09:98:c0:6b:3a:a1:71:13:94:0f:5e:21:55:9c: 1c:96:df:20:ba:e3:c8:cb:0a:dd:74:98:72:f2:d9: 8a:59:4f:3f:97:21:90:a2:85:3f:3f:12:70:fb:43: 99:d8:63:dc:97:97:ce:9c:bf:b5:a9:8c:55:4e:d6: ac:0a:b6:db:51:29:a1:54:32:fe:0b:12:84:49:6f: 8d:5d:cd:d0:99:1a:96:69:4e:16:4f:37:bf:fa:65: dd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DC:BF:5C:5E:BC:F6:38:A9:62:1A:E8:D6:24:26:A0:EC:7B:43:89 X509v3 Authority Key Identifier: keyid:97:3F:CC:E5:E0:F1:73:8C:FE:CC:15:92:89:BB:26:9F:8C:0B:1F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:39:4c:41:1f:0c:50:36:cd:f7:e4:29:ac:be:54:29:f6:c2: ef:b6:44:c4:0e:bd:b1:a0:3e:39:c2:98:26:0a:6d:eb:64:5e: 81:0b:2f:f4:36:c6:e9:55:e7:7b:eb:e7:91:ee:ea:0d:97:7e: 8a:47:12:53:dd:d5:ca:0c:c9:cb:39:76:5c:08:52:ee:a1:50: 51:be:b7:87:4e:0d:9b:96:ad:1a:d2:a0:b2:4c:98:3b:a6:77: be:92:77:94:24:16:e0:c2:e3:02:22:eb:46:2c:16:55:a0:6b: 03:85:3e:91:44:3f:c9:6a:b6:f0:6b:c6:15:b8:d1:af:c3:9d: eb:e3:c7:59:86:b5:51:a0:99:ec:4f:80:03:4a:d6:6f:67:e3: 34:41:a1:36:94:e4:34:cf:c1:45:d8:e8:e4:53:a4:87:cc:c9: b7:f8:8c:28:4d:b3:b1:11:dc:9c:9c:70:c9:5a:d3:68:16:de: 68:8b:04:2a:f3:c6:3a:2f:9c:86:3a:f2:ab:9e:ca:7a:ae:ed: 63:2e:80:c6:26:0e:07:c3:26:e3:35:ac:0a:91:77:b9:aa:4c: eb:b0:cc:3f:6e:13:15:27:db:2c:8d:14:45:ce:91:91:8e:71: ec:8b:b1:49:6a:df:21:13:aa:d9:0a:88:35:f6:2d:eb:7f:2d: 62:ad:c8:3f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOySFSj/aYOriRcU+aZlY28HCK4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTczRkNDRTVFMEYxNzM4Q0ZFQ0MxNTkyODlCQjI2OUY4 QzBCMUZFMjAeFw0yNTExMDExMjQzMzhaFw0yNTExMDYyMDQzMzhaMDMxMTAvBgNV BAMTKEY3RENCRjVDNUVCQ0Y2MzhBOTYyMUFFOEQ2MjQyNkEwRUM3QjQzODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFrUr8EpK0RDzo1cVb4bMF4wJ Bnz6w3BgzQG/P7mFpA66NA1mdBJy5MpnzeBWP7fCvIhx6qmJQMqKFvITIL8hY75+ /7Z6Z19ZD312RCaA3flT6EUcTZq5Qe/Byeb2rZC+4vMm1xv9w3VmefUjqy4m8d4a 1Uywu0v9HdUZCYPWTr/bbNFi+C+OLcbC+q2NJQ8cfKRQ1f90u+cgihu8krv3dpEw +aEJmMBrOqFxE5QPXiFVnByW3yC648jLCt10mHLy2YpZTz+XIZCihT8/EnD7Q5nY Y9yXl86cv7WpjFVO1qwKtttRKaFUMv4LEoRJb41dzdCZGpZpThZPN7/6Zd2XAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU99y/XF689jipYhro1iQmoOx7Q4kwHwYDVR0j BBgwFoAUlz/M5eDxc4z+zBWSibsmn4wLH+IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GQkY5MUIxNzIwRDkxMjAyRUNGNEM0NDg1MjUzM0NCRjBC NzU0MEM1REQzQTFFRERBNjJGNkFEMjNBMzI1RkYwLzAvOTczRkNDRTVFMEYxNzM4 Q0ZFQ0MxNTkyODlCQjI2OUY4QzBCMUZFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzNGQ0NFNUUwRjE3MzhDRkVD QzE1OTI4OUJCMjY5RjhDMEIxRkUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkJGOTFCMTcyMEQ5MTIwMkVDRjRDNDQ4NTI1MzNDQkYwQjc1NDBDNURE M0ExRUREQTYyRjZBRDIzQTMyNUZGMC8wLzk3M0ZDQ0U1RTBGMTczOENGRUNDMTU5 Mjg5QkIyNjlGOEMwQjFGRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+OUxBHwxQNs335CmsvlQp9sLv tkTEDr2xoD45wpgmCm3rZF6BCy/0NsbpVed76+eR7uoNl36KRxJT3dXKDMnLOXZc CFLuoVBRvreHTg2blq0a0qCyTJg7pne+kneUJBbgwuMCIutGLBZVoGsDhT6RRD/J arbwa8YVuNGvw53r48dZhrVRoJnsT4ADStZvZ+M0QaE2lOQ0z8FF2OjkU6SHzMm3 +IwoTbOxEdycnHDJWtNoFt5oiwQq88Y6L5yGOvKrnsp6ru1jLoDGJg4HwybjNawK kXe5qkzrsMw/bhMVJ9ssjRRFzpGRjnHsi7FJat8hE6rZCog19i3rfy1ircg/ -----END CERTIFICATE-----Generated at Sun Nov 2 11:42:19 2025 by rpki-client