$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft File: 65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft (raw, json) Hash identifier: cgZThV8kYtf9eYEGaLcYIBk3r6C7yH958j3b3mt+g1g= Subject key identifier: D9:DA:F3:B4:DA:C3:D2:FD:1C:AA:71:14:EB:D3:86:D3:0E:0A:6F:06 Authority key identifier: 65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2 Certificate issuer: /CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2 Certificate serial: 7639960A25635C9249346B5342C0CED85543F025 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft Manifest number: D9 Signing time: Wed 17 Sep 2025 02:32:08 +0000 Manifest this update: Wed 17 Sep 2025 02:27:08 +0000 Manifest next update: Mon 22 Sep 2025 15:06:08 +0000 Files and hashes: 1: 323830333a373936303a3a2f33322d3438203d3e20323639373438.roa (hash: MN/4RtlE9d+DnKy0U12QHBIdBSJFq+lAXrFHgivrrPc=) 2: 34352e3138322e3132382e302f32322d3234203d3e20323639373438.roa (hash: u7SE5LWZJmCpnVyryY58woPlAbt1cGNdxLoYQJyfGrw=) 3: 65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl (hash: Esq8t87++nVOyEeOUQtEgDjdCm6r+lQXngNmhy7Omak=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Sep 2025 15:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:39:96:0a:25:63:5c:92:49:34:6b:53:42:c0:ce:d8:55:43:f0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2 Validity Not Before: Sep 17 02:27:08 2025 GMT Not After : Sep 22 15:06:08 2025 GMT Subject: CN=D9DAF3B4DAC3D2FD1CAA7114EBD386D30E0A6F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:3a:6a:d8:57:db:2b:9e:b7:03:94:a0:64: a3:1c:43:88:b3:5f:2d:2d:85:fe:6f:9a:10:97:91: ae:2f:19:be:38:c5:7f:9c:d4:67:51:4b:f1:52:af: 84:38:64:8d:a3:7a:86:fc:8d:78:65:fc:a3:89:d2: 66:c4:88:99:3b:ea:77:cd:df:f1:ca:20:cf:4f:4c: 93:bb:23:fc:78:f2:89:41:28:61:91:f3:44:7c:ae: 75:ac:99:0b:2a:56:65:b6:35:09:93:cf:6f:7c:41: e2:a9:26:6c:e6:ab:35:ef:fc:fc:ab:ba:9f:04:20: 16:55:89:57:6d:3b:d1:21:d2:32:bb:0c:7a:6e:8d: 37:7b:31:71:64:de:66:db:c0:bf:b1:50:87:1c:2e: b9:5b:6d:1a:0e:9a:62:54:bb:68:bb:ba:9d:74:09: 86:d4:00:a5:01:60:8e:90:44:ed:53:13:b0:2c:e2: 66:fc:44:b5:59:12:6a:81:72:ab:26:e9:53:a7:e8: 04:a8:93:d8:12:8b:88:14:c1:50:54:82:19:31:86: b7:74:66:7e:bd:3b:23:7e:35:d0:94:20:6e:7d:95: f0:c8:78:a4:cc:6a:85:14:21:04:62:2c:e8:4e:75: c9:f9:d7:c9:c2:2f:ee:49:cc:26:7f:8e:4a:60:5c: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DA:F3:B4:DA:C3:D2:FD:1C:AA:71:14:EB:D3:86:D3:0E:0A:6F:06 X509v3 Authority Key Identifier: keyid:65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:72:aa:77:13:e7:e6:96:9a:a3:f4:7e:9a:c5:d4:16:d0:99: 0a:48:e7:20:ba:a9:cb:81:a7:ed:cb:63:07:bd:f6:56:c8:5e: a6:bb:28:11:22:35:c9:da:aa:dc:85:e9:be:fa:98:e9:b7:d4: 27:89:fc:53:e5:cf:1f:06:d3:ad:7f:00:e4:8c:1a:ee:ea:5e: 89:13:2d:1e:fe:8b:29:fc:02:fc:2e:b1:d9:c6:62:4e:14:65: 2d:15:05:6e:17:74:86:bc:a9:a4:0d:45:50:c1:73:56:58:e8: bb:61:1e:c6:69:a3:a7:7d:a2:f0:d8:a2:7b:04:25:6a:34:de: 43:7e:c9:09:8c:6c:09:1c:1d:57:75:cb:03:fb:44:2c:f6:4e: 10:5d:9c:fd:62:67:45:ec:6b:d3:ec:0c:55:e7:4b:92:a2:28: 00:a4:92:d0:01:9c:4f:83:7f:96:a3:99:41:ec:cc:c7:7e:e6: a2:ea:bc:42:fe:49:28:42:e2:7a:cc:c5:60:c6:43:98:8b:cb: f6:0b:dc:60:d5:56:cd:24:df:2a:a7:92:08:25:2e:05:32:2a: 2f:7d:98:f6:f9:ac:ee:62:99:97:d6:b1:a7:58:00:66:ed:b4: 94:90:b3:86:f9:c8:d9:ec:97:7c:27:4e:0d:4f:87:0c:a4:5e: 51:9a:93:61 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdjmWCiVjXJJJNGtTQsDO2FVD8CUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVENTQzNjg4QzgyQ0M4MEVENjhERjJBOTM0NDFDMjk1 QzlGQTNFMjAeFw0yNTA5MTcwMjI3MDhaFw0yNTA5MjIxNTA2MDhaMDMxMTAvBgNV BAMTKEQ5REFGM0I0REFDM0QyRkQxQ0FBNzExNEVCRDM4NkQzMEUwQTZGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Uzpq2FfbK563A5SgZKMcQ4iz Xy0thf5vmhCXka4vGb44xX+c1GdRS/FSr4Q4ZI2jeob8jXhl/KOJ0mbEiJk76nfN 3/HKIM9PTJO7I/x48olBKGGR80R8rnWsmQsqVmW2NQmTz298QeKpJmzmqzXv/Pyr up8EIBZViVdtO9Eh0jK7DHpujTd7MXFk3mbbwL+xUIccLrlbbRoOmmJUu2i7up10 CYbUAKUBYI6QRO1TE7As4mb8RLVZEmqBcqsm6VOn6ASok9gSi4gUwVBUghkxhrd0 Zn69OyN+NdCUIG59lfDIeKTMaoUUIQRiLOhOdcn518nCL+5JzCZ/jkpgXKDJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2drztNrD0v0cqnEU69OG0w4KbwYwHwYDVR0j BBgwFoAUZdVDaIyCzIDtaN8qk0QcKVyfo+IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NDNCQzA2NjdDRDY2RTcwODQ4MDdEN0NFNTgyNzIzMkYz RkQxQzlFMkFFMDRENjlEMTlBMjI3OEZGRDIzMjZCLzAvNjVENTQzNjg4QzgyQ0M4 MEVENjhERjJBOTM0NDFDMjk1QzlGQTNFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NUQ1NDM2ODhDODJDQzgwRUQ2 OERGMkE5MzQ0MUMyOTVDOUZBM0UyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDQzQkMwNjY3Q0Q2NkU3MDg0ODA3RDdDRTU4MjcyMzJGM0ZEMUM5RTJB RTA0RDY5RDE5QTIyNzhGRkQyMzI2Qi8wLzY1RDU0MzY4OEM4MkNDODBFRDY4REYy QTkzNDQxQzI5NUM5RkEzRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtcqp3E+fmlpqj9H6axdQW0JkK SOcguqnLgafty2MHvfZWyF6muygRIjXJ2qrchem++pjpt9QnifxT5c8fBtOtfwDk jBru6l6JEy0e/osp/AL8LrHZxmJOFGUtFQVuF3SGvKmkDUVQwXNWWOi7YR7GaaOn faLw2KJ7BCVqNN5DfskJjGwJHB1XdcsD+0Qs9k4QXZz9YmdF7GvT7AxV50uSoigA pJLQAZxPg3+Wo5lB7MzHfuai6rxC/kkoQuJ6zMVgxkOYi8v2C9xg1VbNJN8qp5II JS4FMiovfZj2+azuYpmX1rGnWABm7bSUkLOG+cjZ7Jd8J04NT4cMpF5RmpNh -----END CERTIFICATE-----Generated at Fri Sep 19 02:36:08 2025 by rpki-client