$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft File: 958AE74C7555B3A115DBFFC8840395CE219F59B5.mft (raw, json) Hash identifier: /Z2ZR6u6vH4PdpEE8JGUn99Rs65/7XMRshbdAojqW4M= Subject key identifier: F8:22:42:C8:2E:DE:07:82:6B:95:4B:54:1C:D2:C2:E1:A7:AE:CD:3D Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5 Certificate issuer: /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5 Certificate serial: 20B6BD9D34F852F58A1B2BBC5F186C741F30F684 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft Manifest number: 0133 Signing time: Tue 04 Nov 2025 08:22:26 +0000 Manifest this update: Tue 04 Nov 2025 08:17:26 +0000 Manifest next update: Mon 10 Nov 2025 03:08:26 +0000 Files and hashes: 1: 3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa (hash: diXk1/Gtwc/ZoVUL78ZJK+xf8Tc+NqK2dFhbBJwjjXQ=) 2: 3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa (hash: DsrrF+UUK1Q1sB6PvCAllfUXQz6xxhErCjiWOoHEOPc=) 3: 3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa (hash: 1eatcISrRWEjiJa/p7xBX6b+4bgRrTHTtU+86eOUpvs=) 4: 958AE74C7555B3A115DBFFC8840395CE219F59B5.crl (hash: L5cO6+pb9wmcC0WyVYGiXGXxV9/FBDCT72o5AYY9J0Q=) 5: 323830333a653032303a3a2f33322d3332203d3e20323635373934.roa (hash: kte3CTPUXYYiPA/2fZyA0RgagBOOb+s0KWpcd0MjF1Y=) 6: 3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa (hash: lFMPHHji0WkM/od00nWsQTxJbZLHB08h94Wr7OzPf/o=) 7: 3139322e3134312e34302e302f32322d3232203d3e20323635373934.roa (hash: wrwjTyh9pOptnNw9f/Tc7oUs2AyzWXt8NtoMFsZcyT4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 10 Nov 2025 03:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b6:bd:9d:34:f8:52:f5:8a:1b:2b:bc:5f:18:6c:74:1f:30:f6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5 Validity Not Before: Nov 4 08:17:26 2025 GMT Not After : Nov 10 03:08:26 2025 GMT Subject: CN=F82242C82EDE07826B954B541CD2C2E1A7AECD3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:da:6b:e0:ce:c1:9c:36:ba:f1:9d:f0:52: eb:14:2f:87:96:21:c4:d5:2e:6e:99:95:97:3c:b1: f7:fa:bb:69:2e:50:9d:d1:3b:7d:f5:dd:85:0d:62: a7:77:cd:b0:8f:a8:d4:82:05:d8:61:a7:f8:ec:34: 95:bd:7e:41:c8:e6:29:33:42:66:c1:9c:2f:3f:fb: 6c:3a:34:58:a3:d3:9f:e9:8e:21:75:ee:3d:83:5d: d9:5e:f5:75:b2:ab:eb:59:0f:a6:2d:99:f1:0b:30: a2:89:33:ff:63:41:38:aa:81:4a:00:34:64:21:9f: 60:db:26:e7:64:06:36:88:2d:d0:ce:bb:ba:ae:ef: 1c:06:d8:b6:2c:a8:84:6d:2c:fd:44:1c:ef:e1:2b: c5:57:a6:68:f3:a5:1b:fb:8b:90:c8:c1:b3:0b:08: 30:de:4c:e0:fe:0b:d5:2a:b4:26:e9:d1:69:c0:cb: ff:92:f9:fe:8d:95:87:97:e2:93:9a:cf:5c:d2:ec: 99:c5:02:b6:67:ea:65:f9:01:ed:ec:a3:ec:f8:98: af:88:76:74:2e:82:d6:29:9c:a5:aa:18:f0:eb:de: 51:fa:54:16:cb:b1:f8:bc:f1:00:ae:20:65:cf:00: 6f:e1:0c:fe:11:25:45:12:2f:8f:af:ce:d7:b9:38: db:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:22:42:C8:2E:DE:07:82:6B:95:4B:54:1C:D2:C2:E1:A7:AE:CD:3D X509v3 Authority Key Identifier: keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:fb:f9:64:9f:33:c0:43:f6:b2:39:a1:2b:41:78:9d:59:a2: 73:14:2c:8f:22:cd:89:d0:ff:3e:9d:82:bf:41:74:35:b0:a0: 23:74:35:b1:89:06:66:fa:76:46:20:a6:fc:e9:69:f7:4a:a3: c4:c7:75:10:68:dc:e1:66:c1:ce:12:e9:37:b6:62:1f:4c:55: de:62:c0:df:13:d7:9f:7b:20:3e:30:73:89:f2:cf:7d:23:ef: e4:25:bb:97:e9:d2:cf:e7:05:15:87:56:1f:f8:75:6c:d9:a3: fe:a5:19:f6:33:b2:b3:c8:58:c9:6c:88:c1:17:b1:82:ca:cb: d4:00:64:a3:ad:84:6e:b4:d2:44:ee:70:62:9f:03:6d:a8:bf: 5e:0c:b2:60:3b:2c:36:3e:99:4d:7b:f4:c3:88:55:5b:fd:71: 1f:90:da:82:89:1d:94:62:0b:60:3b:e7:c8:b3:1a:dd:8e:01: 5c:30:e2:df:a1:b3:c5:c8:17:3f:61:f6:28:fc:7c:9e:31:aa: 48:9e:86:a3:a0:c5:98:5c:3e:21:47:08:11:51:9a:ab:e9:89: 6b:98:25:3a:f1:4b:57:26:9c:41:19:68:da:f8:16:19:5c:44: 4f:be:69:fa:85:03:3d:1c:0a:01:c4:82:67:68:5b:65:64:53: e5:e1:b7:d0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUILa9nTT4UvWKGyu8XxhsdB8w9oQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4QUU3NEM3NTU1QjNBMTE1REJGRkM4ODQwMzk1Q0Uy MTlGNTlCNTAeFw0yNTExMDQwODE3MjZaFw0yNTExMTAwMzA4MjZaMDMxMTAvBgNV BAMTKEY4MjI0MkM4MkVERTA3ODI2Qjk1NEI1NDFDRDJDMkUxQTdBRUNEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo79pr4M7BnDa68Z3wUusUL4eW IcTVLm6ZlZc8sff6u2kuUJ3RO3313YUNYqd3zbCPqNSCBdhhp/jsNJW9fkHI5ikz QmbBnC8/+2w6NFij05/pjiF17j2DXdle9XWyq+tZD6YtmfELMKKJM/9jQTiqgUoA NGQhn2DbJudkBjaILdDOu7qu7xwG2LYsqIRtLP1EHO/hK8VXpmjzpRv7i5DIwbML CDDeTOD+C9UqtCbp0WnAy/+S+f6NlYeX4pOaz1zS7JnFArZn6mX5Ae3so+z4mK+I dnQugtYpnKWqGPDr3lH6VBbLsfi88QCuIGXPAG/hDP4RJUUSL4+vzte5ONsVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU+CJCyC7eB4JrlUtUHNLC4aeuzT0wHwYDVR0j BBgwFoAUlYrnTHVVs6EV2//IhAOVziGfWbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRTEzNTA0MDlCRTAzMENBQkYyOENFREUwOEQzQTI3OTlD MzYyOEYyNDNGMDA4Q0UzNzk0Nzc4RDMyMENBODMyLzAvOTU4QUU3NEM3NTU1QjNB MTE1REJGRkM4ODQwMzk1Q0UyMTlGNTlCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NThBRTc0Qzc1NTVCM0ExMTVE QkZGQzg4NDAzOTVDRTIxOUY1OUI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUUxMzUwNDA5QkUwMzBDQUJGMjhDRURFMDhEM0EyNzk5QzM2MjhGMjQz RjAwOENFMzc5NDc3OEQzMjBDQTgzMi8wLzk1OEFFNzRDNzU1NUIzQTExNURCRkZD ODg0MDM5NUNFMjE5RjU5QjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCG+/lknzPAQ/ayOaErQXidWaJz FCyPIs2J0P8+nYK/QXQ1sKAjdDWxiQZm+nZGIKb86Wn3SqPEx3UQaNzhZsHOEuk3 tmIfTFXeYsDfE9efeyA+MHOJ8s99I+/kJbuX6dLP5wUVh1Yf+HVs2aP+pRn2M7Kz yFjJbIjBF7GCysvUAGSjrYRutNJE7nBinwNtqL9eDLJgOyw2PplNe/TDiFVb/XEf kNqCiR2UYgtgO+fIsxrdjgFcMOLfobPFyBc/YfYo/HyeMapInoajoMWYXD4hRwgR UZqr6YlrmCU68UtXJpxBGWja+BYZXERPvmn6hQM9HAoBxIJnaFtlZFPl4bfQ -----END CERTIFICATE-----Generated at Thu Nov 6 08:14:35 2025 by rpki-client