$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft File: 958AE74C7555B3A115DBFFC8840395CE219F59B5.mft (raw, json) Hash identifier: Qb/+KwwSXHHFapBh0PBWT0I62GfCfIzjoMLwZUZRQHc= Subject key identifier: C4:D1:93:1E:73:50:83:4B:4F:76:63:12:59:F0:7C:C9:C1:48:A3:60 Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5 Certificate issuer: /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5 Certificate serial: 2BA8EBD0C9B4F21A136678DA80DC25D44925826A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft Manifest number: 0119 Signing time: Wed 17 Sep 2025 15:55:37 +0000 Manifest this update: Wed 17 Sep 2025 15:50:37 +0000 Manifest next update: Sun 21 Sep 2025 23:07:37 +0000 Files and hashes: 1: 323830333a653032303a3a2f33322d3332203d3e20323635373934.roa (hash: kte3CTPUXYYiPA/2fZyA0RgagBOOb+s0KWpcd0MjF1Y=) 2: 3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa (hash: diXk1/Gtwc/ZoVUL78ZJK+xf8Tc+NqK2dFhbBJwjjXQ=) 3: 958AE74C7555B3A115DBFFC8840395CE219F59B5.crl (hash: CAGxD7A0h8v8EEeL+fwxiiI+9Bi5JTnJqsUYQ21p79c=) 4: 3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa (hash: DsrrF+UUK1Q1sB6PvCAllfUXQz6xxhErCjiWOoHEOPc=) 5: 3139322e3134312e34302e302f32322d3232203d3e20323635373934.roa (hash: wrwjTyh9pOptnNw9f/Tc7oUs2AyzWXt8NtoMFsZcyT4=) 6: 3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa (hash: lFMPHHji0WkM/od00nWsQTxJbZLHB08h94Wr7OzPf/o=) 7: 3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa (hash: 1eatcISrRWEjiJa/p7xBX6b+4bgRrTHTtU+86eOUpvs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a8:eb:d0:c9:b4:f2:1a:13:66:78:da:80:dc:25:d4:49:25:82:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5 Validity Not Before: Sep 17 15:50:37 2025 GMT Not After : Sep 21 23:07:37 2025 GMT Subject: CN=C4D1931E7350834B4F76631259F07CC9C148A360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:88:89:f4:fe:1e:aa:8c:2e:63:55:f8:e9:ab: 23:63:72:ed:7d:56:d7:1a:49:d3:53:ef:c6:c1:7e: df:2c:a9:69:19:55:45:53:72:32:35:4c:dd:85:25: 35:12:18:1c:19:2b:5b:da:2d:7b:f8:7e:71:73:6e: b6:8c:f8:04:3b:b0:92:e6:28:38:b4:ba:90:f5:24: 4f:dd:9c:2e:aa:4c:83:e7:43:6f:e5:8a:5a:b9:89: 7a:7b:2b:bf:e9:37:3c:d0:37:30:1d:44:33:88:dd: a9:d5:0a:96:05:ac:15:3e:af:3f:c9:6d:4c:a0:34: 1f:fe:70:bf:e0:ab:cc:05:a6:b6:4e:b7:1b:95:7e: 77:90:60:d7:25:6c:12:ec:db:48:86:55:2b:46:f4: 04:f0:f6:12:a5:08:11:a9:29:94:e6:31:8f:ee:72: 53:73:cd:9d:86:69:fe:dc:e0:8c:20:1b:0b:84:29: 2b:9d:5e:84:29:3f:98:a7:63:f4:ee:4d:22:c6:03: ac:38:01:80:bc:73:d8:ba:fe:ef:7c:cf:c4:0b:91: 33:b6:85:a3:33:eb:04:09:83:32:8b:70:62:b1:07: 38:06:3b:cc:b3:20:55:38:bd:ed:55:ac:ab:cf:8b: 69:f2:c7:01:ce:da:32:b3:e9:f4:21:c8:2f:92:85: 8c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D1:93:1E:73:50:83:4B:4F:76:63:12:59:F0:7C:C9:C1:48:A3:60 X509v3 Authority Key Identifier: keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:81:ee:15:f0:0a:e3:02:3b:d5:b2:1b:8e:ba:b5:08:ae:95: 63:41:58:c2:b4:55:54:73:26:76:ed:ed:50:38:d2:16:35:fd: ba:2a:27:1d:14:ae:73:a9:f3:be:ae:80:f9:44:e5:bb:c7:ab: df:40:17:19:bd:33:d2:36:fc:da:30:63:61:7a:02:8d:1e:3f: ee:0d:83:b9:c2:9c:93:38:97:65:c5:ff:fb:90:36:e7:87:3b: b1:3e:6e:0f:6a:f7:cd:f8:fc:dc:b5:8a:c0:95:8e:39:8f:4e: c6:79:f0:a0:93:69:ad:ea:58:8c:06:e1:35:2c:49:d8:08:a2: 08:2c:e8:a9:0e:52:81:7f:ee:a2:ce:53:6e:26:2b:75:5d:fe: 60:6b:57:bf:ba:28:fa:c8:b2:7e:b8:e1:56:71:bf:27:98:8e: f4:43:64:c5:fd:05:91:a0:ce:d1:31:16:f2:e9:ae:6c:ba:9b: 08:61:d0:34:ed:20:17:4d:90:c6:5b:01:de:c0:1f:eb:e5:50: 13:a0:eb:24:d6:37:b9:52:6f:2f:1f:78:c1:4b:0e:ec:de:cb: b2:ec:11:6f:aa:77:03:f3:bb:1f:c1:fa:61:65:a5:0a:80:e3: bf:64:e4:b7:74:f0:08:b9:4a:bd:b7:90:42:97:c0:69:8c:8e: 24:11:81:c7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUK6jr0Mm08hoTZnjagNwl1EklgmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4QUU3NEM3NTU1QjNBMTE1REJGRkM4ODQwMzk1Q0Uy MTlGNTlCNTAeFw0yNTA5MTcxNTUwMzdaFw0yNTA5MjEyMzA3MzdaMDMxMTAvBgNV BAMTKEM0RDE5MzFFNzM1MDgzNEI0Rjc2NjMxMjU5RjA3Q0M5QzE0OEEzNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTiIn0/h6qjC5jVfjpqyNjcu19 VtcaSdNT78bBft8sqWkZVUVTcjI1TN2FJTUSGBwZK1vaLXv4fnFzbraM+AQ7sJLm KDi0upD1JE/dnC6qTIPnQ2/lilq5iXp7K7/pNzzQNzAdRDOI3anVCpYFrBU+rz/J bUygNB/+cL/gq8wFprZOtxuVfneQYNclbBLs20iGVStG9ATw9hKlCBGpKZTmMY/u clNzzZ2Gaf7c4IwgGwuEKSudXoQpP5inY/TuTSLGA6w4AYC8c9i6/u98z8QLkTO2 haMz6wQJgzKLcGKxBzgGO8yzIFU4ve1VrKvPi2nyxwHO2jKz6fQhyC+ShYztAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUxNGTHnNQg0tPdmMSWfB8ycFIo2AwHwYDVR0j BBgwFoAUlYrnTHVVs6EV2//IhAOVziGfWbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRTEzNTA0MDlCRTAzMENBQkYyOENFREUwOEQzQTI3OTlD MzYyOEYyNDNGMDA4Q0UzNzk0Nzc4RDMyMENBODMyLzAvOTU4QUU3NEM3NTU1QjNB MTE1REJGRkM4ODQwMzk1Q0UyMTlGNTlCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NThBRTc0Qzc1NTVCM0ExMTVE QkZGQzg4NDAzOTVDRTIxOUY1OUI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUUxMzUwNDA5QkUwMzBDQUJGMjhDRURFMDhEM0EyNzk5QzM2MjhGMjQz RjAwOENFMzc5NDc3OEQzMjBDQTgzMi8wLzk1OEFFNzRDNzU1NUIzQTExNURCRkZD ODg0MDM5NUNFMjE5RjU5QjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4ge4V8ArjAjvVshuOurUIrpVj QVjCtFVUcyZ27e1QONIWNf26KicdFK5zqfO+roD5ROW7x6vfQBcZvTPSNvzaMGNh egKNHj/uDYO5wpyTOJdlxf/7kDbnhzuxPm4PavfN+PzctYrAlY45j07GefCgk2mt 6liMBuE1LEnYCKIILOipDlKBf+6izlNuJit1Xf5ga1e/uij6yLJ+uOFWcb8nmI70 Q2TF/QWRoM7RMRby6a5supsIYdA07SAXTZDGWwHewB/r5VAToOsk1je5Um8vH3jB Sw7s3suy7BFvqncD87sfwfphZaUKgOO/ZOS3dPAIuUq9t5BCl8BpjI4kEYHH -----END CERTIFICATE-----Generated at Thu Sep 18 20:03:26 2025 by rpki-client