$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.mft File: DB96EF9719DEAB2F806B872EA360985A830AD8E5.mft (raw, json) Hash identifier: m2avYwUwcG9XIYzmcgJ3qwuuOARMUB9icsUaiyMy5fs= Subject key identifier: 2E:17:C6:DC:FB:99:2C:16:6B:36:2F:9C:21:93:E4:D1:72:E6:9C:BA Authority key identifier: DB:96:EF:97:19:DE:AB:2F:80:6B:87:2E:A3:60:98:5A:83:0A:D8:E5 Certificate issuer: /CN=DB96EF9719DEAB2F806B872EA360985A830AD8E5 Certificate serial: 7046EE264C90BBE64ABF09916E8F46AC4861B052 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.mft Manifest number: 0129 Signing time: Sun 19 Oct 2025 12:29:09 +0000 Manifest this update: Sun 19 Oct 2025 12:24:09 +0000 Manifest next update: Fri 24 Oct 2025 18:38:09 +0000 Files and hashes: 1: 323830333a366334303a3a2f33322d3332203d3e20323633373436.roa (hash: W2xoKya19M2T/41wGBe1n5CfkDu1Hl1v66SK/WN3v/4=) 2: 3133382e3132312e3234302e302f32322d3234203d3e20323633373436.roa (hash: k+jGg2PubxRLOPfDOyEghApeM5Txmbat9Vsc7BjusrE=) 3: DB96EF9719DEAB2F806B872EA360985A830AD8E5.crl (hash: Tkt0oTbc4mIE+fKu744FvMGP9l7WHpv0WyXlus8thXM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.crl rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:46:ee:26:4c:90:bb:e6:4a:bf:09:91:6e:8f:46:ac:48:61:b0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB96EF9719DEAB2F806B872EA360985A830AD8E5 Validity Not Before: Oct 19 12:24:09 2025 GMT Not After : Oct 24 18:38:09 2025 GMT Subject: CN=2E17C6DCFB992C166B362F9C2193E4D172E69CBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:5b:9c:47:8a:1b:9a:80:c4:34:70:0f:cf: 2a:f3:fd:b0:04:9f:ff:d1:15:14:75:3b:b7:b7:ca: aa:7d:35:8b:ad:61:c3:71:4c:fc:61:b8:c9:d2:8a: 6d:0d:01:2b:23:9c:7e:09:a8:7b:0d:a6:f5:18:72: 9d:a8:f0:9c:93:46:c8:ab:08:1c:43:9c:0e:e0:cc: e3:4b:42:9a:88:1e:1a:5e:aa:d6:9f:8c:9e:f4:b3: e2:b5:b8:77:7f:9f:7d:73:10:70:38:52:0b:f5:5c: ad:4f:98:34:af:1c:bc:4d:e0:b7:d5:3c:21:d5:3f: 8c:64:c2:95:a4:6b:97:12:37:5c:9d:b0:d5:43:56: 56:83:e7:85:84:f9:dd:9b:3d:1a:56:a5:3a:cd:d7: 66:dc:3b:e3:9b:6e:cf:9c:b0:61:fa:55:6b:99:44: 22:fc:ff:fe:a8:eb:fe:61:ce:eb:44:a1:7d:a4:e7: d7:66:23:29:87:f4:be:20:59:58:68:5d:1f:76:45: a0:53:84:9f:86:a3:e0:5b:9f:d3:db:d1:c1:f8:85: a3:c6:7f:71:f2:24:57:4b:ad:f6:9b:f1:0b:3f:98: 4f:03:ca:c8:d4:70:7a:ae:b1:f7:dc:a6:81:e0:da: ef:ff:27:88:62:9e:66:52:52:ac:c2:8b:35:bf:72: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:17:C6:DC:FB:99:2C:16:6B:36:2F:9C:21:93:E4:D1:72:E6:9C:BA X509v3 Authority Key Identifier: keyid:DB:96:EF:97:19:DE:AB:2F:80:6B:87:2E:A3:60:98:5A:83:0A:D8:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f8:6b:7f:db:05:db:93:84:47:2c:36:9f:94:f6:56:06:81: b4:e7:d7:d8:78:0f:c0:9c:23:42:ba:7a:80:0b:5d:94:c8:92: 16:62:56:d6:29:2f:68:86:55:7d:52:cb:c7:f6:b9:c1:0b:8a: 53:ad:12:a1:3c:c0:cc:1f:3e:d9:67:72:49:c4:58:75:52:ee: 52:8d:70:76:d1:e7:7c:51:85:77:d1:f0:e8:51:ff:1a:c4:a2: 56:ca:6a:b5:93:fd:63:6a:e2:35:3b:0d:52:d0:ba:51:04:20: 6d:03:81:56:1a:e5:8f:12:77:a7:f5:a6:b2:16:22:3c:6e:5a: bb:ea:48:b8:c2:e1:b7:06:fb:58:d0:fe:8e:87:0c:b4:85:a3: 75:88:45:a0:18:f9:f5:84:8c:19:eb:2b:1b:5d:03:27:fd:1b: 9f:9e:ee:60:f9:cc:c4:76:d8:99:82:3d:1e:19:d7:e8:f9:26: 64:78:4d:a7:3d:cb:31:f0:05:e6:3b:bb:a6:43:65:de:88:a1: 8b:64:04:fc:0c:1d:30:2d:74:ca:fd:fc:05:e9:b1:9c:e7:7c: 1d:a8:26:80:d2:ca:df:fc:2f:05:a3:93:23:de:7f:f9:be:86: e2:24:21:19:f2:96:be:3b:ee:42:1e:e2:b9:45:14:d0:bc:c4: 04:bb:5b:bd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcEbuJkyQu+ZKvwmRbo9GrEhhsFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5NkVGOTcxOURFQUIyRjgwNkI4NzJFQTM2MDk4NUE4 MzBBRDhFNTAeFw0yNTEwMTkxMjI0MDlaFw0yNTEwMjQxODM4MDlaMDMxMTAvBgNV BAMTKDJFMTdDNkRDRkI5OTJDMTY2QjM2MkY5QzIxOTNFNEQxNzJFNjlDQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6VucR4obmoDENHAPzyrz/bAE n//RFRR1O7e3yqp9NYutYcNxTPxhuMnSim0NASsjnH4JqHsNpvUYcp2o8JyTRsir CBxDnA7gzONLQpqIHhpeqtafjJ70s+K1uHd/n31zEHA4Ugv1XK1PmDSvHLxN4LfV PCHVP4xkwpWka5cSN1ydsNVDVlaD54WE+d2bPRpWpTrN12bcO+Obbs+csGH6VWuZ RCL8//6o6/5hzutEoX2k59dmIymH9L4gWVhoXR92RaBThJ+Go+Bbn9Pb0cH4haPG f3HyJFdLrfab8Qs/mE8DysjUcHqusffcpoHg2u//J4hinmZSUqzCizW/clsDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULhfG3PuZLBZrNi+cIZPk0XLmnLowHwYDVR0j BBgwFoAU25bvlxneqy+Aa4cuo2CYWoMK2OUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xOEI3RDMwMDdGMEVFODNGQTM5NzNFNjNFNEFCNUFFMUFG NzMzRTgxMThGQTY3QzYyQUE5MzJCRDJGMzJDNEZCLzAvREI5NkVGOTcxOURFQUIy RjgwNkI4NzJFQTM2MDk4NUE4MzBBRDhFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjk2RUY5NzE5REVBQjJGODA2 Qjg3MkVBMzYwOTg1QTgzMEFEOEU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMThCN0QzMDA3RjBFRTgzRkEzOTczRTYzRTRBQjVBRTFBRjczM0U4MTE4 RkE2N0M2MkFBOTMyQkQyRjMyQzRGQi8wL0RCOTZFRjk3MTlERUFCMkY4MDZCODcy RUEzNjA5ODVBODMwQUQ4RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBe+Gt/2wXbk4RHLDaflPZWBoG0 59fYeA/AnCNCunqAC12UyJIWYlbWKS9ohlV9UsvH9rnBC4pTrRKhPMDMHz7ZZ3JJ xFh1Uu5SjXB20ed8UYV30fDoUf8axKJWymq1k/1jauI1Ow1S0LpRBCBtA4FWGuWP Enen9aayFiI8blq76ki4wuG3BvtY0P6Ohwy0haN1iEWgGPn1hIwZ6ysbXQMn/Ruf nu5g+czEdtiZgj0eGdfo+SZkeE2nPcsx8AXmO7umQ2XeiKGLZAT8DB0wLXTK/fwF 6bGc53wdqCaA0srf/C8Fo5Mj3n/5vobiJCEZ8pa+O+5CHuK5RRTQvMQEu1u9 -----END CERTIFICATE-----Generated at Mon Oct 20 05:43:10 2025 by rpki-client