$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft File: 65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft (raw, json) Hash identifier: NcwfvhvAXGfIa6lccDgIsjVDT1ODs7AQ+jaaPEB+YSE= Subject key identifier: DB:A7:25:9B:65:7C:B5:8E:C7:37:DE:7D:C5:AC:33:8D:B0:E0:03:0E Authority key identifier: 65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2 Certificate issuer: /CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2 Certificate serial: 12E3DE9EE7F3258F58447D25317ED508C2C9873D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft Manifest number: CC Signing time: Fri 22 Aug 2025 02:00:07 +0000 Manifest this update: Fri 22 Aug 2025 01:55:07 +0000 Manifest next update: Thu 28 Aug 2025 00:57:07 +0000 Files and hashes: 1: 34352e3138322e3132382e302f32322d3234203d3e20323639373438.roa (hash: u7SE5LWZJmCpnVyryY58woPlAbt1cGNdxLoYQJyfGrw=) 2: 65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl (hash: bXZEqs1Q3tAVo+4qNCbkO8RzQ85PcsSglkPWkrMoJMI=) 3: 323830333a373936303a3a2f33322d3438203d3e20323639373438.roa (hash: MN/4RtlE9d+DnKy0U12QHBIdBSJFq+lAXrFHgivrrPc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e3:de:9e:e7:f3:25:8f:58:44:7d:25:31:7e:d5:08:c2:c9:87:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2 Validity Not Before: Aug 22 01:55:07 2025 GMT Not After : Aug 28 00:57:07 2025 GMT Subject: CN=DBA7259B657CB58EC737DE7DC5AC338DB0E0030E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:9e:8d:cb:54:20:92:b6:2d:59:50:50:37: cd:ab:98:0e:14:4c:08:2e:02:bd:0e:e6:e7:89:66: 3d:bb:5d:7d:e1:11:85:23:43:dc:c1:d0:65:ad:f8: ba:51:a1:5d:fe:52:cf:44:f2:fe:bd:60:ce:db:ae: 3d:52:57:f4:6e:17:d5:f0:f5:0b:c6:2a:bb:14:77: 7d:11:02:30:75:ce:9d:59:05:b3:b2:9a:b4:ef:ca: e0:82:eb:62:e6:2f:cd:de:a5:44:d8:0e:5e:4f:17: e5:f7:5b:cb:48:e5:6a:7d:e8:af:8a:0e:ea:fb:40: 3b:67:4b:81:7b:cb:60:6b:f1:57:92:c0:b8:f8:f4: 1d:3d:69:f0:4b:97:d3:8c:b1:c4:0e:e9:6f:28:f9: 8e:80:c7:81:3b:bf:fc:c2:46:28:51:2c:02:b5:fb: 1d:bb:a3:7c:df:47:ef:cc:51:c7:df:70:b4:86:d0: cb:4b:68:69:c4:15:05:0b:77:55:7c:59:ae:9f:e4: c2:63:b2:ce:2d:ed:a1:59:3d:31:5d:9f:a3:7a:3c: 14:98:9f:ac:80:e4:e8:cd:e9:d5:23:b1:24:7d:9d: fc:ea:3a:2c:f7:8b:3d:66:0c:c6:c8:4c:97:15:d0: 81:ba:95:1f:47:93:8b:3d:98:33:dc:86:63:3c:14: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A7:25:9B:65:7C:B5:8E:C7:37:DE:7D:C5:AC:33:8D:B0:E0:03:0E X509v3 Authority Key Identifier: keyid:65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ef:e9:f1:56:60:a0:bc:51:57:52:01:22:a1:32:f3:7d:8c: 53:63:71:01:ec:16:70:9d:65:3e:03:33:48:cd:0e:52:49:3f: 88:18:54:4a:1f:49:44:e6:6b:2f:80:32:e0:66:4e:27:b5:bf: 1f:a6:02:69:bb:79:2d:38:c4:ee:08:e5:53:24:12:3a:77:b6: e2:50:0b:b2:91:92:b1:ba:b9:19:61:8d:2a:fe:3c:60:91:11: a3:5b:5b:c6:d5:7c:7f:e5:1a:ad:97:e6:09:ef:6f:8a:21:da: 44:c9:b0:00:cb:6d:f2:64:17:cd:02:2b:8c:39:50:d9:44:a9: 61:84:c2:58:cb:38:1e:3a:d1:4a:80:00:aa:df:1f:c0:6e:2e: 4d:7e:99:1c:36:19:a0:51:ca:00:b7:fa:b4:b9:3e:d7:e2:5f: 01:c0:c9:50:2e:e9:e7:5a:b6:8b:5d:82:61:c4:8e:20:56:b1: 6b:06:e6:05:9c:f4:f8:e1:96:02:c1:5e:28:89:f6:7e:a1:4a: bb:3c:b0:06:0e:f4:e5:2f:52:e3:ee:ef:dc:01:9a:74:22:13: df:03:e8:a7:07:ee:59:0b:12:3c:20:c3:29:28:ad:0f:f1:0c: 6a:76:2c:78:65:84:74:ab:22:26:57:06:b2:1e:fb:ff:cf:2a: 62:04:c4:8c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEuPenufzJY9YRH0lMX7VCMLJhz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVENTQzNjg4QzgyQ0M4MEVENjhERjJBOTM0NDFDMjk1 QzlGQTNFMjAeFw0yNTA4MjIwMTU1MDdaFw0yNTA4MjgwMDU3MDdaMDMxMTAvBgNV BAMTKERCQTcyNTlCNjU3Q0I1OEVDNzM3REU3REM1QUMzMzhEQjBFMDAzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsZ6Ny1QgkrYtWVBQN82rmA4U TAguAr0O5ueJZj27XX3hEYUjQ9zB0GWt+LpRoV3+Us9E8v69YM7brj1SV/RuF9Xw 9QvGKrsUd30RAjB1zp1ZBbOymrTvyuCC62LmL83epUTYDl5PF+X3W8tI5Wp96K+K Dur7QDtnS4F7y2Br8VeSwLj49B09afBLl9OMscQO6W8o+Y6Ax4E7v/zCRihRLAK1 +x27o3zfR+/MUcffcLSG0MtLaGnEFQULd1V8Wa6f5MJjss4t7aFZPTFdn6N6PBSY n6yA5OjN6dUjsSR9nfzqOiz3iz1mDMbITJcV0IG6lR9Hk4s9mDPchmM8FApvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU26clm2V8tY7HN959xawzjbDgAw4wHwYDVR0j BBgwFoAUZdVDaIyCzIDtaN8qk0QcKVyfo+IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NDNCQzA2NjdDRDY2RTcwODQ4MDdEN0NFNTgyNzIzMkYz RkQxQzlFMkFFMDRENjlEMTlBMjI3OEZGRDIzMjZCLzAvNjVENTQzNjg4QzgyQ0M4 MEVENjhERjJBOTM0NDFDMjk1QzlGQTNFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NUQ1NDM2ODhDODJDQzgwRUQ2 OERGMkE5MzQ0MUMyOTVDOUZBM0UyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDQzQkMwNjY3Q0Q2NkU3MDg0ODA3RDdDRTU4MjcyMzJGM0ZEMUM5RTJB RTA0RDY5RDE5QTIyNzhGRkQyMzI2Qi8wLzY1RDU0MzY4OEM4MkNDODBFRDY4REYy QTkzNDQxQzI5NUM5RkEzRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCz7+nxVmCgvFFXUgEioTLzfYxT Y3EB7BZwnWU+AzNIzQ5SST+IGFRKH0lE5msvgDLgZk4ntb8fpgJpu3ktOMTuCOVT JBI6d7biUAuykZKxurkZYY0q/jxgkRGjW1vG1Xx/5Rqtl+YJ72+KIdpEybAAy23y ZBfNAiuMOVDZRKlhhMJYyzgeOtFKgACq3x/Abi5NfpkcNhmgUcoAt/q0uT7X4l8B wMlQLunnWraLXYJhxI4gVrFrBuYFnPT44ZYCwV4oifZ+oUq7PLAGDvTlL1Lj7u/c AZp0IhPfA+inB+5ZCxI8IMMpKK0P8Qxqdix4ZYR0qyImVwayHvv/zypiBMSM -----END CERTIFICATE-----Generated at Sat Aug 23 10:54:59 2025 by rpki-client