$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft File: 396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft (raw, json) Hash identifier: VPbcZLxL1i6Lazblsad0IAmP/FN7Rs2iwCFy29aZl6g= Subject key identifier: FF:52:37:13:57:8A:37:20:C2:6B:F0:D7:E8:70:EC:9D:2C:C9:77:31 Authority key identifier: 39:6E:80:8C:91:3B:9F:4B:FC:95:0B:4F:1D:DE:B1:15:9E:5C:9B:5C Certificate issuer: /CN=396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C Certificate serial: 6D25665688CFDDA666394140924330B71ED6238E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft Manifest number: 0129 Signing time: Mon 20 Oct 2025 11:54:21 +0000 Manifest this update: Mon 20 Oct 2025 11:49:21 +0000 Manifest next update: Sat 25 Oct 2025 10:58:21 +0000 Files and hashes: 1: 396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl (hash: kBXNoyO7BiVGElBhT3DQkDBW/u50qWwAvfSRduuD5N0=) 2: 323830333a376365303a3a2f33322d3332203d3e203233313430.roa (hash: Va1PdbdhRIRzDdOehr3/PCUTjdlWf/YYRaXrVqewYbQ=) 3: 3230302e38392e36342e302f32302d3230203d3e203233313430.roa (hash: MuVkrksN6Nndojm+zBAMSGOH0xql9EWRLP4tu/OiPK8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:25:66:56:88:cf:dd:a6:66:39:41:40:92:43:30:b7:1e:d6:23:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C Validity Not Before: Oct 20 11:49:21 2025 GMT Not After : Oct 25 10:58:21 2025 GMT Subject: CN=FF523713578A3720C26BF0D7E870EC9D2CC97731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8b:ab:d6:55:c0:32:01:87:b5:c3:ac:7a:b1: 43:69:22:d8:e5:8c:c0:a6:22:c1:99:39:9d:b0:dd: f4:9d:af:10:fb:09:29:25:be:8e:50:45:78:23:5e: 49:9d:a3:a5:93:e1:fd:88:8f:b2:12:29:b5:92:14: 64:0d:15:01:c7:3e:97:37:de:1d:cc:d2:e8:c0:7d: 84:75:3d:2f:67:75:13:3c:0e:14:5e:cc:f7:bc:e5: 3f:8c:2d:a3:2b:93:64:05:90:52:65:66:7e:bf:60: a7:48:5a:93:6b:eb:26:ca:a7:96:62:5b:3e:45:9e: 32:3b:96:98:02:c9:e1:a6:96:10:62:4d:47:dd:24: 0f:81:ce:ad:6f:9c:23:da:33:96:94:ca:97:c7:07: 80:9c:67:42:13:e5:23:b6:20:82:df:48:e7:f4:9d: 2b:97:68:6e:5c:20:47:a7:3c:ae:8a:88:f3:9b:c8: 1c:0f:83:70:e0:ff:53:16:45:3a:c1:5b:ce:38:cd: 9b:17:c3:46:8e:be:64:d5:e8:3b:f3:b2:c8:42:98: db:ab:50:30:d3:51:b4:b0:8c:40:97:d2:06:98:b7: 89:94:60:a2:e7:12:25:d9:d4:26:ec:ca:76:36:47: 4e:29:62:df:43:cc:b3:ba:fb:a3:b3:a8:ad:23:de: bf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:52:37:13:57:8A:37:20:C2:6B:F0:D7:E8:70:EC:9D:2C:C9:77:31 X509v3 Authority Key Identifier: keyid:39:6E:80:8C:91:3B:9F:4B:FC:95:0B:4F:1D:DE:B1:15:9E:5C:9B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:66:44:bc:97:a0:18:34:a6:d0:9b:0c:9b:1a:70:c2:48:3e: 37:ba:47:5a:d1:7d:ae:ee:2a:89:f6:f0:6b:b5:1a:77:fe:e9: 82:44:bb:ad:02:fd:12:dd:72:f0:3e:4c:7e:91:e8:f1:48:fa: 54:77:9a:43:27:21:5f:1e:ee:1a:72:b4:1c:08:83:5b:e3:e7: ff:e5:c6:8b:d0:0d:59:fa:60:3b:8f:4b:ab:cc:fc:4b:ea:74: dc:8a:71:4a:90:c6:6d:63:e6:d8:a3:67:e9:d0:8f:71:26:71: 9c:c5:4a:e8:c6:37:ba:41:37:b9:37:0b:f8:1a:ce:f1:53:90: 4f:59:35:d7:ce:f9:bc:99:1d:a7:10:d2:9e:bc:ab:8c:f4:8d: 32:2f:8b:5e:21:14:34:f7:bc:f9:0d:50:6e:aa:67:2e:59:bd: a1:cf:98:ae:1a:75:15:ab:58:72:56:74:73:66:33:5f:82:2d: cb:9f:36:ac:da:cd:a8:b4:a0:e2:89:26:0c:7e:ef:5d:b7:8b: e9:63:2d:0b:b2:fd:45:28:d1:bd:67:18:0c:0b:bb:75:ef:b7: b0:5c:b8:3c:8c:e7:17:6e:d3:3e:28:9f:82:eb:38:22:02:98: e6:70:aa:56:f6:87:7a:c3:82:d6:87:d6:b2:0d:a4:37:17:29: 4e:9b:a2:0a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbSVmVojP3aZmOUFAkkMwtx7WI44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2RTgwOEM5MTNCOUY0QkZDOTUwQjRGMURERUIxMTU5 RTVDOUI1QzAeFw0yNTEwMjAxMTQ5MjFaFw0yNTEwMjUxMDU4MjFaMDMxMTAvBgNV BAMTKEZGNTIzNzEzNTc4QTM3MjBDMjZCRjBEN0U4NzBFQzlEMkNDOTc3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDii6vWVcAyAYe1w6x6sUNpItjl jMCmIsGZOZ2w3fSdrxD7CSklvo5QRXgjXkmdo6WT4f2Ij7ISKbWSFGQNFQHHPpc3 3h3M0ujAfYR1PS9ndRM8DhRezPe85T+MLaMrk2QFkFJlZn6/YKdIWpNr6ybKp5Zi Wz5FnjI7lpgCyeGmlhBiTUfdJA+Bzq1vnCPaM5aUypfHB4CcZ0IT5SO2IILfSOf0 nSuXaG5cIEenPK6KiPObyBwPg3Dg/1MWRTrBW844zZsXw0aOvmTV6DvzsshCmNur UDDTUbSwjECX0gaYt4mUYKLnEiXZ1CbsynY2R04pYt9DzLO6+6OzqK0j3r8XAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/1I3E1eKNyDCa/DX6HDsnSzJdzEwHwYDVR0j BBgwFoAUOW6AjJE7n0v8lQtPHd6xFZ5cm1wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85Mzk2QjIzQUY4NzA1REMxRjFBMTM1MjcwMjM0NDMyQUJB MDE2Nzc1QzE3ODE5RjY3RDY5QkYzOUMxQkU5N0E4LzAvMzk2RTgwOEM5MTNCOUY0 QkZDOTUwQjRGMURERUIxMTU5RTVDOUI1Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOTZFODA4QzkxM0I5RjRCRkM5 NTBCNEYxRERFQjExNTlFNUM5QjVDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTM5NkIyM0FGODcwNURDMUYxQTEzNTI3MDIzNDQzMkFCQTAxNjc3NUMx NzgxOUY2N0Q2OUJGMzlDMUJFOTdBOC8wLzM5NkU4MDhDOTEzQjlGNEJGQzk1MEI0 RjFEREVCMTE1OUU1QzlCNUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3ZkS8l6AYNKbQmwybGnDCSD43 ukda0X2u7iqJ9vBrtRp3/umCRLutAv0S3XLwPkx+kejxSPpUd5pDJyFfHu4acrQc CINb4+f/5caL0A1Z+mA7j0urzPxL6nTcinFKkMZtY+bYo2fp0I9xJnGcxUroxje6 QTe5Nwv4Gs7xU5BPWTXXzvm8mR2nENKevKuM9I0yL4teIRQ097z5DVBuqmcuWb2h z5iuGnUVq1hyVnRzZjNfgi3Lnzas2s2otKDiiSYMfu9dt4vpYy0Lsv1FKNG9ZxgM C7t177ewXLg8jOcXbtM+KJ+C6zgiApjmcKpW9od6w4LWh9ayDaQ3FylOm6IK -----END CERTIFICATE-----Generated at Tue Oct 21 01:40:12 2025 by rpki-client