$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft File: 965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft (raw, json) Hash identifier: zyyCOFNXsspHfTWj+Ch8CJyQTepyiMMOyhKICwxhsQ4= Subject key identifier: C6:11:74:D1:0B:11:50:9E:05:B6:92:B8:DE:3D:8A:23:15:54:5D:07 Authority key identifier: 96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D Certificate issuer: /CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D Certificate serial: 383BA9EC9CAECF24714FBCE771ED6B078813F142 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft Manifest number: 0120 Signing time: Mon 20 Oct 2025 06:46:03 +0000 Manifest this update: Mon 20 Oct 2025 06:41:03 +0000 Manifest next update: Sat 25 Oct 2025 19:36:03 +0000 Files and hashes: 1: 3139302e372e3136302e302f32302d3230203d3e203237393038.roa (hash: RBfH2qwoDfbMUXE7gNz3K9WJNvswOMqQt7nmCq3uON8=) 2: 965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl (hash: y1Dy5jfvIjRZpagZGpwp82VYxNLstW3M1FskMjCvlB4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3b:a9:ec:9c:ae:cf:24:71:4f:bc:e7:71:ed:6b:07:88:13:f1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D Validity Not Before: Oct 20 06:41:03 2025 GMT Not After : Oct 25 19:36:03 2025 GMT Subject: CN=C61174D10B11509E05B692B8DE3D8A2315545D07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:dc:d3:fb:61:a8:5c:94:22:12:da:42:6e:b3: 26:db:cf:71:93:f8:db:b1:6e:85:6b:22:ca:72:9e: 3a:81:10:67:d1:22:6f:af:15:4d:38:2b:81:83:d7: f8:6d:63:92:96:71:ed:97:0c:41:dd:b4:4b:18:b2: 5d:c0:a1:af:f2:bc:29:ac:fb:be:10:64:93:20:c0: 19:fa:e3:26:8a:8a:b1:0e:d4:c9:59:a4:4d:8f:8b: 12:2d:fc:1d:5d:74:16:53:4e:81:18:c8:cf:3b:8f: 1f:86:7f:f1:30:32:05:d3:6e:eb:92:df:ad:26:e1: 1f:d7:5d:42:f7:e5:c3:56:ea:4f:51:90:80:c9:cf: 2b:ff:85:a7:ba:12:b6:ec:21:fd:bc:4d:d3:d0:8f: 00:2f:87:13:71:6b:46:3e:b4:93:87:3a:84:3a:89: bb:01:54:0c:6a:2a:46:0c:86:7e:f4:90:ae:43:b9: 88:cb:f5:c1:b3:0f:c3:e0:ea:65:87:55:32:e6:97: 81:56:24:de:02:06:b7:e2:df:16:d7:3c:04:00:c6: 8b:13:8d:49:df:4d:73:3d:e1:a0:d7:28:65:6d:26: ad:49:a3:49:8f:21:93:bc:70:56:c3:99:21:b2:5f: 33:73:6b:4c:8d:42:80:20:de:10:e9:46:f6:ac:47: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:11:74:D1:0B:11:50:9E:05:B6:92:B8:DE:3D:8A:23:15:54:5D:07 X509v3 Authority Key Identifier: keyid:96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:a4:b1:0f:a4:d9:3f:d8:7c:0b:90:bd:d3:cd:a3:46:85:8b: 4a:f9:1b:f6:65:5c:9b:27:9f:79:ce:be:07:7c:b8:b6:76:e3: 19:02:50:3e:07:2e:20:4d:59:49:c3:92:0c:26:0a:a8:05:2d: 28:4a:e7:58:20:b6:00:9a:5a:13:e7:3a:2a:f6:c2:f7:68:49: c6:7e:79:76:c0:4d:2c:8f:ed:8f:e7:25:0d:38:fe:88:81:34: 1b:55:66:76:44:91:52:ca:42:30:ce:a7:fb:7e:0e:1c:b9:5c: 5c:d6:bf:4f:05:31:c3:c9:6a:3f:89:85:3c:c1:ea:ce:4c:93: 73:67:74:70:e2:27:da:0c:c8:4a:8c:98:0e:56:ad:4e:ba:7f: 58:4d:11:59:9b:a5:ce:b7:16:44:23:2c:5d:58:16:b8:db:a1: ab:c9:85:ec:65:60:40:67:4b:a4:7a:6a:0f:02:bb:a1:62:32: b0:dd:61:3d:03:c3:01:2a:b0:2f:2d:20:a1:88:f2:bb:3b:cf: 96:c6:b1:dd:3a:fd:e6:fc:02:24:1c:02:8b:75:d0:62:5e:3b: eb:4c:82:0a:04:00:8c:40:0f:20:99:81:ad:87:75:ad:ee:ca: cf:b5:b4:99:38:f3:42:94:67:f7:a2:4c:43:e9:e1:71:a8:8b: 72:53:06:24 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUODup7JyuzyRxT7znce1rB4gT8UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY1RUZBMTlBQTRCREIzQjZEMzNCQUU1NDc0REY4QzEz QTJFRUI2RDAeFw0yNTEwMjAwNjQxMDNaFw0yNTEwMjUxOTM2MDNaMDMxMTAvBgNV BAMTKEM2MTE3NEQxMEIxMTUwOUUwNUI2OTJCOERFM0Q4QTIzMTU1NDVEMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR3NP7YahclCIS2kJusybbz3GT +NuxboVrIspynjqBEGfRIm+vFU04K4GD1/htY5KWce2XDEHdtEsYsl3Aoa/yvCms +74QZJMgwBn64yaKirEO1MlZpE2PixIt/B1ddBZTToEYyM87jx+Gf/EwMgXTbuuS 360m4R/XXUL35cNW6k9RkIDJzyv/hae6ErbsIf28TdPQjwAvhxNxa0Y+tJOHOoQ6 ibsBVAxqKkYMhn70kK5DuYjL9cGzD8Pg6mWHVTLml4FWJN4CBrfi3xbXPAQAxosT jUnfTXM94aDXKGVtJq1Jo0mPIZO8cFbDmSGyXzNza0yNQoAg3hDpRvasR8XPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUxhF00QsRUJ4FtpK43j2KIxVUXQcwHwYDVR0j BBgwFoAUll76GapL2zttM7rlR034wTou620wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMkQ5REY2Qjg1Nzc3QjlGNTNFODFBRkZEODk2NjE2MjdF OERGRkY4MUVFQjhENjRDNzY3ODBFRjFBMEU0MkM5LzAvOTY1RUZBMTlBQTRCREIz QjZEMzNCQUU1NDc0REY4QzEzQTJFRUI2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjVFRkExOUFBNEJEQjNCNkQz M0JBRTU0NzRERjhDMTNBMkVFQjZELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzJEOURGNkI4NTc3N0I5RjUzRTgxQUZGRDg5NjYxNjI3RThERkZGODFF RUI4RDY0Qzc2NzgwRUYxQTBFNDJDOS8wLzk2NUVGQTE5QUE0QkRCM0I2RDMzQkFF NTQ3NERGOEMxM0EyRUVCNkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvpLEPpNk/2HwLkL3TzaNGhYtK +Rv2ZVybJ595zr4HfLi2duMZAlA+By4gTVlJw5IMJgqoBS0oSudYILYAmloT5zoq 9sL3aEnGfnl2wE0sj+2P5yUNOP6IgTQbVWZ2RJFSykIwzqf7fg4cuVxc1r9PBTHD yWo/iYU8werOTJNzZ3Rw4ifaDMhKjJgOVq1Oun9YTRFZm6XOtxZEIyxdWBa426Gr yYXsZWBAZ0ukemoPAruhYjKw3WE9A8MBKrAvLSChiPK7O8+WxrHdOv3m/AIkHAKL ddBiXjvrTIIKBACMQA8gmYGth3Wt7srPtbSZOPNClGf3okxD6eFxqItyUwYk -----END CERTIFICATE-----Generated at Mon Oct 20 18:46:20 2025 by rpki-client