$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.mft File: E953CDEAA14862B46A8E001F1AD070187A8B1BF0.mft (raw, json) Hash identifier: uYnwjM8oXeWC4Dzl/GfGIhHR6c8KDKnA2+mI/QDdkV4= Subject key identifier: 93:06:78:07:A9:06:5F:0B:35:B5:83:6A:DD:74:C0:1D:72:B6:3F:53 Authority key identifier: E9:53:CD:EA:A1:48:62:B4:6A:8E:00:1F:1A:D0:70:18:7A:8B:1B:F0 Certificate issuer: /CN=E953CDEAA14862B46A8E001F1AD070187A8B1BF0 Certificate serial: 2F7D395097C85B294CCB31A76F941EAC6547D84F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.mft Manifest number: AF Signing time: Wed 05 Nov 2025 00:00:51 +0000 Manifest this update: Tue 04 Nov 2025 23:55:51 +0000 Manifest next update: Sun 09 Nov 2025 09:36:51 +0000 Files and hashes: 1: 323830333a356161303a3a2f33322d3438203d3e20323636383734.roa (hash: QMV6K2hJHTP6yDI1MdIXW+NaxElYanISkh0iMPtoUWw=) 2: 34352e3233392e39322e302f32322d3234203d3e20323636383734.roa (hash: bwDmodhEXijpeqVMBO6JGlmEwPcPsBZr9JeQ1RwL7qQ=) 3: E953CDEAA14862B46A8E001F1AD070187A8B1BF0.crl (hash: j+LsVy5nNN1gAV/gdzdJui9lC0SQZwxxNTN1gpbwQE4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.crl rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7d:39:50:97:c8:5b:29:4c:cb:31:a7:6f:94:1e:ac:65:47:d8:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E953CDEAA14862B46A8E001F1AD070187A8B1BF0 Validity Not Before: Nov 4 23:55:51 2025 GMT Not After : Nov 9 09:36:51 2025 GMT Subject: CN=93067807A9065F0B35B5836ADD74C01D72B63F53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f8:00:cd:44:36:0e:ae:0f:9c:24:26:c2:ec: 26:9c:cc:21:1a:22:85:78:46:7c:41:95:31:13:5a: 4f:d1:37:45:17:e5:42:ab:f9:bf:a1:6c:57:23:ac: 2b:74:e7:e7:06:0b:7f:65:dc:36:54:00:c9:29:7a: 03:02:a8:f8:37:40:6c:6c:89:3e:aa:af:f9:26:2e: a1:61:7b:b5:20:60:32:63:7c:6c:f0:c5:d6:7e:7a: 2b:9d:58:d9:03:0a:76:26:75:05:d8:eb:3d:51:ee: 5f:63:fd:f9:29:8e:ea:d8:41:31:41:a8:bf:db:92: ca:8d:81:2c:d6:17:42:60:09:98:d9:a9:ed:46:83: b8:9e:14:91:1d:7b:a4:95:98:39:e7:e2:e5:5c:b7: a7:0a:86:51:a1:3c:e4:60:b3:78:7b:45:bf:e0:9f: d5:0d:e0:b6:cd:ce:38:7e:ad:54:4c:8c:75:0a:84: 71:0d:50:cc:e6:b2:27:ba:f0:1c:53:03:eb:f8:25: 6b:6a:63:cf:74:69:f8:d8:b9:e3:7d:05:28:f4:58: bf:98:8f:62:05:4e:2e:f4:03:8c:5d:5c:ea:c5:eb: 3d:18:7f:07:a6:34:81:76:30:43:be:e1:39:73:ce: 28:a5:e3:b2:b3:18:1b:4e:9e:b5:9a:64:c8:5a:e8: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:06:78:07:A9:06:5F:0B:35:B5:83:6A:DD:74:C0:1D:72:B6:3F:53 X509v3 Authority Key Identifier: keyid:E9:53:CD:EA:A1:48:62:B4:6A:8E:00:1F:1A:D0:70:18:7A:8B:1B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a7:19:10:42:3d:a5:99:e3:62:18:e9:73:93:3a:d8:a0:3a: 5a:c7:0f:77:a4:4f:6b:de:44:24:fb:fc:56:81:26:fd:5e:1a: 01:43:a3:98:39:00:f3:74:ad:95:11:4f:30:37:31:06:02:9e: 6e:66:fa:ea:e2:13:07:57:6c:77:a6:c2:14:14:b6:a6:25:9d: 2d:45:bb:8c:40:28:ab:eb:50:0e:10:ae:7d:2b:09:94:91:5d: d6:cc:8d:6d:97:9b:ef:4e:28:f3:7c:f6:53:80:26:41:70:7a: 59:9f:42:df:00:bc:76:9a:71:e1:b7:de:33:fa:3c:22:62:60: d4:91:48:03:02:f2:71:b1:53:01:57:81:6c:a6:a4:93:1b:bf: 6e:c7:03:61:bc:f4:3f:cb:38:52:c5:00:b6:91:79:d6:9b:79: 66:e8:dc:fa:04:8d:16:7d:b7:d4:fe:a5:50:46:19:6e:73:ab: d7:a9:44:32:ae:a8:35:c9:db:7b:14:ea:42:57:fa:a3:fa:d7: 11:15:ad:32:d9:2f:7a:c6:47:66:c5:a9:4c:1c:90:39:71:55: c9:95:c6:91:0f:7f:ba:2e:ca:a9:0b:b7:04:e8:4c:47:91:90: aa:37:23:56:45:b5:f6:15:94:9b:7b:5a:10:7d:b1:d2:7f:2a: a4:73:98:d5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUL305UJfIWylMyzGnb5QerGVH2E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk1M0NERUFBMTQ4NjJCNDZBOEUwMDFGMUFEMDcwMTg3 QThCMUJGMDAeFw0yNTExMDQyMzU1NTFaFw0yNTExMDkwOTM2NTFaMDMxMTAvBgNV BAMTKDkzMDY3ODA3QTkwNjVGMEIzNUI1ODM2QURENzRDMDFENzJCNjNGNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+ADNRDYOrg+cJCbC7CaczCEa IoV4RnxBlTETWk/RN0UX5UKr+b+hbFcjrCt05+cGC39l3DZUAMkpegMCqPg3QGxs iT6qr/kmLqFhe7UgYDJjfGzwxdZ+eiudWNkDCnYmdQXY6z1R7l9j/fkpjurYQTFB qL/bksqNgSzWF0JgCZjZqe1Gg7ieFJEde6SVmDnn4uVct6cKhlGhPORgs3h7Rb/g n9UN4LbNzjh+rVRMjHUKhHENUMzmsie68BxTA+v4JWtqY890afjYueN9BSj0WL+Y j2IFTi70A4xdXOrF6z0YfwemNIF2MEO+4Tlzziil47KzGBtOnrWaZMha6AB1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUkwZ4B6kGXws1tYNq3XTAHXK2P1MwHwYDVR0j BBgwFoAU6VPN6qFIYrRqjgAfGtBwGHqLG/AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzEyNkMzQTc5NTdEQkVDOUFDQTQzNzEyNUE1MEY3OUNE M0RGN0NERTA1RkM4OTgyMkJBRTBCRTYyMjdENTY1LzAvRTk1M0NERUFBMTQ4NjJC NDZBOEUwMDFGMUFEMDcwMTg3QThCMUJGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTUzQ0RFQUExNDg2MkI0NkE4 RTAwMUYxQUQwNzAxODdBOEIxQkYwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDMxMjZDM0E3OTU3REJFQzlBQ0E0MzcxMjVBNTBGNzlDRDNERjdDREUw NUZDODk4MjJCQUUwQkU2MjI3RDU2NS8wL0U5NTNDREVBQTE0ODYyQjQ2QThFMDAx RjFBRDA3MDE4N0E4QjFCRjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEpxkQQj2lmeNiGOlzkzrYoDpa xw93pE9r3kQk+/xWgSb9XhoBQ6OYOQDzdK2VEU8wNzEGAp5uZvrq4hMHV2x3psIU FLamJZ0tRbuMQCir61AOEK59KwmUkV3WzI1tl5vvTijzfPZTgCZBcHpZn0LfALx2 mnHht94z+jwiYmDUkUgDAvJxsVMBV4FspqSTG79uxwNhvPQ/yzhSxQC2kXnWm3lm 6Nz6BI0WfbfU/qVQRhluc6vXqUQyrqg1ydt7FOpCV/qj+tcRFa0y2S96xkdmxalM HJA5cVXJlcaRD3+6LsqpC7cE6ExHkZCqNyNWRbX2FZSbe1oQfbHSfyqkc5jV -----END CERTIFICATE-----Generated at Wed Nov 5 12:06:43 2025 by rpki-client