$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft File: 65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft (raw, json) Hash identifier: kL22NOfKIFbBg/LQYyC+5KrgvetR41s2gttsQEaELEk= Subject key identifier: 60:47:C9:8E:E7:B9:35:E1:08:86:E3:B3:46:8B:05:89:4B:56:22:31 Authority key identifier: 65:88:6C:5B:D6:6D:87:F3:6C:E0:A1:4E:13:89:41:C8:AC:70:F2:C9 Certificate issuer: /CN=65886C5BD66D87F36CE0A14E138941C8AC70F2C9 Certificate serial: 660AD01F38F86ADB0307B5E30434C2F3003DFC54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft Manifest number: 013A Signing time: Wed 05 Nov 2025 06:14:22 +0000 Manifest this update: Wed 05 Nov 2025 06:09:22 +0000 Manifest next update: Mon 10 Nov 2025 14:22:22 +0000 Files and hashes: 1: 323830333a643234303a3a2f33322d3438203d3e20323633383131.roa (hash: x81vkwSG57QSoznsQ+v6aeXylTdDBZKiZSIyl+kcKgc=) 2: 65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl (hash: GP4SYHJVQaJqnTI2yH+17wrsNwV603quLAMMazRKkys=) 3: 3133382e3230342e3136302e302f32322d3234203d3e20323633383131.roa (hash: zLlfQ3vYVHQBvsVnaxHNJv0/xPNBuyhNcogtF4v0qgI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0a:d0:1f:38:f8:6a:db:03:07:b5:e3:04:34:c2:f3:00:3d:fc:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65886C5BD66D87F36CE0A14E138941C8AC70F2C9 Validity Not Before: Nov 5 06:09:22 2025 GMT Not After : Nov 10 14:22:22 2025 GMT Subject: CN=6047C98EE7B935E10886E3B3468B05894B562231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:22:19:8d:a1:58:68:53:c7:1a:7d:94:fd:78: df:e8:24:55:82:8e:01:ab:f9:08:a0:4a:e4:a8:93: 73:36:cf:a7:c0:17:43:f1:5d:48:3d:d3:d4:fd:ef: 88:95:ab:7d:23:2e:30:a6:f4:9c:96:0c:06:16:5a: 42:6e:f0:11:85:22:09:54:38:35:2c:27:c4:ae:70: ba:21:62:f6:37:0e:b9:4b:7f:88:d2:18:02:1f:63: 8d:36:11:d4:27:cb:4e:ac:1b:a3:24:ac:34:26:31: 65:86:18:42:9f:31:55:c1:57:05:0f:c3:59:61:f9: dd:6c:30:bb:6a:f0:51:32:1a:f0:48:7a:a2:da:09: 24:4d:24:b6:91:2f:48:0c:61:ec:3a:7b:23:56:1c: ad:9f:85:a0:aa:29:23:1a:3a:1f:4f:2e:29:9b:61: a6:ad:3b:99:3e:93:8b:43:7c:31:1a:98:53:f1:1d: d8:e8:84:2a:90:73:83:fa:86:b9:ab:e1:cd:87:94: 7a:e7:48:23:ab:d9:61:66:f3:54:0a:62:f4:a1:6c: 20:bb:58:16:2f:ad:d1:10:bc:d5:22:9e:e0:2a:53: fd:30:a2:9c:2a:43:f7:03:3f:c6:a4:65:45:9f:92: 0d:a4:1e:e2:7b:3a:b7:f1:07:19:a4:d5:8d:43:6b: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:47:C9:8E:E7:B9:35:E1:08:86:E3:B3:46:8B:05:89:4B:56:22:31 X509v3 Authority Key Identifier: keyid:65:88:6C:5B:D6:6D:87:F3:6C:E0:A1:4E:13:89:41:C8:AC:70:F2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f1:7d:2d:3d:e9:51:1c:f5:18:66:de:e2:49:06:24:c6:fb: 28:46:7d:1b:37:a6:3b:b7:c0:0b:18:41:f9:0f:d6:f9:b5:f1: d2:03:6d:b0:b0:bc:ec:85:7f:9f:4a:eb:4f:08:6d:7b:9f:bd: fa:22:8d:d4:c4:25:74:75:53:09:76:15:54:78:e2:7f:5c:99: 60:0c:56:f2:aa:13:6b:38:6d:d1:55:07:02:ca:16:b8:71:6f: 2e:32:a9:2e:e3:c8:c7:ec:54:91:9a:20:e9:09:a3:15:84:e6: 5a:a5:24:5d:fa:e9:e4:bc:16:bb:63:c8:be:3e:e2:37:4c:84: 26:2d:a9:67:f3:cb:88:6d:11:82:e8:7b:78:7f:43:0e:68:49: 9b:d3:de:db:17:c4:76:ce:d3:b6:36:52:19:86:b6:76:9d:a5: 9d:8d:d4:96:35:da:3f:19:7f:8c:38:9e:58:29:51:06:5d:16: ad:a9:2f:ce:2e:5c:f1:70:f2:9b:7f:3e:c1:54:1b:a1:66:d6: 97:bd:dd:9a:89:cd:fa:64:67:dc:4d:96:98:73:12:94:28:62: 1d:5e:e6:35:75:5f:07:8b:bc:0e:8a:4a:15:05:91:4c:8a:73: ba:bc:6d:d2:80:a7:20:33:0f:f8:7d:ab:f7:f3:79:a9:fc:e0: 8f:3f:fc:11 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZgrQHzj4atsDB7XjBDTC8wA9/FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4ODZDNUJENjZEODdGMzZDRTBBMTRFMTM4OTQxQzhB QzcwRjJDOTAeFw0yNTExMDUwNjA5MjJaFw0yNTExMTAxNDIyMjJaMDMxMTAvBgNV BAMTKDYwNDdDOThFRTdCOTM1RTEwODg2RTNCMzQ2OEIwNTg5NEI1NjIyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXIhmNoVhoU8cafZT9eN/oJFWC jgGr+QigSuSok3M2z6fAF0PxXUg909T974iVq30jLjCm9JyWDAYWWkJu8BGFIglU ODUsJ8SucLohYvY3DrlLf4jSGAIfY402EdQny06sG6MkrDQmMWWGGEKfMVXBVwUP w1lh+d1sMLtq8FEyGvBIeqLaCSRNJLaRL0gMYew6eyNWHK2fhaCqKSMaOh9PLimb YaatO5k+k4tDfDEamFPxHdjohCqQc4P6hrmr4c2HlHrnSCOr2WFm81QKYvShbCC7 WBYvrdEQvNUinuAqU/0wopwqQ/cDP8akZUWfkg2kHuJ7OrfxBxmk1Y1Da2RNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYEfJjue5NeEIhuOzRosFiUtWIjEwHwYDVR0j BBgwFoAUZYhsW9Zth/Ns4KFOE4lByKxw8skwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQzNGNzlGNDgyOTJGRUQ4MDY2MjU1RENERjM1QURFNzUz QzczNUE1NTY1QUYxRDRERjJEODFEQUQ5NkMxNjE4LzAvNjU4ODZDNUJENjZEODdG MzZDRTBBMTRFMTM4OTQxQzhBQzcwRjJDOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NTg4NkM1QkQ2NkQ4N0YzNkNF MEExNEUxMzg5NDFDOEFDNzBGMkM5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0MzRjc5RjQ4MjkyRkVEODA2NjI1NURDREYzNUFERTc1M0M3MzVBNTU2 NUFGMUQ0REYyRDgxREFEOTZDMTYxOC8wLzY1ODg2QzVCRDY2RDg3RjM2Q0UwQTE0 RTEzODk0MUM4QUM3MEYyQzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ8X0tPelRHPUYZt7iSQYkxvso Rn0bN6Y7t8ALGEH5D9b5tfHSA22wsLzshX+fSutPCG17n736Io3UxCV0dVMJdhVU eOJ/XJlgDFbyqhNrOG3RVQcCyha4cW8uMqku48jH7FSRmiDpCaMVhOZapSRd+unk vBa7Y8i+PuI3TIQmLaln88uIbRGC6Ht4f0MOaEmb097bF8R2ztO2NlIZhrZ2naWd jdSWNdo/GX+MOJ5YKVEGXRatqS/OLlzxcPKbfz7BVBuhZtaXvd2aic36ZGfcTZaY cxKUKGIdXuY1dV8Hi7wOikoVBZFMinO6vG3SgKcgMw/4fav383mp/OCPP/wR -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:27 2025 by rpki-client