$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/495946EB32178243EB258ADEF8B016680D7724F4A5E3B4823F94EA57528EE0D2/0/650D369DA20A191DE4DB0BE9895E0DC8C1A684D6.mft File: 650D369DA20A191DE4DB0BE9895E0DC8C1A684D6.mft (raw, json) Hash identifier: lJZF1iobKspbuYituBfrSz2eyyW0lgTxPJ4OPSNv0AM= Subject key identifier: EF:EF:CF:31:C8:F0:7A:54:02:D4:E1:43:F0:B3:47:FF:D4:78:99:F5 Authority key identifier: 65:0D:36:9D:A2:0A:19:1D:E4:DB:0B:E9:89:5E:0D:C8:C1:A6:84:D6 Certificate issuer: /CN=650D369DA20A191DE4DB0BE9895E0DC8C1A684D6 Certificate serial: 7E4AFD3FEE4E96C58FDB8AADF9A23624DA7E1430 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/650D369DA20A191DE4DB0BE9895E0DC8C1A684D6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/495946EB32178243EB258ADEF8B016680D7724F4A5E3B4823F94EA57528EE0D2/0/650D369DA20A191DE4DB0BE9895E0DC8C1A684D6.mft Manifest number: 0136 Signing time: Tue 04 Nov 2025 13:15:08 +0000 Manifest this update: Tue 04 Nov 2025 13:10:08 +0000 Manifest next update: Mon 10 Nov 2025 07:21:08 +0000 Files and hashes: 1: 650D369DA20A191DE4DB0BE9895E0DC8C1A684D6.crl (hash: XsKH55mpky7KLbbEqnZ3wjDMmrTI0uOmREAnSGmkd6k=) 2: 34352e3137382e3235322e302f32322d3234203d3e20323634363433.roa (hash: TLcb560QgDgNhyhTsct54lapu4+uOCjEVcOv8U/NdDo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/495946EB32178243EB258ADEF8B016680D7724F4A5E3B4823F94EA57528EE0D2/0/650D369DA20A191DE4DB0BE9895E0DC8C1A684D6.crl rsync://repository.lacnic.net/rpki/lacnic/495946EB32178243EB258ADEF8B016680D7724F4A5E3B4823F94EA57528EE0D2/0/650D369DA20A191DE4DB0BE9895E0DC8C1A684D6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/650D369DA20A191DE4DB0BE9895E0DC8C1A684D6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4a:fd:3f:ee:4e:96:c5:8f:db:8a:ad:f9:a2:36:24:da:7e:14:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=650D369DA20A191DE4DB0BE9895E0DC8C1A684D6 Validity Not Before: Nov 4 13:10:08 2025 GMT Not After : Nov 10 07:21:08 2025 GMT Subject: CN=EFEFCF31C8F07A5402D4E143F0B347FFD47899F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:87:16:a7:06:97:49:37:40:fa:44:d7:94:a3: 13:35:57:22:68:88:c2:a5:de:23:e3:5f:09:1a:bc: 33:5d:89:68:90:ce:ab:2a:f7:17:a3:2e:d7:28:3d: 63:6b:65:62:3a:e3:09:b6:93:6c:8c:50:3c:b2:e8: bc:9b:d9:98:2a:5a:28:04:ac:67:71:e1:37:84:e4: df:31:86:5b:9f:9a:87:94:62:c2:a3:7f:02:b5:4d: f5:a9:58:83:58:d4:89:09:8a:88:f8:b0:6d:fd:2a: d0:1f:9a:79:a3:72:f8:f9:57:38:b8:93:a4:bc:76: 9f:f6:da:2a:8d:65:56:f6:18:33:a3:ce:b3:b1:a9: 10:d7:30:d9:ac:9b:ea:91:00:a4:70:a9:22:0c:d7: 8f:b9:50:31:19:7e:94:14:13:af:08:b4:5e:bf:a2: fc:55:22:20:8c:7b:9b:66:3b:c2:32:26:5d:8f:22: e0:64:ef:a1:ff:80:75:60:6a:7f:04:a4:6d:5c:8b: e7:35:ee:1c:17:e4:03:96:6e:13:84:23:76:09:35: 11:7e:46:5a:1c:30:be:d3:c6:55:55:aa:c2:25:1e: a2:0c:6e:66:23:3d:13:cc:77:d0:2f:47:46:04:e4: 4b:fc:7f:2a:0d:b9:b4:6c:30:be:b0:ee:72:2b:d8: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EF:CF:31:C8:F0:7A:54:02:D4:E1:43:F0:B3:47:FF:D4:78:99:F5 X509v3 Authority Key Identifier: keyid:65:0D:36:9D:A2:0A:19:1D:E4:DB:0B:E9:89:5E:0D:C8:C1:A6:84:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/495946EB32178243EB258ADEF8B016680D7724F4A5E3B4823F94EA57528EE0D2/0/650D369DA20A191DE4DB0BE9895E0DC8C1A684D6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/650D369DA20A191DE4DB0BE9895E0DC8C1A684D6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/495946EB32178243EB258ADEF8B016680D7724F4A5E3B4823F94EA57528EE0D2/0/650D369DA20A191DE4DB0BE9895E0DC8C1A684D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b9:bb:21:4b:98:64:57:47:1d:e5:3a:64:49:3d:58:0a:d8: 2c:8f:75:be:ba:53:48:bc:4b:9a:24:11:e1:79:2d:eb:1e:49: 11:c0:7a:86:98:cb:3d:e9:e6:6a:28:5f:f3:9e:22:95:8f:a3: 13:b2:5e:e9:82:7e:81:02:c8:3d:13:9a:9a:f6:88:7e:18:70: 49:52:2d:03:c3:ef:2a:2b:f0:62:c2:05:06:d2:bb:1e:4b:e0: c8:d8:46:be:c3:89:d6:9a:1f:a8:7a:72:d9:5b:92:4a:b7:70: 1f:99:1e:72:b5:d2:cb:84:99:02:41:61:3b:86:ae:63:75:25: a8:5b:8c:51:d4:00:3b:ff:14:04:ba:05:a4:c7:55:d7:fa:9f: fb:24:d9:11:27:b5:5f:2d:ce:00:e9:52:b3:df:16:69:e5:6a: 67:f7:df:e9:57:27:ef:bd:ef:eb:b2:b0:fa:2d:8a:02:1e:5c: 3f:ae:2d:ff:97:b2:7d:a9:46:86:15:1f:cd:a0:e8:bb:d8:43: 93:29:79:9d:18:a3:de:4e:35:db:d9:bb:93:ec:a2:e1:13:e9: fe:dd:a9:64:89:fb:d5:27:ef:7f:b3:05:4d:9f:fa:78:1b:ed: 8d:eb:f0:4b:24:3f:8e:97:4b:58:49:f3:ca:db:4b:1c:19:51: 12:c4:ad:94 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfkr9P+5OlsWP24qt+aI2JNp+FDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUwRDM2OURBMjBBMTkxREU0REIwQkU5ODk1RTBEQzhD MUE2ODRENjAeFw0yNTExMDQxMzEwMDhaFw0yNTExMTAwNzIxMDhaMDMxMTAvBgNV BAMTKEVGRUZDRjMxQzhGMDdBNTQwMkQ0RTE0M0YwQjM0N0ZGRDQ3ODk5RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrhxanBpdJN0D6RNeUoxM1VyJo iMKl3iPjXwkavDNdiWiQzqsq9xejLtcoPWNrZWI64wm2k2yMUDyy6Lyb2ZgqWigE rGdx4TeE5N8xhlufmoeUYsKjfwK1TfWpWINY1IkJioj4sG39KtAfmnmjcvj5Vzi4 k6S8dp/22iqNZVb2GDOjzrOxqRDXMNmsm+qRAKRwqSIM14+5UDEZfpQUE68ItF6/ ovxVIiCMe5tmO8IyJl2PIuBk76H/gHVgan8EpG1ci+c17hwX5AOWbhOEI3YJNRF+ RlocML7TxlVVqsIlHqIMbmYjPRPMd9AvR0YE5Ev8fyoNubRsML6w7nIr2MmrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7+/PMcjwelQC1OFD8LNH/9R4mfUwHwYDVR0j BBgwFoAUZQ02naIKGR3k2wvpiV4NyMGmhNYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80OTU5NDZFQjMyMTc4MjQzRUIyNThBREVGOEIwMTY2ODBE NzcyNEY0QTVFM0I0ODIzRjk0RUE1NzUyOEVFMEQyLzAvNjUwRDM2OURBMjBBMTkx REU0REIwQkU5ODk1RTBEQzhDMUE2ODRENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NTBEMzY5REEyMEExOTFERTRE QjBCRTk4OTVFMERDOEMxQTY4NEQ2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDk1OTQ2RUIzMjE3ODI0M0VCMjU4QURFRjhCMDE2NjgwRDc3MjRGNEE1 RTNCNDgyM0Y5NEVBNTc1MjhFRTBEMi8wLzY1MEQzNjlEQTIwQTE5MURFNERCMEJF OTg5NUUwREM4QzFBNjg0RDYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRubshS5hkV0cd5TpkST1YCtgs j3W+ulNIvEuaJBHheS3rHkkRwHqGmMs96eZqKF/zniKVj6MTsl7pgn6BAsg9E5qa 9oh+GHBJUi0Dw+8qK/BiwgUG0rseS+DI2Ea+w4nWmh+oenLZW5JKt3AfmR5ytdLL hJkCQWE7hq5jdSWoW4xR1AA7/xQEugWkx1XX+p/7JNkRJ7VfLc4A6VKz3xZp5Wpn 99/pVyfvve/rsrD6LYoCHlw/ri3/l7J9qUaGFR/NoOi72EOTKXmdGKPeTjXb2buT 7KLhE+n+3alkifvVJ+9/swVNn/p4G+2N6/BLJD+Ol0tYSfPK20scGVESxK2U -----END CERTIFICATE-----Generated at Wed Nov 5 21:44:13 2025 by rpki-client