$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.mft File: 65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.mft (raw, json) Hash identifier: UBj80lZ5VNTm5LgTq7FDa4lqDg+Q3Tx8jtuEF9ICG3Q= Subject key identifier: 70:A7:AC:E2:A3:97:FA:1D:F7:AB:D6:4B:48:4F:75:4D:9D:D9:61:BF Authority key identifier: 65:A9:D2:C8:E6:CC:9D:D1:9E:3E:D9:97:0A:5C:11:8D:A8:74:B0:E2 Certificate issuer: /CN=65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2 Certificate serial: 129C2F58BF38242A692A9EDE7377C2E253A5E130 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.mft Manifest number: C1 Signing time: Sun 02 Nov 2025 11:47:01 +0000 Manifest this update: Sun 02 Nov 2025 11:42:01 +0000 Manifest next update: Sat 08 Nov 2025 08:18:01 +0000 Files and hashes: 1: 65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.crl (hash: YA24fD8t3kNZFc+hrd4DsY/LfXEcCH5kBZ/shdQtUZk=) 2: 323830333a343135303a3a2f34372d3438203d3e20323733323338.roa (hash: IRgrLjbgArSw5ArUZoFeY4PZf7fPR30SWKZIYw5gyXk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.crl rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 08:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9c:2f:58:bf:38:24:2a:69:2a:9e:de:73:77:c2:e2:53:a5:e1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2 Validity Not Before: Nov 2 11:42:01 2025 GMT Not After : Nov 8 08:18:01 2025 GMT Subject: CN=70A7ACE2A397FA1DF7ABD64B484F754D9DD961BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:af:88:2b:7f:6c:a1:64:ca:c3:c4:37:80:dd: b6:1d:0b:87:a7:b6:5a:11:af:d7:81:aa:cb:67:b7: da:c3:1f:fc:b3:b9:f2:41:3c:a5:8d:82:82:da:0f: f4:7d:3c:2b:86:ab:54:78:e6:e1:bc:19:53:b5:cd: 56:04:79:45:23:fb:1d:dc:8d:42:69:f0:91:1b:a4: 05:46:27:da:35:8b:75:fd:d6:c8:36:5a:d3:7a:1d: 2d:3c:b7:20:2b:f2:a4:c4:78:8a:a2:25:e3:b8:6b: 37:c2:dc:84:18:ea:55:c7:b8:fd:1b:86:9e:eb:4f: 19:e7:0c:ca:af:4c:04:c0:e0:96:5f:7d:17:82:c7: 1b:25:18:db:ea:3f:c0:2f:70:48:86:67:4f:66:aa: 75:54:c7:b0:37:1b:d7:70:97:28:67:7c:a2:d0:21: f1:27:2d:e5:25:81:be:97:35:bd:b5:79:3a:b3:a4: a5:be:2d:3a:74:84:4f:a4:ea:b9:7f:ce:a8:84:d5: 37:56:88:a1:6f:91:67:0a:6a:58:4e:6d:db:e0:04: a5:0d:ff:6c:70:fd:1f:77:33:2a:17:26:6b:d1:e5: 2f:cd:d8:9e:11:93:a1:76:5e:1f:2b:7e:c1:ac:0b: 79:d5:e6:0f:63:40:04:05:be:33:53:00:81:74:63: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A7:AC:E2:A3:97:FA:1D:F7:AB:D6:4B:48:4F:75:4D:9D:D9:61:BF X509v3 Authority Key Identifier: keyid:65:A9:D2:C8:E6:CC:9D:D1:9E:3E:D9:97:0A:5C:11:8D:A8:74:B0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e9:06:1d:02:ed:00:4f:8a:6b:ee:fa:6e:58:4c:6c:94:63: d2:9d:c6:36:d3:c6:42:14:b4:5a:b7:da:77:e3:ac:52:5f:07: b8:78:83:24:97:e9:cf:5f:8e:72:a7:0f:5f:f8:87:c4:ee:d8: 26:2a:53:37:3b:3d:88:52:2c:12:8a:36:d8:eb:88:cb:24:7c: f8:c5:e4:b8:45:ff:13:9d:5c:36:99:5a:4d:d5:02:21:9e:ae: ba:61:53:98:1b:20:df:80:be:15:12:bc:1d:c1:89:45:69:71: 88:96:1d:89:4c:8c:ef:7a:ec:0c:22:12:e3:05:55:7e:27:0a: 5f:1e:c7:3a:39:ad:81:90:4b:bd:c2:81:ab:4e:09:71:3e:a0: 3b:42:98:2b:0a:b3:95:4f:67:96:b9:25:07:22:4f:37:78:ca: 49:6d:cf:b2:bd:da:22:07:da:63:a8:52:6c:4f:9f:9c:89:fd: 74:63:3d:a0:bf:80:3a:f6:e7:65:bc:3f:3a:85:7f:b2:5d:ad: 3d:c1:fa:76:f3:e4:54:38:2f:05:1e:52:27:e0:54:3e:ce:8b: 7f:17:45:0e:6b:03:4c:f6:8d:fe:e3:9d:d9:38:1b:04:cf:00: 79:66:6d:7a:0c:65:7f:33:f2:4a:66:22:e2:8e:9d:1b:d1:f3: 2d:15:02:48 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEpwvWL84JCppKp7ec3fC4lOl4TAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVBOUQyQzhFNkNDOUREMTlFM0VEOTk3MEE1QzExOERB ODc0QjBFMjAeFw0yNTExMDIxMTQyMDFaFw0yNTExMDgwODE4MDFaMDMxMTAvBgNV BAMTKDcwQTdBQ0UyQTM5N0ZBMURGN0FCRDY0QjQ4NEY3NTREOUREOTYxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLr4grf2yhZMrDxDeA3bYdC4en tloRr9eBqstnt9rDH/yzufJBPKWNgoLaD/R9PCuGq1R45uG8GVO1zVYEeUUj+x3c jUJp8JEbpAVGJ9o1i3X91sg2WtN6HS08tyAr8qTEeIqiJeO4azfC3IQY6lXHuP0b hp7rTxnnDMqvTATA4JZffReCxxslGNvqP8AvcEiGZ09mqnVUx7A3G9dwlyhnfKLQ IfEnLeUlgb6XNb21eTqzpKW+LTp0hE+k6rl/zqiE1TdWiKFvkWcKalhObdvgBKUN /2xw/R93MyoXJmvR5S/N2J4Rk6F2Xh8rfsGsC3nV5g9jQAQFvjNTAIF0Y84/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcKes4qOX+h33q9ZLSE91TZ3ZYb8wHwYDVR0j BBgwFoAUZanSyObMndGePtmXClwRjah0sOIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NUE4Njg3MzI1MzU0N0REMkJDRUFGOEY1NzE0MDk2Mjg3 Q0RCODgyOEQzMDhBNUE0MzI1RTM0MTYyMDRFNEFGLzAvNjVBOUQyQzhFNkNDOURE MTlFM0VEOTk3MEE1QzExOERBODc0QjBFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NUE5RDJDOEU2Q0M5REQxOUUz RUQ5OTcwQTVDMTE4REE4NzRCMEUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjVBODY4NzMyNTM1NDdERDJCQ0VBRjhGNTcxNDA5NjI4N0NEQjg4MjhE MzA4QTVBNDMyNUUzNDE2MjA0RTRBRi8wLzY1QTlEMkM4RTZDQzlERDE5RTNFRDk5 NzBBNUMxMThEQTg3NEIwRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAC6QYdAu0AT4pr7vpuWExslGPS ncY208ZCFLRat9p346xSXwe4eIMkl+nPX45ypw9f+IfE7tgmKlM3Oz2IUiwSijbY 64jLJHz4xeS4Rf8TnVw2mVpN1QIhnq66YVOYGyDfgL4VErwdwYlFaXGIlh2JTIzv euwMIhLjBVV+JwpfHsc6Oa2BkEu9woGrTglxPqA7QpgrCrOVT2eWuSUHIk83eMpJ bc+yvdoiB9pjqFJsT5+cif10Yz2gv4A69udlvD86hX+yXa09wfp28+RUOC8FHlIn 4FQ+zot/F0UOawNM9o3+453ZOBsEzwB5Zm16DGV/M/JKZiLijp0b0fMtFQJI -----END CERTIFICATE-----Generated at Wed Nov 5 05:33:32 2025 by rpki-client