$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft File: 396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft (raw, json) Hash identifier: BSCSjZDy7So/MOSQZCfFjn2btPAF8GmCjHj+1+pGjb4= Subject key identifier: EB:78:67:A6:9C:01:EF:F6:22:04:A2:D1:81:8C:48:74:4E:AC:97:1D Authority key identifier: 39:6E:80:8C:91:3B:9F:4B:FC:95:0B:4F:1D:DE:B1:15:9E:5C:9B:5C Certificate issuer: /CN=396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C Certificate serial: 5DD2E37A1FD6A7B51FE55D74B15BFC535E384E89 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft Manifest number: 0130 Signing time: Tue 04 Nov 2025 08:47:39 +0000 Manifest this update: Tue 04 Nov 2025 08:42:39 +0000 Manifest next update: Sat 08 Nov 2025 13:12:39 +0000 Files and hashes: 1: 396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl (hash: R7Agzggidbf11asZVB9nf0kQ/LPMay0B1QlXPsjmZzE=) 2: 323830333a376365303a3a2f33322d3332203d3e203233313430.roa (hash: Va1PdbdhRIRzDdOehr3/PCUTjdlWf/YYRaXrVqewYbQ=) 3: 3230302e38392e36342e302f32302d3230203d3e203233313430.roa (hash: MuVkrksN6Nndojm+zBAMSGOH0xql9EWRLP4tu/OiPK8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 13:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d2:e3:7a:1f:d6:a7:b5:1f:e5:5d:74:b1:5b:fc:53:5e:38:4e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C Validity Not Before: Nov 4 08:42:39 2025 GMT Not After : Nov 8 13:12:39 2025 GMT Subject: CN=EB7867A69C01EFF62204A2D1818C48744EAC971D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:9e:22:0a:89:41:52:dc:6a:e0:b9:04:8f: 66:df:7c:52:04:3e:bc:03:8d:94:fc:a3:af:13:4b: f2:57:d9:b6:f7:0c:0a:0c:6b:52:02:de:05:9b:ad: 12:25:c0:cf:f5:1e:1d:c3:59:12:1b:0a:b7:f0:62: 04:50:26:a3:73:ec:45:36:1f:8b:4c:4d:c5:67:79: d6:43:82:b1:69:ad:af:76:67:ff:4e:e6:83:6a:78: 9d:a5:f8:f7:c3:da:63:98:7d:b2:34:8d:12:71:a3: dd:b5:2c:f8:c3:4e:5e:e3:d0:75:cb:76:63:4d:fa: 1b:f2:d3:41:f3:d4:4a:df:1b:4f:e1:50:f7:17:3d: 4f:d7:61:cf:47:7b:db:35:96:da:93:f2:6e:0b:9b: 12:c5:30:c3:ea:76:c3:9b:f8:2b:6b:f4:a6:bd:3b: 18:5c:ec:9b:01:eb:55:2d:a2:f6:09:1b:61:39:d8: 9c:ac:19:bf:e8:f5:45:22:72:84:16:6c:93:56:7e: da:0e:1f:11:54:dd:2f:13:fe:60:cc:6a:8e:46:d4: 55:6c:1e:02:7f:54:b8:29:8c:02:f6:0f:46:3e:56: a4:67:07:c2:9b:38:04:c7:c6:df:c7:01:24:13:6e: b8:7d:85:3d:ae:43:0d:08:a5:bb:b4:06:9d:f1:41: c9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:78:67:A6:9C:01:EF:F6:22:04:A2:D1:81:8C:48:74:4E:AC:97:1D X509v3 Authority Key Identifier: keyid:39:6E:80:8C:91:3B:9F:4B:FC:95:0B:4F:1D:DE:B1:15:9E:5C:9B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:14:d5:30:91:45:61:38:4c:8a:65:aa:c2:bd:e1:62:68:2e: 6c:36:af:50:44:49:7c:9b:67:2c:04:93:5f:7d:83:ef:02:0d: ee:17:5d:9e:3e:ee:af:8c:c3:16:52:6b:1c:55:26:e4:ff:95: ee:87:50:46:4d:0a:6c:62:1f:c4:49:bb:24:52:e0:39:17:d9: 49:5a:02:50:61:fa:4b:77:40:5c:37:10:73:bc:f4:6d:95:8d: 48:2e:45:1f:3a:3b:56:bf:92:4b:27:6b:52:f0:83:31:fb:f3: 29:5b:a7:f5:90:20:48:61:07:2e:96:b3:61:1a:7f:cb:42:50: d0:11:22:3c:b9:a6:1b:81:5b:d6:d2:5d:79:1f:31:46:2d:7e: ca:8a:13:e0:0e:e7:86:3a:91:f4:0f:49:cd:52:07:bb:81:d0: f3:3a:00:da:ad:1c:d1:f0:09:13:b4:ff:81:b6:70:64:10:7d: 1a:d8:57:35:cc:31:f3:5d:5b:6c:c4:ba:3e:51:90:2b:f2:4b: cd:8a:6d:12:78:fd:d8:7c:ea:ae:43:f6:a3:59:79:95:46:93: e4:76:56:9f:3a:75:a3:31:da:f8:54:76:31:e2:93:1b:88:e8: a3:95:1b:29:00:ce:5e:af:73:a7:86:6e:82:c0:3a:ff:b5:70: 84:55:26:6a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXdLjeh/Wp7Uf5V10sVv8U144TokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2RTgwOEM5MTNCOUY0QkZDOTUwQjRGMURERUIxMTU5 RTVDOUI1QzAeFw0yNTExMDQwODQyMzlaFw0yNTExMDgxMzEyMzlaMDMxMTAvBgNV BAMTKEVCNzg2N0E2OUMwMUVGRjYyMjA0QTJEMTgxOEM0ODc0NEVBQzk3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybZ4iColBUtxq4LkEj2bffFIE PrwDjZT8o68TS/JX2bb3DAoMa1IC3gWbrRIlwM/1Hh3DWRIbCrfwYgRQJqNz7EU2 H4tMTcVnedZDgrFpra92Z/9O5oNqeJ2l+PfD2mOYfbI0jRJxo921LPjDTl7j0HXL dmNN+hvy00Hz1ErfG0/hUPcXPU/XYc9He9s1ltqT8m4LmxLFMMPqdsOb+Ctr9Ka9 Oxhc7JsB61UtovYJG2E52JysGb/o9UUicoQWbJNWftoOHxFU3S8T/mDMao5G1FVs HgJ/VLgpjAL2D0Y+VqRnB8KbOATHxt/HASQTbrh9hT2uQw0Ipbu0Bp3xQcm9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU63hnppwB7/YiBKLRgYxIdE6slx0wHwYDVR0j BBgwFoAUOW6AjJE7n0v8lQtPHd6xFZ5cm1wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85Mzk2QjIzQUY4NzA1REMxRjFBMTM1MjcwMjM0NDMyQUJB MDE2Nzc1QzE3ODE5RjY3RDY5QkYzOUMxQkU5N0E4LzAvMzk2RTgwOEM5MTNCOUY0 QkZDOTUwQjRGMURERUIxMTU5RTVDOUI1Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOTZFODA4QzkxM0I5RjRCRkM5 NTBCNEYxRERFQjExNTlFNUM5QjVDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTM5NkIyM0FGODcwNURDMUYxQTEzNTI3MDIzNDQzMkFCQTAxNjc3NUMx NzgxOUY2N0Q2OUJGMzlDMUJFOTdBOC8wLzM5NkU4MDhDOTEzQjlGNEJGQzk1MEI0 RjFEREVCMTE1OUU1QzlCNUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDFNUwkUVhOEyKZarCveFiaC5s Nq9QREl8m2csBJNffYPvAg3uF12ePu6vjMMWUmscVSbk/5Xuh1BGTQpsYh/ESbsk UuA5F9lJWgJQYfpLd0BcNxBzvPRtlY1ILkUfOjtWv5JLJ2tS8IMx+/MpW6f1kCBI YQculrNhGn/LQlDQESI8uaYbgVvW0l15HzFGLX7KihPgDueGOpH0D0nNUge7gdDz OgDarRzR8AkTtP+BtnBkEH0a2Fc1zDHzXVtsxLo+UZAr8kvNim0SeP3YfOquQ/aj WXmVRpPkdlafOnWjMdr4VHYx4pMbiOijlRspAM5er3Onhm6CwDr/tXCEVSZq -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:52 2025 by rpki-client