$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.mft File: 963A20938985B7260F30AFD597E6AA10A2E76FE2.mft (raw, json) Hash identifier: k3kGZFJWewK0W1oIBN4OhbgtC94lUh4ULIZfcTGlAXU= Subject key identifier: 8E:3B:38:AB:4E:B0:4F:96:B7:04:BF:7E:29:50:E3:2E:D0:EF:F7:31 Authority key identifier: 96:3A:20:93:89:85:B7:26:0F:30:AF:D5:97:E6:AA:10:A2:E7:6F:E2 Certificate issuer: /CN=963A20938985B7260F30AFD597E6AA10A2E76FE2 Certificate serial: 1A6C8A62EA72118949289C9EE6BE265D4C70999A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.mft Manifest number: 0134 Signing time: Tue 04 Nov 2025 11:59:26 +0000 Manifest this update: Tue 04 Nov 2025 11:54:26 +0000 Manifest next update: Sat 08 Nov 2025 16:29:26 +0000 Files and hashes: 1: 963A20938985B7260F30AFD597E6AA10A2E76FE2.crl (hash: 9iUTSWhpWxJ6TWE29mOaNCNiZmGY1Eoso8QMNHdhAgs=) 2: 323830333a386631303a3a2f33322d3332203d3e20323732313137.roa (hash: 2V/sn9AsNltMPOvUOLFZv3DLgE3TAbM04cvqSQJQK4w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.crl rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 16:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6c:8a:62:ea:72:11:89:49:28:9c:9e:e6:be:26:5d:4c:70:99:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=963A20938985B7260F30AFD597E6AA10A2E76FE2 Validity Not Before: Nov 4 11:54:26 2025 GMT Not After : Nov 8 16:29:26 2025 GMT Subject: CN=8E3B38AB4EB04F96B704BF7E2950E32ED0EFF731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2b:78:80:5f:18:71:e8:6a:17:8f:ee:86:71: db:b5:a9:22:aa:30:65:4b:de:8e:2d:98:cb:f1:3e: 18:30:58:2c:df:c6:1b:f6:64:3f:f1:a4:19:02:5f: 70:53:f0:21:29:e9:aa:48:36:20:6b:1c:8c:ac:f0: 32:7d:60:18:20:e8:ba:b8:a9:a4:32:76:5f:56:42: 37:bc:b6:f7:47:ec:87:87:77:f1:05:74:1e:05:2f: 95:96:b6:9e:8c:9c:8e:92:09:71:1b:95:f6:80:6e: b3:9a:3b:67:d1:28:c2:a5:19:24:e2:a3:a3:b7:d0: e7:47:89:20:96:bc:32:a1:db:8f:cd:52:d3:03:0e: 96:54:8f:92:9b:ee:32:43:0c:55:09:d6:50:47:87: 46:2c:74:fd:61:ec:4f:51:c1:06:90:26:94:84:bc: c8:9e:8c:aa:13:cf:29:f5:f2:d4:95:0a:74:22:da: bc:e0:c0:c7:d2:ca:c6:ef:fe:59:9f:81:73:eb:04: fe:73:f4:76:20:7b:d7:c8:d2:43:03:d5:43:66:23: 93:58:ea:38:77:4f:38:cc:7e:89:94:96:49:a5:b9: 3c:45:62:31:8c:7f:c2:72:e9:e9:f9:92:df:3e:bc: 3e:77:54:94:56:af:23:4a:59:7e:ad:6e:d1:3e:39: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3B:38:AB:4E:B0:4F:96:B7:04:BF:7E:29:50:E3:2E:D0:EF:F7:31 X509v3 Authority Key Identifier: keyid:96:3A:20:93:89:85:B7:26:0F:30:AF:D5:97:E6:AA:10:A2:E7:6F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:db:ad:62:cd:28:5c:56:e5:a3:cb:89:ab:dc:66:2f:c6:9b: dd:94:ae:3a:2f:ff:b4:38:77:65:87:85:c1:6a:f1:20:74:35: 17:da:58:48:80:1f:fb:d3:ce:bb:ab:d5:ae:22:04:2d:a0:e4: cd:3c:fd:70:3f:e0:66:9f:9f:50:7a:e9:87:1d:34:61:7c:f5: 05:c8:54:23:22:5b:15:78:f6:c6:f4:c8:0d:de:52:18:61:2b: 48:50:e7:33:96:7a:1d:c8:83:dd:41:52:dd:4d:84:be:52:ac: 2c:ac:aa:78:29:4f:53:46:40:84:41:59:44:4a:3c:69:f1:8c: 27:a8:f9:7c:91:0c:75:20:3f:9a:00:a2:a7:e8:a6:de:9d:c3: 4b:6d:05:9a:bc:88:92:10:b1:98:dc:32:8a:ff:83:8e:b3:04: 8e:a1:f1:57:26:db:a3:d8:d7:cb:56:e9:d0:5e:05:20:3c:04: 9b:12:a4:e3:2a:60:8f:82:da:fd:e3:34:d7:c7:8b:5d:8f:28: b1:75:0a:d0:f7:32:2f:3d:58:0d:07:7c:33:be:ef:99:b6:38: 94:6e:35:0f:86:44:6b:c2:11:cb:15:0d:c5:8d:e5:c8:10:5b: 21:a0:a5:d5:0f:c6:8a:08:c9:09:77:1e:f2:b5:b6:1d:19:10: 4b:da:db:e7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGmyKYupyEYlJKJye5r4mXUxwmZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYzQTIwOTM4OTg1QjcyNjBGMzBBRkQ1OTdFNkFBMTBB MkU3NkZFMjAeFw0yNTExMDQxMTU0MjZaFw0yNTExMDgxNjI5MjZaMDMxMTAvBgNV BAMTKDhFM0IzOEFCNEVCMDRGOTZCNzA0QkY3RTI5NTBFMzJFRDBFRkY3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFK3iAXxhx6GoXj+6Gcdu1qSKq MGVL3o4tmMvxPhgwWCzfxhv2ZD/xpBkCX3BT8CEp6apINiBrHIys8DJ9YBgg6Lq4 qaQydl9WQje8tvdH7IeHd/EFdB4FL5WWtp6MnI6SCXEblfaAbrOaO2fRKMKlGSTi o6O30OdHiSCWvDKh24/NUtMDDpZUj5Kb7jJDDFUJ1lBHh0YsdP1h7E9RwQaQJpSE vMiejKoTzyn18tSVCnQi2rzgwMfSysbv/lmfgXPrBP5z9HYge9fI0kMD1UNmI5NY 6jh3TzjMfomUlkmluTxFYjGMf8Jy6en5kt8+vD53VJRWryNKWX6tbtE+OZCNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjjs4q06wT5a3BL9+KVDjLtDv9zEwHwYDVR0j BBgwFoAUljogk4mFtyYPMK/Vl+aqEKLnb+IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNzRDNzdDRjBGNDQ1RDlFODdFODc5MTY0ODAxRTk1RTBD N0QwQkZBRTk1QjkzNzlCNzNBOUU4NzIwRkRCRkRBLzAvOTYzQTIwOTM4OTg1Qjcy NjBGMzBBRkQ1OTdFNkFBMTBBMkU3NkZFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjNBMjA5Mzg5ODVCNzI2MEYz MEFGRDU5N0U2QUExMEEyRTc2RkUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzc0Qzc3Q0YwRjQ0NUQ5RTg3RTg3OTE2NDgwMUU5NUUwQzdEMEJGQUU5 NUI5Mzc5QjczQTlFODcyMEZEQkZEQS8wLzk2M0EyMDkzODk4NUI3MjYwRjMwQUZE NTk3RTZBQTEwQTJFNzZGRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBt261izShcVuWjy4mr3GYvxpvd lK46L/+0OHdlh4XBavEgdDUX2lhIgB/70867q9WuIgQtoOTNPP1wP+Bmn59QeumH HTRhfPUFyFQjIlsVePbG9MgN3lIYYStIUOczlnodyIPdQVLdTYS+UqwsrKp4KU9T RkCEQVlESjxp8YwnqPl8kQx1ID+aAKKn6KbencNLbQWavIiSELGY3DKK/4OOswSO ofFXJtuj2NfLVunQXgUgPASbEqTjKmCPgtr94zTXx4tdjyixdQrQ9zIvPVgNB3wz vu+ZtjiUbjUPhkRrwhHLFQ3FjeXIEFshoKXVD8aKCMkJdx7ytbYdGRBL2tvn -----END CERTIFICATE-----Generated at Wed Nov 5 17:21:21 2025 by rpki-client