$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.mft File: 970664554CE595E3595AD5B26B64B6852A7156DA.mft (raw, json) Hash identifier: 1IwlW/i8qSffbty5WXe87lwIJ4DkDSlgy42SbP+hzZc= Subject key identifier: 90:87:6D:3C:02:B0:3F:46:13:9A:5A:28:35:23:2B:82:3D:D1:4B:DA Authority key identifier: 97:06:64:55:4C:E5:95:E3:59:5A:D5:B2:6B:64:B6:85:2A:71:56:DA Certificate issuer: /CN=970664554CE595E3595AD5B26B64B6852A7156DA Certificate serial: 7A20F51945C43E2E25747076CCEC4A00068E5CCA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/970664554CE595E3595AD5B26B64B6852A7156DA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.mft Manifest number: 012E Signing time: Mon 03 Nov 2025 14:47:29 +0000 Manifest this update: Mon 03 Nov 2025 14:42:29 +0000 Manifest next update: Sat 08 Nov 2025 22:26:29 +0000 Files and hashes: 1: 323830333a626431303a3a2f33322d3438203d3e20323732303536.roa (hash: LAriNefkzCn25EsISO3tuAa6wUIb++N+fSIc2IM6dY8=) 2: 970664554CE595E3595AD5B26B64B6852A7156DA.crl (hash: WdtIP7P0ZSyIo/SeNfTMKIHiqTHkaxLxI7y7ZEDroxM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.crl rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/970664554CE595E3595AD5B26B64B6852A7156DA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 22:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:20:f5:19:45:c4:3e:2e:25:74:70:76:cc:ec:4a:00:06:8e:5c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970664554CE595E3595AD5B26B64B6852A7156DA Validity Not Before: Nov 3 14:42:29 2025 GMT Not After : Nov 8 22:26:29 2025 GMT Subject: CN=90876D3C02B03F46139A5A2835232B823DD14BDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:92:5b:f8:72:6c:94:0c:4a:2d:21:4f:22: bb:91:a4:0f:dc:af:2c:98:d6:53:0f:c8:70:9b:25: 0f:67:58:56:96:6a:fc:0f:5d:4b:a1:0e:db:82:f5: a1:21:d2:27:00:45:77:5c:62:16:83:5b:9b:5f:ca: 6b:a9:ba:6f:49:97:66:83:86:fd:e9:39:73:17:b5: d4:87:7e:08:e3:a0:d1:50:6f:44:33:da:71:9e:92: bc:07:88:cb:57:29:dc:fb:18:1f:bf:48:96:4a:da: 36:e2:31:e8:a5:38:0e:1e:e2:27:4c:6c:41:6d:4c: 7a:67:a4:c0:e7:44:c0:8c:7b:31:a5:65:15:7f:e3: f8:29:40:77:b5:41:a0:d6:20:80:8e:de:3e:74:23: 7a:9d:fc:02:fe:f1:d4:07:81:64:ff:7e:a6:67:6b: d7:4b:32:d5:2e:3e:70:f6:9f:51:ef:fe:5e:67:7a: 01:02:73:36:6a:04:6a:c9:9f:fc:e7:d9:5d:6f:3c: b4:9b:db:f2:82:7b:00:d1:18:1b:c8:fb:97:92:cd: 1b:88:71:43:c2:de:b9:d4:6f:8c:75:49:29:ac:5d: b6:ac:c9:ed:60:62:4f:f1:9c:8f:28:d0:9e:8e:d8: 3a:86:a8:b9:32:4a:27:0d:2d:0b:1a:59:c2:59:d0: 6f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:87:6D:3C:02:B0:3F:46:13:9A:5A:28:35:23:2B:82:3D:D1:4B:DA X509v3 Authority Key Identifier: keyid:97:06:64:55:4C:E5:95:E3:59:5A:D5:B2:6B:64:B6:85:2A:71:56:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/970664554CE595E3595AD5B26B64B6852A7156DA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2d:78:f1:c0:61:d6:3d:c9:18:2a:cb:bd:c7:b1:00:00:ec: 79:00:5e:99:db:00:02:a9:13:be:45:70:13:63:bd:8e:31:dd: 5b:e2:21:f0:46:e4:23:21:cd:6f:e7:68:06:34:2d:68:42:d3: 24:34:cf:0e:04:14:09:40:79:7a:77:ed:b9:b9:89:99:85:55: fd:1d:88:50:a2:8e:85:31:42:44:85:c9:41:67:34:8f:6c:46: c9:dc:19:4f:05:dc:ed:1e:3b:13:f7:24:e2:2e:44:d5:87:6a: d1:4e:07:d9:b1:ce:bd:23:4e:23:6d:46:8f:75:bb:20:81:40: 4f:00:3c:ba:9d:30:42:aa:e3:96:1c:c0:05:65:86:33:0d:56: d3:9d:42:1f:f5:5b:11:5e:63:eb:4e:04:d2:51:df:ad:eb:11: 4a:f7:25:94:5f:e6:6b:8c:f3:ba:ea:c4:ae:e9:c8:9f:53:ec: 02:32:01:c8:46:27:be:91:bc:89:5e:e3:7b:e5:e7:35:0d:f3: e8:47:91:75:8f:5f:86:6b:09:69:ec:96:36:79:24:96:a5:98: 90:53:17:b3:43:ec:a7:b1:65:da:16:e9:18:d2:d9:36:40:95: ca:cf:77:8c:68:de:11:21:a7:49:8f:06:a2:ca:23:be:f3:bf: 72:87:a1:c4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeiD1GUXEPi4ldHB2zOxKAAaOXMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNjY0NTU0Q0U1OTVFMzU5NUFENUIyNkI2NEI2ODUy QTcxNTZEQTAeFw0yNTExMDMxNDQyMjlaFw0yNTExMDgyMjI2MjlaMDMxMTAvBgNV BAMTKDkwODc2RDNDMDJCMDNGNDYxMzlBNUEyODM1MjMyQjgyM0REMTRCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JJJb+HJslAxKLSFPIruRpA/c ryyY1lMPyHCbJQ9nWFaWavwPXUuhDtuC9aEh0icARXdcYhaDW5tfymupum9Jl2aD hv3pOXMXtdSHfgjjoNFQb0Qz2nGekrwHiMtXKdz7GB+/SJZK2jbiMeilOA4e4idM bEFtTHpnpMDnRMCMezGlZRV/4/gpQHe1QaDWIICO3j50I3qd/AL+8dQHgWT/fqZn a9dLMtUuPnD2n1Hv/l5negECczZqBGrJn/zn2V1vPLSb2/KCewDRGBvI+5eSzRuI cUPC3rnUb4x1SSmsXbasye1gYk/xnI8o0J6O2DqGqLkySicNLQsaWcJZ0G8fAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUkIdtPAKwP0YTmlooNSMrgj3RS9owHwYDVR0j BBgwFoAUlwZkVUzlleNZWtWya2S2hSpxVtowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMzVFQzA1RkQzOTQ3ODQyQTA5QkU2QTRFRkZDRTBBMDJB QzFGMkVEMjQyODBFMzVBQjREQjMzNEI1NTYzQTkzLzAvOTcwNjY0NTU0Q0U1OTVF MzU5NUFENUIyNkI2NEI2ODUyQTcxNTZEQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzA2NjQ1NTRDRTU5NUUzNTk1 QUQ1QjI2QjY0QjY4NTJBNzE1NkRBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDM1RUMwNUZEMzk0Nzg0MkEwOUJFNkE0RUZGQ0UwQTAyQUMxRjJFRDI0 MjgwRTM1QUI0REIzMzRCNTU2M0E5My8wLzk3MDY2NDU1NENFNTk1RTM1OTVBRDVC MjZCNjRCNjg1MkE3MTU2REEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQLXjxwGHWPckYKsu9x7EAAOx5 AF6Z2wACqRO+RXATY72OMd1b4iHwRuQjIc1v52gGNC1oQtMkNM8OBBQJQHl6d+25 uYmZhVX9HYhQoo6FMUJEhclBZzSPbEbJ3BlPBdztHjsT9yTiLkTVh2rRTgfZsc69 I04jbUaPdbsggUBPADy6nTBCquOWHMAFZYYzDVbTnUIf9VsRXmPrTgTSUd+t6xFK 9yWUX+ZrjPO66sSu6cifU+wCMgHIRie+kbyJXuN75ec1DfPoR5F1j1+Gawlp7JY2 eSSWpZiQUxezQ+ynsWXaFukY0tk2QJXKz3eMaN4RIadJjwaiyiO+879yh6HE -----END CERTIFICATE-----Generated at Wed Nov 5 22:49:22 2025 by rpki-client