$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft File: 973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft (raw, json) Hash identifier: 26doMdkSNGhjHs6HPjrEgOYYpU1Yrgji08zjgEmB9vE= Subject key identifier: B9:DF:19:F0:F1:02:1E:6A:5C:A2:FA:4C:71:14:5C:36:68:F9:4D:42 Authority key identifier: 97:3F:CC:E5:E0:F1:73:8C:FE:CC:15:92:89:BB:26:9F:8C:0B:1F:E2 Certificate issuer: /CN=973FCCE5E0F1738CFECC159289BB269F8C0B1FE2 Certificate serial: 1BE6482099310A8AA779D359050111F27886C565 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft Manifest number: 0136 Signing time: Mon 03 Nov 2025 20:45:52 +0000 Manifest this update: Mon 03 Nov 2025 20:40:52 +0000 Manifest next update: Sun 09 Nov 2025 05:57:52 +0000 Files and hashes: 1: 973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl (hash: wnG6DTf1K46CoTBTqPofrvsPvUqb92STAIRn7wr7TG0=) 2: 34352e3136322e38342e302f32342d3234203d3e20323637363832.roa (hash: iowUSCP6nkypTOfxS6/NXCn4qSq2Lozb7RA2QE+TmLI=) 3: 34352e3136322e38322e302f32332d3233203d3e20323637363832.roa (hash: gbLWvXqd/T2upCJcLwG0ybZEXPghql8tAA+ygok/I9U=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e6:48:20:99:31:0a:8a:a7:79:d3:59:05:01:11:f2:78:86:c5:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=973FCCE5E0F1738CFECC159289BB269F8C0B1FE2 Validity Not Before: Nov 3 20:40:52 2025 GMT Not After : Nov 9 05:57:52 2025 GMT Subject: CN=B9DF19F0F1021E6A5CA2FA4C71145C3668F94D42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:66:1e:7e:f6:1d:cd:33:5e:be:b2:5f:aa:48: 88:8f:b4:02:c6:c6:7d:31:55:14:d8:79:15:24:23: ae:65:7d:e9:ba:c3:1f:6d:5f:ea:ca:ea:57:5e:0f: 02:fa:43:ad:4e:ce:28:fa:ce:3a:68:34:5f:49:fa: 41:03:e1:56:fc:47:b5:0e:bd:84:ad:2a:e6:20:06: 75:32:6f:3d:38:04:f8:e6:02:1c:08:77:11:1b:f8: 68:ec:70:33:3a:94:e5:31:c8:8d:f7:36:08:0b:f6: 51:56:fa:b1:7b:f6:d0:d4:17:63:5f:8c:85:ed:58: 54:90:9f:19:2a:9c:19:0b:fb:d5:c6:f2:d3:85:cf: 16:7b:03:0d:af:9b:a8:40:8e:ba:8d:c9:b8:b2:72: 54:78:73:52:a8:63:6f:a0:35:5d:4f:8b:83:57:2a: f1:31:f7:b3:d9:99:b1:00:0a:1b:fc:e2:95:db:94: 11:a3:61:84:3c:8f:64:e3:65:c6:3d:a0:b5:12:6b: 99:25:89:9e:85:f7:1a:34:d2:63:35:54:d5:42:93: a6:28:2c:c4:ab:f6:5a:af:b6:f9:ef:e6:04:1d:5b: e7:79:61:22:74:19:59:04:79:61:da:3d:f0:0b:b8: 29:33:1d:f1:11:7e:43:26:85:1f:e5:53:d5:1b:4a: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DF:19:F0:F1:02:1E:6A:5C:A2:FA:4C:71:14:5C:36:68:F9:4D:42 X509v3 Authority Key Identifier: keyid:97:3F:CC:E5:E0:F1:73:8C:FE:CC:15:92:89:BB:26:9F:8C:0B:1F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:0e:94:91:1c:0b:df:bc:3c:1c:96:66:cf:5e:ff:89:00:85: 6a:67:81:fe:07:9f:7b:62:79:60:f6:71:7a:31:0d:85:93:b1: 7c:b8:e5:d3:a4:5b:d4:1a:67:07:60:99:bd:56:6b:91:b0:f0: 32:f0:ed:cb:fa:78:64:92:83:45:5b:55:64:67:25:32:99:f5: f8:70:4c:25:16:05:b2:f5:24:14:48:b4:a1:c0:be:58:8b:a5: 81:92:0a:e0:19:31:49:91:a3:b9:e2:55:d5:4e:a2:73:9b:b9: dc:f8:45:a9:71:67:29:4a:7b:0d:7d:94:12:59:ba:54:d3:a5: c4:f2:46:83:f6:fc:77:48:99:e7:ae:62:93:71:10:82:69:5a: ac:52:29:b6:68:37:c7:83:1b:51:66:97:e2:06:1d:3e:18:4d: db:f5:1e:6b:3f:60:03:cc:43:f8:82:78:3e:7a:7b:c6:1d:bd: 54:49:7c:ee:00:27:0e:9e:8b:31:68:5d:56:31:92:00:6f:62: 7a:06:5c:91:78:e2:18:7a:22:b0:69:00:df:87:b3:ba:fb:1d: b2:26:4e:80:bf:a8:77:a0:de:6e:5b:e9:47:03:6e:b7:30:95: bc:27:00:5f:f4:a1:43:21:90:2e:67:24:e4:c0:c9:46:15:e7: a1:ba:51:7b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUG+ZIIJkxCoqnedNZBQER8niGxWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTczRkNDRTVFMEYxNzM4Q0ZFQ0MxNTkyODlCQjI2OUY4 QzBCMUZFMjAeFw0yNTExMDMyMDQwNTJaFw0yNTExMDkwNTU3NTJaMDMxMTAvBgNV BAMTKEI5REYxOUYwRjEwMjFFNkE1Q0EyRkE0QzcxMTQ1QzM2NjhGOTRENDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVZh5+9h3NM16+sl+qSIiPtALG xn0xVRTYeRUkI65lfem6wx9tX+rK6ldeDwL6Q61Ozij6zjpoNF9J+kED4Vb8R7UO vYStKuYgBnUybz04BPjmAhwIdxEb+GjscDM6lOUxyI33NggL9lFW+rF79tDUF2Nf jIXtWFSQnxkqnBkL+9XG8tOFzxZ7Aw2vm6hAjrqNybiyclR4c1KoY2+gNV1Pi4NX KvEx97PZmbEAChv84pXblBGjYYQ8j2TjZcY9oLUSa5kliZ6F9xo00mM1VNVCk6Yo LMSr9lqvtvnv5gQdW+d5YSJ0GVkEeWHaPfALuCkzHfERfkMmhR/lU9UbSvi3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUud8Z8PECHmpcovpMcRRcNmj5TUIwHwYDVR0j BBgwFoAUlz/M5eDxc4z+zBWSibsmn4wLH+IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GQkY5MUIxNzIwRDkxMjAyRUNGNEM0NDg1MjUzM0NCRjBC NzU0MEM1REQzQTFFRERBNjJGNkFEMjNBMzI1RkYwLzAvOTczRkNDRTVFMEYxNzM4 Q0ZFQ0MxNTkyODlCQjI2OUY4QzBCMUZFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzNGQ0NFNUUwRjE3MzhDRkVD QzE1OTI4OUJCMjY5RjhDMEIxRkUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkJGOTFCMTcyMEQ5MTIwMkVDRjRDNDQ4NTI1MzNDQkYwQjc1NDBDNURE M0ExRUREQTYyRjZBRDIzQTMyNUZGMC8wLzk3M0ZDQ0U1RTBGMTczOENGRUNDMTU5 Mjg5QkIyNjlGOEMwQjFGRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzDpSRHAvfvDwclmbPXv+JAIVq Z4H+B597Ynlg9nF6MQ2Fk7F8uOXTpFvUGmcHYJm9VmuRsPAy8O3L+nhkkoNFW1Vk ZyUymfX4cEwlFgWy9SQUSLShwL5Yi6WBkgrgGTFJkaO54lXVTqJzm7nc+EWpcWcp SnsNfZQSWbpU06XE8kaD9vx3SJnnrmKTcRCCaVqsUim2aDfHgxtRZpfiBh0+GE3b 9R5rP2ADzEP4gng+envGHb1USXzuACcOnosxaF1WMZIAb2J6BlyReOIYeiKwaQDf h7O6+x2yJk6Av6h3oN5uW+lHA263MJW8JwBf9KFDIZAuZyTkwMlGFeehulF7 -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:19 2025 by rpki-client