$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft File: 9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft (raw, json) Hash identifier: NeLDOPXEg1pr8h7MVMYhZ4fwT2g8Z3rVefyP5J98N/M= Subject key identifier: F5:3C:D0:F6:9D:57:95:15:50:54:46:16:55:27:55:52:FE:24:C5:2B Authority key identifier: 9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2 Certificate issuer: /CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2 Certificate serial: 68835AFA26D81DC2DC4DFD3864C44581E89FB315 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft Manifest number: 01AF Signing time: Mon 20 Jul 2026 19:07:04 +0000 Manifest this update: Mon 20 Jul 2026 19:02:04 +0000 Manifest next update: Sun 26 Jul 2026 18:06:04 +0000 Files and hashes: 1: 323830333a613065303a3a2f33322d3332203d3e20323639393131.roa (hash: qUDW8Kiz2f2nSd7SPMQL8zCwDwGlLvBgSP8RYPL5cw0=) 2: 9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl (hash: BXwP2eX1o6OdSGiRnDdeaozXHT08FmFBPQFSRlS4v+8=) 3: 34352e3138372e3230382e302f32332d3234203d3e20323639393131.roa (hash: jKeaeH8uS3qHOWlkAIz/HPsSCsrPE3g7860zPIX5ink=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 05:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:83:5a:fa:26:d8:1d:c2:dc:4d:fd:38:64:c4:45:81:e8:9f:b3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2 Validity Not Before: Jul 20 19:02:04 2026 GMT Not After : Jul 26 18:06:04 2026 GMT Subject: CN=F53CD0F69D5795155054461655275552FE24C52B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:93:7f:d4:99:7f:f7:69:f5:b0:bc:ed:5d: bb:22:fa:61:9d:a8:51:08:ee:02:bd:a5:2c:dd:ff: 47:2c:72:63:d5:17:bb:d7:7b:42:d2:cc:b4:8a:cd: bb:45:3a:f5:bf:1d:c8:3f:1a:d9:b5:fc:6b:f3:e6: 9e:83:b8:cb:27:ca:0d:59:c6:2d:e0:d2:29:be:67: 19:0a:4a:8b:76:c8:86:3d:1a:f2:e1:2b:0c:f3:61: 65:d8:5d:98:4a:16:5b:40:b3:e2:15:f3:19:65:b5: 00:2a:86:6b:af:fe:e4:8a:45:16:6a:dc:ea:c0:7c: 34:93:c1:75:ed:9a:81:20:d0:1a:c2:98:7c:85:c6: ec:dc:70:6e:e7:e0:ef:e3:66:77:e9:1d:96:77:ea: b1:ef:67:56:0b:04:0c:f3:06:7a:b4:96:07:6c:3f: 7b:df:78:58:c2:33:53:9c:91:9b:09:14:50:f7:60: 21:88:67:8a:56:73:b6:4a:6f:ad:10:2f:de:e7:e5: 0b:95:53:d3:1b:3d:ed:a3:35:ce:49:7d:e2:31:dd: e1:f3:9e:af:7b:25:2c:21:36:14:3b:ed:3d:3b:a2: de:e3:c8:d9:15:85:b9:15:38:fe:f9:0f:68:68:d8: fc:0f:6f:d2:94:94:64:43:0a:b0:78:10:b2:0c:62: ed:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3C:D0:F6:9D:57:95:15:50:54:46:16:55:27:55:52:FE:24:C5:2B X509v3 Authority Key Identifier: keyid:9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7e:7b:53:10:d6:11:cd:94:55:db:68:48:c8:2e:73:ad:95: 51:21:24:68:32:b9:34:31:91:4e:cb:f1:78:ac:03:4b:d0:bd: 33:22:c0:23:5e:6a:65:72:f8:d8:07:77:e6:c8:54:fe:fe:dd: 59:eb:0d:1f:e2:5b:22:d4:8f:92:21:8d:44:4a:a1:13:36:15: 3f:c7:30:43:22:bc:6d:48:37:17:bc:d3:8d:5a:f7:1f:e6:25: f5:f2:19:09:eb:ca:62:b0:0a:6f:7f:7e:b5:e2:13:93:18:21: da:fa:8a:18:61:5e:39:10:37:85:ce:41:12:d4:36:70:12:79: 46:18:e7:10:6b:fe:5a:e8:7e:bf:f8:0e:8e:e8:16:f4:24:bc: fd:26:cc:8a:10:2c:27:26:a5:b0:ef:f2:d9:f5:b4:ac:16:40: 5f:97:d0:34:3f:f2:0f:09:6c:22:f4:98:47:1d:cf:ef:a7:5f: 1f:f6:22:f7:35:eb:4c:2e:f1:5b:fd:cc:5c:60:e9:b2:98:0c: 66:ef:aa:3d:db:05:3e:22:ee:c9:3b:81:64:38:60:d3:64:92: bc:a5:4c:ec:b2:56:56:e6:ab:37:4f:35:ae:ea:64:ee:8a:dd: ec:99:d2:94:20:ed:b8:c0:6c:91:52:0f:b9:19:c7:5c:e9:bc: a2:2d:9f:9a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaINa+ibYHcLcTf04ZMRFgeifsxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMzMTk4RTY1Qzc4M0FGOTlENkE3NDNEOTkzRTBDMzc3 MEI3NkVFMjAeFw0yNjA3MjAxOTAyMDRaFw0yNjA3MjYxODA2MDRaMDMxMTAvBgNV BAMTKEY1M0NEMEY2OUQ1Nzk1MTU1MDU0NDYxNjU1Mjc1NTUyRkUyNEM1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PpN/1Jl/92n1sLztXbsi+mGd qFEI7gK9pSzd/0cscmPVF7vXe0LSzLSKzbtFOvW/Hcg/Gtm1/Gvz5p6DuMsnyg1Z xi3g0im+ZxkKSot2yIY9GvLhKwzzYWXYXZhKFltAs+IV8xlltQAqhmuv/uSKRRZq 3OrAfDSTwXXtmoEg0BrCmHyFxuzccG7n4O/jZnfpHZZ36rHvZ1YLBAzzBnq0lgds P3vfeFjCM1OckZsJFFD3YCGIZ4pWc7ZKb60QL97n5QuVU9MbPe2jNc5JfeIx3eHz nq97JSwhNhQ77T07ot7jyNkVhbkVOP75D2ho2PwPb9KUlGRDCrB4ELIMYu0tAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU9TzQ9p1XlRVQVEYWVSdVUv4kxSswHwYDVR0j BBgwFoAUnDGY5lx4OvmdanQ9mT4MN3C3buIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMzNFRjUwQTc5QjA5MzhFNTVCQTMyRDEyREUyM0I5MUEx RDJDNzJGMjI3RjQyNDgzNDZGRDAyNzg1QzI0QTg3LzAvOUMzMTk4RTY1Qzc4M0FG OTlENkE3NDNEOTkzRTBDMzc3MEI3NkVFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzMxOThFNjVDNzgzQUY5OUQ2 QTc0M0Q5OTNFMEMzNzcwQjc2RUUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTMzRUY1MEE3OUIwOTM4RTU1QkEzMkQxMkRFMjNCOTFBMUQyQzcyRjIy N0Y0MjQ4MzQ2RkQwMjc4NUMyNEE4Ny8wLzlDMzE5OEU2NUM3ODNBRjk5RDZBNzQz RDk5M0UwQzM3NzBCNzZFRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgfntTENYRzZRV22hIyC5zrZVR ISRoMrk0MZFOy/F4rANL0L0zIsAjXmplcvjYB3fmyFT+/t1Z6w0f4lsi1I+SIY1E SqETNhU/xzBDIrxtSDcXvNONWvcf5iX18hkJ68pisApvf3614hOTGCHa+ooYYV45 EDeFzkES1DZwEnlGGOcQa/5a6H6/+A6O6Bb0JLz9JsyKECwnJqWw7/LZ9bSsFkBf l9A0P/IPCWwi9JhHHc/vp18f9iL3NetMLvFb/cxcYOmymAxm76o92wU+Iu7JO4Fk OGDTZJK8pUzsslZW5qs3TzWu6mTuit3smdKUIO24wGyRUg+5Gcdc6byiLZ+a -----END CERTIFICATE-----Generated at Tue Jul 21 11:46:15 2026 by rpki-client