$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft File: 2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft (raw, json) Hash identifier: smiMLyVVAt4wlu6sPgFul0R/JZXA2ivXjAZoJuu+C+Q= Subject key identifier: AD:45:7C:22:D0:D8:7E:4F:D8:CF:49:36:0D:A7:B7:8A:4B:27:21:9F Authority key identifier: 2F:DA:A3:AC:C9:CA:4B:FC:92:19:FB:65:CB:46:4C:9B:9C:4B:94:D0 Certificate issuer: /CN=2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0 Certificate serial: 359560093CB90FB9CC461268D7B054C8F43D40B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft Manifest number: 01B1 Signing time: Sun 19 Jul 2026 16:52:43 +0000 Manifest this update: Sun 19 Jul 2026 16:47:43 +0000 Manifest next update: Sat 25 Jul 2026 06:56:43 +0000 Files and hashes: 1: 34352e3137352e36342e302f32322d3234203d3e20323633363836.roa (hash: D14k22R4aQjRsSBD1P89BmmJPeUUtVig8x/bmP49AUI=) 2: 2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.crl (hash: s4O9NCss1o5gWdBZXV9IdBIViou14Fq9jfbVCUKHR7Y=) 3: 323830333a626336303a3a2f33322d3438203d3e20323634373733.roa (hash: W7xCsAWIrF43r4WjoPksIt2ftE68zhQGLWJLaB73Dhw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.crl rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 05:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:95:60:09:3c:b9:0f:b9:cc:46:12:68:d7:b0:54:c8:f4:3d:40:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0 Validity Not Before: Jul 19 16:47:43 2026 GMT Not After : Jul 25 06:56:43 2026 GMT Subject: CN=AD457C22D0D87E4FD8CF49360DA7B78A4B27219F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:b9:b3:7e:31:24:3e:39:05:07:61:e9:ef: b2:d0:e6:de:2a:a6:dc:11:93:19:f3:d4:e0:44:13: e7:48:a7:2c:bd:b8:7c:e8:ea:c3:93:b1:3c:51:16: ee:5a:a9:2a:84:f1:8b:ba:a3:62:0b:e4:3c:8c:9a: 6e:78:ff:6b:78:c0:c2:2b:6c:3a:d1:b3:fa:8f:a5: 81:13:3f:00:3c:bc:fc:7b:16:ae:d5:4b:ae:19:7d: 03:ea:e1:0e:0c:92:05:18:27:01:fa:7a:e3:ff:05: 2e:d8:60:d1:14:2d:ea:85:17:a7:44:f7:c2:1e:8a: 06:19:79:6c:2d:19:fa:77:3f:70:dd:43:76:34:73: 42:b8:e4:e4:5b:45:54:9b:41:44:70:7c:8f:24:fc: 4c:7f:cd:68:ef:4b:fb:cc:b5:3c:a9:35:24:29:97: e2:53:8d:50:fe:e1:97:e9:a0:b2:d1:3b:52:83:e4: 36:14:85:69:4d:65:41:09:54:25:05:d5:a3:9e:a5: cc:ef:8e:ff:db:e5:85:08:49:e2:13:28:07:14:91: 6f:3d:ef:84:d4:f2:13:c6:c4:42:af:4e:0f:18:5f: bc:a3:26:5b:e4:b6:84:08:e3:07:3a:22:7f:0a:c1: 4e:27:d8:d3:ca:32:80:6d:3d:b7:52:40:3d:07:f2: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:45:7C:22:D0:D8:7E:4F:D8:CF:49:36:0D:A7:B7:8A:4B:27:21:9F X509v3 Authority Key Identifier: keyid:2F:DA:A3:AC:C9:CA:4B:FC:92:19:FB:65:CB:46:4C:9B:9C:4B:94:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:5b:05:ea:09:55:ae:46:50:31:35:0b:52:27:43:ed:83:60: 53:92:c3:90:ea:7f:4b:b3:b9:df:cf:cd:5a:57:fc:e0:22:6c: dd:b6:6b:51:1d:f4:46:04:59:f8:8d:69:ff:8a:ba:31:43:0e: 82:9c:17:0e:18:26:9d:b4:b0:e0:dc:93:e1:78:db:e2:62:ce: 91:26:07:35:14:57:87:be:09:58:13:54:81:99:ca:af:ea:bb: da:f9:30:e4:de:bc:3a:42:94:6e:af:d6:3a:7f:da:79:56:d9: 5e:7e:38:d5:65:23:48:5d:40:9a:82:b8:fc:8e:75:7a:b9:48: 1d:98:18:02:97:96:ef:9c:42:20:25:9e:22:f8:b0:37:d8:79: 0a:cb:38:aa:dc:5c:b3:63:d5:4e:01:3a:76:52:5f:b2:38:48: e0:19:8c:66:5b:f0:67:27:7e:95:96:77:fa:ba:f1:82:49:c1: 25:1b:39:56:e6:a2:2a:7a:e9:3d:a8:8d:73:bf:df:31:15:15: ab:d8:72:82:34:71:eb:60:8a:0d:d5:8f:97:fb:6e:6e:10:a3: 5d:ff:5e:e1:dc:ad:37:3b:dc:a2:fd:8b:36:18:b2:ee:c8:d7: ad:65:3e:70:b1:26:c6:30:bf:d2:15:38:c8:be:81:2c:24:22: fe:04:27:ef -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNZVgCTy5D7nMRhJo17BUyPQ9QLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZEQUEzQUNDOUNBNEJGQzkyMTlGQjY1Q0I0NjRDOUI5 QzRCOTREMDAeFw0yNjA3MTkxNjQ3NDNaFw0yNjA3MjUwNjU2NDNaMDMxMTAvBgNV BAMTKEFENDU3QzIyRDBEODdFNEZEOENGNDkzNjBEQTdCNzhBNEIyNzIxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQ7mzfjEkPjkFB2Hp77LQ5t4q ptwRkxnz1OBEE+dIpyy9uHzo6sOTsTxRFu5aqSqE8Yu6o2IL5DyMmm54/2t4wMIr bDrRs/qPpYETPwA8vPx7Fq7VS64ZfQPq4Q4MkgUYJwH6euP/BS7YYNEULeqFF6dE 98IeigYZeWwtGfp3P3DdQ3Y0c0K45ORbRVSbQURwfI8k/Ex/zWjvS/vMtTypNSQp l+JTjVD+4ZfpoLLRO1KD5DYUhWlNZUEJVCUF1aOepczvjv/b5YUISeITKAcUkW89 74TU8hPGxEKvTg8YX7yjJlvktoQI4wc6In8KwU4n2NPKMoBtPbdSQD0H8s8fAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrUV8ItDYfk/Yz0k2Dae3iksnIZ8wHwYDVR0j BBgwFoAUL9qjrMnKS/ySGftly0ZMm5xLlNAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xNzAwREMyQkNDMTJGM0QyOEQ5NDExNEZGRjFDODA3Qjc1 NzcxNEVBQUIyQ0M3RjAxMEVEMEFCNzIwNUMxNEVGLzAvMkZEQUEzQUNDOUNBNEJG QzkyMTlGQjY1Q0I0NjRDOUI5QzRCOTREMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkRBQTNBQ0M5Q0E0QkZDOTIx OUZCNjVDQjQ2NEM5QjlDNEI5NEQwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTcwMERDMkJDQzEyRjNEMjhEOTQxMTRGRkYxQzgwN0I3NTc3MTRFQUFC MkNDN0YwMTBFRDBBQjcyMDVDMTRFRi8wLzJGREFBM0FDQzlDQTRCRkM5MjE5RkI2 NUNCNDY0QzlCOUM0Qjk0RDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATWwXqCVWuRlAxNQtSJ0Ptg2BT ksOQ6n9Ls7nfz81aV/zgImzdtmtRHfRGBFn4jWn/iroxQw6CnBcOGCadtLDg3JPh eNviYs6RJgc1FFeHvglYE1SBmcqv6rva+TDk3rw6QpRur9Y6f9p5VtlefjjVZSNI XUCagrj8jnV6uUgdmBgCl5bvnEIgJZ4i+LA32HkKyziq3FyzY9VOATp2Ul+yOEjg GYxmW/BnJ36Vlnf6uvGCScElGzlW5qIqeuk9qI1zv98xFRWr2HKCNHHrYIoN1Y+X +25uEKNd/17h3K03O9yi/Ys2GLLuyNetZT5wsSbGML/SFTjIvoEsJCL+BCfv -----END CERTIFICATE-----Generated at Tue Jul 21 11:37:38 2026 by rpki-client