$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.mft File: 09A3AC3476BC01A1345B72745540D0D3983BC32E.mft (raw, json) Hash identifier: Qc1nLI/R+5MaDpBnWc3lQu5MeNfWSYwSzqh5ee1IiUs= Subject key identifier: 7D:5A:51:97:2C:48:7E:0C:C7:34:B7:B4:B6:93:53:F2:09:D7:1A:79 Authority key identifier: 09:A3:AC:34:76:BC:01:A1:34:5B:72:74:55:40:D0:D3:98:3B:C3:2E Certificate issuer: /CN=09A3AC3476BC01A1345B72745540D0D3983BC32E Certificate serial: 3D618F43A8DA3680A46B162E97C7216BB629060B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.mft Manifest number: 01AE Signing time: Mon 20 Jul 2026 14:08:16 +0000 Manifest this update: Mon 20 Jul 2026 14:03:16 +0000 Manifest next update: Fri 24 Jul 2026 20:20:16 +0000 Files and hashes: 1: 323830333a363336303a3a2f33322d3332203d3e20323639373933.roa (hash: RKW1jdePeL77LaRbw5PiNzci/XTpYi8P1n+kLUgW3g4=) 2: 34352e3138342e38342e302f32322d3234203d3e20323639373933.roa (hash: WltNzdbwWnU+/09A0GD0cen60XzA1efpU9qTwoCoNoo=) 3: 09A3AC3476BC01A1345B72745540D0D3983BC32E.crl (hash: 1FqWQjrketf1FDj5xgmTNr5zAnVbhwbpYQpmsNq5RQA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.crl rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 20:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:61:8f:43:a8:da:36:80:a4:6b:16:2e:97:c7:21:6b:b6:29:06:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A3AC3476BC01A1345B72745540D0D3983BC32E Validity Not Before: Jul 20 14:03:16 2026 GMT Not After : Jul 24 20:20:16 2026 GMT Subject: CN=7D5A51972C487E0CC734B7B4B69353F209D71A79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:82:0c:5c:98:11:59:2f:34:90:34:e9:55: e3:71:02:3c:4c:e1:41:ab:8f:e4:74:2b:8f:19:f2: 95:1e:c3:8d:e7:6f:16:ee:b3:76:58:94:50:2e:20: e0:9e:e9:33:b4:d5:92:9c:2f:a9:a9:35:65:a6:ad: b5:41:7e:b2:56:d2:b4:eb:b1:74:d3:b0:82:aa:a9: 10:ea:e3:d7:fd:d0:c5:96:3c:78:36:a8:63:ad:2c: ce:60:23:2c:85:b5:71:6b:73:50:a8:72:88:04:54: 2a:ea:31:02:cc:85:fb:a2:b6:19:a6:db:16:41:4f: 5a:b3:35:e3:25:be:d7:fb:c2:4f:27:10:23:d0:e6: 71:3e:b0:bf:b0:93:20:35:d6:31:49:3d:41:73:21: 2f:f1:2b:f4:c4:8d:66:ae:31:d7:24:2d:4e:df:eb: e6:80:66:0a:70:ac:9b:b4:18:a3:ae:c8:48:0b:46: 1a:c2:02:74:74:66:e9:2d:69:9d:f8:c3:46:92:43: b5:85:13:5e:33:36:64:da:c0:99:0e:28:51:64:52: bb:45:57:85:86:93:9b:b7:f8:7d:05:cd:30:3c:37: d1:d7:a9:90:f6:ae:9d:16:b3:c9:1b:20:66:d2:1b: 21:88:78:12:64:16:08:74:c8:a9:27:ab:63:e8:7f: 0c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5A:51:97:2C:48:7E:0C:C7:34:B7:B4:B6:93:53:F2:09:D7:1A:79 X509v3 Authority Key Identifier: keyid:09:A3:AC:34:76:BC:01:A1:34:5B:72:74:55:40:D0:D3:98:3B:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:17:26:fa:2f:a9:49:2e:cd:cd:41:50:f1:49:b7:f6:08:a8: 15:bf:d4:28:f3:00:ad:9d:28:58:71:82:44:6e:45:56:b9:9d: 34:69:a2:b2:44:0b:e8:da:10:86:4f:d0:f6:95:e1:2a:7f:d0: ef:68:c0:2c:12:5f:c3:b3:f3:22:7f:96:f9:a9:eb:69:9f:17: 1b:d6:00:cc:a8:43:50:59:bd:0c:bb:aa:4f:b1:1f:f5:ad:43: 22:80:99:d3:64:39:e4:0c:70:68:b9:c3:21:33:1a:cd:48:6a: 3d:b7:74:09:03:f5:45:74:c4:9e:89:b7:8f:3a:b2:7c:e4:df: 15:4f:05:b6:3e:b2:23:54:ba:eb:54:46:06:6b:98:18:6d:86: 0c:63:5d:eb:b4:7f:b4:ae:42:51:78:94:c0:32:e3:60:68:b6: 75:e3:cf:71:d9:0f:1d:49:d3:59:79:88:50:fa:bd:e7:4c:86: 29:d5:80:7c:47:3a:87:2e:09:47:24:ec:ed:75:e5:72:db:6a: 4d:5e:bb:21:4f:b9:1e:a9:34:41:c5:c4:d0:f3:9f:ad:4d:5b: 29:24:fe:fe:14:10:b6:cd:77:99:0e:45:a0:b5:0c:f9:e1:b7: 3c:4a:40:6f:a4:7d:c0:43:4b:87:0f:19:f3:56:ff:7d:05:9c: b9:bd:cb:1e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPWGPQ6jaNoCkaxYul8cha7YpBgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBM0FDMzQ3NkJDMDFBMTM0NUI3Mjc0NTU0MEQwRDM5 ODNCQzMyRTAeFw0yNjA3MjAxNDAzMTZaFw0yNjA3MjQyMDIwMTZaMDMxMTAvBgNV BAMTKDdENUE1MTk3MkM0ODdFMENDNzM0QjdCNEI2OTM1M0YyMDlENzFBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp2oIMXJgRWS80kDTpVeNxAjxM 4UGrj+R0K48Z8pUew43nbxbus3ZYlFAuIOCe6TO01ZKcL6mpNWWmrbVBfrJW0rTr sXTTsIKqqRDq49f90MWWPHg2qGOtLM5gIyyFtXFrc1CocogEVCrqMQLMhfuithmm 2xZBT1qzNeMlvtf7wk8nECPQ5nE+sL+wkyA11jFJPUFzIS/xK/TEjWauMdckLU7f 6+aAZgpwrJu0GKOuyEgLRhrCAnR0ZuktaZ34w0aSQ7WFE14zNmTawJkOKFFkUrtF V4WGk5u3+H0FzTA8N9HXqZD2rp0Ws8kbIGbSGyGIeBJkFgh0yKknq2Pofwy5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUfVpRlyxIfgzHNLe0tpNT8gnXGnkwHwYDVR0j BBgwFoAUCaOsNHa8AaE0W3J0VUDQ05g7wy4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMTQ5RDI2QjQyQzlDQ0E4NTg3QTA0Mzc1Nzg3MzExMjI5 OTQ0RDA0NzJBQkY3NTg3QzMyOURDOEU2QjI1Rjg2LzAvMDlBM0FDMzQ3NkJDMDFB MTM0NUI3Mjc0NTU0MEQwRDM5ODNCQzMyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOUEzQUMzNDc2QkMwMUExMzQ1 QjcyNzQ1NTQwRDBEMzk4M0JDMzJFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzE0OUQyNkI0MkM5Q0NBODU4N0EwNDM3NTc4NzMxMTIyOTk0NEQwNDcy QUJGNzU4N0MzMjlEQzhFNkIyNUY4Ni8wLzA5QTNBQzM0NzZCQzAxQTEzNDVCNzI3 NDU1NDBEMEQzOTgzQkMzMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCpFyb6L6lJLs3NQVDxSbf2CKgV v9Qo8wCtnShYcYJEbkVWuZ00aaKyRAvo2hCGT9D2leEqf9DvaMAsEl/Ds/Mif5b5 qetpnxcb1gDMqENQWb0Mu6pPsR/1rUMigJnTZDnkDHBoucMhMxrNSGo9t3QJA/VF dMSeibePOrJ85N8VTwW2PrIjVLrrVEYGa5gYbYYMY13rtH+0rkJReJTAMuNgaLZ1 489x2Q8dSdNZeYhQ+r3nTIYp1YB8RzqHLglHJOztdeVy22pNXrshT7keqTRBxcTQ 85+tTVspJP7+FBC2zXeZDkWgtQz54bc8SkBvpH3AQ0uHDxnzVv99BZy5vcse -----END CERTIFICATE-----Generated at Tue Jul 21 11:40:06 2026 by rpki-client