$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft File: C45AC49B8C7461E59C144E0149C60D4F74132A43.mft (raw, json) Hash identifier: A/XOCxmwN8lofcIzU97ZHPX7IuZ6BjBAP00nVlmoEdU= Subject key identifier: 2D:4B:A7:A4:93:3A:EA:86:C4:03:25:85:B7:41:E0:8E:AB:38:87:57 Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 Certificate issuer: /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Certificate serial: 1BB14266C14506967E4C2B155A0CD6D0D1625F32 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft Manifest number: 01B1 Signing time: Tue 21 Jul 2026 07:49:10 +0000 Manifest this update: Tue 21 Jul 2026 07:44:10 +0000 Manifest next update: Mon 27 Jul 2026 04:12:10 +0000 Files and hashes: 1: 34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (hash: yrzi1+6pUPJ6kEHIpBAe5fVIo9d+69k4eA0w4Y89w+g=) 2: 34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (hash: dRJ33+gKiKZmNdXeRb7oL9407j9vfhOhrK2P6h1r3nw=) 3: 34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (hash: sjWn70DdajB4rqAs/d1F09Drg85QUfidA+4DiR+JDQA=) 4: C45AC49B8C7461E59C144E0149C60D4F74132A43.crl (hash: nZklPLO+QATgEF6fIYKV3a2o33TE2UfOx69cYkKX5Mk=) 5: 34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (hash: TjtoFYLVjDKHOnXgxpoAj5688l9ZqOR2EwmGuN23pr0=) 6: 323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (hash: KRfo//PdoVFl5SUYyXj0ZombNTYcU44cVOrxC9w4EWk=) 7: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (hash: N2kX7I48vqw1gi8HLUIVxzC7KoIgulldHf5/K/TTwHQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 05:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b1:42:66:c1:45:06:96:7e:4c:2b:15:5a:0c:d6:d0:d1:62:5f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Validity Not Before: Jul 21 07:44:10 2026 GMT Not After : Jul 27 04:12:10 2026 GMT Subject: CN=2D4BA7A4933AEA86C4032585B741E08EAB388757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6d:48:39:1d:ba:a2:e2:e0:ee:60:a4:eb:96: 54:78:08:92:d6:1a:84:0d:77:87:95:91:06:9c:b3: 58:07:c4:fb:e6:66:e3:39:23:03:e3:25:9a:9a:51: 91:cd:9a:69:c4:81:65:20:30:72:33:33:3e:d5:5e: 9f:2f:8a:d5:19:93:ec:ef:88:7c:21:25:7a:b0:e6: 05:63:22:fe:75:34:2d:70:87:a3:84:c0:12:f4:b2: 50:f2:14:cf:2b:98:ec:b7:ce:b4:1e:15:39:a5:20: 8f:0d:71:13:ea:48:62:ba:10:72:e3:22:44:a1:d3: 8e:43:08:f8:8a:45:62:78:d5:fd:19:ac:9a:a9:6f: ff:9e:d3:54:8b:a2:19:e6:fa:1e:95:b0:9b:5d:69: 6a:5e:77:91:d7:26:af:b2:26:25:4b:83:59:06:ea: f1:28:07:cf:ed:28:03:d4:d4:d4:6a:51:23:c9:9e: e5:bd:aa:ef:b7:95:7a:73:04:54:eb:26:82:f6:47: f4:76:04:3e:01:3f:a4:b0:38:59:dd:f4:16:66:14: d0:ac:05:69:b6:95:1f:9c:3c:ff:1b:17:88:9e:a6: 69:39:36:e7:e6:4c:cc:9e:1b:05:31:6e:2d:c1:92: 26:d5:2b:49:fd:2e:28:fe:85:86:71:95:c7:01:f2: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4B:A7:A4:93:3A:EA:86:C4:03:25:85:B7:41:E0:8E:AB:38:87:57 X509v3 Authority Key Identifier: keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:78:4b:30:c3:a6:08:1a:4b:61:2b:fb:9a:15:3c:cd:66:e5: 94:9b:01:96:1f:a6:66:aa:c3:bd:27:47:74:65:6f:bd:d5:97: 5a:ec:07:f6:2c:5f:d2:23:1d:a7:cc:b8:32:7f:55:dc:ec:f2: 54:b1:6f:39:bc:66:86:20:05:49:6a:d9:5e:9f:42:53:3f:d2: 48:35:41:71:60:0f:40:ef:8b:a3:52:8e:fb:00:b8:31:50:fb: 3a:d9:29:b7:77:ed:18:f7:54:bd:a2:17:e8:19:27:ff:6f:98: 12:e4:3f:79:fe:48:3e:ae:39:c5:af:d8:6a:e6:7c:48:4e:fe: bb:f6:b3:0d:ca:4f:a6:7b:0a:ef:ba:34:7b:c8:22:5c:5c:28: f2:ba:26:86:65:94:7e:8f:6f:4d:7d:cd:31:d3:27:15:f2:7b: bc:bc:ba:7c:5b:7f:a4:db:04:de:84:04:c6:24:04:64:54:12: ba:8f:78:55:e2:c9:a9:2f:94:de:ac:1c:86:b9:66:fd:ca:1c: 1b:93:12:fa:f1:66:e8:39:c9:cc:38:6e:2b:f4:7c:b2:ef:db: 43:6a:d2:f3:35:82:d7:ce:c8:d1:73:66:69:0d:09:9f:4d:c5: 53:7d:30:b7:9d:a7:a8:36:8e:c3:38:da:be:48:12:9b:01:10: a9:24:98:7d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUG7FCZsFFBpZ+TCsVWgzW0NFiXzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QUM0OUI4Qzc0NjFFNTlDMTQ0RTAxNDlDNjBENEY3 NDEzMkE0MzAeFw0yNjA3MjEwNzQ0MTBaFw0yNjA3MjcwNDEyMTBaMDMxMTAvBgNV BAMTKDJENEJBN0E0OTMzQUVBODZDNDAzMjU4NUI3NDFFMDhFQUIzODg3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebUg5Hbqi4uDuYKTrllR4CJLW GoQNd4eVkQacs1gHxPvmZuM5IwPjJZqaUZHNmmnEgWUgMHIzMz7VXp8vitUZk+zv iHwhJXqw5gVjIv51NC1wh6OEwBL0slDyFM8rmOy3zrQeFTmlII8NcRPqSGK6EHLj IkSh045DCPiKRWJ41f0ZrJqpb/+e01SLohnm+h6VsJtdaWped5HXJq+yJiVLg1kG 6vEoB8/tKAPU1NRqUSPJnuW9qu+3lXpzBFTrJoL2R/R2BD4BP6SwOFnd9BZmFNCs BWm2lR+cPP8bF4iepmk5NufmTMyeGwUxbi3BkibVK0n9Lij+hYZxlccB8n+5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULUunpJM66obEAyWFt0Hgjqs4h1cwHwYDVR0j BBgwFoAUxFrEm4x0YeWcFE4BScYNT3QTKkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BOTcwREQ0MDJGQTI1RjUyQjhGODk0N0REMzg3NTQ3QTc3 OTFBNzU4QjA5MkJDMjkxMkU5OEE5RDc1MDkyQTZGLzAvQzQ1QUM0OUI4Qzc0NjFF NTlDMTQ0RTAxNDlDNjBENEY3NDEzMkE0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDVBQzQ5QjhDNzQ2MUU1OUMx NDRFMDE0OUM2MEQ0Rjc0MTMyQTQzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTk3MERENDAyRkEyNUY1MkI4Rjg5NDdERDM4NzU0N0E3NzkxQTc1OEIw OTJCQzI5MTJFOThBOUQ3NTA5MkE2Ri8wL0M0NUFDNDlCOEM3NDYxRTU5QzE0NEUw MTQ5QzYwRDRGNzQxMzJBNDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZeEsww6YIGkthK/uaFTzNZuWU mwGWH6ZmqsO9J0d0ZW+91Zda7Af2LF/SIx2nzLgyf1Xc7PJUsW85vGaGIAVJatle n0JTP9JINUFxYA9A74ujUo77ALgxUPs62Sm3d+0Y91S9ohfoGSf/b5gS5D95/kg+ rjnFr9hq5nxITv679rMNyk+mewrvujR7yCJcXCjyuiaGZZR+j29Nfc0x0ycV8nu8 vLp8W3+k2wTehATGJARkVBK6j3hV4smpL5TerByGuWb9yhwbkxL68WboOcnMOG4r 9Hyy79tDatLzNYLXzsjRc2ZpDQmfTcVTfTC3naeoNo7DONq+SBKbARCpJJh9 -----END CERTIFICATE-----Generated at Tue Jul 21 11:39:32 2026 by rpki-client