$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.mft File: D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.mft (raw, json) Hash identifier: DYY8dqGKXes7e2lzxMDOcg7jjRI0XjhSv5Kp9twvqOY= Subject key identifier: 0C:05:2C:3B:DB:35:76:CF:86:A3:97:10:F4:0D:DE:DD:95:74:87:DC Authority key identifier: D6:4A:11:A9:A7:7E:52:98:D6:96:72:8C:67:96:EF:7B:7B:2D:E7:D0 Certificate issuer: /CN=D64A11A9A77E5298D696728C6796EF7B7B2DE7D0 Certificate serial: 7450A8FAB8CBEECDFB15E9D2774AE5241B20F238 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.mft Manifest number: 01AE Signing time: Mon 20 Jul 2026 00:17:23 +0000 Manifest this update: Mon 20 Jul 2026 00:12:23 +0000 Manifest next update: Sat 25 Jul 2026 11:44:23 +0000 Files and hashes: 1: 323830333a623831303a3a2f33322d3332203d3e20323731393733.roa (hash: k1pxX74MWhUNGymKq1HblqFB6CnGgormD1BicxGKtdw=) 2: 3230312e3232322e34332e302f32342d3234203d3e20323731393733.roa (hash: NPILBmJP66QV29kyCW0hdNHZTDdg4x86pMPZGfQMNNg=) 3: D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.crl (hash: 56Ie7D5GJQQCRaAkY4ux3Eq6SVwQUFqANMsKxw93ML8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.crl rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 05:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:50:a8:fa:b8:cb:ee:cd:fb:15:e9:d2:77:4a:e5:24:1b:20:f2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D64A11A9A77E5298D696728C6796EF7B7B2DE7D0 Validity Not Before: Jul 20 00:12:23 2026 GMT Not After : Jul 25 11:44:23 2026 GMT Subject: CN=0C052C3BDB3576CF86A39710F40DDEDD957487DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:66:7f:2e:41:6b:fa:fe:d9:59:f1:60:ca: 90:1d:a5:1e:b0:e9:b3:de:e1:15:79:46:6b:49:a8: 87:63:cb:16:18:41:72:02:02:da:4c:b7:04:66:99: 66:41:12:48:df:58:e0:7a:d6:1c:45:f5:38:6e:46: 28:aa:1c:11:76:e0:2d:1d:96:8c:bd:24:62:28:fb: b4:c5:bf:e3:e0:11:7e:b4:92:43:fa:e9:b4:2f:55: 09:2d:78:0c:03:ca:8e:1a:a9:b6:43:7e:a7:dd:6a: 3f:90:a4:91:e9:98:ef:29:2d:24:ac:5f:b6:d9:c0: 5e:67:36:20:aa:97:64:16:d7:77:f1:d6:86:dd:37: d0:10:b9:ec:43:14:ac:ac:0d:4c:bc:da:2a:87:96: ef:64:8c:36:69:6d:57:75:66:87:1b:9f:7b:5a:21: 0d:87:57:86:8b:26:aa:3c:5b:2c:4c:b7:a9:98:cf: 31:dc:62:78:8c:47:6f:71:88:21:b2:ac:d8:f0:8c: 54:13:a0:bb:93:b8:8b:2e:92:8a:6f:ef:0d:45:86: ec:f2:80:7f:f0:94:24:3f:9c:ad:10:3f:70:d5:dd: 7d:99:05:d3:96:ed:39:bf:49:e4:c8:fa:26:fb:4a: 14:c4:8d:a3:8f:81:4b:40:ac:bd:58:e7:b0:c5:1d: 90:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:05:2C:3B:DB:35:76:CF:86:A3:97:10:F4:0D:DE:DD:95:74:87:DC X509v3 Authority Key Identifier: keyid:D6:4A:11:A9:A7:7E:52:98:D6:96:72:8C:67:96:EF:7B:7B:2D:E7:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e3:a7:74:42:9a:33:23:5f:77:f2:37:4c:58:b2:a7:22:c8: 59:1a:d7:d2:a1:87:6b:e1:5f:14:67:53:07:46:ba:69:dd:cf: 60:7c:95:ea:10:88:8f:59:40:7e:5b:85:91:66:9a:38:09:7b: 20:6a:b1:95:a7:72:50:dd:c0:a9:00:39:f0:3c:f3:46:0a:79: ba:a0:4a:4b:55:d6:7f:63:52:ec:c3:ff:d0:dd:61:dc:63:0c: 07:14:81:40:58:e8:a3:16:3e:3c:de:6a:68:75:d1:49:f8:dd: d7:5f:9a:ff:ff:51:e3:87:8f:89:5c:13:58:49:51:2f:07:af: cc:bc:4a:73:dd:74:6f:27:45:4a:01:1d:33:1d:ab:ed:a6:4d: 2e:f1:42:aa:65:b8:73:b2:c7:d0:3f:6b:6d:4b:19:f3:f6:b4: d6:f1:e5:26:28:0f:03:c2:8b:e2:e4:37:0c:f9:98:73:ee:da: d0:78:a1:71:6d:a2:71:2a:72:56:cb:8c:50:50:e6:d0:f6:dc: 00:f3:c7:8f:0c:c7:97:5b:8e:41:1c:a6:63:21:b5:fd:b1:fe: 18:db:5d:4e:ac:a3:fe:15:c2:a3:ee:c8:98:c6:90:02:44:bf: 0c:d7:c8:f3:4c:ed:e4:5c:13:f7:bd:22:6d:df:73:39:00:e9: 69:bb:ce:38 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdFCo+rjL7s37FenSd0rlJBsg8jgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY0QTExQTlBNzdFNTI5OEQ2OTY3MjhDNjc5NkVGN0I3 QjJERTdEMDAeFw0yNjA3MjAwMDEyMjNaFw0yNjA3MjUxMTQ0MjNaMDMxMTAvBgNV BAMTKDBDMDUyQzNCREIzNTc2Q0Y4NkEzOTcxMEY0MERERUREOTU3NDg3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUGZ/LkFr+v7ZWfFgypAdpR6w 6bPe4RV5RmtJqIdjyxYYQXICAtpMtwRmmWZBEkjfWOB61hxF9ThuRiiqHBF24C0d loy9JGIo+7TFv+PgEX60kkP66bQvVQkteAwDyo4aqbZDfqfdaj+QpJHpmO8pLSSs X7bZwF5nNiCql2QW13fx1obdN9AQuexDFKysDUy82iqHlu9kjDZpbVd1Zocbn3ta IQ2HV4aLJqo8WyxMt6mYzzHcYniMR29xiCGyrNjwjFQToLuTuIsukopv7w1Fhuzy gH/wlCQ/nK0QP3DV3X2ZBdOW7Tm/SeTI+ib7ShTEjaOPgUtArL1Y57DFHZD/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDAUsO9s1ds+Go5cQ9A3e3ZV0h9wwHwYDVR0j BBgwFoAU1koRqad+UpjWlnKMZ5bve3st59AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRTQ0Njc1NTkzRkNCNTYyMDEwMDQzOUNDODY0RjE5QzQw ODYzNDNEMjFCMjBDOUVGNDI3OUM4Q0I1MDU5MDYwLzAvRDY0QTExQTlBNzdFNTI5 OEQ2OTY3MjhDNjc5NkVGN0I3QjJERTdEMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjRBMTFBOUE3N0U1Mjk4RDY5 NjcyOEM2Nzk2RUY3QjdCMkRFN0QwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0U0NDY3NTU5M0ZDQjU2MjAxMDA0MzlDQzg2NEYxOUM0MDg2MzQzRDIx QjIwQzlFRjQyNzlDOENCNTA1OTA2MC8wL0Q2NEExMUE5QTc3RTUyOThENjk2NzI4 QzY3OTZFRjdCN0IyREU3RDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCn46d0QpozI1938jdMWLKnIshZ GtfSoYdr4V8UZ1MHRrpp3c9gfJXqEIiPWUB+W4WRZpo4CXsgarGVp3JQ3cCpADnw PPNGCnm6oEpLVdZ/Y1Lsw//Q3WHcYwwHFIFAWOijFj483mpoddFJ+N3XX5r//1Hj h4+JXBNYSVEvB6/MvEpz3XRvJ0VKAR0zHavtpk0u8UKqZbhzssfQP2ttSxnz9rTW 8eUmKA8Dwovi5DcM+Zhz7trQeKFxbaJxKnJWy4xQUObQ9twA88ePDMeXW45BHKZj IbX9sf4Y211OrKP+FcKj7siYxpACRL8M18jzTO3kXBP3vSJt33M5AOlpu844 -----END CERTIFICATE-----Generated at Tue Jul 21 11:52:26 2026 by rpki-client