$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft File: 25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft (raw, json) Hash identifier: yhBS5TIobwNWCZdC9BY4NgZq5SVE1nUs8JZdKlrz+rk= Subject key identifier: 96:A3:EB:C3:EC:87:6E:1C:92:D8:DB:A0:EB:14:B3:A5:D9:C1:AA:4A Authority key identifier: 25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79 Certificate issuer: /CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979 Certificate serial: 5D09289D5869D6B46E3E28009E605EEE7B3DB848 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft Manifest number: 01D7 Signing time: Thu 03 Sep 2026 22:44:18 +0000 Manifest this update: Thu 03 Sep 2026 22:39:18 +0000 Manifest next update: Wed 09 Sep 2026 13:06:18 +0000 Files and hashes: 1: 323830313a303a3139303a3a2f34382d3438203d3e20323634363330.roa (hash: actE0rI1hx8HKy0Sr/qjx01XbMx03jWGqqbwHKR3JIo=) 2: 3230302e3130362e3234382e302f32312d3231203d3e20323634363330.roa (hash: ne4eonugOYXagt2xE7aRj/XinFvu7pvl2E6SleToRN4=) 3: 25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl (hash: 4e+apr/QfKtiqda1cgHgpKtZGY1ZIQtsT429MfyC60I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Sep 2026 13:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:09:28:9d:58:69:d6:b4:6e:3e:28:00:9e:60:5e:ee:7b:3d:b8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979 Validity Not Before: Sep 3 22:39:18 2026 GMT Not After : Sep 9 13:06:18 2026 GMT Subject: CN=96A3EBC3EC876E1C92D8DBA0EB14B3A5D9C1AA4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8c:73:10:c4:aa:3d:d7:39:71:21:e1:c5:3d: 01:55:3a:1d:1a:28:88:3a:ba:88:b9:30:e0:77:d3: a8:58:ef:8f:30:33:d6:fd:74:3f:93:6b:26:96:ca: dd:0d:c7:f5:f5:28:c9:ed:9b:13:87:5d:45:06:df: 5d:b9:df:d8:38:c1:88:ba:93:e2:71:29:06:42:25: 8b:e0:0a:98:86:0f:30:43:9c:fb:e1:61:83:7d:af: b3:5b:15:1b:61:83:06:39:24:7b:53:91:5d:8a:3f: 15:65:39:15:0f:8b:d6:69:a9:ef:86:23:f9:3b:a1: 09:d7:24:f2:29:3d:31:c0:e1:0a:f3:4b:7d:7a:df: 5f:a5:73:b3:d7:d1:f5:aa:05:a6:e8:83:e4:82:cb: 30:41:06:d5:6e:0f:de:e7:1a:84:0e:ee:2a:08:45: 86:fa:e1:34:c3:b0:aa:6e:17:f1:ae:b5:69:2b:c1: f1:c0:fb:46:6c:80:8c:cd:33:9d:77:93:cc:0e:bd: aa:b2:dc:52:58:cf:7f:58:5e:70:ba:fe:57:1b:e0: bf:52:a2:bb:5e:ea:2d:0d:40:e2:41:00:10:dd:48: 72:88:31:f7:53:9d:a2:4d:c5:99:c2:77:f6:d6:6f: 90:95:bf:42:a8:e9:da:e9:f3:d5:ae:7f:ed:43:e9: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A3:EB:C3:EC:87:6E:1C:92:D8:DB:A0:EB:14:B3:A5:D9:C1:AA:4A X509v3 Authority Key Identifier: keyid:25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f9:15:dd:e7:35:3c:6f:45:82:2b:5b:f2:19:39:62:0c:99: 2b:20:92:a8:43:c0:71:a3:06:f6:e5:5a:d2:13:a8:d2:8f:5d: d1:27:d0:aa:1d:e8:15:9a:6a:32:b4:a6:01:8a:4e:f7:e3:e4: 91:3b:3a:90:3e:79:3f:0e:72:ac:ef:e9:8e:b4:8d:98:a1:c5: 18:e9:e1:c7:9e:6c:72:ac:d7:bd:37:aa:b4:5b:b0:9a:79:2f: 94:a1:5f:d2:33:14:5e:13:01:a3:8f:f0:de:3d:20:67:65:54: be:67:fc:76:e6:55:cd:39:67:8d:1b:f6:26:f8:36:ea:a6:f5: 82:fd:74:35:41:f7:f0:f7:78:38:5a:4c:96:85:7e:79:f8:e3: 97:99:79:56:9c:cc:42:03:75:d4:39:ee:21:e8:71:1a:e5:0d: b8:29:6e:37:11:50:23:cf:20:63:d2:44:95:11:f0:93:4c:98: f3:52:e1:66:61:d4:ca:45:60:47:9a:66:f1:19:e2:7f:f6:29: 34:56:af:fe:18:13:ae:d3:9b:26:5d:5f:23:29:53:17:38:5d: 24:36:c3:4c:21:7d:20:2c:34:79:b9:09:9e:12:27:16:41:90: 86:8b:f3:9f:df:30:6c:90:0f:b5:e2:89:f9:20:4f:f0:19:56: c2:01:16:f4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXQkonVhp1rRuPigAnmBe7ns9uEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERERFQzJBODA0NEY2ODhBQTc5OUE2NjEyQzQzNEIy QUJFQTk3OTAeFw0yNjA5MDMyMjM5MThaFw0yNjA5MDkxMzA2MThaMDMxMTAvBgNV BAMTKDk2QTNFQkMzRUM4NzZFMUM5MkQ4REJBMEVCMTRCM0E1RDlDMUFBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSjHMQxKo91zlxIeHFPQFVOh0a KIg6uoi5MOB306hY748wM9b9dD+TayaWyt0Nx/X1KMntmxOHXUUG312539g4wYi6 k+JxKQZCJYvgCpiGDzBDnPvhYYN9r7NbFRthgwY5JHtTkV2KPxVlORUPi9Zpqe+G I/k7oQnXJPIpPTHA4QrzS31631+lc7PX0fWqBabog+SCyzBBBtVuD97nGoQO7ioI RYb64TTDsKpuF/GutWkrwfHA+0ZsgIzNM513k8wOvaqy3FJYz39YXnC6/lcb4L9S orte6i0NQOJBABDdSHKIMfdTnaJNxZnCd/bWb5CVv0Ko6drp89Wuf+1D6VmPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUlqPrw+yHbhyS2Nug6xSzpdnBqkowHwYDVR0j BBgwFoAUJd3ewqgET2iKp5mmYSxDSyq+qXkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GMTQ5QzFBNjNFQTE0Njg5RUEwNEZBQUY2NUVEQ0U5RDU3 MDZBNzZEMEY2OTBDOTM5MDM2OTY4Nzg4REYyOTJGLzAvMjVERERFQzJBODA0NEY2 ODhBQTc5OUE2NjEyQzQzNEIyQUJFQTk3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUREREVDMkE4MDQ0RjY4OEFB Nzk5QTY2MTJDNDM0QjJBQkVBOTc5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjE0OUMxQTYzRUExNDY4OUVBMDRGQUFGNjVFRENFOUQ1NzA2QTc2RDBG NjkwQzkzOTAzNjk2ODc4OERGMjkyRi8wLzI1RERERUMyQTgwNDRGNjg4QUE3OTlB NjYxMkM0MzRCMkFCRUE5NzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ+RXd5zU8b0WCK1vyGTliDJkr IJKoQ8Bxowb25VrSE6jSj13RJ9CqHegVmmoytKYBik734+SROzqQPnk/DnKs7+mO tI2YocUY6eHHnmxyrNe9N6q0W7CaeS+UoV/SMxReEwGjj/DePSBnZVS+Z/x25lXN OWeNG/Ym+DbqpvWC/XQ1Qffw93g4WkyWhX55+OOXmXlWnMxCA3XUOe4h6HEa5Q24 KW43EVAjzyBj0kSVEfCTTJjzUuFmYdTKRWBHmmbxGeJ/9ik0Vq/+GBOu05smXV8j KVMXOF0kNsNMIX0gLDR5uQmeEicWQZCGi/Of3zBskA+14on5IE/wGVbCARb0 -----END CERTIFICATE-----Generated at Sat Sep 5 12:07:21 2026 by rpki-client