$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft File: 9D2820894F6D41941116396B192CCF8017618F44.mft (raw, json) Hash identifier: WbEfFZW4jD328ouKq/9gUSgbcCJYPU58TWfr+qffwyA= Subject key identifier: 8D:9F:84:0A:01:E4:4B:CF:A3:D4:D7:67:B5:AF:CE:37:F2:AA:CA:0B Authority key identifier: 9D:28:20:89:4F:6D:41:94:11:16:39:6B:19:2C:CF:80:17:61:8F:44 Certificate issuer: /CN=9D2820894F6D41941116396B192CCF8017618F44 Certificate serial: 2FEB9FE5D5E8791BED221D5E1F758F8EFAF9FD0F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft Manifest number: 01E5 Signing time: Wed 28 Oct 2026 14:23:21 +0000 Manifest this update: Wed 28 Oct 2026 14:18:21 +0000 Manifest next update: Mon 02 Nov 2026 00:01:21 +0000 Files and hashes: 1: 3133312e3232312e36342e302f32322d3234203d3e20323635373938.roa (hash: ZZaU13CadvbaMCZbfvnGX1SmyxxCcQccy0EtXhHky0k=) 2: 9D2820894F6D41941116396B192CCF8017618F44.crl (hash: ElbBv1LBiXZF800LYyxfUlMvUwCZDl5GTZ54T0M6pTo=) 3: 323830333a636238303a3a2f33322d3438203d3e20323635373938.roa (hash: Njnquh71HEz6WTWDkKN2fR7/LOSqA3LWjva3GA54ZTg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.crl rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 15:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:eb:9f:e5:d5:e8:79:1b:ed:22:1d:5e:1f:75:8f:8e:fa:f9:fd:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D2820894F6D41941116396B192CCF8017618F44 Validity Not Before: Oct 28 14:18:21 2026 GMT Not After : Nov 2 00:01:21 2026 GMT Subject: CN=8D9F840A01E44BCFA3D4D767B5AFCE37F2AACA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:2a:22:b0:3e:76:d4:1e:bb:7a:ef:b8:7a: 62:94:a9:5c:e3:ee:88:28:df:34:ef:0d:8f:da:1f: 9d:67:91:18:42:7b:ce:ef:09:db:99:2a:01:b0:73: b4:7a:14:2f:bc:dd:74:62:5a:33:da:80:0e:5d:72: 0c:db:ec:1f:2f:d6:42:78:9f:f9:4e:8b:2c:7e:8d: a0:10:ab:24:ee:15:77:dd:7b:ba:23:81:a8:f7:38: fe:f3:3e:9b:db:7d:6f:83:ca:5d:2a:b0:22:cf:8c: ce:0b:7b:dd:17:53:03:60:fd:4c:7f:36:bb:e9:1b: 9b:f2:fa:4c:32:c3:b3:d9:4f:47:36:0a:66:c7:c3: f3:b2:f0:08:ca:31:b6:2f:0a:07:e3:52:db:5a:2b: 47:ff:ec:0d:7d:d5:24:80:71:06:c3:c5:1b:b0:4c: 11:89:4e:14:87:c8:71:31:af:77:e1:b5:c1:37:5e: bc:58:4c:b1:43:e2:8f:c1:e1:f4:67:3a:16:b9:96: 4d:9d:f9:fd:f2:52:37:e1:b2:61:7d:4b:48:f3:d8: 2e:4b:4b:da:21:0f:04:a0:26:4e:6f:4d:d0:93:fb: 48:a2:7f:ab:68:3a:84:e7:84:9f:6d:62:d4:47:e5: 60:0b:1f:c9:f9:4a:90:e7:0c:e1:79:92:c5:5e:6a: 9d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9F:84:0A:01:E4:4B:CF:A3:D4:D7:67:B5:AF:CE:37:F2:AA:CA:0B X509v3 Authority Key Identifier: keyid:9D:28:20:89:4F:6D:41:94:11:16:39:6B:19:2C:CF:80:17:61:8F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:23:b9:44:a2:9a:9c:4c:cf:d3:e3:63:1c:62:00:79:92:17: 24:9a:48:dc:4d:6b:9e:d4:cd:20:15:13:99:b6:44:ed:3f:c6: 8c:8a:a0:2f:26:3b:85:0d:31:d1:f4:6c:e3:a9:a5:b1:21:2b: 98:13:51:f1:c9:7e:af:2c:40:8b:56:24:8c:d7:7d:f2:16:73: 5e:ec:78:f3:41:c1:d5:69:be:0e:b0:9c:f6:f5:33:45:a1:c2: 27:1f:45:e7:0c:eb:c4:27:e5:0e:49:68:1e:fc:c1:52:8b:75: 1a:8b:5c:1d:55:71:d8:28:c9:2e:da:d7:80:ce:f4:e0:e9:8b: 11:36:5b:db:e2:e1:3a:a2:46:43:bd:1a:32:55:b7:9f:ec:ad: 47:47:65:f6:0e:b1:4c:48:ee:a7:48:9e:3d:e8:6c:d0:a6:49: e2:b9:db:7c:eb:85:24:db:ad:85:b4:65:cd:51:7a:34:be:ec: f1:1d:9c:48:7b:17:08:be:68:2b:b2:13:f1:0a:c9:f1:25:4d: 23:e0:2f:84:a9:63:e5:6e:76:25:d6:55:b6:99:c9:ab:c2:18: e0:3f:6a:64:41:ef:e2:71:fb:5a:75:db:f1:68:23:e4:35:5d: b7:99:b7:a9:95:60:b9:fc:77:10:b5:dd:e6:5d:80:c3:55:e7: 9f:ff:8a:89 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUL+uf5dXoeRvtIh1eH3WPjvr5/Q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyODIwODk0RjZENDE5NDExMTYzOTZCMTkyQ0NGODAx NzYxOEY0NDAeFw0yNjEwMjgxNDE4MjFaFw0yNjExMDIwMDAxMjFaMDMxMTAvBgNV BAMTKDhEOUY4NDBBMDFFNDRCQ0ZBM0Q0RDc2N0I1QUZDRTM3RjJBQUNBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6yoisD521B67eu+4emKUqVzj 7ogo3zTvDY/aH51nkRhCe87vCduZKgGwc7R6FC+83XRiWjPagA5dcgzb7B8v1kJ4 n/lOiyx+jaAQqyTuFXfde7ojgaj3OP7zPpvbfW+Dyl0qsCLPjM4Le90XUwNg/Ux/ NrvpG5vy+kwyw7PZT0c2CmbHw/Oy8AjKMbYvCgfjUttaK0f/7A191SSAcQbDxRuw TBGJThSHyHExr3fhtcE3XrxYTLFD4o/B4fRnOha5lk2d+f3yUjfhsmF9S0jz2C5L S9ohDwSgJk5vTdCT+0iif6toOoTnhJ9tYtRH5WALH8n5SpDnDOF5ksVeap3XAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjZ+ECgHkS8+j1Ndnta/ON/KqygswHwYDVR0j BBgwFoAUnSggiU9tQZQRFjlrGSzPgBdhj0QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMjBENjU1Q0UxNjA5QzI0NkU4OUJEQzEwNDJFNTFDNDY3 ODAxQTdEMENFNjdDOUZEQURDNjMwN0Q3MzI1QjYyLzAvOUQyODIwODk0RjZENDE5 NDExMTYzOTZCMTkyQ0NGODAxNzYxOEY0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDI4MjA4OTRGNkQ0MTk0MTEx NjM5NkIxOTJDQ0Y4MDE3NjE4RjQ0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjIwRDY1NUNFMTYwOUMyNDZFODlCREMxMDQyRTUxQzQ2NzgwMUE3RDBD RTY3QzlGREFEQzYzMDdENzMyNUI2Mi8wLzlEMjgyMDg5NEY2RDQxOTQxMTE2Mzk2 QjE5MkNDRjgwMTc2MThGNDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5I7lEopqcTM/T42McYgB5khck mkjcTWue1M0gFROZtkTtP8aMiqAvJjuFDTHR9GzjqaWxISuYE1HxyX6vLECLViSM 133yFnNe7HjzQcHVab4OsJz29TNFocInH0XnDOvEJ+UOSWge/MFSi3Uai1wdVXHY KMku2teAzvTg6YsRNlvb4uE6okZDvRoyVbef7K1HR2X2DrFMSO6nSJ496GzQpkni udt864Uk262FtGXNUXo0vuzxHZxIexcIvmgrshPxCsnxJU0j4C+EqWPlbnYl1lW2 mcmrwhjgP2pkQe/icftaddvxaCPkNV23mbeplWC5/HcQtd3mXYDDVeef/4qJ -----END CERTIFICATE-----Generated at Wed Oct 28 18:33:03 2026 by rpki-client