$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft File: 864255909469F50CE15FE2F07B617FAAD2741BE0.mft (raw, json) Hash identifier: pg3DUbKKycRTdkshPUtBeCeJ2uFRPC+IogXMTNzXCWs= Subject key identifier: D2:8B:A4:7B:1D:0E:29:EC:15:2D:03:1A:5A:C3:4B:D0:2F:FE:49:FE Authority key identifier: 86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0 Certificate issuer: /CN=864255909469F50CE15FE2F07B617FAAD2741BE0 Certificate serial: 1F011CDF78C07A8C14D6E4CBEA03743500E3C227 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft Manifest number: 01BA Signing time: Tue 25 Aug 2026 05:56:14 +0000 Manifest this update: Tue 25 Aug 2026 05:51:14 +0000 Manifest next update: Sat 29 Aug 2026 18:18:14 +0000 Files and hashes: 1: 864255909469F50CE15FE2F07B617FAAD2741BE0.crl (hash: qH5SBITVR3pQRf6FFJruGFRUFA48Fgm9CJMQDGHnMkE=) 2: 323830333a616631303a3a2f33322d3332203d3e20323732313232.roa (hash: PrUXshR7u0kS1lF3fu/UXiSrnWx5hDHM8k8hDFmDGYk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 29 Aug 2026 18:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:01:1c:df:78:c0:7a:8c:14:d6:e4:cb:ea:03:74:35:00:e3:c2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864255909469F50CE15FE2F07B617FAAD2741BE0 Validity Not Before: Aug 25 05:51:14 2026 GMT Not After : Aug 29 18:18:14 2026 GMT Subject: CN=D28BA47B1D0E29EC152D031A5AC34BD02FFE49FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a0:d5:09:3f:ec:f3:15:aa:c5:b2:f8:1e:78: e4:53:5e:3f:50:93:59:82:63:21:95:24:e8:fa:de: 88:da:69:6b:b6:26:37:41:4e:3f:92:3c:33:fc:0a: 46:71:93:70:83:f7:ab:57:a8:d0:36:bc:5d:49:89: 5b:c4:98:16:b5:b1:d4:b4:e5:1a:e5:3c:c3:ac:df: 9c:67:80:40:24:c2:64:13:6b:a9:dd:c7:43:38:f6: ab:d0:e5:a5:27:f5:2e:e7:f1:98:bf:21:df:de:2b: 32:b9:9e:08:58:8a:d3:fb:a2:88:6f:bf:ec:90:db: 3f:06:e8:75:fc:a3:bf:f6:c7:a5:a2:c1:06:78:fe: 6c:1d:2c:a7:5e:53:ab:a1:8f:48:57:46:bc:c3:6e: 11:4e:3f:2b:c2:35:59:ba:ca:0b:5f:93:88:53:1e: a9:5c:1f:54:24:53:ae:26:db:74:72:35:d4:78:23: 01:3a:f9:0f:cc:79:1c:cb:7e:c7:36:2f:e6:2d:ec: a3:2e:f0:7d:c1:1f:0d:89:c2:25:81:f6:1a:22:70: e6:f7:82:46:19:0c:26:d2:40:d7:39:dc:67:d6:c0: 9c:11:42:61:35:bf:d3:26:fc:3b:cc:1f:09:67:c1: 9b:43:b0:3d:c5:95:ff:bb:78:77:3b:eb:12:31:24: 1d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8B:A4:7B:1D:0E:29:EC:15:2D:03:1A:5A:C3:4B:D0:2F:FE:49:FE X509v3 Authority Key Identifier: keyid:86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:91:6c:f8:5f:f6:f5:02:8e:4d:01:68:94:01:e6:42:8d:b6: fd:60:f0:99:f6:0c:db:ca:4f:14:01:16:63:42:c2:12:7e:7c: dd:7a:32:29:e5:5e:40:72:da:83:f8:25:5e:49:6d:14:81:50: a8:24:2f:2f:12:34:f6:ed:04:17:c9:3d:36:01:8d:7d:2c:3f: e4:16:57:cc:a7:9c:2b:17:5b:02:33:04:6a:72:0c:b0:48:f2: 89:c1:65:c3:ea:2b:eb:73:c4:e7:ab:60:06:f1:e8:53:df:d1: 84:a8:e5:5f:84:32:05:b1:c9:e4:a0:67:16:fb:7e:b8:84:61: 19:4d:94:26:a4:f2:26:42:3e:dc:37:75:92:3d:13:c6:dd:97: 6d:50:9b:8a:5a:08:3c:3e:dd:22:2a:ca:72:e5:fd:c2:59:b0: ae:7a:b3:d0:50:0e:dc:ac:0a:82:f8:a9:5b:4f:18:e8:1b:f5: b9:12:58:de:13:46:64:8f:09:1c:af:f5:c7:27:5f:9d:34:7d: d1:27:a0:22:b5:83:ec:92:b0:5d:8a:07:dc:46:18:bb:0b:22: a1:78:c5:7f:63:09:e9:1d:0a:91:9a:41:a0:67:bf:0b:f1:0a: 55:f3:68:0e:a8:14:bc:ef:fa:72:e1:1a:02:ba:56:1c:53:b1: 9e:73:cd:2e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHwEc33jAeowU1uTL6gN0NQDjwicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0MjU1OTA5NDY5RjUwQ0UxNUZFMkYwN0I2MTdGQUFE Mjc0MUJFMDAeFw0yNjA4MjUwNTUxMTRaFw0yNjA4MjkxODE4MTRaMDMxMTAvBgNV BAMTKEQyOEJBNDdCMUQwRTI5RUMxNTJEMDMxQTVBQzM0QkQwMkZGRTQ5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfoNUJP+zzFarFsvgeeORTXj9Q k1mCYyGVJOj63ojaaWu2JjdBTj+SPDP8CkZxk3CD96tXqNA2vF1JiVvEmBa1sdS0 5RrlPMOs35xngEAkwmQTa6ndx0M49qvQ5aUn9S7n8Zi/Id/eKzK5nghYitP7oohv v+yQ2z8G6HX8o7/2x6WiwQZ4/mwdLKdeU6uhj0hXRrzDbhFOPyvCNVm6ygtfk4hT HqlcH1QkU64m23RyNdR4IwE6+Q/MeRzLfsc2L+Yt7KMu8H3BHw2JwiWB9hoicOb3 gkYZDCbSQNc53GfWwJwRQmE1v9Mm/DvMHwlnwZtDsD3Flf+7eHc76xIxJB29AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0oukex0OKewVLQMaWsNL0C/+Sf4wHwYDVR0j BBgwFoAUhkJVkJRp9QzhX+Lwe2F/qtJ0G+AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMzVCRjE5MzBDQTdBMDEzRTQxQzhCQUI2MEI5MzdDOEMx MDI2NDMwM0EyOTM4QkJGNEJDQzRCMUY5OUNCQjBDLzAvODY0MjU1OTA5NDY5RjUw Q0UxNUZFMkYwN0I2MTdGQUFEMjc0MUJFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjQyNTU5MDk0NjlGNTBDRTE1 RkUyRjA3QjYxN0ZBQUQyNzQxQkUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjM1QkYxOTMwQ0E3QTAxM0U0MUM4QkFCNjBCOTM3QzhDMTAyNjQzMDNB MjkzOEJCRjRCQ0M0QjFGOTlDQkIwQy8wLzg2NDI1NTkwOTQ2OUY1MENFMTVGRTJG MDdCNjE3RkFBRDI3NDFCRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVkWz4X/b1Ao5NAWiUAeZCjbb9 YPCZ9gzbyk8UARZjQsISfnzdejIp5V5ActqD+CVeSW0UgVCoJC8vEjT27QQXyT02 AY19LD/kFlfMp5wrF1sCMwRqcgywSPKJwWXD6ivrc8Tnq2AG8ehT39GEqOVfhDIF scnkoGcW+364hGEZTZQmpPImQj7cN3WSPRPG3ZdtUJuKWgg8Pt0iKspy5f3CWbCu erPQUA7crAqC+KlbTxjoG/W5EljeE0Zkjwkcr/XHJ1+dNH3RJ6AitYPskrBdigfc Rhi7CyKheMV/YwnpHQqRmkGgZ78L8QpV82gOqBS87/py4RoCulYcU7Gec80u -----END CERTIFICATE-----Generated at Wed Aug 26 11:00:40 2026 by rpki-client