$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.mft File: BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.mft (raw, json) Hash identifier: vacPpPkfixIU6nFRvYegovszxP8qTlYapYiFLVPtzng= Subject key identifier: A4:B5:7D:27:7F:B2:01:3C:4F:2C:F4:45:39:1E:DE:92:44:CE:5B:9D Authority key identifier: BA:AC:19:52:28:2A:23:54:3D:0C:7E:9E:FF:AA:B7:C6:B7:E0:E6:D9 Certificate issuer: /CN=BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9 Certificate serial: 5B75C6ED5BCB5996C2C5FB7674E2A7ADCF82FD08 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.mft Manifest number: F1 Signing time: Thu 17 Sep 2026 04:19:19 +0000 Manifest this update: Thu 17 Sep 2026 04:14:19 +0000 Manifest next update: Tue 22 Sep 2026 10:38:19 +0000 Files and hashes: 1: BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.crl (hash: UXlYoYrsaPsg1RbZrDy+8AsFA+qyXaDck25EtsD0zu4=) 2: 323830313a31643a633830303a3a2f34382d3438203d3e203237393531.roa (hash: OxHgnvptO5RAgEF98PmqHcqihN3wNoEv9UV9edWcEcQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.crl rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 04:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:75:c6:ed:5b:cb:59:96:c2:c5:fb:76:74:e2:a7:ad:cf:82:fd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9 Validity Not Before: Sep 17 04:14:19 2026 GMT Not After : Sep 22 10:38:19 2026 GMT Subject: CN=A4B57D277FB2013C4F2CF445391EDE9244CE5B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:46:e7:d9:70:bc:ef:d2:44:30:ab:19:c8:16: d1:ff:73:b1:44:7d:a8:76:72:2f:ed:fd:65:7d:9f: fd:74:e7:61:33:8e:bb:7f:b3:07:01:b9:cc:93:4b: ab:95:42:ec:e0:6c:35:81:61:5b:09:ce:9c:db:f4: 36:f0:24:13:7b:d2:ec:4b:64:15:fd:c0:22:e3:7b: 3d:7d:23:70:23:fb:f5:b0:12:d0:28:99:d1:b3:3f: a7:4f:d8:ea:a1:18:4b:d5:a1:07:2c:23:b5:b0:a5: bb:c5:ee:da:f8:2c:6f:62:0a:38:6d:34:6a:ef:6d: 2e:ee:88:20:db:47:90:93:2c:91:61:2c:40:cc:9e: d9:3e:65:42:11:27:f2:c2:85:f4:6c:05:46:3c:7e: 68:46:f0:6c:dd:8c:92:74:91:5b:5e:0b:b9:24:19: 2d:42:a0:72:d1:e3:f2:3c:8e:09:63:1c:9e:64:ee: ba:bc:42:6b:33:de:a8:de:69:bc:4d:39:71:6c:10: 14:55:d1:ba:6b:43:86:bb:0b:93:79:a7:de:61:57: 70:22:b3:50:93:29:93:df:5b:62:f6:62:7c:40:27: a3:72:f7:c5:0f:72:5d:0f:82:45:ac:8a:87:3b:60: 38:31:b5:06:a8:05:96:3b:57:08:dc:fa:5b:56:36: 31:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B5:7D:27:7F:B2:01:3C:4F:2C:F4:45:39:1E:DE:92:44:CE:5B:9D X509v3 Authority Key Identifier: keyid:BA:AC:19:52:28:2A:23:54:3D:0C:7E:9E:FF:AA:B7:C6:B7:E0:E6:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:65:08:3a:e5:99:ad:40:27:ac:94:69:a6:01:ed:e5:02:c1: 98:bd:32:fa:49:f6:c4:a2:d4:94:00:4c:66:d0:42:e5:ea:df: 8b:d7:c6:c4:c4:45:40:6d:f9:df:77:e2:9e:5a:60:a1:06:f3: 1c:51:92:9e:07:2a:73:96:8d:f5:ac:f9:06:9c:dc:21:a4:15: 90:0b:fa:85:c9:3a:68:f7:9f:07:db:ae:47:99:a5:31:96:9f: a7:98:be:0b:8f:0b:95:17:46:cd:93:1c:c9:2b:89:15:b8:94: dc:ef:79:6d:d4:5b:65:ab:aa:f0:ab:ed:56:38:32:85:38:b7: f7:0b:f1:18:7d:f7:4d:e6:27:72:26:f3:b7:be:58:64:c2:d4: 34:6d:35:ff:1c:2b:1a:f8:24:6d:cc:2d:68:61:0f:54:ca:cf: dd:10:d0:59:ee:aa:1f:9e:d7:df:2a:d7:64:2d:4a:ca:6d:6f: d4:b9:b1:43:52:3c:46:f2:66:75:b7:9d:9d:3e:f3:cb:9f:e2: ae:4c:64:85:be:2e:c0:ee:70:e8:74:32:c6:3f:b0:c1:14:07: 36:89:73:e6:f2:3a:64:56:8f:7b:46:65:70:5a:d2:47:0c:b7: cf:78:51:ac:2a:8b:01:3a:17:ce:e5:53:5f:20:c9:18:9e:6a: c8:ef:78:d0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUW3XG7VvLWZbCxft2dOKnrc+C/QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBQzE5NTIyODJBMjM1NDNEMEM3RTlFRkZBQUI3QzZC N0UwRTZEOTAeFw0yNjA5MTcwNDE0MTlaFw0yNjA5MjIxMDM4MTlaMDMxMTAvBgNV BAMTKEE0QjU3RDI3N0ZCMjAxM0M0RjJDRjQ0NTM5MUVERTkyNDRDRTVCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCORufZcLzv0kQwqxnIFtH/c7FE fah2ci/t/WV9n/1052Ezjrt/swcBucyTS6uVQuzgbDWBYVsJzpzb9DbwJBN70uxL ZBX9wCLjez19I3Aj+/WwEtAomdGzP6dP2OqhGEvVoQcsI7WwpbvF7tr4LG9iCjht NGrvbS7uiCDbR5CTLJFhLEDMntk+ZUIRJ/LChfRsBUY8fmhG8GzdjJJ0kVteC7kk GS1CoHLR4/I8jgljHJ5k7rq8Qmsz3qjeabxNOXFsEBRV0bprQ4a7C5N5p95hV3Ai s1CTKZPfW2L2YnxAJ6Ny98UPcl0PgkWsioc7YDgxtQaoBZY7Vwjc+ltWNjH5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUpLV9J3+yATxPLPRFOR7ekkTOW50wHwYDVR0j BBgwFoAUuqwZUigqI1Q9DH6e/6q3xrfg5tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yNjEzRTk5NDU5NkRCQTZBOUFDMEZFNUU0Nzk0MTM2OEVE RjgyMUI5NjgwRTA2QkEyQzg5NjAwODM0OUMxMTc2LzAvQkFBQzE5NTIyODJBMjM1 NDNEMEM3RTlFRkZBQUI3QzZCN0UwRTZEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQUFDMTk1MjI4MkEyMzU0M0Qw QzdFOUVGRkFBQjdDNkI3RTBFNkQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjYxM0U5OTQ1OTZEQkE2QTlBQzBGRTVFNDc5NDEzNjhFREY4MjFCOTY4 MEUwNkJBMkM4OTYwMDgzNDlDMTE3Ni8wL0JBQUMxOTUyMjgyQTIzNTQzRDBDN0U5 RUZGQUFCN0M2QjdFMEU2RDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxZQg65ZmtQCeslGmmAe3lAsGY vTL6SfbEotSUAExm0ELl6t+L18bExEVAbfnfd+KeWmChBvMcUZKeBypzlo31rPkG nNwhpBWQC/qFyTpo958H265HmaUxlp+nmL4LjwuVF0bNkxzJK4kVuJTc73lt1Ftl q6rwq+1WODKFOLf3C/EYffdN5idyJvO3vlhkwtQ0bTX/HCsa+CRtzC1oYQ9Uys/d ENBZ7qofntffKtdkLUrKbW/UubFDUjxG8mZ1t52dPvPLn+KuTGSFvi7A7nDodDLG P7DBFAc2iXPm8jpkVo97RmVwWtJHDLfPeFGsKosBOhfO5VNfIMkYnmrI73jQ -----END CERTIFICATE-----Generated at Fri Sep 18 16:17:21 2026 by rpki-client