$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft File: 28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft (raw, json) Hash identifier: oHn+5e7ZAz/e2DfnGv3FqKqfpwo5qF3AQiKe/eY+YcI= Subject key identifier: D7:F8:76:75:EF:2B:2B:FF:70:53:56:DF:9E:5E:5D:A1:1C:13:6F:26 Authority key identifier: 28:F4:CD:1B:A0:27:DE:A3:F4:E3:C7:BF:A0:84:13:27:82:DB:2E:FE Certificate issuer: /CN=28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE Certificate serial: 0A8DDE8237D9D8A7DA2BC92B5FDA7B76C2EA4260 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft Manifest number: 14 Signing time: Fri 18 Sep 2026 03:20:48 +0000 Manifest this update: Fri 18 Sep 2026 03:15:48 +0000 Manifest next update: Tue 22 Sep 2026 17:27:48 +0000 Files and hashes: 1: 28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.crl (hash: d5FYGoDMvzAc310j9XhKTgHK3HkOwjxt1unqh9QmdPo=) 2: 323830333a653933303a3a2f33322d3438203d3e20323734393439.roa (hash: GmKV00Kue1DSLeWWKUygjid4hE2VM50wIaqwbN7p/ws=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.crl rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8d:de:82:37:d9:d8:a7:da:2b:c9:2b:5f:da:7b:76:c2:ea:42:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE Validity Not Before: Sep 18 03:15:48 2026 GMT Not After : Sep 22 17:27:48 2026 GMT Subject: CN=D7F87675EF2B2BFF705356DF9E5E5DA11C136F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:a7:6a:85:4e:11:89:92:5a:09:3c:f7:d0: 86:ea:18:75:52:49:e5:2c:33:7d:b4:f6:36:a3:dc: 95:f1:a1:b4:f7:d6:b7:78:55:8d:e7:58:07:62:fe: 47:81:f2:5d:0c:10:50:0c:87:0f:04:44:18:44:c5: 4b:a1:f2:09:cd:04:3a:70:57:56:13:46:55:02:ae: 87:3c:4c:f4:7a:bc:22:ca:bc:d5:57:44:57:d4:83: b7:cc:02:27:27:49:79:16:c9:5c:49:c8:a1:65:2e: 0e:4c:45:be:02:e4:10:e8:ad:4b:94:04:a2:92:c1: 3f:40:d8:1b:7a:f2:2f:68:4b:56:bd:f6:82:21:8c: 64:81:5d:9d:e9:2e:80:2e:9b:c4:f0:74:9f:de:03: 11:2a:68:33:b4:a5:25:f3:ea:32:33:dd:42:5b:0e: a7:09:ae:e5:e9:60:85:1c:61:f4:8a:de:6f:92:7b: 13:3b:a1:84:89:af:00:de:2f:d1:ef:e9:d3:15:dc: 5d:a8:f9:41:a7:46:c3:1d:7d:ff:34:ab:4e:90:f2: 53:92:9d:10:f4:c1:a2:a0:38:e8:0e:74:45:a7:a1: 19:36:f4:56:21:8c:18:9a:30:f1:eb:26:5c:58:e3: 09:00:12:7d:d3:29:9c:ec:43:ba:5c:95:fc:13:19: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F8:76:75:EF:2B:2B:FF:70:53:56:DF:9E:5E:5D:A1:1C:13:6F:26 X509v3 Authority Key Identifier: keyid:28:F4:CD:1B:A0:27:DE:A3:F4:E3:C7:BF:A0:84:13:27:82:DB:2E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:57:34:3a:13:27:d3:ac:ba:bb:8d:70:b3:24:ae:70:16:27: 28:94:08:7b:4f:d0:2f:16:82:e1:3f:0b:d3:ee:41:8b:fa:5e: 09:80:de:65:a8:83:b0:ec:a8:81:b3:0a:4c:1b:10:21:d7:75: 65:76:8d:ba:b6:20:f9:0e:30:3a:48:e6:28:db:45:f4:68:b2: 99:17:e4:1d:83:2d:6b:ea:7c:34:79:8f:e7:3f:4b:1e:85:ea: d6:ce:e4:0b:5f:fe:1b:ba:ef:21:9c:a2:c2:c0:7e:ea:ea:5c: ca:79:5e:19:a0:d8:cc:06:95:4b:19:b2:08:22:32:2d:2f:16: db:7c:39:47:8e:21:de:66:35:85:e6:5d:24:8e:2c:7a:88:1b: 12:27:bd:38:f7:a9:d0:7a:9c:22:75:92:27:19:85:60:2f:b0: 52:c6:51:b3:47:81:4e:7d:a3:fe:b9:a1:b1:1d:ad:ba:e3:c5: 0a:8a:c0:5b:f0:92:9d:b3:14:e1:53:d5:66:be:6f:f0:cf:28: 7b:e2:b8:6d:80:ad:7f:fa:48:2b:79:6f:99:8e:6f:13:89:d3: 10:c7:fe:9e:0a:a9:6a:53:7f:66:bc:48:57:49:72:f5:f4:1c: d0:ab:62:53:3a:cc:65:29:e2:e8:a1:59:08:a4:db:f7:b1:78: c9:68:ce:1b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCo3egjfZ2KfaK8krX9p7dsLqQmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhGNENEMUJBMDI3REVBM0Y0RTNDN0JGQTA4NDEzMjc4 MkRCMkVGRTAeFw0yNjA5MTgwMzE1NDhaFw0yNjA5MjIxNzI3NDhaMDMxMTAvBgNV BAMTKEQ3Rjg3Njc1RUYyQjJCRkY3MDUzNTZERjlFNUU1REExMUMxMzZGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIadqhU4RiZJaCTz30IbqGHVS SeUsM3209jaj3JXxobT31rd4VY3nWAdi/keB8l0MEFAMhw8ERBhExUuh8gnNBDpw V1YTRlUCroc8TPR6vCLKvNVXRFfUg7fMAicnSXkWyVxJyKFlLg5MRb4C5BDorUuU BKKSwT9A2Bt68i9oS1a99oIhjGSBXZ3pLoAum8TwdJ/eAxEqaDO0pSXz6jIz3UJb DqcJruXpYIUcYfSK3m+SexM7oYSJrwDeL9Hv6dMV3F2o+UGnRsMdff80q06Q8lOS nRD0waKgOOgOdEWnoRk29FYhjBiaMPHrJlxY4wkAEn3TKZzsQ7pclfwTGaOzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1/h2de8rK/9wU1bfnl5doRwTbyYwHwYDVR0j BBgwFoAUKPTNG6An3qP048e/oIQTJ4LbLv4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMzYwMEM2NzU2NTlFRTBFNTJEMzgwMEFBNzQzMjFCRTZB MkUwMUJBQTZDODYwNjc4QUQxNEMxNTM3NzBDNkIwLzAvMjhGNENEMUJBMDI3REVB M0Y0RTNDN0JGQTA4NDEzMjc4MkRCMkVGRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEY0Q0QxQkEwMjdERUEzRjRF M0M3QkZBMDg0MTMyNzgyREIyRUZFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzM2MDBDNjc1NjU5RUUwRTUyRDM4MDBBQTc0MzIxQkU2QTJFMDFCQUE2 Qzg2MDY3OEFEMTRDMTUzNzcwQzZCMC8wLzI4RjRDRDFCQTAyN0RFQTNGNEUzQzdC RkEwODQxMzI3ODJEQjJFRkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBVzQ6EyfTrLq7jXCzJK5wFico lAh7T9AvFoLhPwvT7kGL+l4JgN5lqIOw7KiBswpMGxAh13Vldo26tiD5DjA6SOYo 20X0aLKZF+Qdgy1r6nw0eY/nP0seherWzuQLX/4buu8hnKLCwH7q6lzKeV4ZoNjM BpVLGbIIIjItLxbbfDlHjiHeZjWF5l0kjix6iBsSJ70496nQepwidZInGYVgL7BS xlGzR4FOfaP+uaGxHa2648UKisBb8JKdsxThU9Vmvm/wzyh74rhtgK1/+kgreW+Z jm8TidMQx/6eCqlqU39mvEhXSXL19BzQq2JTOsxlKeLooVkIpNv3sXjJaM4b -----END CERTIFICATE-----Generated at Fri Sep 18 18:55:39 2026 by rpki-client