$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft File: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json) Hash identifier: 3xsNJ2lv90fGLsBxpMa7HFVwFERQ2IQHJaaBNkS/JLk= Subject key identifier: 9F:F5:BD:5C:23:5E:79:45:68:32:05:6A:D8:D7:D3:7B:42:5F:27:9B Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 Certificate issuer: /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Certificate serial: 60F1A1424A03B8FE48ACC366E5648B649172E3E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft Manifest number: 01B4 Signing time: Mon 27 Jul 2026 05:43:32 +0000 Manifest this update: Mon 27 Jul 2026 05:38:32 +0000 Manifest next update: Sun 02 Aug 2026 02:59:32 +0000 Files and hashes: 1: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: Um86cEkZc1cblKMuUA3/7tQwstJEkeehuPwQs3wj8OI=) 2: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: 4LFf4uRlMxMf2oudTQtCgNr/ddYwiQolDdMBxGwEJcg=) 3: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: N4z7W+TROi6og071a58dWTLMAR3LwkSA0IxbCCjwtfs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Aug 2026 02:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f1:a1:42:4a:03:b8:fe:48:ac:c3:66:e5:64:8b:64:91:72:e3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Validity Not Before: Jul 27 05:38:32 2026 GMT Not After : Aug 2 02:59:32 2026 GMT Subject: CN=9FF5BD5C235E79456832056AD8D7D37B425F279B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e1:07:5a:0c:db:f2:cb:c8:23:cb:00:f0:73: f6:b2:bd:a1:e1:b6:4a:fd:34:35:ca:14:8d:45:81: c9:43:9b:6e:ae:68:64:65:fd:ee:b6:3b:8c:4e:5b: 24:59:d5:a3:1b:19:a8:8c:97:d9:25:88:96:a1:7e: 59:53:c6:1c:68:ff:61:98:69:9f:54:f4:e9:58:7a: f0:b0:e0:95:44:fb:f8:b3:8b:5f:88:5c:75:e3:c0: 01:0f:c3:e6:19:85:39:ab:e8:f3:87:cf:be:17:76: 1f:83:8a:7d:18:6d:3a:74:e5:10:f0:2d:2f:95:c1: 9a:a5:d8:5c:c2:9f:fe:72:61:3e:f2:67:c2:76:3e: 70:c2:d4:86:a9:b6:29:88:9e:bb:92:b5:cc:6e:ca: b6:3b:38:6a:25:0d:67:3b:1f:8f:4b:69:91:01:f8: 65:2b:c5:a8:dc:8e:4d:17:df:27:65:e5:d9:eb:40: 30:e2:25:71:91:c0:f3:04:b3:e0:59:f8:a9:84:59: d3:6f:20:39:5e:c0:8f:d6:ce:75:98:f7:55:83:2e: ed:19:19:03:c7:0e:ab:ec:2f:5a:80:55:1e:04:cc: 9f:09:c3:b5:ce:0f:57:47:40:59:97:6f:e4:70:65: ab:3e:ce:bb:03:f7:3e:07:1c:8b:ad:98:34:c8:62: bb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F5:BD:5C:23:5E:79:45:68:32:05:6A:D8:D7:D3:7B:42:5F:27:9B X509v3 Authority Key Identifier: keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:35:eb:55:49:42:3b:72:25:70:d9:a6:4a:6f:33:9b:ea:2d: 12:6f:92:cb:70:5c:90:5b:ca:04:01:fb:c3:4a:a7:6d:d3:18: 20:c4:62:11:81:19:26:39:94:61:3c:91:7e:86:13:b6:4d:f5: 41:03:a6:0a:8d:5a:ad:03:e5:58:27:91:a5:01:fd:2c:06:28: 58:c4:39:e2:d7:0e:33:80:83:05:41:28:d9:d6:c1:62:35:5c: b6:ed:66:06:68:16:93:89:28:e2:76:f7:5e:af:10:67:95:5b: db:c4:fd:c3:30:b1:b4:d1:da:b2:3b:64:23:38:89:9f:b8:84: 5b:ea:1c:b5:67:95:d9:2f:4d:6c:35:9a:72:4d:a1:02:54:eb: 54:5b:5d:03:b6:dd:c0:20:94:09:d7:c7:0b:8c:cc:b6:76:3a: 95:67:56:9a:24:f9:a8:75:25:1d:7f:33:b1:aa:72:7f:33:f1: e0:5b:6b:c8:2b:6c:9e:b3:73:1c:08:c0:ae:ef:79:6c:c5:ef: 92:b3:3e:be:bf:3a:5f:3a:b5:70:f1:2f:a7:d0:aa:ed:7b:ce: 8b:98:73:60:38:e3:70:ca:73:48:f7:97:8c:55:a6:43:b0:3c: be:08:4c:a8:fc:4a:6a:1e:7f:ce:57:2c:30:dc:67:17:5b:42: e9:f3:41:5d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYPGhQkoDuP5IrMNm5WSLZJFy4+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG MzU5RkFEOTAeFw0yNjA3MjcwNTM4MzJaFw0yNjA4MDIwMjU5MzJaMDMxMTAvBgNV BAMTKDlGRjVCRDVDMjM1RTc5NDU2ODMyMDU2QUQ4RDdEMzdCNDI1RjI3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4QdaDNvyy8gjywDwc/ayvaHh tkr9NDXKFI1FgclDm26uaGRl/e62O4xOWyRZ1aMbGaiMl9kliJahfllTxhxo/2GY aZ9U9OlYevCw4JVE+/izi1+IXHXjwAEPw+YZhTmr6POHz74Xdh+Din0YbTp05RDw LS+VwZql2FzCn/5yYT7yZ8J2PnDC1IaptimInruStcxuyrY7OGolDWc7H49LaZEB +GUrxajcjk0X3ydl5dnrQDDiJXGRwPMEs+BZ+KmEWdNvIDlewI/WznWY91WDLu0Z GQPHDqvsL1qAVR4EzJ8Jw7XOD1dHQFmXb+RwZas+zrsD9z4HHIutmDTIYrtLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUn/W9XCNeeUVoMgVq2NfTe0JfJ5swHwYDVR0j BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1 MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0 MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wL0Q4NkYwQzBCREZEQTcxQUZCNEY3NTc0 N0Y3NkE5QUY3RjM1OUZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQNetVSUI7ciVw2aZKbzOb6i0S b5LLcFyQW8oEAfvDSqdt0xggxGIRgRkmOZRhPJF+hhO2TfVBA6YKjVqtA+VYJ5Gl Af0sBihYxDni1w4zgIMFQSjZ1sFiNVy27WYGaBaTiSjidvderxBnlVvbxP3DMLG0 0dqyO2QjOImfuIRb6hy1Z5XZL01sNZpyTaECVOtUW10Dtt3AIJQJ18cLjMy2djqV Z1aaJPmodSUdfzOxqnJ/M/HgW2vIK2yes3McCMCu73lsxe+Ssz6+vzpfOrVw8S+n 0Krte86LmHNgOONwynNI95eMVaZDsDy+CEyo/EpqHn/OVyww3GcXW0Lp80Fd -----END CERTIFICATE-----Generated at Wed Jul 29 12:51:52 2026 by rpki-client