$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft File: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft (raw, json) Hash identifier: JMAX0ceZssVlZAIW97Oqt/N4msxo/zVq/IrCwTj2Hm0= Subject key identifier: 7D:CE:53:AA:03:24:31:48:3E:94:52:50:D2:C0:BA:79:D8:C6:DA:8F Authority key identifier: CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C Certificate issuer: /CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C Certificate serial: 422B7AE85284A62E4F2C621901B1F3080DDEE564 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft Manifest number: 01C9 Signing time: Sat 19 Sep 2026 10:08:29 +0000 Manifest this update: Sat 19 Sep 2026 10:03:29 +0000 Manifest next update: Fri 25 Sep 2026 00:08:29 +0000 Files and hashes: 1: 3136342e3136332e3132302e302f32332d3234203d3e20323635383334.roa (hash: 65dDwQR3/485/Li38nVpENuQzlQQNyWYVOTLzeuFNFE=) 2: 3136342e3136332e3132322e302f32332d3234203d3e20323734323837.roa (hash: pzH8ChjyGM8irvisCLOMRVfFg2o+/iOBhQZU0VAmYyg=) 3: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl (hash: 3JZBQ+i6PhAC3dEsOtGV61y4NGhASOHcJa+sV3CgfXQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2b:7a:e8:52:84:a6:2e:4f:2c:62:19:01:b1:f3:08:0d:de:e5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C Validity Not Before: Sep 19 10:03:29 2026 GMT Not After : Sep 25 00:08:29 2026 GMT Subject: CN=7DCE53AA032431483E945250D2C0BA79D8C6DA8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3b:b7:dd:22:60:d9:20:3b:aa:48:9f:94:43: b8:4b:81:af:ba:09:2e:72:b2:78:57:56:54:f8:04: 2a:73:64:79:bd:3c:25:41:7f:6a:e5:c7:37:e7:de: 6b:ab:80:55:29:f0:28:2d:8c:eb:27:4d:f4:ad:9d: 2f:70:3a:fd:82:b6:1b:31:5b:c2:c0:73:a6:22:36: 65:f5:95:4d:cb:95:d8:2e:6c:4e:d7:36:0e:c7:5e: c6:c8:d8:40:c6:3d:d9:71:a8:33:0a:ad:71:bd:34: 40:2d:e9:e1:8d:59:33:1b:48:7a:f0:cf:27:69:b3: fc:19:70:e9:92:e2:50:79:8c:e2:99:8e:8e:a6:4c: c4:cf:e9:a6:50:72:03:11:b0:d3:68:c6:cd:e4:2b: 33:40:bb:b5:e1:3a:3a:1e:83:c6:07:54:ac:ab:06: 7e:e6:5b:74:74:c8:31:a4:a8:10:8f:dd:2e:66:6e: 48:2f:38:f8:f6:e8:b5:2c:47:16:05:3f:7a:5f:ba: 6d:4e:34:e4:c2:62:99:3a:17:b8:be:3e:55:5d:38: 44:e8:b6:2d:cc:55:83:0b:42:58:16:e6:45:75:22: 90:62:fa:16:bc:1d:d3:69:30:32:7b:c7:27:0d:ef: 9d:c5:76:e1:37:92:37:78:ba:dd:0d:de:95:33:19: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CE:53:AA:03:24:31:48:3E:94:52:50:D2:C0:BA:79:D8:C6:DA:8F X509v3 Authority Key Identifier: keyid:CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ac:b0:9d:fc:e0:1f:03:fb:0d:55:9f:52:f1:80:66:2e:70: 05:63:96:17:b0:1c:48:33:c9:2a:6c:ad:e4:26:da:42:70:5d: 0a:cc:17:fd:ff:33:27:2e:44:d6:bf:61:12:ef:c3:0f:d9:65: 3e:c9:3d:75:cf:a4:a8:68:79:6e:c9:af:71:bd:ef:7a:3d:56: 10:04:bf:b5:09:67:5f:8c:c7:8d:aa:87:f0:a0:d3:f1:91:38: 80:72:1a:09:2b:9d:9f:e1:fe:fb:e2:35:2d:37:b4:0b:de:3b: 16:37:47:ad:aa:8b:a4:76:3d:89:59:28:51:51:20:f2:a1:ec: 38:97:30:98:6d:61:6b:eb:cc:17:8d:12:a9:34:4e:37:11:34: 2a:98:9c:a0:95:00:10:2a:3e:d1:cf:8b:bb:80:f7:92:7e:18: 78:5e:87:06:67:98:a6:79:7b:fa:77:1e:cd:0f:c3:a2:17:26: 53:77:19:b5:1f:97:ca:0c:7b:af:b6:aa:e6:f4:7f:f2:34:aa: f6:b3:b6:b3:41:2d:4f:f4:2f:24:5c:e7:15:a2:32:c7:ff:aa: d0:52:e8:42:a4:84:12:e1:ef:35:43:64:bd:b0:a7:69:b6:46: f6:5c:a3:e9:e4:15:98:73:55:06:e0:dd:0b:a3:40:40:6a:fd: f2:34:49:85 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQit66FKEpi5PLGIZAbHzCA3e5WQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDE5OENENEM2NTZDNEFEQ0VDNzM3MEQ2OUY2MUM0 QUJFREIxQzAeFw0yNjA5MTkxMDAzMjlaFw0yNjA5MjUwMDA4MjlaMDMxMTAvBgNV BAMTKDdEQ0U1M0FBMDMyNDMxNDgzRTk0NTI1MEQyQzBCQTc5RDhDNkRBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXO7fdImDZIDuqSJ+UQ7hLga+6 CS5ysnhXVlT4BCpzZHm9PCVBf2rlxzfn3murgFUp8CgtjOsnTfStnS9wOv2Cthsx W8LAc6YiNmX1lU3LldgubE7XNg7HXsbI2EDGPdlxqDMKrXG9NEAt6eGNWTMbSHrw zydps/wZcOmS4lB5jOKZjo6mTMTP6aZQcgMRsNNoxs3kKzNAu7XhOjoeg8YHVKyr Bn7mW3R0yDGkqBCP3S5mbkgvOPj26LUsRxYFP3pfum1ONOTCYpk6F7i+PlVdOETo ti3MVYMLQlgW5kV1IpBi+ha8HdNpMDJ7xycN753FduE3kjd4ut0N3pUzGVV5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUfc5TqgMkMUg+lFJQ0sC6edjG2o8wHwYDVR0j BBgwFoAUzcAZjNTGVsStzsc3DWn2HEq+2xwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80OTU5RTUyMTk1QUI3Nzk0MkQzODE4NzE4ODM4QjU2ODJC RjBDM0E4NDE4NURFQTU5M0MyNUNCMkVCNTcyM0NFLzAvQ0RDMDE5OENENEM2NTZD NEFEQ0VDNzM3MEQ2OUY2MUM0QUJFREIxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREMwMTk4Q0Q0QzY1NkM0QURD RUM3MzcwRDY5RjYxQzRBQkVEQjFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDk1OUU1MjE5NUFCNzc5NDJEMzgxODcxODgzOEI1NjgyQkYwQzNBODQx ODVERUE1OTNDMjVDQjJFQjU3MjNDRS8wL0NEQzAxOThDRDRDNjU2QzRBRENFQzcz NzBENjlGNjFDNEFCRURCMUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtrLCd/OAfA/sNVZ9S8YBmLnAF Y5YXsBxIM8kqbK3kJtpCcF0KzBf9/zMnLkTWv2ES78MP2WU+yT11z6SoaHluya9x ve96PVYQBL+1CWdfjMeNqofwoNPxkTiAchoJK52f4f774jUtN7QL3jsWN0etqouk dj2JWShRUSDyoew4lzCYbWFr68wXjRKpNE43ETQqmJyglQAQKj7Rz4u7gPeSfhh4 XocGZ5imeXv6dx7ND8OiFyZTdxm1H5fKDHuvtqrm9H/yNKr2s7azQS1P9C8kXOcV ojLH/6rQUuhCpIQS4e81Q2S9sKdptkb2XKPp5BWYc1UG4N0Lo0BAav3yNEmF -----END CERTIFICATE-----Generated at Sat Sep 19 13:25:26 2026 by rpki-client