$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json) Hash identifier: 0bogX/a0KcrrsI4ZqIt1nE30sJ0+Mgjh0lHRJdb557Y= Subject key identifier: 4A:75:31:8D:FD:AD:B2:AD:BA:20:94:24:1F:96:A8:D8:0E:4A:29:ED Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 568A7D3869C3523E2B0438BCD8351DA88684E7CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft Manifest number: 01CD Signing time: Thu 17 Sep 2026 05:45:14 +0000 Manifest this update: Thu 17 Sep 2026 05:40:14 +0000 Manifest next update: Tue 22 Sep 2026 14:28:14 +0000 Files and hashes: 1: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: IgJjXMBJxiS23/W6CFP+y+peXPYelSJVuUxzIfzgeGU=) 2: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=) 3: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: 4YT76mg5dITWNiH2hE5kgjyBgua4a3LhZgbWUTw9x8I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 04:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8a:7d:38:69:c3:52:3e:2b:04:38:bc:d8:35:1d:a8:86:84:e7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Sep 17 05:40:14 2026 GMT Not After : Sep 22 14:28:14 2026 GMT Subject: CN=4A75318DFDADB2ADBA2094241F96A8D80E4A29ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:69:c7:45:a7:90:4f:30:82:b1:08:6d:3d:c3: 18:7e:ed:40:2c:e8:22:ec:fa:00:b4:57:a0:62:7a: e1:4e:8c:1b:1b:a2:08:09:ce:d7:dd:2b:de:64:9d: 6e:af:52:31:59:e3:00:98:95:7c:00:28:6e:60:62: 07:97:60:e8:10:5f:af:02:81:c1:52:d8:db:9f:7b: 75:46:eb:c2:eb:f4:fa:43:40:92:4a:74:26:15:51: 99:8c:0d:be:c5:ce:c2:9d:72:a7:3b:54:9c:22:c2: d5:51:59:86:97:f0:6c:50:ce:7f:c5:96:d0:b9:98: 47:0a:d2:3d:70:33:43:e2:e0:21:dd:60:75:a9:ac: 34:06:53:48:30:c2:d0:e0:11:7a:97:5a:ce:e1:1b: 06:b6:62:f3:d2:a7:db:38:47:a9:d4:e5:e6:66:18: 33:d8:b6:60:c1:49:d0:0b:3b:8d:e0:98:e3:18:82: 06:4c:0b:7d:30:0d:0a:e2:15:69:6d:3f:48:65:d7: b9:49:f0:79:d9:95:32:fe:57:19:7b:05:31:35:7f: 60:92:90:c1:31:24:aa:ab:c8:8d:07:57:26:68:a6: 5b:26:b8:e6:6f:3f:ed:ff:e9:1a:39:1e:e0:11:fc: 00:5c:1a:81:75:37:3e:1e:4b:3f:af:41:fa:6c:71: d3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:75:31:8D:FD:AD:B2:AD:BA:20:94:24:1F:96:A8:D8:0E:4A:29:ED X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ca:7b:7b:98:22:46:34:9b:56:55:dc:62:dc:a3:16:ae:a4: 4e:a4:ca:6e:3c:1a:35:c8:e0:ec:b1:a4:f6:83:04:83:e3:26: c6:5a:88:31:41:65:86:9a:78:ac:7b:c1:cb:45:9b:03:3f:ca: c1:e1:d4:d4:c0:5b:e2:96:00:f7:85:0d:2c:3b:00:50:7b:56: ad:5d:2d:fe:1c:b3:f8:0a:50:c4:c4:2f:de:10:04:42:fc:1d: 28:c3:3a:af:23:64:c6:87:00:8a:7c:1c:0d:7f:94:7c:36:f6: 9b:9b:40:61:fe:4f:2d:37:91:cd:60:61:dd:36:d6:d8:81:3e: 9b:68:00:d6:eb:f8:95:af:66:24:5c:de:b9:32:5a:47:5f:34: 6f:9d:3f:4a:6b:e0:88:f9:f5:d4:f9:80:09:65:07:36:39:86: e4:ce:f9:ae:e4:0f:5b:53:a8:19:0f:74:fb:c9:5c:4f:e1:c6: 62:4d:0c:cb:0f:64:7f:87:07:79:d6:18:6d:e5:7e:e6:06:9f: 15:17:14:db:38:07:98:53:36:96:62:5b:f2:23:47:ab:62:19: f5:7a:d0:13:1a:a1:cb:a6:f9:58:88:4f:a9:3e:d1:ed:ce:5a: 25:3e:bb:46:79:04:70:e8:89:5a:9c:8f:9c:72:6b:6e:12:d4: fa:0f:0d:8e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVop9OGnDUj4rBDi82DUdqIaE58swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNjA5MTcwNTQwMTRaFw0yNjA5MjIxNDI4MTRaMDMxMTAvBgNV BAMTKDRBNzUzMThERkRBREIyQURCQTIwOTQyNDFGOTZBOEQ4MEU0QTI5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUacdFp5BPMIKxCG09wxh+7UAs 6CLs+gC0V6BieuFOjBsboggJztfdK95knW6vUjFZ4wCYlXwAKG5gYgeXYOgQX68C gcFS2Nufe3VG68Lr9PpDQJJKdCYVUZmMDb7FzsKdcqc7VJwiwtVRWYaX8GxQzn/F ltC5mEcK0j1wM0Pi4CHdYHWprDQGU0gwwtDgEXqXWs7hGwa2YvPSp9s4R6nU5eZm GDPYtmDBSdALO43gmOMYggZMC30wDQriFWltP0hl17lJ8HnZlTL+Vxl7BTE1f2CS kMExJKqryI0HVyZoplsmuOZvP+3/6Ro5HuAR/ABcGoF1Nz4eSz+vQfpscdMdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSnUxjf2tsq26IJQkH5ao2A5KKe0wHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFynt7mCJGNJtWVdxi3KMWrqRO pMpuPBo1yODssaT2gwSD4ybGWogxQWWGmnise8HLRZsDP8rB4dTUwFvilgD3hQ0s OwBQe1atXS3+HLP4ClDExC/eEARC/B0owzqvI2TGhwCKfBwNf5R8Nvabm0Bh/k8t N5HNYGHdNtbYgT6baADW6/iVr2YkXN65MlpHXzRvnT9Ka+CI+fXU+YAJZQc2OYbk zvmu5A9bU6gZD3T7yVxP4cZiTQzLD2R/hwd51hht5X7mBp8VFxTbOAeYUzaWYlvy I0erYhn1etATGqHLpvlYiE+pPtHtzlolPrtGeQRw6IlanI+ccmtuEtT6Dw2O -----END CERTIFICATE-----Generated at Fri Sep 18 15:17:22 2026 by rpki-client