$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft File: D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft (raw, json) Hash identifier: yJ7K9+X4eZhS1w+vZwkWzblxERYkWt3ljvc9NqstQfw= Subject key identifier: 4C:32:8E:C9:3F:0B:54:EC:15:9E:77:F1:3F:04:1D:63:71:7D:6C:D0 Authority key identifier: D2:FB:79:58:17:08:2A:32:A8:F3:E5:DA:E4:37:DE:6D:0C:A8:5E:1D Certificate issuer: /CN=D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D Certificate serial: 7232F51B29C2D637B697EFB2CFDC7EFD6C922ECF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft Manifest number: 01E3 Signing time: Tue 03 Nov 2026 20:25:15 +0000 Manifest this update: Tue 03 Nov 2026 20:20:15 +0000 Manifest next update: Mon 09 Nov 2026 17:30:15 +0000 Files and hashes: 1: D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.crl (hash: 2b0oyYBhpJxD36rJ5e31Po9lqInGuw4RXpbYeu8oegI=) 2: 3230312e3133312e34392e302f32342d3234203d3e203237393839.roa (hash: P0fzJ+h/Q02XncK+FmJhsPNU/FsnTWCPnD/zvik8i38=) 3: 323830313a31633a363030303a3a2f34382d3438203d3e203237393839.roa (hash: 7VSGvv53e4ZwkRiydpytjjQhiz6SxxSuZFftT9jPXiA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.crl rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Nov 2026 00:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:32:f5:1b:29:c2:d6:37:b6:97:ef:b2:cf:dc:7e:fd:6c:92:2e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D Validity Not Before: Nov 3 20:20:15 2026 GMT Not After : Nov 9 17:30:15 2026 GMT Subject: CN=4C328EC93F0B54EC159E77F13F041D63717D6CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:bf:97:07:26:3d:23:96:ac:b2:6c:df:1f: 22:98:90:97:3d:5d:10:08:b9:3b:5e:5a:c5:49:ce: f3:ce:3c:45:87:df:3e:02:75:61:eb:e0:8c:18:21: 96:c1:d7:95:1d:08:ae:b9:76:c6:4c:aa:45:7d:8c: 8f:a4:58:f7:d1:23:97:14:c1:ba:43:ff:5c:af:e7: 81:94:04:91:8d:2f:6b:ec:67:21:d0:f5:f8:cd:f1: c8:ab:42:6f:ce:25:02:84:b7:51:a1:13:f7:a2:2b: a3:74:ee:4e:8a:07:54:1f:4b:df:7a:b6:6a:4d:72: f5:28:58:c7:46:43:c9:b6:3a:d0:20:7f:35:9b:a4: d5:68:40:ef:3f:4d:c1:d6:36:bd:f4:42:a9:4b:af: 46:6e:53:72:d5:31:d6:b8:12:56:d8:7b:a2:4d:96: 95:3e:5b:27:b6:ae:63:74:27:fa:85:e2:40:4b:6b: fe:2d:cb:3e:28:fa:44:84:71:0e:55:94:a1:c6:ca: 31:1a:f2:c0:4e:27:83:53:69:0e:fb:d8:ed:1d:44: 11:7d:df:52:51:32:e0:ce:48:d2:c6:2d:72:ea:c9: de:dd:17:11:56:a9:0e:e1:93:e5:b1:e1:57:75:d0: 8f:cc:70:fe:08:8a:1d:48:dd:26:29:11:dc:61:1c: f5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:32:8E:C9:3F:0B:54:EC:15:9E:77:F1:3F:04:1D:63:71:7D:6C:D0 X509v3 Authority Key Identifier: keyid:D2:FB:79:58:17:08:2A:32:A8:F3:E5:DA:E4:37:DE:6D:0C:A8:5E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8e:c7:38:13:91:02:7d:c7:50:3e:fa:1c:ab:3d:9c:50:40: 7e:94:fa:cb:e8:7e:d4:4a:95:10:91:95:64:05:d4:93:a0:48: 9b:b2:52:0e:85:86:5d:79:03:d7:fe:0a:80:fc:d7:aa:39:7f: 4c:f3:11:fe:46:b5:fe:80:11:a1:d8:2c:28:fd:c1:52:95:0d: 9c:c2:0e:85:16:4c:06:80:ed:c8:f2:9f:de:4b:57:e5:5f:2a: b3:ba:a8:a8:78:09:4d:23:0f:17:86:dc:15:ee:f5:ca:c2:83: 45:90:70:b8:9b:05:99:12:9c:f8:88:5d:03:c6:3b:2c:7f:11: c7:e2:d2:bb:ad:c1:8d:e2:02:1c:6a:03:db:26:a3:7e:53:8c: 16:a0:53:7d:c6:11:63:38:35:63:cb:4c:65:3e:16:66:77:b0: c9:0f:c8:15:dd:ba:05:ca:74:70:50:f3:d7:72:56:b9:91:cb: dc:7e:a5:03:98:fe:26:ce:be:37:75:1f:46:25:35:0f:8d:08: 27:d2:37:56:ce:63:09:10:5e:0e:e6:1a:85:ee:d6:9d:c9:76: e2:4c:98:a1:37:68:04:57:81:e8:f6:9d:85:f2:71:96:19:2b: 74:ce:03:95:02:77:da:7d:90:85:bf:46:55:c6:0f:3d:2a:7e: a2:18:e5:6c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcjL1GynC1je2l++yz9x+/WySLs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJGQjc5NTgxNzA4MkEzMkE4RjNFNURBRTQzN0RFNkQw Q0E4NUUxRDAeFw0yNjExMDMyMDIwMTVaFw0yNjExMDkxNzMwMTVaMDMxMTAvBgNV BAMTKDRDMzI4RUM5M0YwQjU0RUMxNTlFNzdGMTNGMDQxRDYzNzE3RDZDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkzr+XByY9I5assmzfHyKYkJc9 XRAIuTteWsVJzvPOPEWH3z4CdWHr4IwYIZbB15UdCK65dsZMqkV9jI+kWPfRI5cU wbpD/1yv54GUBJGNL2vsZyHQ9fjN8cirQm/OJQKEt1GhE/eiK6N07k6KB1QfS996 tmpNcvUoWMdGQ8m2OtAgfzWbpNVoQO8/TcHWNr30QqlLr0ZuU3LVMda4ElbYe6JN lpU+Wye2rmN0J/qF4kBLa/4tyz4o+kSEcQ5VlKHGyjEa8sBOJ4NTaQ772O0dRBF9 31JRMuDOSNLGLXLqyd7dFxFWqQ7hk+Wx4Vd10I/McP4Iih1I3SYpEdxhHPXXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTDKOyT8LVOwVnnfxPwQdY3F9bNAwHwYDVR0j BBgwFoAU0vt5WBcIKjKo8+Xa5DfebQyoXh0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81Mzg4MTQ0Q0MxNDQ1RDE5QUI1NjhEMzcwNEY1N0M0MTA2 RjRBNTk2RTBCRDk0RDU3M0JCMDQ2NUJDOTZFQTg3LzAvRDJGQjc5NTgxNzA4MkEz MkE4RjNFNURBRTQzN0RFNkQwQ0E4NUUxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkZCNzk1ODE3MDgyQTMyQThG M0U1REFFNDM3REU2RDBDQTg1RTFELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTM4ODE0NENDMTQ0NUQxOUFCNTY4RDM3MDRGNTdDNDEwNkY0QTU5NkUw QkQ5NEQ1NzNCQjA0NjVCQzk2RUE4Ny8wL0QyRkI3OTU4MTcwODJBMzJBOEYzRTVE QUU0MzdERTZEMENBODVFMUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7jsc4E5ECfcdQPvocqz2cUEB+ lPrL6H7USpUQkZVkBdSToEibslIOhYZdeQPX/gqA/NeqOX9M8xH+RrX+gBGh2Cwo /cFSlQ2cwg6FFkwGgO3I8p/eS1flXyqzuqioeAlNIw8XhtwV7vXKwoNFkHC4mwWZ Epz4iF0DxjssfxHH4tK7rcGN4gIcagPbJqN+U4wWoFN9xhFjODVjy0xlPhZmd7DJ D8gV3boFynRwUPPXcla5kcvcfqUDmP4mzr43dR9GJTUPjQgn0jdWzmMJEF4O5hqF 7tadyXbiTJihN2gEV4Ho9p2F8nGWGSt0zgOVAnfafZCFv0ZVxg89Kn6iGOVs -----END CERTIFICATE-----Generated at Wed Nov 4 05:46:25 2026 by rpki-client