$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8280F1138BB12C25B1E565C01B237DBA5899A102A210BBB29CC478A5DF2B1670/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.mft File: 685416AC7C3F00493C429D1B5C4EDA5775D365FE.mft (raw, json) Hash identifier: M2qg2B4JwRvgKeef1hBfKeESqoK6h0m+vXylgZ9tkUo= Subject key identifier: D7:F5:6F:F3:B0:3D:44:D3:4F:A4:10:80:EB:3B:E1:FD:FF:DA:FC:4A Authority key identifier: 68:54:16:AC:7C:3F:00:49:3C:42:9D:1B:5C:4E:DA:57:75:D3:65:FE Certificate issuer: /CN=685416AC7C3F00493C429D1B5C4EDA5775D365FE Certificate serial: 20AF3CFAA951137898A3C46220D4B28AAC19C49D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8280F1138BB12C25B1E565C01B237DBA5899A102A210BBB29CC478A5DF2B1670/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.mft Manifest number: 57 Signing time: Sun 23 Aug 2026 15:59:36 +0000 Manifest this update: Sun 23 Aug 2026 15:54:36 +0000 Manifest next update: Sat 29 Aug 2026 12:29:36 +0000 Files and hashes: 1: 34352e3233342e3136352e302f32342d3234203d3e203239383032.roa (hash: 8gcKOjx7c2CIu7sTbhuHiPfdeeP4oH4RVDcJn3t+R5I=) 2: 685416AC7C3F00493C429D1B5C4EDA5775D365FE.crl (hash: iQM22Yi1cLMacXK0mrqqJOCWfGelLUNthoroU9cB++Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8280F1138BB12C25B1E565C01B237DBA5899A102A210BBB29CC478A5DF2B1670/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.crl rsync://repository.lacnic.net/rpki/lacnic/8280F1138BB12C25B1E565C01B237DBA5899A102A210BBB29CC478A5DF2B1670/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Aug 2026 22:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:af:3c:fa:a9:51:13:78:98:a3:c4:62:20:d4:b2:8a:ac:19:c4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=685416AC7C3F00493C429D1B5C4EDA5775D365FE Validity Not Before: Aug 23 15:54:36 2026 GMT Not After : Aug 29 12:29:36 2026 GMT Subject: CN=D7F56FF3B03D44D34FA41080EB3BE1FDFFDAFC4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8e:d9:65:44:9d:95:c3:c3:98:62:36:42:97: 29:fb:cd:62:38:b5:28:13:07:ab:b1:15:3c:7d:d5: c3:41:89:28:b1:51:03:51:5a:1c:37:ca:3f:69:18: 55:a0:17:c9:25:2a:82:43:b8:37:b8:67:3d:a7:0a: 40:96:ae:5d:77:d4:d7:8c:d9:e8:40:a7:92:2c:71: 99:47:55:28:f3:40:3f:7d:22:d6:3e:28:9c:e6:af: 75:2d:50:dc:03:f6:ef:4a:33:96:15:25:12:af:42: 3e:d0:5c:a4:de:11:88:40:89:d6:e3:9d:fa:b0:d7: 88:a6:ea:8b:f6:64:14:21:8f:c8:fb:99:7f:5f:d8: 80:c4:b3:7a:71:eb:e5:f1:2b:b1:40:f4:e4:9f:0d: 71:cc:b5:d8:26:a8:36:2c:0e:15:41:68:00:ea:25: 59:c4:24:33:85:32:b5:92:32:49:fd:4f:7d:e8:4c: aa:61:c4:a7:f2:dd:91:7e:d6:ca:72:58:e0:60:73: 5c:35:1b:54:e4:2a:70:8f:a2:cf:5f:b8:75:29:a2: fa:d6:a6:2c:c9:2a:a5:58:b5:52:70:f5:21:47:2f: d4:c8:b6:0b:fe:b9:89:44:a0:ba:74:dc:da:a2:f7: 79:a5:d5:e5:33:09:0d:12:bc:91:9d:ed:23:f6:4e: 24:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F5:6F:F3:B0:3D:44:D3:4F:A4:10:80:EB:3B:E1:FD:FF:DA:FC:4A X509v3 Authority Key Identifier: keyid:68:54:16:AC:7C:3F:00:49:3C:42:9D:1B:5C:4E:DA:57:75:D3:65:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8280F1138BB12C25B1E565C01B237DBA5899A102A210BBB29CC478A5DF2B1670/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8280F1138BB12C25B1E565C01B237DBA5899A102A210BBB29CC478A5DF2B1670/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:de:e1:62:ef:19:71:13:24:f3:ed:84:54:e0:52:16:f3:3a: 58:d8:47:4d:8b:ab:a4:a1:e0:3f:7f:a3:4d:90:b2:f7:97:5b: 6b:a9:86:cd:f9:95:e8:b6:a5:96:a6:f1:82:40:89:87:8c:58: 7e:0f:2f:d7:5a:ab:ec:30:49:e8:bb:ce:b6:fc:8d:18:d3:c8: 7c:98:7c:dc:b0:1f:ac:0a:fe:3d:c3:fc:60:59:c2:f9:99:43: f1:b3:a8:b2:23:9a:82:57:d1:6b:ae:43:8e:50:04:0b:b0:b8: 69:11:fc:97:06:fa:20:70:5c:e7:f4:46:c9:ec:92:fd:83:d9: c9:36:fb:22:8e:f8:16:b6:89:d6:9e:b3:d9:e8:4d:ab:85:eb: 4c:d8:ba:1e:be:2e:a9:5e:f2:86:91:0e:ac:39:fb:d3:8c:0b: f9:57:39:3a:56:d6:83:5b:1d:06:58:e7:3a:08:ea:90:55:3b: d7:ce:c5:ec:86:a0:7a:69:f7:b6:66:11:8c:5a:06:86:0c:62: 56:b8:18:89:d3:67:d5:c0:c6:19:a2:df:6c:07:a0:96:ed:3f: ca:47:88:b7:ae:2c:ef:25:65:bf:b0:08:df:8f:73:2c:10:0b: 83:b8:8f:e9:c2:26:84:25:31:dc:ec:34:c1:8e:2f:27:05:8b: 7d:f7:6f:5b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIK88+qlRE3iYo8RiINSyiqwZxJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg1NDE2QUM3QzNGMDA0OTNDNDI5RDFCNUM0RURBNTc3 NUQzNjVGRTAeFw0yNjA4MjMxNTU0MzZaFw0yNjA4MjkxMjI5MzZaMDMxMTAvBgNV BAMTKEQ3RjU2RkYzQjAzRDQ0RDM0RkE0MTA4MEVCM0JFMUZERkZEQUZDNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFjtllRJ2Vw8OYYjZClyn7zWI4 tSgTB6uxFTx91cNBiSixUQNRWhw3yj9pGFWgF8klKoJDuDe4Zz2nCkCWrl131NeM 2ehAp5IscZlHVSjzQD99ItY+KJzmr3UtUNwD9u9KM5YVJRKvQj7QXKTeEYhAidbj nfqw14im6ov2ZBQhj8j7mX9f2IDEs3px6+XxK7FA9OSfDXHMtdgmqDYsDhVBaADq JVnEJDOFMrWSMkn9T33oTKphxKfy3ZF+1spyWOBgc1w1G1TkKnCPos9fuHUpovrW pizJKqVYtVJw9SFHL9TItgv+uYlEoLp03Nqi93ml1eUzCQ0SvJGd7SP2TiQ3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1/Vv87A9RNNPpBCA6zvh/f/a/EowHwYDVR0j BBgwFoAUaFQWrHw/AEk8Qp0bXE7aV3XTZf4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84MjgwRjExMzhCQjEyQzI1QjFFNTY1QzAxQjIzN0RCQTU4 OTlBMTAyQTIxMEJCQjI5Q0M0NzhBNURGMkIxNjcwLzAvNjg1NDE2QUM3QzNGMDA0 OTNDNDI5RDFCNUM0RURBNTc3NUQzNjVGRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82ODU0MTZBQzdDM0YwMDQ5M0M0 MjlEMUI1QzRFREE1Nzc1RDM2NUZFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODI4MEYxMTM4QkIxMkMyNUIxRTU2NUMwMUIyMzdEQkE1ODk5QTEwMkEy MTBCQkIyOUNDNDc4QTVERjJCMTY3MC8wLzY4NTQxNkFDN0MzRjAwNDkzQzQyOUQx QjVDNEVEQTU3NzVEMzY1RkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCh3uFi7xlxEyTz7YRU4FIW8zpY 2EdNi6ukoeA/f6NNkLL3l1trqYbN+ZXotqWWpvGCQImHjFh+Dy/XWqvsMEnou862 /I0Y08h8mHzcsB+sCv49w/xgWcL5mUPxs6iyI5qCV9FrrkOOUAQLsLhpEfyXBvog cFzn9EbJ7JL9g9nJNvsijvgWtonWnrPZ6E2rhetM2Loevi6pXvKGkQ6sOfvTjAv5 Vzk6VtaDWx0GWOc6COqQVTvXzsXshqB6afe2ZhGMWgaGDGJWuBiJ02fVwMYZot9s B6CW7T/KR4i3rizvJWW/sAjfj3MsEAuDuI/pwiaEJTHc7DTBji8nBYt9929b -----END CERTIFICATE-----Generated at Mon Aug 24 13:29:17 2026 by rpki-client