$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft File: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft (raw, json) Hash identifier: iQMeTR9ccBYR68VhPMqAjhXm1IIouwV0FsOK3AlWPr4= Subject key identifier: F4:2A:A6:63:25:E6:15:2E:91:6E:D9:B5:C4:0A:2D:C8:39:4C:A4:34 Authority key identifier: 3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA Certificate issuer: /CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA Certificate serial: 4259AA2702EADF1CE22BEE008F6F6708B6C747E7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft Manifest number: 01D3 Signing time: Wed 16 Sep 2026 06:38:27 +0000 Manifest this update: Wed 16 Sep 2026 06:33:27 +0000 Manifest next update: Tue 22 Sep 2026 06:04:27 +0000 Files and hashes: 1: 3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa (hash: yjzSJUZj4zGt1MHhVmbLi1zvCsq+jdBn4Xm2sgrDts0=) 2: 323830333a393663303a3a2f33322d3438203d3e20323635363534.roa (hash: +4WvnzVOt/EVUDZN9YCaDCCRLy9YYWSvnAxw1LtprVk=) 3: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl (hash: 8ksWuNvrc2F3WANatuQGnFtzax2vv1zEfBmTDrTuXc8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 06:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:59:aa:27:02:ea:df:1c:e2:2b:ee:00:8f:6f:67:08:b6:c7:47:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA Validity Not Before: Sep 16 06:33:27 2026 GMT Not After : Sep 22 06:04:27 2026 GMT Subject: CN=F42AA66325E6152E916ED9B5C40A2DC8394CA434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:21:92:56:c2:9a:83:62:4f:7a:ad:97:1b: 5e:8b:6b:c9:ae:cc:55:42:21:1a:21:57:8e:41:a2: 3e:db:1f:98:96:25:27:c6:84:bf:da:a6:9c:b1:4c: 77:71:15:3d:b4:d2:0f:d6:c7:57:23:1e:e6:64:14: 56:4d:19:ad:af:6a:a0:0c:ff:17:5e:42:5c:04:38: 34:a2:d1:c6:f2:a7:a1:9d:39:95:09:34:6f:33:16: 51:8f:88:4b:c7:04:e4:89:6e:56:2a:ab:92:2d:a9: 18:b5:f7:a5:cb:64:a3:e7:11:98:a9:f1:0c:18:85: cd:2c:fa:06:3b:d7:9b:bb:4c:3b:ae:d1:77:01:1a: cc:42:e2:82:4f:63:5d:f6:aa:08:59:12:e1:65:96: a7:d4:c2:f8:0e:06:82:cf:f4:76:74:80:6d:88:73: 51:2b:49:97:38:66:97:ca:43:06:74:fe:0c:89:02: 66:02:56:79:23:b7:70:7f:43:91:83:c0:14:75:53: 9f:ec:48:97:63:fe:55:5a:4b:26:87:da:c0:dc:3e: 82:b2:4c:bf:a3:6a:3b:91:ad:d6:37:f8:7f:5a:b9: 8b:0e:e2:fb:66:9f:ec:c6:43:e4:19:7e:5a:ed:79: 4f:4b:3e:4e:31:79:84:07:d3:8d:54:90:bd:56:d1: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2A:A6:63:25:E6:15:2E:91:6E:D9:B5:C4:0A:2D:C8:39:4C:A4:34 X509v3 Authority Key Identifier: keyid:3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:15:5a:ec:f9:5f:60:75:6e:45:5d:55:f0:5e:2d:6c:47:29: f3:fd:f9:0f:64:cc:c4:95:ec:ec:54:6f:5f:db:29:3a:7a:d8: fa:d5:7d:23:14:36:b2:00:67:ae:d3:89:03:d6:60:e2:18:98: 25:63:38:e5:d8:9d:0b:92:12:e7:50:b7:ca:67:e0:c8:ea:33: 53:c0:91:d0:5a:89:83:36:9d:0d:f5:f7:ef:cb:d4:e7:0b:f1: d3:2c:c6:35:db:4d:fe:fe:10:27:70:67:b6:eb:23:7a:09:8a: ef:08:cb:70:fe:90:14:55:1f:b5:a7:91:db:e3:82:23:a5:89: a4:d8:1b:81:7c:26:72:6c:82:d1:bd:32:87:4b:99:76:67:ac: 03:b9:72:a3:06:eb:20:a6:37:b6:2c:ef:63:97:a4:24:a1:c8: 22:e1:58:c8:1f:65:b7:a6:1a:13:55:40:2e:19:3a:8a:f5:c1: b8:e8:10:45:a0:46:c3:5f:52:59:f5:0e:c6:c2:73:c6:3d:d2: 5c:83:7f:53:c2:de:10:91:d8:0e:f5:df:e1:08:fb:e6:41:a7: 1e:d0:da:42:2f:8a:ab:50:0a:aa:55:c2:20:27:e0:d9:b5:09: b3:32:64:cc:d5:b3:a0:ca:5f:af:d4:f4:2d:ac:51:9d:e9:24: 2f:a5:84:9a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQlmqJwLq3xziK+4Aj29nCLbHR+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBQUFCQjk5RjVDRjc5Q0E3QzI1RjAyMkY4NUY4NUUw RENCMkNCQTAeFw0yNjA5MTYwNjMzMjdaFw0yNjA5MjIwNjA0MjdaMDMxMTAvBgNV BAMTKEY0MkFBNjYzMjVFNjE1MkU5MTZFRDlCNUM0MEEyREM4Mzk0Q0E0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aCGSVsKag2JPeq2XG16La8mu zFVCIRohV45Boj7bH5iWJSfGhL/appyxTHdxFT200g/Wx1cjHuZkFFZNGa2vaqAM /xdeQlwEODSi0cbyp6GdOZUJNG8zFlGPiEvHBOSJblYqq5ItqRi196XLZKPnEZip 8QwYhc0s+gY715u7TDuu0XcBGsxC4oJPY132qghZEuFllqfUwvgOBoLP9HZ0gG2I c1ErSZc4ZpfKQwZ0/gyJAmYCVnkjt3B/Q5GDwBR1U5/sSJdj/lVaSyaH2sDcPoKy TL+jajuRrdY3+H9auYsO4vtmn+zGQ+QZflrteU9LPk4xeYQH041UkL1W0egdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU9CqmYyXmFS6Rbtm1xAotyDlMpDQwHwYDVR0j BBgwFoAUPKqruZ9c95ynwl8CL4X4Xg3LLLowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85NjU4NzI5NzhCNDJGRTk5OTcwRUUwNEQ4QjIwNjA3NzEw ODNFMzA3NDFBNTA5QkFFQjAwREI2M0NFQ0IyM0QzLzAvM0NBQUFCQjk5RjVDRjc5 Q0E3QzI1RjAyMkY4NUY4NUUwRENCMkNCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0FBQUJCOTlGNUNGNzlDQTdD MjVGMDIyRjg1Rjg1RTBEQ0IyQ0JBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTY1ODcyOTc4QjQyRkU5OTk3MEVFMDREOEIyMDYwNzcxMDgzRTMwNzQx QTUwOUJBRUIwMERCNjNDRUNCMjNEMy8wLzNDQUFBQkI5OUY1Q0Y3OUNBN0MyNUYw MjJGODVGODVFMERDQjJDQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBeFVrs+V9gdW5FXVXwXi1sRynz /fkPZMzElezsVG9f2yk6etj61X0jFDayAGeu04kD1mDiGJglYzjl2J0LkhLnULfK Z+DI6jNTwJHQWomDNp0N9ffvy9TnC/HTLMY1203+/hAncGe26yN6CYrvCMtw/pAU VR+1p5Hb44IjpYmk2BuBfCZybILRvTKHS5l2Z6wDuXKjBusgpje2LO9jl6Qkocgi 4VjIH2W3phoTVUAuGTqK9cG46BBFoEbDX1JZ9Q7GwnPGPdJcg39Twt4QkdgO9d/h CPvmQace0NpCL4qrUAqqVcIgJ+DZtQmzMmTM1bOgyl+v1PQtrFGd6SQvpYSa -----END CERTIFICATE-----Generated at Fri Sep 18 17:08:17 2026 by rpki-client