$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: Xd+T1JKPUbxIIfUBY7yCj5bISTvKkxV9UluxggWnapA= Subject key identifier: 24:09:3A:40:F9:D7:91:F9:58:0A:F1:57:94:B9:35:C8:10:81:4B:68 Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 457B4B2D536956752D4CAFB259BA30214432DB7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: 01DC Signing time: Thu 17 Sep 2026 17:13:33 +0000 Manifest this update: Thu 17 Sep 2026 17:08:33 +0000 Manifest next update: Wed 23 Sep 2026 09:59:33 +0000 Files and hashes: 1: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: n2Np3ZSzs9Qry+n/QcWI/XVwI4Adzscpv34w6aLelEs=) 2: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: 2ROMy1hMNtl4LlD4eAmab5XkXJI77b/wCGmKJrMFckU=) 3: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: 4+0+laYd/gjl0+jkfgEK+nHksN4AGqoMqPNWWIVp110=) 4: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: pROQMKsiDV21pFjsta+9j86ncqU60mdI9hZdoI3SRKo=) 5: 34352e3136342e32322e302f32342d3234203d3e203238343233.roa (hash: nzyKnIKIISe/UrSpui0CPT44hI//cDpiy8iUynUn8js=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7b:4b:2d:53:69:56:75:2d:4c:af:b2:59:ba:30:21:44:32:db:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Sep 17 17:08:33 2026 GMT Not After : Sep 23 09:59:33 2026 GMT Subject: CN=24093A40F9D791F9580AF15794B935C810814B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:91:5b:1b:74:b9:1e:31:5c:eb:93:b1:50: d6:3f:32:7a:7e:3d:4b:68:0b:e7:05:fc:00:1c:86: 68:4e:e4:60:00:04:d8:cf:7d:7d:55:d9:76:54:82: ca:5d:34:1d:08:93:4b:c7:8b:5e:ad:86:4c:de:80: b5:b9:b2:45:8a:46:f0:9e:32:3d:aa:ed:b6:ad:09: 0a:4f:7b:81:a6:cb:d4:f0:64:78:0c:dc:20:ff:72: 49:bd:71:2e:9e:d2:ca:d4:4e:15:47:34:58:ca:4f: eb:b1:b2:5f:86:2c:f1:52:dc:30:57:d6:41:63:50: bf:b1:a7:e7:86:a7:82:07:86:22:21:f6:a3:dc:f2: 31:a4:87:15:a2:c5:77:35:cb:ab:2c:6c:a2:80:4a: 05:15:59:d6:3e:78:01:e1:f2:b0:c6:9c:0d:ee:65: 98:51:f7:1f:80:9d:d7:64:ed:15:93:ee:0d:e3:02: 06:2c:36:05:23:af:4a:63:0d:7d:fe:ca:34:fc:54: d4:8d:d0:2b:ee:b9:52:57:40:20:e6:c2:f4:fb:ac: af:a1:56:82:18:2b:fc:6d:6b:8d:bd:14:fe:96:15: 96:41:ea:ce:37:fa:ce:ea:56:20:5e:1b:10:39:33: d2:14:db:94:92:77:e9:da:31:dc:9d:37:9e:8c:6f: 1f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:09:3A:40:F9:D7:91:F9:58:0A:F1:57:94:B9:35:C8:10:81:4B:68 X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a3:f3:16:f5:d6:9d:b0:39:c3:65:c5:30:a2:81:ce:ac:05: b8:bb:ce:9a:41:71:73:a9:53:68:0a:37:28:1a:b0:82:c2:a4: a0:02:3b:1b:2e:33:d3:c2:e0:ad:86:96:0d:90:b1:7d:b6:f8: 98:dd:a5:17:fa:f9:07:69:bf:8b:e3:63:2b:ee:39:38:a6:50: 15:f7:93:7f:0e:bf:b4:b0:24:a5:b7:85:5d:e7:e7:4d:5c:1c: 19:b0:d2:80:d5:28:05:7a:5e:1d:6a:08:10:4b:6f:09:a1:3c: aa:ca:9e:06:4c:21:81:19:1f:87:51:03:77:3f:2a:35:f5:22: 76:d4:b9:0c:51:2e:94:b7:ce:39:19:0d:84:78:92:35:53:94: 3d:f6:2c:a7:3d:df:cc:79:b7:c3:17:b9:ff:b1:dc:bf:28:29: 2c:f1:c0:7e:97:f0:51:35:85:67:54:21:37:d0:04:ed:78:ca: 8c:90:c9:eb:f4:a8:25:64:05:e5:8f:71:e0:fc:29:28:a6:e8: 2b:b9:e3:4a:5e:6f:16:7c:08:81:7b:f3:01:97:32:c2:c7:a7: f5:37:a8:d3:15:e8:50:a3:ce:e5:c2:61:61:c2:f0:18:8b:fa: 66:27:bd:40:19:bd:cc:e1:da:91:f4:8a:eb:ba:20:46:5b:a4: 55:c7:f8:a8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURXtLLVNpVnUtTK+yWbowIUQy23wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNjA5MTcxNzA4MzNaFw0yNjA5MjMwOTU5MzNaMDMxMTAvBgNV BAMTKDI0MDkzQTQwRjlENzkxRjk1ODBBRjE1Nzk0QjkzNUM4MTA4MTRCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWsZFbG3S5HjFc65OxUNY/Mnp+ PUtoC+cF/AAchmhO5GAABNjPfX1V2XZUgspdNB0Ik0vHi16thkzegLW5skWKRvCe Mj2q7batCQpPe4Gmy9TwZHgM3CD/ckm9cS6e0srUThVHNFjKT+uxsl+GLPFS3DBX 1kFjUL+xp+eGp4IHhiIh9qPc8jGkhxWixXc1y6ssbKKASgUVWdY+eAHh8rDGnA3u ZZhR9x+Anddk7RWT7g3jAgYsNgUjr0pjDX3+yjT8VNSN0CvuuVJXQCDmwvT7rK+h VoIYK/xta429FP6WFZZB6s43+s7qViBeGxA5M9IU25SSd+naMdydN56Mbx+PAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJAk6QPnXkflYCvFXlLk1yBCBS2gwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAco/MW9dadsDnDZcUwooHOrAW4 u86aQXFzqVNoCjcoGrCCwqSgAjsbLjPTwuCthpYNkLF9tviY3aUX+vkHab+L42Mr 7jk4plAV95N/Dr+0sCSlt4Vd5+dNXBwZsNKA1SgFel4daggQS28JoTyqyp4GTCGB GR+HUQN3Pyo19SJ21LkMUS6Ut845GQ2EeJI1U5Q99iynPd/MebfDF7n/sdy/KCks 8cB+l/BRNYVnVCE30ATteMqMkMnr9KglZAXlj3Hg/CkopugrueNKXm8WfAiBe/MB lzLCx6f1N6jTFehQo87lwmFhwvAYi/pmJ71AGb3M4dqR9IrruiBGW6RVx/io -----END CERTIFICATE-----Generated at Fri Sep 18 21:08:56 2026 by rpki-client