$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft File: 33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft (raw, json) Hash identifier: fdxls3aeA3LPMD37D4VpxoPTgR9RsKA5k5cDc4f278I= Subject key identifier: F0:ED:1E:9A:E2:40:45:30:99:42:C4:BB:A3:05:CD:77:F2:AC:6B:0D Authority key identifier: 33:E9:DA:08:32:A9:BB:70:3F:42:DA:2C:E5:35:27:A2:F1:04:D5:09 Certificate issuer: /CN=33E9DA0832A9BB703F42DA2CE53527A2F104D509 Certificate serial: 2F49099F37F61E64A863E41D74239B27FA39EABC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft Manifest number: CA Signing time: Fri 04 Sep 2026 22:16:16 +0000 Manifest this update: Fri 04 Sep 2026 22:11:16 +0000 Manifest next update: Thu 10 Sep 2026 04:32:16 +0000 Files and hashes: 1: 323830333a313664303a3a2f33322d3438203d3e20323734303935.roa (hash: 6b95m7N08ZechIbjRb2Hpzv53Ra/SfE3ZBsqFOO98q4=) 2: 33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl (hash: 84hPCIUYi8yxxRGQkUC4j2CMTZKf6vXPkSjYtFrnxUc=) 3: 323830333a313664303a34303a3a2f34382d3634203d3e20323734303935.roa (hash: j77hz/ZnpsY1InzrXUYv6nLMZUxUpmmKHtF9jXM2Jb8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Sep 2026 22:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:49:09:9f:37:f6:1e:64:a8:63:e4:1d:74:23:9b:27:fa:39:ea:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33E9DA0832A9BB703F42DA2CE53527A2F104D509 Validity Not Before: Sep 4 22:11:16 2026 GMT Not After : Sep 10 04:32:16 2026 GMT Subject: CN=F0ED1E9AE24045309942C4BBA305CD77F2AC6B0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:e6:54:a9:42:34:3c:7c:5b:50:7d:1f:56: 7d:ad:2d:89:11:98:6e:32:a4:9b:cf:bf:05:69:c2: 2c:36:e2:49:e2:ae:08:ca:27:1b:b7:c5:63:c1:01: 86:4b:c9:c7:f7:8b:62:31:2f:53:67:0d:38:24:1c: 5d:74:b0:ed:0c:de:8c:aa:a3:e6:b3:a1:71:14:66: 36:34:61:8c:32:e5:b1:d6:ff:89:1a:18:cd:90:05: 3c:a1:f6:be:d8:c9:77:fa:90:81:19:3e:c9:34:a7: 21:9a:e3:cc:79:da:d4:6e:22:94:c2:50:ce:8d:17: b7:24:3f:b3:f8:48:85:1d:ed:aa:bf:eb:dc:8c:45: 29:84:89:1a:18:ab:cd:ac:0d:d2:0a:ce:c2:a5:10: 0d:87:f0:25:1e:fb:c9:68:0b:3f:84:0d:06:90:cc: c3:50:72:4a:5b:42:34:6a:d3:8c:ef:81:66:44:ef: 7a:61:d4:d7:e5:2e:45:5d:8e:9c:43:fa:33:7e:56: b3:ff:ad:5d:a6:db:a2:d4:0a:85:cb:15:f6:05:0b: 29:70:02:bc:c3:a7:dd:35:36:be:cb:1f:01:72:49: 33:5c:fb:c1:67:8e:38:94:a5:32:59:2f:a7:f3:05: 43:3b:27:d0:ba:66:df:92:37:55:2f:10:25:4a:65: c4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:ED:1E:9A:E2:40:45:30:99:42:C4:BB:A3:05:CD:77:F2:AC:6B:0D X509v3 Authority Key Identifier: keyid:33:E9:DA:08:32:A9:BB:70:3F:42:DA:2C:E5:35:27:A2:F1:04:D5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B91C07017D1242C9500FF3F46B6EDB1AF4E29321B9786E9AABEDED071C128213/0/33E9DA0832A9BB703F42DA2CE53527A2F104D509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:83:2c:94:a5:5c:51:e4:7c:ba:ed:3d:13:3b:d9:53:28:6c: f7:87:b0:b0:3d:d5:ed:3c:0d:a5:2a:9d:59:5d:d3:20:73:d8: d5:2a:1a:f2:c0:4d:d4:bd:f9:68:f6:67:0b:d9:ee:00:0f:51: c4:34:12:dc:80:c7:c2:bb:19:ce:e1:dd:05:b1:e1:02:9a:c0: 79:20:46:d0:24:42:53:68:21:96:cb:c2:ed:6d:8e:c9:42:47: 14:34:d6:a8:13:ea:67:6a:4c:3e:7c:9f:de:77:ce:3f:cd:d2: 99:1b:88:fb:c4:e2:22:65:46:d0:79:de:a7:c7:ce:01:11:11: a0:0a:5d:b3:26:c3:e0:94:86:39:40:7a:2b:c6:33:54:47:cd: 38:f5:ac:f7:65:e9:ed:aa:45:38:ed:f1:fd:85:76:1c:74:91: 60:3f:d1:a6:f7:53:67:c2:89:7b:b0:95:62:b8:b5:8b:7c:6e: 26:7d:0f:34:97:0e:4b:be:1f:48:c8:5d:b6:55:42:4b:d8:42: 06:27:0b:4c:99:eb:05:fa:c6:49:ce:c1:6f:39:24:56:88:9d: 9c:51:f9:c6:69:0c:d7:30:2a:e7:b1:a2:62:9e:8e:31:a2:5d: ba:50:6d:14:ee:b7:73:cf:26:85:12:47:93:2e:f4:f9:d7:91: 1e:0c:db:0f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUL0kJnzf2HmSoY+QddCObJ/o56rwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFOURBMDgzMkE5QkI3MDNGNDJEQTJDRTUzNTI3QTJG MTA0RDUwOTAeFw0yNjA5MDQyMjExMTZaFw0yNjA5MTAwNDMyMTZaMDMxMTAvBgNV BAMTKEYwRUQxRTlBRTI0MDQ1MzA5OTQyQzRCQkEzMDVDRDc3RjJBQzZCMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EuZUqUI0PHxbUH0fVn2tLYkR mG4ypJvPvwVpwiw24knirgjKJxu3xWPBAYZLycf3i2IxL1NnDTgkHF10sO0M3oyq o+azoXEUZjY0YYwy5bHW/4kaGM2QBTyh9r7YyXf6kIEZPsk0pyGa48x52tRuIpTC UM6NF7ckP7P4SIUd7aq/69yMRSmEiRoYq82sDdIKzsKlEA2H8CUe+8loCz+EDQaQ zMNQckpbQjRq04zvgWZE73ph1NflLkVdjpxD+jN+VrP/rV2m26LUCoXLFfYFCylw ArzDp901Nr7LHwFySTNc+8FnjjiUpTJZL6fzBUM7J9C6Zt+SN1UvECVKZcQbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8O0emuJARTCZQsS7owXNd/Ksaw0wHwYDVR0j BBgwFoAUM+naCDKpu3A/Qtos5TUnovEE1QkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9COTFDMDcwMTdEMTI0MkM5NTAwRkYzRjQ2QjZFREIxQUY0 RTI5MzIxQjk3ODZFOUFBQkVERUQwNzFDMTI4MjEzLzAvMzNFOURBMDgzMkE5QkI3 MDNGNDJEQTJDRTUzNTI3QTJGMTA0RDUwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zM0U5REEwODMyQTlCQjcwM0Y0 MkRBMkNFNTM1MjdBMkYxMDRENTA5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjkxQzA3MDE3RDEyNDJDOTUwMEZGM0Y0NkI2RURCMUFGNEUyOTMyMUI5 Nzg2RTlBQUJFREVEMDcxQzEyODIxMy8wLzMzRTlEQTA4MzJBOUJCNzAzRjQyREEy Q0U1MzUyN0EyRjEwNEQ1MDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvgyyUpVxR5Hy67T0TO9lTKGz3 h7CwPdXtPA2lKp1ZXdMgc9jVKhrywE3Uvflo9mcL2e4AD1HENBLcgMfCuxnO4d0F seECmsB5IEbQJEJTaCGWy8LtbY7JQkcUNNaoE+pnakw+fJ/ed84/zdKZG4j7xOIi ZUbQed6nx84BERGgCl2zJsPglIY5QHorxjNUR8049az3ZentqkU47fH9hXYcdJFg P9Gm91Nnwol7sJViuLWLfG4mfQ80lw5Lvh9IyF22VUJL2EIGJwtMmesF+sZJzsFv OSRWiJ2cUfnGaQzXMCrnsaJino4xol26UG0U7rdzzyaFEkeTLvT515EeDNsP -----END CERTIFICATE-----Generated at Sat Sep 5 02:15:17 2026 by rpki-client