$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json) Hash identifier: K34AHhtFjufhVXEdHPgaoQocjvkuBXdA9MDxRJOLHAM= Subject key identifier: 33:EB:87:60:F2:78:CB:81:68:E3:FC:66:55:94:DE:3F:09:D0:BA:80 Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Certificate serial: 29C9E2A728B6D4C790D7575AD96B2F7C39F0B744 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft Manifest number: 01D5 Signing time: Wed 09 Sep 2026 19:53:51 +0000 Manifest this update: Wed 09 Sep 2026 19:48:51 +0000 Manifest next update: Tue 15 Sep 2026 02:09:51 +0000 Files and hashes: 1: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: L57VWgacj/zmSjf7yEB+iUGkpSFTYzflOQWN6Q62GvI=) 2: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: 7BEdrVbO9SOI0zz8u6tPy9I4Kr/ShvlXucipZdbY414=) 3: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: kgjgwHarhaMs6Iouvoz80koNaPks3R7U+aIkHqr9IWM=) 4: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: dbTjuGS3PzrURh7F2dZU8q1IyUt3ByHVC9cX7x0Huss=) 5: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: XE2awn9T+5ggVHcwpgRTfWKLa6eNnQYDkphDSuamOgQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 15 Sep 2026 02:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c9:e2:a7:28:b6:d4:c7:90:d7:57:5a:d9:6b:2f:7c:39:f0:b7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Validity Not Before: Sep 9 19:48:51 2026 GMT Not After : Sep 15 02:09:51 2026 GMT Subject: CN=33EB8760F278CB8168E3FC665594DE3F09D0BA80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:45:59:b0:42:ed:61:11:21:b6:05:75:fc: a4:8d:dd:67:79:1e:3c:62:96:30:e2:bd:4f:30:82: dd:45:cb:cc:ff:9c:4c:5a:72:21:f2:84:41:80:23: 89:0d:fb:8b:a5:ad:49:14:ca:1b:6c:43:30:f0:eb: e2:81:80:a6:c2:dc:7f:38:f3:bf:d1:cf:8e:fc:52: f4:d6:89:c4:ec:30:70:8e:57:7d:b1:96:e4:77:5c: 99:f5:96:c9:a3:fe:08:cc:bd:b9:5f:4c:f9:58:81: f7:92:09:ba:3d:8d:da:3b:1d:99:b1:f0:5b:7c:eb: a2:ba:09:05:63:a5:a4:db:b4:c2:e6:e0:b9:5f:af: 03:84:d2:7f:2b:e3:86:88:15:04:b8:b7:34:a2:7d: e2:50:7a:c9:56:c0:c8:30:85:dc:be:8e:1a:6b:34: 01:b3:11:25:51:fd:e3:c7:66:57:a2:e7:dc:b1:ab: 8e:d0:ba:9d:2d:0d:6e:5d:c2:cb:9c:bf:fb:71:7d: cf:bf:89:09:ff:85:9f:ea:47:26:b4:b5:fc:e6:79: 5a:1a:69:ac:f3:d8:6f:35:5b:f3:5c:b4:d4:ce:c8: bf:a9:03:44:ee:37:ee:21:5c:96:3f:5e:16:fb:2e: e7:b4:e1:ee:cf:3e:a1:5c:a7:07:d1:8d:87:30:30: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EB:87:60:F2:78:CB:81:68:E3:FC:66:55:94:DE:3F:09:D0:BA:80 X509v3 Authority Key Identifier: keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1b:e3:8c:60:4f:94:c7:95:44:d6:fd:a5:63:c0:08:4a:04: c3:a0:f1:e6:40:a8:4f:9f:94:d0:d0:32:b4:f6:b6:76:ae:a7: 30:e2:df:51:d5:96:9c:92:07:84:7c:8c:ac:8c:26:46:59:20: f1:7f:6d:7a:31:17:16:3b:50:82:25:b5:c3:f5:91:5a:04:6a: f2:57:33:91:e4:15:e8:08:5a:4d:be:2f:97:c9:cd:dc:b6:08: 66:6e:34:90:2d:94:9d:7c:c4:c8:43:0c:72:05:28:d5:30:9b: 68:a7:ca:df:1a:be:c9:ec:f5:07:25:f1:0b:d1:28:82:78:c0: 77:dd:5d:04:a3:c9:b6:f1:36:44:35:fe:c7:0b:bb:59:cb:64: 58:f6:66:d0:17:46:1e:0a:2a:ac:30:ff:cd:d9:c2:ad:d7:a0: 3e:14:cb:cd:29:d2:d0:d5:9a:cf:7f:a4:ec:9e:cf:d7:cf:27: 04:06:88:00:4b:6a:ad:c2:90:9b:04:ce:bc:f2:ab:ad:18:82: 2f:3c:76:62:01:d0:9f:7c:af:98:5e:95:51:90:15:fd:6c:d8: 6d:86:34:74:e6:42:65:c5:5b:9d:b0:6c:e1:95:6d:ca:63:a4: 69:a0:b7:8d:50:53:5c:e0:59:fa:8b:45:d8:d9:e1:c2:ad:8b: 8b:80:f7:0b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKcnipyi21MeQ11da2WsvfDnwt0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JCMzBGQ0EyN0I4 RkJFOERBOTAeFw0yNjA5MDkxOTQ4NTFaFw0yNjA5MTUwMjA5NTFaMDMxMTAvBgNV BAMTKDMzRUI4NzYwRjI3OENCODE2OEUzRkM2NjU1OTRERTNGMDlEMEJBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtU0VZsELtYREhtgV1/KSN3Wd5 HjxiljDivU8wgt1Fy8z/nExaciHyhEGAI4kN+4ulrUkUyhtsQzDw6+KBgKbC3H84 87/Rz478UvTWicTsMHCOV32xluR3XJn1lsmj/gjMvblfTPlYgfeSCbo9jdo7HZmx 8Ft866K6CQVjpaTbtMLm4LlfrwOE0n8r44aIFQS4tzSifeJQeslWwMgwhdy+jhpr NAGzESVR/ePHZlei59yxq47Qup0tDW5dwsucv/txfc+/iQn/hZ/qRya0tfzmeVoa aazz2G81W/NctNTOyL+pA0TuN+4hXJY/Xhb7Lue04e7PPqFcpwfRjYcwMGsRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUM+uHYPJ4y4Fo4/xmVZTePwnQuoAwHwYDVR0j BBgwFoAUyjJcdYvZWuIzjTe7MPyie4++jakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZF MkVCNEQxOTVCQTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFF MjMzOEQzN0JCMzBGQ0EyN0I4RkJFOERBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTMyNUM3NThCRDk1QUUyMzM4 RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzA5MjdENEUxOEY3N0VGQjYwMkFFMjFENTYxMUI4OUM2RTJFQjREMTk1 QkExODQ4REQ5OTYxRjg0QTBFRDJCMi8wL0NBMzI1Qzc1OEJEOTVBRTIzMzhEMzdC QjMwRkNBMjdCOEZCRThEQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMG+OMYE+Ux5VE1v2lY8AISgTD oPHmQKhPn5TQ0DK09rZ2rqcw4t9R1ZackgeEfIysjCZGWSDxf216MRcWO1CCJbXD 9ZFaBGryVzOR5BXoCFpNvi+Xyc3ctghmbjSQLZSdfMTIQwxyBSjVMJtop8rfGr7J 7PUHJfEL0SiCeMB33V0Eo8m28TZENf7HC7tZy2RY9mbQF0YeCiqsMP/N2cKt16A+ FMvNKdLQ1ZrPf6Tsns/XzycEBogAS2qtwpCbBM688qutGIIvPHZiAdCffK+YXpVR kBX9bNhthjR05kJlxVudsGzhlW3KY6RpoLeNUFNc4Fn6i0XY2eHCrYuLgPcL -----END CERTIFICATE-----Generated at Fri Sep 11 04:24:31 2026 by rpki-client