$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.mft File: 68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.mft (raw, json) Hash identifier: RtKhkYV/FjLULgKwi3bYV9Yt5a2LteZ6W/etBzIRYqs= Subject key identifier: D7:01:8E:7A:DF:66:A4:9C:4A:AF:96:01:4A:3D:80:20:AD:42:0F:F4 Authority key identifier: 68:F9:C8:35:8C:43:BD:C6:EB:43:2A:48:7D:BF:DE:9F:AB:9B:38:37 Certificate issuer: /CN=68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837 Certificate serial: 248CCDF73B712B5698BF7ADBF226AA31D8C1EAE3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.mft Manifest number: 01EA Signing time: Wed 28 Oct 2026 21:07:16 +0000 Manifest this update: Wed 28 Oct 2026 21:02:16 +0000 Manifest next update: Tue 03 Nov 2026 02:40:16 +0000 Files and hashes: 1: 323830333a633565303a3a2f33322d3438203d3e20323731383135.roa (hash: EHhQN+q86q9nrLXlx2AevwA+m/ReLUH3MQoPJD4EoNc=) 2: 3230302e3231392e35322e302f32322d3234203d3e20323731383135.roa (hash: u2r385pZE/FOoFOyAXTXmO5ngRsDjeLDPdc4ab+sLzs=) 3: 68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.crl (hash: RE7G631LqqoHgML2CuFc7wg9IEdVhj9m0OhfU0c7J8s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.crl rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 02:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8c:cd:f7:3b:71:2b:56:98:bf:7a:db:f2:26:aa:31:d8:c1:ea:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837 Validity Not Before: Oct 28 21:02:16 2026 GMT Not After : Nov 3 02:40:16 2026 GMT Subject: CN=D7018E7ADF66A49C4AAF96014A3D8020AD420FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:89:78:fd:12:ab:ae:c7:29:18:2b:35:59: da:86:37:e0:7a:09:ec:f5:16:ca:e1:7a:28:e1:70: 93:e8:3f:5a:21:ea:4b:09:de:10:a0:0e:21:b4:01: 7a:94:7d:68:8a:5e:aa:3a:3d:f4:0c:ee:e9:97:2a: 4c:bf:54:9f:85:d5:01:28:85:a9:9a:90:d6:b7:7a: 00:08:38:03:a0:58:d0:26:f8:5e:40:8b:b0:28:ab: 99:6e:f4:7b:d7:6b:45:4d:84:af:c1:58:ec:3a:10: 6b:35:9e:1c:5e:f1:77:23:7e:37:7d:82:cf:4d:81: 7c:f1:4b:f1:9b:f9:f9:dc:5a:b9:33:d8:13:74:a0: 16:fc:c4:5c:b1:15:d3:6c:7a:36:b4:e9:d9:30:8b: a4:44:a1:a7:99:2c:f7:a0:a4:fe:f9:9f:d2:33:26: ca:c2:da:ce:86:ed:1d:ca:22:ad:a7:5a:63:70:d5: 27:fe:d2:ae:36:dc:17:ab:23:5a:92:aa:44:ec:92: ce:22:c3:18:4a:2c:eb:29:84:70:09:f7:ec:ca:56: f0:43:23:7b:db:03:f0:4e:39:f9:a0:d0:50:7d:20: ed:38:9a:1a:e1:e9:c0:56:2e:31:b9:c4:69:66:c7: 9a:67:c3:fe:1d:b0:f3:49:c1:06:23:16:2f:9e:ff: 74:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:01:8E:7A:DF:66:A4:9C:4A:AF:96:01:4A:3D:80:20:AD:42:0F:F4 X509v3 Authority Key Identifier: keyid:68:F9:C8:35:8C:43:BD:C6:EB:43:2A:48:7D:BF:DE:9F:AB:9B:38:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:45:57:75:1e:ca:86:53:0c:e7:22:94:ab:71:82:b5:3c:91: 15:fc:ae:62:59:a5:34:4a:ac:fd:98:20:7e:70:9a:ba:1a:2e: a4:76:c1:f3:84:de:7d:dc:ce:5d:eb:0f:e6:4d:3d:c9:13:c3: e4:30:7d:33:23:e1:21:e2:be:9d:91:d7:41:34:68:11:1f:38: 7a:5c:85:d5:b9:35:de:40:10:3a:cc:5f:ed:d2:23:07:32:30: 6f:3a:ac:08:a3:87:be:02:4f:9f:41:51:dd:b3:49:dd:86:83: 93:e0:10:47:5d:a8:09:5e:7e:dd:b1:59:f7:4b:40:9f:73:61: ce:24:c8:79:18:9d:b7:72:e5:29:df:54:58:3d:7b:0d:0e:e5: 7a:5e:b9:c9:6a:e5:00:75:94:9b:f8:61:de:c9:c0:ac:ed:56: 9d:46:dd:b4:4e:81:9b:d9:75:16:cb:62:6c:ce:bc:1b:e5:50: 0c:06:6d:ba:43:a1:89:20:9c:2e:19:98:29:4b:6b:20:ff:e5: b9:18:83:6e:87:e2:5a:ed:e4:66:fc:2a:e2:81:4e:34:4f:c3: fd:8d:cb:3e:30:f6:c7:c2:68:6a:bb:f1:76:e4:f5:c8:12:90: 26:af:66:85:8b:01:da:c4:62:6c:df:38:c4:e2:71:43:62:ec: c7:f3:63:5e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJIzN9ztxK1aYv3rb8iaqMdjB6uMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhGOUM4MzU4QzQzQkRDNkVCNDMyQTQ4N0RCRkRFOUZB QjlCMzgzNzAeFw0yNjEwMjgyMTAyMTZaFw0yNjExMDMwMjQwMTZaMDMxMTAvBgNV BAMTKEQ3MDE4RTdBREY2NkE0OUM0QUFGOTYwMTRBM0Q4MDIwQUQ0MjBGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Sol4/RKrrscpGCs1WdqGN+B6 Cez1FsrheijhcJPoP1oh6ksJ3hCgDiG0AXqUfWiKXqo6PfQM7umXKky/VJ+F1QEo hamakNa3egAIOAOgWNAm+F5Ai7Aoq5lu9HvXa0VNhK/BWOw6EGs1nhxe8Xcjfjd9 gs9NgXzxS/Gb+fncWrkz2BN0oBb8xFyxFdNseja06dkwi6REoaeZLPegpP75n9Iz JsrC2s6G7R3KIq2nWmNw1Sf+0q423BerI1qSqkTsks4iwxhKLOsphHAJ9+zKVvBD I3vbA/BOOfmg0FB9IO04mhrh6cBWLjG5xGlmx5pnw/4dsPNJwQYjFi+e/3TDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1wGOet9mpJxKr5YBSj2AIK1CD/QwHwYDVR0j BBgwFoAUaPnINYxDvcbrQypIfb/en6ubODcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjQxODkwNUQxODI0RDU1MDUyOUU4MzBFQzNBRURCMDFC RUQ0NjQxODUzNUQ2ODY5REMwOUQ0RDlEQkY0OUNDLzAvNjhGOUM4MzU4QzQzQkRD NkVCNDMyQTQ4N0RCRkRFOUZBQjlCMzgzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OEY5QzgzNThDNDNCREM2RUI0 MzJBNDg3REJGREU5RkFCOUIzODM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzY0MTg5MDVEMTgyNEQ1NTA1MjlFODMwRUMzQUVEQjAxQkVENDY0MTg1 MzVENjg2OURDMDlENEQ5REJGNDlDQy8wLzY4RjlDODM1OEM0M0JEQzZFQjQzMkE0 ODdEQkZERTlGQUI5QjM4MzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCRVd1HsqGUwznIpSrcYK1PJEV /K5iWaU0Sqz9mCB+cJq6Gi6kdsHzhN593M5d6w/mTT3JE8PkMH0zI+Eh4r6dkddB NGgRHzh6XIXVuTXeQBA6zF/t0iMHMjBvOqwIo4e+Ak+fQVHds0ndhoOT4BBHXagJ Xn7dsVn3S0Cfc2HOJMh5GJ23cuUp31RYPXsNDuV6XrnJauUAdZSb+GHeycCs7Vad Rt20ToGb2XUWy2Jszrwb5VAMBm26Q6GJIJwuGZgpS2sg/+W5GINuh+Ja7eRm/Cri gU40T8P9jcs+MPbHwmhqu/F25PXIEpAmr2aFiwHaxGJs3zjE4nFDYuzH82Ne -----END CERTIFICATE-----Generated at Sat Oct 31 01:12:16 2026 by rpki-client