$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft File: CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft (raw, json) Hash identifier: kidyYowUR7PmQyy16Bxp4UTWsOUkETN/xQcBuOYpwqY= Subject key identifier: 80:0F:A3:6E:2A:2F:20:26:86:F2:4B:F9:47:36:2B:D3:C9:E8:DC:24 Authority key identifier: CD:A0:1D:15:7A:F5:B5:BA:05:DE:A9:23:DA:DF:3E:D1:DB:59:C2:FA Certificate issuer: /CN=CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA Certificate serial: 09B7928F11B618BE7EA786FD3B1DFEDA4978FD77 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft Manifest number: 04 Signing time: Thu 10 Sep 2026 04:39:22 +0000 Manifest this update: Thu 10 Sep 2026 04:34:22 +0000 Manifest next update: Tue 15 Sep 2026 14:24:22 +0000 Files and hashes: 1: 34352e3139302e3138302e302f32322d3234203d3e20323635363138.roa (hash: wTOyNzoCO5ZqiBtFnDsbxOeajaPi+Hoo10vpt1ihoew=) 2: CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl (hash: YBiBuGbI94Q8rF9/EBnFcQu4GKI0WhvidAAvFWCwmDQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 15 Sep 2026 10:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b7:92:8f:11:b6:18:be:7e:a7:86:fd:3b:1d:fe:da:49:78:fd:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA Validity Not Before: Sep 10 04:34:22 2026 GMT Not After : Sep 15 14:24:22 2026 GMT Subject: CN=800FA36E2A2F202686F24BF947362BD3C9E8DC24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4f:c3:9e:07:fb:e9:fe:43:db:c9:7f:14:07: 59:45:39:93:6d:ca:ce:14:1b:72:9c:99:d5:e9:00: 02:91:af:7c:c1:af:4a:b6:83:97:4d:a4:86:89:2d: 5d:04:8c:12:83:a0:ae:05:c6:de:71:0a:65:70:cd: f5:0f:35:14:19:dd:cb:0a:45:55:2a:6c:9c:47:93: 2e:92:d0:fa:bb:aa:98:88:a3:b9:c1:85:29:f8:5e: 05:53:b8:4c:40:cb:3c:99:05:50:c7:16:7b:03:6f: 13:17:e1:bc:b1:1f:57:24:cf:14:04:ed:47:f2:4c: b9:5e:71:d5:4f:37:5e:2b:dc:59:a0:2a:22:d8:c6: b7:9d:1a:5a:bb:79:e2:3f:36:d5:44:d1:1c:d2:6f: 65:36:40:f9:46:f8:0f:38:99:e6:03:86:22:6d:89: 80:fc:36:a7:16:c9:84:63:d6:a5:b8:4f:96:62:c7: 72:69:72:04:6b:c4:59:81:08:94:25:7c:24:fb:71: 9b:53:c7:f8:40:11:3a:70:19:ea:76:2f:d9:8d:1b: d6:41:d4:73:4d:b8:08:1d:a4:d5:86:c0:a4:ee:49: 80:a3:67:18:e9:ca:d2:40:52:1a:36:82:80:03:91: 3d:5f:29:0b:e3:03:48:14:26:93:85:2c:9c:aa:79: 9f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0F:A3:6E:2A:2F:20:26:86:F2:4B:F9:47:36:2B:D3:C9:E8:DC:24 X509v3 Authority Key Identifier: keyid:CD:A0:1D:15:7A:F5:B5:BA:05:DE:A9:23:DA:DF:3E:D1:DB:59:C2:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:73:a2:58:51:34:91:8c:26:75:91:6e:58:91:95:34:80:de: f4:eb:83:32:45:85:e1:64:d0:83:73:74:31:dc:0c:05:1a:d8: d3:38:de:86:6a:dc:b5:df:e6:8a:b4:54:f1:dc:fe:dd:a5:21: 81:57:d3:a6:e2:0a:eb:fb:3a:22:61:74:52:24:ed:b1:81:0c: e4:d8:39:41:9a:89:1d:03:5a:4b:45:d5:c1:7a:33:bc:c5:c1: 59:a1:bb:75:57:d8:31:ac:c8:6b:b0:f9:f9:a9:6b:c6:4f:52: 06:ea:1f:c8:d7:bf:95:cb:eb:56:bb:93:6c:dd:a9:5a:58:55: b5:f5:6f:2c:2a:3d:35:56:d0:ef:e6:e2:7b:d5:6e:57:d9:e4: ab:51:c4:10:45:b7:40:d0:b0:9a:ad:61:ee:87:df:89:c7:72: 35:6a:0b:e7:64:cc:c9:a6:65:2b:45:cb:3c:56:cb:ec:eb:52: 23:b9:89:fe:40:5c:43:1e:b0:2c:b7:bf:ea:80:3e:cb:aa:3d: fd:ed:70:0b:ca:81:8d:a5:eb:5f:17:72:77:d9:ff:9b:22:1d: 18:52:5b:7f:1f:5a:6e:72:d0:c8:c7:3f:88:49:0b:77:ae:42: 4f:ce:c6:1f:8d:e1:21:57:91:be:0c:97:c7:bc:0c:42:b1:cd: 48:c9:ff:87 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCbeSjxG2GL5+p4b9Ox3+2kl4/XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBMDFEMTU3QUY1QjVCQTA1REVBOTIzREFERjNFRDFE QjU5QzJGQTAeFw0yNjA5MTAwNDM0MjJaFw0yNjA5MTUxNDI0MjJaMDMxMTAvBgNV BAMTKDgwMEZBMzZFMkEyRjIwMjY4NkYyNEJGOTQ3MzYyQkQzQzlFOERDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZT8OeB/vp/kPbyX8UB1lFOZNt ys4UG3KcmdXpAAKRr3zBr0q2g5dNpIaJLV0EjBKDoK4Fxt5xCmVwzfUPNRQZ3csK RVUqbJxHky6S0Pq7qpiIo7nBhSn4XgVTuExAyzyZBVDHFnsDbxMX4byxH1ckzxQE 7UfyTLlecdVPN14r3FmgKiLYxredGlq7eeI/NtVE0RzSb2U2QPlG+A84meYDhiJt iYD8NqcWyYRj1qW4T5Zix3JpcgRrxFmBCJQlfCT7cZtTx/hAETpwGep2L9mNG9ZB 1HNNuAgdpNWGwKTuSYCjZxjpytJAUho2goADkT1fKQvjA0gUJpOFLJyqeZ/xAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUgA+jbiovICaG8kv5RzYr08no3CQwHwYDVR0j BBgwFoAUzaAdFXr1tboF3qkj2t8+0dtZwvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMDFEQzY5M0QzOUI5Q0NDQkY0Qzg0MDU4MUNGMjk0NDFC Q0NFMDVGNEM2MzNGMzMyM0I3NThBRERCOEE0NDg2LzAvQ0RBMDFEMTU3QUY1QjVC QTA1REVBOTIzREFERjNFRDFEQjU5QzJGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREEwMUQxNTdBRjVCNUJBMDVE RUE5MjNEQURGM0VEMURCNTlDMkZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDAxREM2OTNEMzlCOUNDQ0JGNEM4NDA1ODFDRjI5NDQxQkNDRTA1RjRD NjMzRjMzMjNCNzU4QUREQjhBNDQ4Ni8wL0NEQTAxRDE1N0FGNUI1QkEwNURFQTky M0RBREYzRUQxREI1OUMyRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApc6JYUTSRjCZ1kW5YkZU0gN70 64MyRYXhZNCDc3Qx3AwFGtjTON6Gaty13+aKtFTx3P7dpSGBV9Om4grr+zoiYXRS JO2xgQzk2DlBmokdA1pLRdXBejO8xcFZobt1V9gxrMhrsPn5qWvGT1IG6h/I17+V y+tWu5Ns3alaWFW19W8sKj01VtDv5uJ71W5X2eSrUcQQRbdA0LCarWHuh9+Jx3I1 agvnZMzJpmUrRcs8Vsvs61IjuYn+QFxDHrAst7/qgD7Lqj397XALyoGNpetfF3J3 2f+bIh0YUlt/H1puctDIxz+ISQt3rkJPzsYfjeEhV5G+DJfHvAxCsc1Iyf+H -----END CERTIFICATE-----Generated at Fri Sep 11 16:21:08 2026 by rpki-client