$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft File: CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft (raw, json) Hash identifier: ddanZqMMHvlwdGEwvU3w0J9RUHVAcjey0ZmkdXGVYj0= Subject key identifier: 15:E3:39:45:34:60:90:67:3F:AC:F6:03:BC:A2:5A:DE:02:D1:20:9E Authority key identifier: CD:A0:1D:15:7A:F5:B5:BA:05:DE:A9:23:DA:DF:3E:D1:DB:59:C2:FA Certificate issuer: /CN=CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA Certificate serial: 19B8F5CB3B4DBA1BEBD4BA99B59194F2125F5A97 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft Manifest number: 1C Signing time: Thu 29 Oct 2026 08:10:30 +0000 Manifest this update: Thu 29 Oct 2026 08:05:30 +0000 Manifest next update: Tue 03 Nov 2026 06:30:30 +0000 Files and hashes: 1: 34352e3139302e3138302e302f32322d3234203d3e20323635363138.roa (hash: wTOyNzoCO5ZqiBtFnDsbxOeajaPi+Hoo10vpt1ihoew=) 2: CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl (hash: TrjOcZBXYi/2XODJz8wFIAe9paUVmyueMAdRjT9m73o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 06:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b8:f5:cb:3b:4d:ba:1b:eb:d4:ba:99:b5:91:94:f2:12:5f:5a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA Validity Not Before: Oct 29 08:05:30 2026 GMT Not After : Nov 3 06:30:30 2026 GMT Subject: CN=15E33945346090673FACF603BCA25ADE02D1209E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d0:13:8f:84:97:ba:1b:6c:e0:8b:49:42:5b: b0:dd:33:23:fd:8e:d5:74:85:af:39:32:cb:77:f9: 94:7f:a4:31:89:4b:a1:e9:29:52:63:e6:dc:8e:c2: e1:2f:da:94:42:49:82:19:20:62:00:92:fd:83:f4: 7f:bd:af:d6:cb:74:37:d2:10:e0:c6:84:9a:b0:75: 19:0c:47:90:15:e3:e6:f4:40:32:f7:0e:da:db:f4: cb:8e:3c:cb:9c:0b:cc:76:c2:a3:20:2e:c6:dc:ce: d2:8f:57:e4:79:74:c5:8c:41:05:6c:5b:87:5e:26: 57:be:75:95:61:88:f3:5a:5c:14:4f:e6:61:5d:fd: e9:a8:11:0a:33:d7:ea:5b:9a:03:6a:3a:c1:2d:6e: b7:b6:91:90:4a:0e:2a:c7:86:54:17:f6:56:d4:33: 50:8c:1f:ba:40:36:46:4b:de:72:3a:a5:c9:80:2f: d7:58:c6:19:64:4e:0c:1b:20:5e:f5:6e:06:7f:21: 80:2a:45:d7:4c:29:89:89:c9:74:3d:90:1e:59:c2: ca:af:f3:06:50:6f:c0:c3:b5:89:3d:5f:de:b9:55: 50:d9:a8:a1:ec:1f:0d:1e:87:e8:41:e8:93:6a:3e: 9a:f4:ae:8e:9c:48:9b:77:1c:5b:b6:a4:0e:29:9b: d7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E3:39:45:34:60:90:67:3F:AC:F6:03:BC:A2:5A:DE:02:D1:20:9E X509v3 Authority Key Identifier: keyid:CD:A0:1D:15:7A:F5:B5:BA:05:DE:A9:23:DA:DF:3E:D1:DB:59:C2:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9a:7b:15:ce:44:54:60:37:37:2a:a8:f0:8d:b4:f6:5c:33: fb:03:31:9a:6a:d1:5f:f8:7e:c2:94:7e:84:c2:a8:9e:01:cf: 60:f5:f8:8a:bb:85:24:83:94:a4:90:bc:92:26:c9:d5:80:d1: a6:6b:a2:90:7f:9a:0d:29:06:06:d8:94:d4:25:f2:80:01:6c: 84:6e:ff:60:f5:08:91:48:e0:3a:3b:06:4a:d9:42:ab:31:39: e9:f0:a7:74:28:5e:4f:37:aa:ee:1d:0b:98:f3:28:02:3e:2d: 89:78:19:30:7e:89:7a:9c:fe:25:43:c5:6e:07:91:de:f9:41: 56:84:1e:d7:aa:e2:da:34:68:b2:c7:c3:f4:4f:dc:66:38:be: ba:1a:e8:67:b0:d2:2e:b0:a8:26:65:eb:97:e2:17:5e:62:81: 5c:52:c4:8a:e2:a0:18:f4:5f:7a:c8:03:16:8b:8e:3c:6c:0d: 29:78:b2:63:66:1b:98:b3:8d:74:39:29:b8:1e:8f:2f:15:87: 83:19:ac:d3:f0:75:b0:b1:19:1b:5d:f6:a9:85:6e:10:ce:d4: 52:cf:a8:91:7f:76:4e:89:59:1a:a4:9b:a9:34:3b:1d:6a:90: 17:65:1f:b8:69:f8:06:52:e6:c8:3c:3b:25:43:4b:03:b2:a7: 8d:74:1e:99 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGbj1yztNuhvr1LqZtZGU8hJfWpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBMDFEMTU3QUY1QjVCQTA1REVBOTIzREFERjNFRDFE QjU5QzJGQTAeFw0yNjEwMjkwODA1MzBaFw0yNjExMDMwNjMwMzBaMDMxMTAvBgNV BAMTKDE1RTMzOTQ1MzQ2MDkwNjczRkFDRjYwM0JDQTI1QURFMDJEMTIwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd0BOPhJe6G2zgi0lCW7DdMyP9 jtV0ha85Mst3+ZR/pDGJS6HpKVJj5tyOwuEv2pRCSYIZIGIAkv2D9H+9r9bLdDfS EODGhJqwdRkMR5AV4+b0QDL3Dtrb9MuOPMucC8x2wqMgLsbcztKPV+R5dMWMQQVs W4deJle+dZVhiPNaXBRP5mFd/emoEQoz1+pbmgNqOsEtbre2kZBKDirHhlQX9lbU M1CMH7pANkZL3nI6pcmAL9dYxhlkTgwbIF71bgZ/IYAqRddMKYmJyXQ9kB5Zwsqv 8wZQb8DDtYk9X965VVDZqKHsHw0eh+hB6JNqPpr0ro6cSJt3HFu2pA4pm9ftAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUFeM5RTRgkGc/rPYDvKJa3gLRIJ4wHwYDVR0j BBgwFoAUzaAdFXr1tboF3qkj2t8+0dtZwvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMDFEQzY5M0QzOUI5Q0NDQkY0Qzg0MDU4MUNGMjk0NDFC Q0NFMDVGNEM2MzNGMzMyM0I3NThBRERCOEE0NDg2LzAvQ0RBMDFEMTU3QUY1QjVC QTA1REVBOTIzREFERjNFRDFEQjU5QzJGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREEwMUQxNTdBRjVCNUJBMDVE RUE5MjNEQURGM0VEMURCNTlDMkZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDAxREM2OTNEMzlCOUNDQ0JGNEM4NDA1ODFDRjI5NDQxQkNDRTA1RjRD NjMzRjMzMjNCNzU4QUREQjhBNDQ4Ni8wL0NEQTAxRDE1N0FGNUI1QkEwNURFQTky M0RBREYzRUQxREI1OUMyRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBomnsVzkRUYDc3KqjwjbT2XDP7 AzGaatFf+H7ClH6EwqieAc9g9fiKu4Ukg5SkkLySJsnVgNGma6KQf5oNKQYG2JTU JfKAAWyEbv9g9QiRSOA6OwZK2UKrMTnp8Kd0KF5PN6ruHQuY8ygCPi2JeBkwfol6 nP4lQ8VuB5He+UFWhB7XquLaNGiyx8P0T9xmOL66GuhnsNIusKgmZeuX4hdeYoFc UsSK4qAY9F96yAMWi448bA0peLJjZhuYs410OSm4Ho8vFYeDGazT8HWwsRkbXfap hW4QztRSz6iRf3ZOiVkapJupNDsdapAXZR+4afgGUubIPDslQ0sDsqeNdB6Z -----END CERTIFICATE-----Generated at Fri Oct 30 07:12:50 2026 by rpki-client