$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft File: FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft (raw, json) Hash identifier: KXy0MRovxypLZO8xrskfWjmCNp+7bDL+zkwxeHp0mro= Subject key identifier: C7:FA:56:5D:87:D4:DD:4C:39:1E:04:BA:C6:E6:C1:69:65:F0:7B:68 Authority key identifier: FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33 Certificate issuer: /CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833 Certificate serial: 129ED1358C0503A44622AFF48A15F3E055C4D3AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft Manifest number: 01DA Signing time: Mon 12 Oct 2026 15:15:45 +0000 Manifest this update: Mon 12 Oct 2026 15:10:45 +0000 Manifest next update: Sun 18 Oct 2026 09:02:45 +0000 Files and hashes: 1: 3230302e362e31372e302f32342d3234203d3e203233303331.roa (hash: hvnIF2xT2ndU3f8/3c6JmSIzxtnyDOHEWEfdsPAK6sw=) 2: 3230302e362e31372e302f32342d3234203d3e20323733313233.roa (hash: X3uYYSDFMoNoaWVs0pidK22nCM1Ssv5h7JQPiMndDlo=) 3: FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl (hash: 8SxI3zUvYWvvRyuHBSDxJqpma3INN2NGGPrvJ6mCfj4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Oct 2026 09:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9e:d1:35:8c:05:03:a4:46:22:af:f4:8a:15:f3:e0:55:c4:d3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833 Validity Not Before: Oct 12 15:10:45 2026 GMT Not After : Oct 18 09:02:45 2026 GMT Subject: CN=C7FA565D87D4DD4C391E04BAC6E6C16965F07B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:e3:cd:78:65:67:f7:c5:17:30:21:1d:ac: aa:b3:b5:1d:80:68:7d:a8:f9:d9:44:c2:5e:75:75: 9f:e0:79:21:f7:2a:36:1a:44:50:d1:07:9e:be:69: b6:80:43:14:d4:d2:2d:48:fa:7e:7a:36:9c:e4:c6: c7:eb:f8:45:28:63:42:b2:2f:d7:e8:3b:5f:db:52: 16:e3:c2:a1:d1:46:3f:c8:cf:12:bc:9b:07:73:c0: 89:86:a4:7f:07:06:52:93:6e:1c:10:1e:19:63:52: 4f:ac:ac:98:08:9a:80:8d:d3:7b:7a:4a:f5:b5:0b: 4e:20:9c:41:4f:15:a8:6f:59:5b:31:78:95:fd:27: 91:79:e3:24:b5:dd:5b:89:38:80:f7:f0:e5:eb:8a: 6c:08:79:09:c1:aa:49:ea:ef:14:0e:50:63:bb:9d: 64:1b:93:7a:cc:1b:71:2a:b8:e5:2c:af:a3:55:a2: ee:4f:99:f5:65:d2:50:d5:01:e6:18:fb:ee:cb:79: 81:72:00:25:d6:c1:94:c1:45:95:aa:a0:0c:73:87: 5b:79:d3:10:56:25:dd:03:fb:3e:99:af:b5:2c:19: 92:b1:2b:0c:92:5b:64:4d:69:24:a5:ed:7d:ba:05: 4e:5a:b1:12:8a:3c:39:aa:f6:0b:d3:f1:33:1a:be: b2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FA:56:5D:87:D4:DD:4C:39:1E:04:BA:C6:E6:C1:69:65:F0:7B:68 X509v3 Authority Key Identifier: keyid:FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:78:0e:85:fd:87:8d:ea:3b:e0:3c:f8:f9:8c:e8:22:27:ca: 38:49:d8:6a:bf:ad:30:4a:05:ac:2a:73:3b:83:ab:0f:f2:78: fe:fd:dd:a5:76:c1:25:6e:ba:7f:e4:a7:8a:e4:f1:f4:93:33: e9:53:7a:40:b9:a6:e5:f2:f4:ef:be:9d:e1:65:6e:87:3e:2e: 36:a2:94:14:93:2b:21:b2:be:be:fd:58:05:0d:26:cd:75:46: 76:f0:28:34:7b:5a:42:31:79:3f:12:22:6e:60:12:34:eb:cd: af:77:a7:e9:67:76:2e:ef:9d:14:a3:59:e8:bb:86:7c:93:89: 2c:01:31:a7:b0:f5:a8:e5:84:83:50:e3:a5:c7:06:3e:48:8f: 92:77:cd:a2:72:12:88:53:81:c6:e3:b6:4f:21:bf:c1:7d:9c: ae:52:23:bd:91:87:ab:16:04:1d:5d:9e:1a:13:3d:b2:36:3e: be:d1:7f:fc:44:c4:16:dd:37:ed:ee:aa:d8:b3:ce:f8:78:34: e5:c1:0b:fa:b6:74:3b:0e:5b:44:83:0d:64:e5:47:81:8f:d9: 1d:c5:7f:d2:83:72:3d:e1:f6:75:76:4f:be:b0:50:37:c6:63: 6a:6c:d4:11:28:b1:07:12:d2:26:58:f1:24:9d:be:04:64:b0: 47:a8:87:69 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEp7RNYwFA6RGIq/0ihXz4FXE060wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RjlGQzlFMjQ5MEQ1Mjc2NTNFRjdDRTg0NzE3M0Y5 Q0QwODgzMzAeFw0yNjEwMTIxNTEwNDVaFw0yNjEwMTgwOTAyNDVaMDMxMTAvBgNV BAMTKEM3RkE1NjVEODdENERENEMzOTFFMDRCQUM2RTZDMTY5NjVGMDdCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZOPNeGVn98UXMCEdrKqztR2A aH2o+dlEwl51dZ/geSH3KjYaRFDRB56+abaAQxTU0i1I+n56Npzkxsfr+EUoY0Ky L9foO1/bUhbjwqHRRj/IzxK8mwdzwImGpH8HBlKTbhwQHhljUk+srJgImoCN03t6 SvW1C04gnEFPFahvWVsxeJX9J5F54yS13VuJOID38OXrimwIeQnBqknq7xQOUGO7 nWQbk3rMG3EquOUsr6NVou5PmfVl0lDVAeYY++7LeYFyACXWwZTBRZWqoAxzh1t5 0xBWJd0D+z6Zr7UsGZKxKwySW2RNaSSl7X26BU5asRKKPDmq9gvT8TMavrL1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUx/pWXYfU3Uw5HgS6xubBaWXwe2gwHwYDVR0j BBgwFoAU+o+fyeJJDVJ2U+986EcXP5zQiDMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOEIyOUZCNTUwQUFFMkY4OTM2QzA4NTYzNjg2Q0VDRTMz N0U1OEJENUEyMkFFNjcwNUExRjdDQUEzMTM3QURBLzAvRkE4RjlGQzlFMjQ5MEQ1 Mjc2NTNFRjdDRTg0NzE3M0Y5Q0QwODgzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQThGOUZDOUUyNDkwRDUyNzY1 M0VGN0NFODQ3MTczRjlDRDA4ODMzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDhCMjlGQjU1MEFBRTJGODkzNkMwODU2MzY4NkNFQ0UzMzdFNThCRDVB MjJBRTY3MDVBMUY3Q0FBMzEzN0FEQS8wL0ZBOEY5RkM5RTI0OTBENTI3NjUzRUY3 Q0U4NDcxNzNGOUNEMDg4MzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCieA6F/YeN6jvgPPj5jOgiJ8o4 Sdhqv60wSgWsKnM7g6sP8nj+/d2ldsElbrp/5KeK5PH0kzPpU3pAuabl8vTvvp3h ZW6HPi42opQUkyshsr6+/VgFDSbNdUZ28Cg0e1pCMXk/EiJuYBI0682vd6fpZ3Yu 750Uo1nou4Z8k4ksATGnsPWo5YSDUOOlxwY+SI+Sd82ichKIU4HG47ZPIb/BfZyu UiO9kYerFgQdXZ4aEz2yNj6+0X/8RMQW3Tft7qrYs874eDTlwQv6tnQ7DltEgw1k 5UeBj9kdxX/Sg3I94fZ1dk++sFA3xmNqbNQRKLEHEtImWPEknb4EZLBHqIdp -----END CERTIFICATE-----Generated at Tue Oct 13 23:02:28 2026 by rpki-client