$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft File: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft (raw, json) Hash identifier: ARh4Wvd4HskZ7XDuHw58Zz9IaB8WP36gtthAY18TnkY= Subject key identifier: AE:1A:FB:87:E6:D9:13:3F:73:C0:B2:93:05:50:82:DA:05:BA:96:E3 Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8 Certificate issuer: /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8 Certificate serial: 582E9F7662A7FBD14C58F2F15D34E5BFB3717140 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft Manifest number: 01CA Signing time: Fri 28 Aug 2026 05:29:36 +0000 Manifest this update: Fri 28 Aug 2026 05:24:36 +0000 Manifest next update: Wed 02 Sep 2026 22:44:36 +0000 Files and hashes: 1: 323830313a31333a323830303a3a2f34382d3438203d3e203237393531.roa (hash: 7Ii/n0Wix6Zqak6Q/U1A56Cz+tHnXu1gP0IO47DgmfQ=) 2: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl (hash: 7MiB1zks5RILMHV4JFoyWSSyWKSyXSAFTymJvgM0tso=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Sep 2026 11:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2e:9f:76:62:a7:fb:d1:4c:58:f2:f1:5d:34:e5:bf:b3:71:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8 Validity Not Before: Aug 28 05:24:36 2026 GMT Not After : Sep 2 22:44:36 2026 GMT Subject: CN=AE1AFB87E6D9133F73C0B293055082DA05BA96E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:18:ef:c4:7c:e5:2d:38:a1:af:3b:e9:a1: 85:2a:a7:63:1e:67:1f:ed:68:1f:fb:7d:a9:d6:ff: 2d:de:02:35:97:87:58:fc:d2:bd:88:f6:32:10:7e: 56:df:35:d5:b4:29:6a:c0:a1:02:45:97:82:a9:59: 0a:89:59:8c:47:d8:e9:08:15:c6:80:9a:b7:d9:07: e7:c6:04:b3:83:3a:e2:ab:be:d9:10:0c:82:4b:1a: e7:be:b9:5f:67:81:71:36:17:ca:9a:ac:7a:e0:e5: af:8b:30:e9:1c:5f:15:8d:39:a5:dc:70:76:6a:bf: 63:17:30:1b:53:9d:45:a0:30:7e:99:9b:4a:d8:e7: 8d:de:98:ab:e1:dd:e1:f9:9d:a5:fe:65:c4:16:e4: 59:ce:ed:df:fb:12:7b:b8:03:78:d4:bb:5c:3a:3b: ec:21:0c:d0:c4:f8:8b:08:74:db:ee:77:7f:ad:b7: 18:48:8a:97:63:a3:2a:81:29:ef:77:6d:42:12:00: e1:ed:8c:a4:cd:50:45:c7:46:6b:d2:5d:83:ad:eb: c7:8f:00:d6:db:df:ca:5f:a2:94:79:a1:94:12:7a: 80:9f:74:3a:cf:f5:33:93:ad:72:3a:0b:14:d0:4e: d3:08:9d:08:b7:00:86:ef:a4:eb:05:8d:9c:c7:84: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1A:FB:87:E6:D9:13:3F:73:C0:B2:93:05:50:82:DA:05:BA:96:E3 X509v3 Authority Key Identifier: keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c6:79:0b:91:ec:e8:09:6e:14:a2:42:a1:a0:48:9d:7c:68: 38:f2:fe:a8:15:65:1d:60:e5:e4:21:84:82:a3:57:6e:2c:25: c8:d2:5d:cd:c4:52:a4:7c:6d:42:ec:bf:42:5f:14:dd:3c:59: 58:c5:8d:9a:7f:f0:3f:3a:de:c1:ac:a5:b7:1b:95:33:5f:4b: b4:f5:ab:11:ae:d2:e9:e9:e6:5c:dc:15:c7:44:4e:5a:83:c4: f9:ee:2e:49:7c:cb:6d:0d:5e:59:28:a3:6e:4b:f4:52:45:21: fd:95:a5:79:63:a0:12:8e:56:ff:94:3a:34:ff:06:93:f7:2a: 50:30:ea:2c:25:c8:71:6e:27:60:b5:d8:e2:6c:92:57:fe:56: e7:bf:8e:1b:65:ad:8f:19:e5:12:c4:37:9e:93:5a:f4:96:c4: 8c:5f:ca:36:35:d0:05:ff:a8:48:22:d2:92:97:10:c6:3b:5d: 9d:25:45:ea:f9:65:11:60:70:bd:48:98:b6:43:b5:93:85:ad: 4f:d9:c0:0c:70:0b:c4:31:36:86:ed:40:01:48:94:10:94:19: bb:d4:63:8d:4c:bd:e7:5e:14:ee:1b:6b:e7:84:bf:e5:19:ca: 6d:da:1f:1e:b4:49:69:94:9b:2f:df:f8:b5:ab:9f:95:8b:8b: 3e:e3:68:7c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWC6fdmKn+9FMWPLxXTTlv7NxcUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCOERGMUYwQkU2MDlGQjZGOTgwMDNFQjk2QzlDREU3 MkI1M0FGODAeFw0yNjA4MjgwNTI0MzZaFw0yNjA5MDIyMjQ0MzZaMDMxMTAvBgNV BAMTKEFFMUFGQjg3RTZEOTEzM0Y3M0MwQjI5MzA1NTA4MkRBMDVCQTk2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY6xjvxHzlLTihrzvpoYUqp2Me Zx/taB/7fanW/y3eAjWXh1j80r2I9jIQflbfNdW0KWrAoQJFl4KpWQqJWYxH2OkI FcaAmrfZB+fGBLODOuKrvtkQDIJLGue+uV9ngXE2F8qarHrg5a+LMOkcXxWNOaXc cHZqv2MXMBtTnUWgMH6Zm0rY543emKvh3eH5naX+ZcQW5FnO7d/7Enu4A3jUu1w6 O+whDNDE+IsIdNvud3+ttxhIipdjoyqBKe93bUISAOHtjKTNUEXHRmvSXYOt68eP ANbb38pfopR5oZQSeoCfdDrP9TOTrXI6CxTQTtMInQi3AIbvpOsFjZzHhBtXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrhr7h+bZEz9zwLKTBVCC2gW6luMwHwYDVR0j BBgwFoAU37jfHwvmCftvmAA+uWyc3nK1OvgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNzEzNDREQzk5NzdBRjIxQjJGM0NERjY1NTYyODI5NTk2 OEY5OTA3OUI1QTlGMzlBQkNEMDRBNzk0OUQ5RDMxLzAvREZCOERGMUYwQkU2MDlG QjZGOTgwMDNFQjk2QzlDREU3MkI1M0FGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERkI4REYxRjBCRTYwOUZCNkY5 ODAwM0VCOTZDOUNERTcyQjUzQUY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjcxMzQ0REM5OTc3QUYyMUIyRjNDREY2NTU2MjgyOTU5NjhGOTkwNzlC NUE5RjM5QUJDRDA0QTc5NDlEOUQzMS8wL0RGQjhERjFGMEJFNjA5RkI2Rjk4MDAz RUI5NkM5Q0RFNzJCNTNBRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLxnkLkezoCW4UokKhoEidfGg4 8v6oFWUdYOXkIYSCo1duLCXI0l3NxFKkfG1C7L9CXxTdPFlYxY2af/A/Ot7BrKW3 G5UzX0u09asRrtLp6eZc3BXHRE5ag8T57i5JfMttDV5ZKKNuS/RSRSH9laV5Y6AS jlb/lDo0/waT9ypQMOosJchxbidgtdjibJJX/lbnv44bZa2PGeUSxDeek1r0lsSM X8o2NdAF/6hIItKSlxDGO12dJUXq+WURYHC9SJi2Q7WTha1P2cAMcAvEMTaG7UAB SJQQlBm71GONTL3nXhTuG2vnhL/lGcpt2h8etElplJsv3/i1q5+Vi4s+42h8 -----END CERTIFICATE-----Generated at Sat Aug 29 11:02:56 2026 by rpki-client