$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.mft File: 7E458BAEF9BA9DCE3AA516F258A994358878C467.mft (raw, json) Hash identifier: Cb3lxr8enhjW1nvABFkDhmhuSA2SHk5IgE44otHgjjM= Subject key identifier: 47:54:71:B1:0A:2F:BB:A4:51:81:90:12:E0:B6:47:F1:AD:45:18:C5 Authority key identifier: 7E:45:8B:AE:F9:BA:9D:CE:3A:A5:16:F2:58:A9:94:35:88:78:C4:67 Certificate issuer: /CN=7E458BAEF9BA9DCE3AA516F258A994358878C467 Certificate serial: 0FFC93070273E853523B83C7B8CA90161085AE47 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.mft Manifest number: 01E2 Signing time: Mon 26 Oct 2026 19:15:02 +0000 Manifest this update: Mon 26 Oct 2026 19:10:02 +0000 Manifest next update: Sun 01 Nov 2026 15:19:02 +0000 Files and hashes: 1: 3230302e33332e32362e302f32332d3234203d3e203238353031.roa (hash: sY1bJy0ofhvKIfnJ07nnNCop3RCl/M2KSWTo/5X3NIY=) 2: 3230302e33332e32362e302f32332d3234203d3e2038313531.roa (hash: efRPn7M+uS03Tsv5yV0dV97eYHT/Lhin7MCw3V3PYbk=) 3: 7E458BAEF9BA9DCE3AA516F258A994358878C467.crl (hash: /J1/WuNZsEx4pLD0ENfZzOOB2ujbEubNlpBDDihTGlM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.crl rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 15:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fc:93:07:02:73:e8:53:52:3b:83:c7:b8:ca:90:16:10:85:ae:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E458BAEF9BA9DCE3AA516F258A994358878C467 Validity Not Before: Oct 26 19:10:02 2026 GMT Not After : Nov 1 15:19:02 2026 GMT Subject: CN=475471B10A2FBBA451819012E0B647F1AD4518C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:5a:b6:6f:12:a8:63:56:27:fa:77:9b:12: 04:82:87:d4:66:32:c3:eb:1d:81:8c:2e:23:32:a5: 71:23:a3:0d:50:3d:bd:70:15:3f:f5:35:a6:4a:ea: 6c:dd:c7:8e:6f:36:96:f8:bd:ed:51:c6:42:e7:5a: 32:57:63:f8:07:44:ae:83:0f:e9:cb:bd:dc:0d:8b: 4b:7c:08:36:b1:40:f0:c9:ef:56:ac:ef:70:fa:d9: c1:20:bc:06:23:c1:ba:58:4e:94:d9:90:b9:30:52: d3:8d:a6:15:67:79:a1:5c:2d:28:03:81:53:f0:33: 6d:42:f4:16:0f:29:9a:3f:0c:6e:82:1b:5b:4b:41: 55:f3:b8:06:dd:11:0c:01:ca:b6:2d:26:1e:76:da: a5:61:e3:e3:b7:1c:81:da:80:70:fc:a9:7b:69:b5: ad:1f:ad:58:dd:72:2b:65:69:d7:35:78:cd:c4:3c: e2:f7:0f:4d:36:12:2c:5e:58:b7:35:53:14:a8:7b: ae:30:f7:12:58:70:c3:4c:19:fc:4b:66:f8:93:a7: 51:f0:ad:23:06:24:b6:07:15:f3:25:eb:f8:94:b4: 1a:0c:8c:b2:3b:b1:e9:78:8b:e3:39:88:ed:dd:de: 20:08:dc:90:da:ed:cc:c1:01:2e:62:86:93:2f:7f: c6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:54:71:B1:0A:2F:BB:A4:51:81:90:12:E0:B6:47:F1:AD:45:18:C5 X509v3 Authority Key Identifier: keyid:7E:45:8B:AE:F9:BA:9D:CE:3A:A5:16:F2:58:A9:94:35:88:78:C4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b8:ca:fe:ac:3d:42:e2:71:03:95:73:da:8a:0d:24:05:3c: 38:c5:74:21:81:81:f7:c3:de:c7:ee:50:19:b8:76:22:f3:81: 3b:25:13:87:11:ea:6f:2d:e7:7f:91:1a:97:22:80:86:29:bf: b9:85:88:ae:fc:e0:52:52:43:01:5f:2d:c0:91:45:a5:c1:22: f3:0e:14:54:ce:12:8c:6f:4a:b1:32:02:7f:fa:4f:32:e5:33: 05:6a:83:10:04:a9:45:46:da:13:f6:57:9c:fe:6a:8d:7b:bc: b7:19:8d:9f:c6:b2:a2:a0:d3:8b:96:7d:ca:5a:71:00:9a:0f: b2:3d:d3:ca:05:3c:a2:1b:45:8c:52:05:bc:73:e9:38:4c:3f: 72:7b:03:fb:b4:f0:a4:d9:bc:36:3f:10:26:2f:ba:e8:0d:7d: bf:9b:eb:1e:63:f7:a3:35:62:d2:fb:75:22:b0:2c:06:5a:4f: a1:8d:eb:85:a6:b0:6b:91:ea:5b:fd:eb:a3:ec:44:56:45:dc: ba:71:bf:95:fc:19:15:25:a6:df:30:fc:4a:43:b2:04:95:f5: 41:07:46:ad:27:b4:43:50:aa:89:5e:63:13:d2:a7:54:49:59: 8c:6e:55:f7:5d:2e:14:5f:9b:16:9c:38:37:f4:bd:d5:10:3b: 56:ff:93:e6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUD/yTBwJz6FNSO4PHuMqQFhCFrkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U0NThCQUVGOUJBOURDRTNBQTUxNkYyNThBOTk0MzU4 ODc4QzQ2NzAeFw0yNjEwMjYxOTEwMDJaFw0yNjExMDExNTE5MDJaMDMxMTAvBgNV BAMTKDQ3NTQ3MUIxMEEyRkJCQTQ1MTgxOTAxMkUwQjY0N0YxQUQ0NTE4QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB21q2bxKoY1Yn+nebEgSCh9Rm MsPrHYGMLiMypXEjow1QPb1wFT/1NaZK6mzdx45vNpb4ve1RxkLnWjJXY/gHRK6D D+nLvdwNi0t8CDaxQPDJ71as73D62cEgvAYjwbpYTpTZkLkwUtONphVneaFcLSgD gVPwM21C9BYPKZo/DG6CG1tLQVXzuAbdEQwByrYtJh522qVh4+O3HIHagHD8qXtp ta0frVjdcitladc1eM3EPOL3D002EixeWLc1UxSoe64w9xJYcMNMGfxLZviTp1Hw rSMGJLYHFfMl6/iUtBoMjLI7sel4i+M5iO3d3iAI3JDa7czBAS5ihpMvf8bxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUR1RxsQovu6RRgZAS4LZH8a1FGMUwHwYDVR0j BBgwFoAUfkWLrvm6nc46pRbyWKmUNYh4xGcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GRDIwMDg0MkRGMUIwMDVGMjFCRkEzM0FGOUJFNUVDNEQ0 MjREMEU0OUMxMDlFNUEwQThGNTdGNjNERDA3RDlGLzAvN0U0NThCQUVGOUJBOURD RTNBQTUxNkYyNThBOTk0MzU4ODc4QzQ2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RTQ1OEJBRUY5QkE5RENFM0FB NTE2RjI1OEE5OTQzNTg4NzhDNDY3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkQyMDA4NDJERjFCMDA1RjIxQkZBMzNBRjlCRTVFQzRENDI0RDBFNDlD MTA5RTVBMEE4RjU3RjYzREQwN0Q5Ri8wLzdFNDU4QkFFRjlCQTlEQ0UzQUE1MTZG MjU4QTk5NDM1ODg3OEM0NjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC2uMr+rD1C4nEDlXPaig0kBTw4 xXQhgYH3w97H7lAZuHYi84E7JROHEepvLed/kRqXIoCGKb+5hYiu/OBSUkMBXy3A kUWlwSLzDhRUzhKMb0qxMgJ/+k8y5TMFaoMQBKlFRtoT9lec/mqNe7y3GY2fxrKi oNOLln3KWnEAmg+yPdPKBTyiG0WMUgW8c+k4TD9yewP7tPCk2bw2PxAmL7roDX2/ m+seY/ejNWLS+3UisCwGWk+hjeuFprBrkepb/euj7ERWRdy6cb+V/BkVJabfMPxK Q7IElfVBB0atJ7RDUKqJXmMT0qdUSVmMblX3XS4UX5sWnDg39L3VEDtW/5Pm -----END CERTIFICATE-----Generated at Thu Oct 29 01:38:33 2026 by rpki-client