$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft File: 2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft (raw, json) Hash identifier: cyaG8I4AB/UxI5J2GUskR0b23DS20zOlLOo1rCvwwwc= Subject key identifier: CE:63:3B:B3:2F:3A:5D:FE:54:4E:CF:E4:39:89:EC:2B:F4:B4:5B:A4 Authority key identifier: 29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4 Certificate issuer: /CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4 Certificate serial: 5995EAB6305FA6D4AF710A6C7C9A16B2B693C4CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft Manifest number: 01E2 Signing time: Thu 29 Oct 2026 13:13:03 +0000 Manifest this update: Thu 29 Oct 2026 13:08:03 +0000 Manifest next update: Tue 03 Nov 2026 11:58:03 +0000 Files and hashes: 1: 323830333a653761303a3a2f33322d3438203d3e20323637373736.roa (hash: 9i/nC70b03d/KQ2nE8twSMH0zVgK13ImKyOC6QRx84I=) 2: 34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa (hash: KFFv25IhN9NBBE1EzJKGbgxFwcJP3A312Qd6rW2YAz0=) 3: 2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl (hash: paxi2I9RcZMCd7hlmZMpdDzM8HSPbT6pZDI/NoqSNP4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 11:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:95:ea:b6:30:5f:a6:d4:af:71:0a:6c:7c:9a:16:b2:b6:93:c4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4 Validity Not Before: Oct 29 13:08:03 2026 GMT Not After : Nov 3 11:58:03 2026 GMT Subject: CN=CE633BB32F3A5DFE544ECFE43989EC2BF4B45BA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:44:3b:fc:6e:c4:2f:ec:cb:71:a4:5e:85: 73:d1:c0:2a:de:30:0d:a7:fc:28:60:d8:e9:6b:1e: c8:9a:e8:77:d2:ca:0d:56:88:a1:d8:c7:d0:27:01: 5d:f4:33:27:76:31:f1:22:a4:1e:2e:d0:17:c7:f4: 3f:ad:af:da:8e:c8:76:3c:ad:5c:4a:fe:e7:c7:3c: ea:7c:28:21:6e:e7:ae:57:70:ff:88:42:02:68:ed: 11:02:5f:f2:0f:15:42:c0:2c:5e:da:7f:c8:5f:e9: 01:c0:42:c2:66:fe:5b:71:db:27:23:8d:48:d7:95: 22:ae:8a:4e:c7:c8:ba:47:12:58:02:1b:76:2b:81: 6f:e7:b8:82:79:d4:56:d9:f3:67:43:a1:f8:00:19: 53:bc:9d:43:ab:5d:2d:fb:e4:5c:ed:24:b3:cb:47: f0:8e:c4:aa:c8:dd:9a:e2:b2:84:3c:2b:b6:86:da: 05:5b:5c:37:2e:24:f8:28:56:bc:3f:7b:9b:11:78: 78:ed:1f:dd:11:86:b5:86:46:d0:07:ad:22:f1:06: fd:0f:85:5e:0a:03:f2:0e:e6:fc:6e:70:75:99:f9: a5:57:d8:99:a4:9f:0c:00:3c:66:7b:54:bc:81:06: 72:0e:54:1a:3d:e1:4e:ec:30:33:66:4c:04:38:e7: 64:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:63:3B:B3:2F:3A:5D:FE:54:4E:CF:E4:39:89:EC:2B:F4:B4:5B:A4 X509v3 Authority Key Identifier: keyid:29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:16:51:fd:a1:0d:a0:73:05:0a:d4:ce:ed:48:49:27:c7:d2: 09:b7:3c:13:10:81:bd:52:c5:18:6a:5d:5b:75:f2:19:3c:eb: 95:78:f3:0a:5e:66:25:a0:9a:8b:25:2b:47:d6:3f:c6:f2:2a: f1:c9:e0:88:6c:de:83:f6:10:c5:63:f2:a4:ae:e5:d9:61:e2: 14:e5:b5:14:83:35:e7:8d:cb:a6:3a:b3:fe:65:1a:66:69:0e: 4d:ed:55:7c:55:f8:22:6e:3a:69:0a:0c:e0:72:b7:07:e9:33: 07:5b:b5:a8:99:8c:88:81:dc:9e:d5:eb:97:7b:4b:f6:3b:28: 0c:4a:5c:6d:dd:90:13:2f:c4:18:48:d5:77:b5:e3:72:b2:35: 9c:2a:5a:31:30:e1:cf:dc:89:96:bd:55:8b:71:46:3f:ab:8b: 8f:3c:00:0c:a8:05:31:44:f0:00:02:b4:63:37:7f:49:2d:4b: 32:b4:98:6b:b9:c5:5f:53:80:12:8b:a5:26:ab:97:90:27:4d: cf:db:58:6a:6f:cd:38:ab:a3:a6:47:86:04:5c:62:03:26:a1: 48:e4:32:5b:b5:84:e3:47:03:08:5a:c9:7f:da:dc:1a:33:ee: 0c:df:2e:29:36:5b:73:0a:a1:a9:c7:f4:8c:eb:65:51:b3:24: b8:d9:60:06 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWZXqtjBfptSvcQpsfJoWsraTxM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MkFDQzBDM0FFNDcwNzY5MUU1MEE2RDQ5ODg4NTFE QzU1OThENDAeFw0yNjEwMjkxMzA4MDNaFw0yNjExMDMxMTU4MDNaMDMxMTAvBgNV BAMTKENFNjMzQkIzMkYzQTVERkU1NDRFQ0ZFNDM5ODlFQzJCRjRCNDVCQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHEQ7/G7EL+zLcaRehXPRwCre MA2n/Chg2OlrHsia6HfSyg1WiKHYx9AnAV30Myd2MfEipB4u0BfH9D+tr9qOyHY8 rVxK/ufHPOp8KCFu565XcP+IQgJo7RECX/IPFULALF7af8hf6QHAQsJm/ltx2ycj jUjXlSKuik7HyLpHElgCG3YrgW/nuIJ51FbZ82dDofgAGVO8nUOrXS375FztJLPL R/COxKrI3ZrisoQ8K7aG2gVbXDcuJPgoVrw/e5sReHjtH90RhrWGRtAHrSLxBv0P hV4KA/IO5vxucHWZ+aVX2JmknwwAPGZ7VLyBBnIOVBo94U7sMDNmTAQ452QVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzmM7sy86Xf5UTs/kOYnsK/S0W6QwHwYDVR0j BBgwFoAUKXKswMOuRwdpHlCm1JiIUdxVmNQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wODlCMDhEQjZFNjM5RDAxQzE0RkIxNzFGRjQzMzg5NDVD NjJFM0VCRDJDQTU4OEEwQzZCMDBFMzVDNjlBQUE5LzAvMjk3MkFDQzBDM0FFNDcw NzY5MUU1MEE2RDQ5ODg4NTFEQzU1OThENC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTcyQUNDMEMzQUU0NzA3Njkx RTUwQTZENDk4ODg1MURDNTU5OEQ0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDg5QjA4REI2RTYzOUQwMUMxNEZCMTcxRkY0MzM4OTQ1QzYyRTNFQkQy Q0E1ODhBMEM2QjAwRTM1QzY5QUFBOS8wLzI5NzJBQ0MwQzNBRTQ3MDc2OTFFNTBB NkQ0OTg4ODUxREM1NTk4RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC1FlH9oQ2gcwUK1M7tSEknx9IJ tzwTEIG9UsUYal1bdfIZPOuVePMKXmYloJqLJStH1j/G8irxyeCIbN6D9hDFY/Kk ruXZYeIU5bUUgzXnjcumOrP+ZRpmaQ5N7VV8VfgibjppCgzgcrcH6TMHW7WomYyI gdye1euXe0v2OygMSlxt3ZATL8QYSNV3teNysjWcKloxMOHP3ImWvVWLcUY/q4uP PAAMqAUxRPAAArRjN39JLUsytJhrucVfU4ASi6Umq5eQJ03P21hqb804q6OmR4YE XGIDJqFI5DJbtYTjRwMIWsl/2twaM+4M3y4pNltzCqGpx/SM62VRsyS42WAG -----END CERTIFICATE-----Generated at Fri Oct 30 15:08:40 2026 by rpki-client