$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft File: 2AA949233251849B5F79085FA81406E588FF36E5.mft (raw, json) Hash identifier: yA7PP1VRn2VfPVXs7+mcAoR8h1KNy0mj/Hf+1Eo9jB4= Subject key identifier: 64:6F:14:26:C5:DE:7F:71:E1:A3:06:18:40:DC:BF:1E:D7:CB:9C:06 Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 Certificate issuer: /CN=2AA949233251849B5F79085FA81406E588FF36E5 Certificate serial: 53A39BDDB8219E96498643A44949CB6CF6619334 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft Manifest number: 01D3 Signing time: Tue 13 Oct 2026 17:18:42 +0000 Manifest this update: Tue 13 Oct 2026 17:13:42 +0000 Manifest next update: Sun 18 Oct 2026 17:45:42 +0000 Files and hashes: 1: 323830333a333736303a3a2f33322d3332203d3e20323639383238.roa (hash: RifkABZsLCmRbyVKtsTZJib9sHbG7NxVmTf/yWidQbI=) 2: 2AA949233251849B5F79085FA81406E588FF36E5.crl (hash: nk0bRIoHnUstRBW6pEvUz+dZyqh8Qt04aO6bPEb2iLQ=) 3: 34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (hash: uCp0Q9i+9+veJ1b/OCdVe/YrScL0cJtyu9wRI4ruDrM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Oct 2026 09:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a3:9b:dd:b8:21:9e:96:49:86:43:a4:49:49:cb:6c:f6:61:93:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5 Validity Not Before: Oct 13 17:13:42 2026 GMT Not After : Oct 18 17:45:42 2026 GMT Subject: CN=646F1426C5DE7F71E1A3061840DCBF1ED7CB9C06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:20:e0:16:bd:4a:ef:ed:12:82:bf:d3:10: 55:6b:6b:6a:13:42:db:1b:b9:5d:01:be:95:15:2e: cf:ab:70:69:f5:c6:c6:c1:c0:b1:40:d7:88:0a:99: 22:0c:67:66:47:ca:d0:e7:d4:a8:78:5c:67:1d:12: ec:38:26:79:85:30:83:c5:76:49:39:71:40:ed:2f: 0f:60:db:2a:65:88:b3:58:a9:52:42:c3:35:ac:4e: f6:9e:0a:dc:22:d0:de:86:e1:a7:df:e1:15:8e:d9: 4e:c5:60:a7:15:83:d4:9d:97:c7:8d:b0:cd:f0:f2: 27:5d:44:58:3c:74:38:47:2a:79:27:e6:91:00:5c: 1c:fd:5e:06:bb:a7:17:d1:2c:7e:93:c9:25:7d:af: 62:cd:b4:4f:3f:e3:a5:96:82:f6:56:12:d0:5c:b3: cd:cb:72:e4:b9:ab:7e:f7:8b:f9:05:f4:5c:93:29: 3b:81:38:7d:53:70:2f:2d:fa:fb:4a:ef:cc:5f:b1: db:b4:f8:9b:c1:13:b3:ba:50:71:d2:c0:b0:f0:13: 74:68:61:b2:71:b6:3d:9f:fa:9e:6e:91:7a:e1:f5: b4:38:91:17:2c:fd:f3:cd:51:93:66:66:2b:f1:16: 99:72:05:14:f8:59:7e:ab:79:05:c2:d6:52:82:fa: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6F:14:26:C5:DE:7F:71:E1:A3:06:18:40:DC:BF:1E:D7:CB:9C:06 X509v3 Authority Key Identifier: keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a7:49:a2:4b:8f:a1:37:12:3b:b8:eb:b1:60:d0:f0:99:58: b4:35:42:3d:d7:02:bf:36:49:b3:66:65:ec:37:1d:d9:09:72: a1:6d:2a:6c:23:23:3c:9d:04:ed:2b:d7:90:d2:83:19:b9:c1: af:80:54:59:d6:3d:13:d8:b0:fe:e7:59:88:97:c0:db:1a:28: 51:82:b1:d6:1b:bd:80:8b:0c:76:d0:4a:f9:de:6a:3a:6b:86: 41:b0:7d:26:d1:aa:08:9b:96:fe:20:48:a4:15:c3:70:6b:1a: 78:cb:7f:2a:2a:78:5e:42:41:87:1b:96:d8:84:27:22:6e:88: b2:48:f6:31:ab:62:c2:d2:95:93:de:7c:47:5f:c4:be:6b:fe: 94:2b:92:84:74:67:fd:9b:35:03:7e:60:04:52:e8:3e:5f:0a: bd:b7:78:43:4c:58:ec:8d:19:b7:a5:bc:5f:9e:db:5a:b4:f0: 1c:bb:2c:7d:a6:fa:23:8f:2d:35:f6:c1:fb:c6:cd:ad:7d:c3: ea:30:21:39:74:ab:59:ea:53:ad:68:61:05:0c:96:20:fd:14: ee:a1:db:fd:cb:40:89:a9:e5:39:6d:13:0f:84:bc:61:a7:67: 40:85:0f:79:2b:29:ac:7a:92:9b:05:e3:2a:cc:56:d5:47:8e: f9:9a:45:ac -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUU6Ob3bghnpZJhkOkSUnLbPZhkzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBOTQ5MjMzMjUxODQ5QjVGNzkwODVGQTgxNDA2RTU4 OEZGMzZFNTAeFw0yNjEwMTMxNzEzNDJaFw0yNjEwMTgxNzQ1NDJaMDMxMTAvBgNV BAMTKDY0NkYxNDI2QzVERTdGNzFFMUEzMDYxODQwRENCRjFFRDdDQjlDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7yDgFr1K7+0Sgr/TEFVra2oT QtsbuV0BvpUVLs+rcGn1xsbBwLFA14gKmSIMZ2ZHytDn1Kh4XGcdEuw4JnmFMIPF dkk5cUDtLw9g2ypliLNYqVJCwzWsTvaeCtwi0N6G4aff4RWO2U7FYKcVg9Sdl8eN sM3w8iddRFg8dDhHKnkn5pEAXBz9Xga7pxfRLH6TySV9r2LNtE8/46WWgvZWEtBc s83LcuS5q373i/kF9FyTKTuBOH1TcC8t+vtK78xfsdu0+JvBE7O6UHHSwLDwE3Ro YbJxtj2f+p5ukXrh9bQ4kRcs/fPNUZNmZivxFplyBRT4WX6reQXC1lKC+v8/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZG8UJsXef3HhowYYQNy/HtfLnAYwHwYDVR0j BBgwFoAUKqlJIzJRhJtfeQhfqBQG5Yj/NuUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zOTFGNEMxRkNCREZDOTE4Q0ZCQzgxQTU4Q0JFNDQ2QTBE OTJEM0Q2M0UxMEM4NUREQkIzQ0Y2RUY1RjQ4RkJDLzAvMkFBOTQ5MjMzMjUxODQ5 QjVGNzkwODVGQTgxNDA2RTU4OEZGMzZFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUE5NDkyMzMyNTE4NDlCNUY3 OTA4NUZBODE0MDZFNTg4RkYzNkU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzkxRjRDMUZDQkRGQzkxOENGQkM4MUE1OENCRTQ0NkEwRDkyRDNENjNF MTBDODVEREJCM0NGNkVGNUY0OEZCQy8wLzJBQTk0OTIzMzI1MTg0OUI1Rjc5MDg1 RkE4MTQwNkU1ODhGRjM2RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7p0miS4+hNxI7uOuxYNDwmVi0 NUI91wK/NkmzZmXsNx3ZCXKhbSpsIyM8nQTtK9eQ0oMZucGvgFRZ1j0T2LD+51mI l8DbGihRgrHWG72Aiwx20Er53mo6a4ZBsH0m0aoIm5b+IEikFcNwaxp4y38qKnhe QkGHG5bYhCciboiySPYxq2LC0pWT3nxHX8S+a/6UK5KEdGf9mzUDfmAEUug+Xwq9 t3hDTFjsjRm3pbxfnttatPAcuyx9pvojjy019sH7xs2tfcPqMCE5dKtZ6lOtaGEF DJYg/RTuodv9y0CJqeU5bRMPhLxhp2dAhQ95KymsepKbBeMqzFbVR475mkWs -----END CERTIFICATE-----Generated at Tue Oct 13 20:44:31 2026 by rpki-client