$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json) Hash identifier: eYgjri4WAhSphtIaGkXmD8Zmi1GhGYu447S8R9fV64E= Subject key identifier: 36:C6:A1:4C:32:26:0D:59:A8:C5:6E:4F:42:97:3F:0D:3B:C5:D6:9A Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 2B41AC74686FD5E97A91E81FD190FEBB0937C71F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft Manifest number: 01D9 Signing time: Sat 10 Oct 2026 02:22:24 +0000 Manifest this update: Sat 10 Oct 2026 02:17:24 +0000 Manifest next update: Thu 15 Oct 2026 10:52:24 +0000 Files and hashes: 1: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=) 2: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: 4YT76mg5dITWNiH2hE5kgjyBgua4a3LhZgbWUTw9x8I=) 3: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: ENjFtVsr7pfY+gW3lbF7Bm+s/eU72NUY6num985oxnk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 06:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:41:ac:74:68:6f:d5:e9:7a:91:e8:1f:d1:90:fe:bb:09:37:c7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Oct 10 02:17:24 2026 GMT Not After : Oct 15 10:52:24 2026 GMT Subject: CN=36C6A14C32260D59A8C56E4F42973F0D3BC5D69A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:10:1e:9d:c6:eb:31:e8:69:7e:9a:14:53: 8d:8d:b2:3b:4c:c6:9b:5f:99:f8:04:0b:95:04:5e: c7:99:d9:e6:7d:f5:43:e5:de:cb:de:8b:40:38:58: d2:8f:3a:25:53:75:30:cb:84:7d:7b:57:3a:68:7f: b1:04:dc:ae:7b:58:64:f9:da:a9:21:ac:73:e9:75: 53:47:4d:48:14:9f:f2:ae:ff:cf:14:5d:f9:26:78: fc:7a:a1:2d:d9:b3:e9:ba:e3:79:ee:75:1b:a4:31: c1:40:af:14:74:98:b8:75:97:00:4f:5f:8e:6d:df: 69:48:ed:e9:9c:85:55:a1:77:8b:cb:35:9a:dc:79: ad:7a:fa:42:21:69:ee:a8:a9:d2:84:71:18:23:4b: 14:70:42:25:eb:05:ee:9d:ca:a3:a7:c5:9d:ae:c9: 62:a4:f6:9d:89:19:3f:50:98:7b:42:ff:82:07:a2: 8f:18:1b:af:5d:6f:a0:9e:09:d3:1e:66:d5:c8:62: 52:0a:93:83:3c:11:e7:44:17:ff:9a:76:95:71:e2: a3:42:53:1e:e2:2a:f6:ab:35:a6:c9:e1:0a:34:82: 75:a6:de:fb:55:11:2e:d1:64:75:3e:2b:20:eb:60: c8:07:f8:54:89:82:32:04:2d:a2:f2:f5:53:7a:1c: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C6:A1:4C:32:26:0D:59:A8:C5:6E:4F:42:97:3F:0D:3B:C5:D6:9A X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f3:da:45:8e:9a:73:33:6c:96:64:15:d1:33:78:13:a6:c1: 55:f5:9a:82:cd:c6:96:ef:1a:d0:0c:ea:f7:49:7e:8d:52:ad: c4:34:cf:90:57:a4:7b:15:07:c2:3f:0a:03:9d:d8:8c:0e:a4: 21:4f:20:e7:d5:f8:53:81:0f:da:24:ae:c2:a1:29:89:08:11: 97:60:5b:7d:9d:02:7a:b3:12:bc:a5:4b:46:9a:85:1a:dd:96: 7a:d0:bb:e7:09:90:9a:98:5f:4e:0c:ed:41:1d:b7:8c:99:e1: 8f:33:44:98:8b:15:df:6d:54:a3:08:2b:4d:57:36:7d:e5:bc: ad:88:69:85:45:aa:ce:d9:e3:2e:1c:45:8a:29:48:fc:3c:3a: 66:69:58:b4:e0:c6:71:95:6e:45:74:d7:75:dc:d0:b1:39:c5: e6:f8:d5:11:e0:3f:53:31:de:c1:0c:ae:84:9c:c0:0e:a3:a1: d3:56:c8:7d:6a:47:a1:e1:15:e6:da:ed:52:d1:e6:c9:33:85: 1b:ac:fc:07:54:12:b2:e5:32:69:63:67:eb:6c:dc:df:9d:e4: 05:b3:7b:7a:90:44:e0:ee:fd:a4:5d:20:a6:0b:79:92:d4:13: 50:3d:9d:fc:cf:40:e2:3e:34:64:78:3f:a7:b4:58:74:d6:2d: 10:41:f0:3f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUK0GsdGhv1el6kegf0ZD+uwk3xx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNjEwMTAwMjE3MjRaFw0yNjEwMTUxMDUyMjRaMDMxMTAvBgNV BAMTKDM2QzZBMTRDMzIyNjBENTlBOEM1NkU0RjQyOTczRjBEM0JDNUQ2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChExAencbrMehpfpoUU42NsjtM xptfmfgEC5UEXseZ2eZ99UPl3svei0A4WNKPOiVTdTDLhH17Vzpof7EE3K57WGT5 2qkhrHPpdVNHTUgUn/Ku/88UXfkmePx6oS3Zs+m643nudRukMcFArxR0mLh1lwBP X45t32lI7emchVWhd4vLNZrcea16+kIhae6oqdKEcRgjSxRwQiXrBe6dyqOnxZ2u yWKk9p2JGT9QmHtC/4IHoo8YG69db6CeCdMeZtXIYlIKk4M8EedEF/+adpVx4qNC Ux7iKvarNabJ4Qo0gnWm3vtVES7RZHU+KyDrYMgH+FSJgjIELaLy9VN6HICXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNsahTDImDVmoxW5PQpc/DTvF1powHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBX89pFjppzM2yWZBXRM3gTpsFV 9ZqCzcaW7xrQDOr3SX6NUq3ENM+QV6R7FQfCPwoDndiMDqQhTyDn1fhTgQ/aJK7C oSmJCBGXYFt9nQJ6sxK8pUtGmoUa3ZZ60LvnCZCamF9ODO1BHbeMmeGPM0SYixXf bVSjCCtNVzZ95bytiGmFRarO2eMuHEWKKUj8PDpmaVi04MZxlW5FdNd13NCxOcXm +NUR4D9TMd7BDK6EnMAOo6HTVsh9akeh4RXm2u1S0ebJM4UbrPwHVBKy5TJpY2fr bNzfneQFs3t6kETg7v2kXSCmC3mS1BNQPZ38z0DiPjRkeD+ntFh01i0QQfA/ -----END CERTIFICATE-----Generated at Sun Oct 11 19:41:03 2026 by rpki-client