$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft File: D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft (raw, json) Hash identifier: alCK/raxJcDYz/5s4qn2dmHWZacTVxchAIut912tqgs= Subject key identifier: 96:7A:3E:4F:14:EF:49:9A:4D:8B:92:34:B0:C7:D7:1B:D1:6F:8F:AE Authority key identifier: D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F Certificate issuer: /CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F Certificate serial: 2A8D7BB696796F2D68B21C304BD4211D8A2D9942 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft Manifest number: 01AD Signing time: Tue 28 Jul 2026 09:03:43 +0000 Manifest this update: Tue 28 Jul 2026 08:58:43 +0000 Manifest next update: Sat 01 Aug 2026 15:09:43 +0000 Files and hashes: 1: D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl (hash: TQWBxQi6vA2z4CiSSM6vyv5PEVGYpNvhmf6AQWadqW8=) 2: 323830333a633731303a3a2f33322d3438203d3e20323732303937.roa (hash: DSg4GKR3JAxP7L6hi1exywi02KmTJl6bemsgNagp3QM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 01 Aug 2026 15:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8d:7b:b6:96:79:6f:2d:68:b2:1c:30:4b:d4:21:1d:8a:2d:99:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F Validity Not Before: Jul 28 08:58:43 2026 GMT Not After : Aug 1 15:09:43 2026 GMT Subject: CN=967A3E4F14EF499A4D8B9234B0C7D71BD16F8FAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:4c:b2:78:e7:08:c4:c2:49:35:b2:29:73: dc:c3:ee:2c:e6:64:22:0f:55:fa:ed:6f:d9:f2:1c: fc:62:8d:bc:4b:0f:9b:68:ec:59:e0:f0:d0:39:4b: 5b:73:86:8b:07:a1:68:e5:fd:b5:0c:6d:f8:8a:94: c0:36:4a:a8:4b:3d:3c:de:aa:c9:cd:c6:d6:88:91: 00:8f:a7:c3:59:75:c4:03:26:21:b1:95:2d:87:56: 7f:5d:92:da:12:9c:7f:49:b3:90:4b:5f:8a:48:a2: 59:9c:c8:ad:b6:b2:18:62:32:89:78:ad:43:28:bb: 3e:a8:28:64:f1:6a:3c:a0:bb:7d:77:05:f5:fb:37: 4a:db:5a:c6:49:b6:87:65:40:b8:d5:5e:60:d5:6e: 1f:40:db:06:37:b8:eb:d9:f7:6c:92:9b:f8:f8:00: 0f:3c:c4:01:bf:c9:a3:89:93:28:88:b5:c4:e7:14: 1f:26:2e:ac:fe:8f:11:72:dc:a1:11:3a:c4:17:4a: 6e:40:7d:c8:2b:e3:af:f6:0b:a0:3c:bc:04:5c:24: 8d:62:97:a5:06:9c:f8:ee:8a:50:34:f4:51:49:bb: 3b:d5:94:1e:0d:4a:83:19:58:05:1c:90:29:b4:53: 3d:22:51:02:a5:07:1b:cf:54:49:db:c4:28:fa:3d: 66:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7A:3E:4F:14:EF:49:9A:4D:8B:92:34:B0:C7:D7:1B:D1:6F:8F:AE X509v3 Authority Key Identifier: keyid:D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ab:c3:21:e8:61:a2:6c:27:aa:19:a0:fc:f2:7c:28:84:80: a8:5b:e6:98:fe:f7:97:1e:d8:12:2f:f2:a5:7b:7c:93:64:e2: f0:1c:14:27:8c:76:d5:e0:9b:76:f2:47:f1:02:bf:e7:3b:db: 5a:ac:54:65:6e:26:9a:4a:09:3f:82:29:e4:e3:f4:0f:75:11: 97:5f:26:5e:d6:dc:d8:de:c9:20:b9:3e:c2:d8:45:e1:c6:1f: e8:74:75:58:bc:6d:f7:f5:e6:af:bf:8e:31:ee:d4:f0:74:da: 13:78:cc:99:f5:89:68:db:05:1e:c1:0b:0b:cd:41:a9:b4:8a: ee:a2:84:8f:c4:92:84:b7:6e:e2:6e:f4:c1:60:c6:30:3a:cf: 10:57:19:f2:b0:55:86:b6:7f:48:0f:6f:84:f4:15:f2:6f:05: 66:a5:c7:42:96:3d:b2:ff:62:0d:fb:46:d4:e8:1f:89:47:2c: c6:9d:1b:07:d4:01:43:9e:d6:d2:a5:10:15:e3:61:98:a0:4a: c3:08:6f:73:38:86:2f:f5:40:32:30:c6:e8:20:aa:35:de:6b: ad:3c:b2:35:79:79:c1:94:d1:55:fb:f4:a2:07:8d:47:e1:18: 2e:41:55:ea:d3:8a:3d:3b:b7:c0:d5:41:93:19:ca:3a:46:a1: 52:f8:84:18 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKo17tpZ5by1oshwwS9QhHYotmUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4OTcwRDZGMkEyODk4RThBREU1ODg2NkMxRThEMUI0 ODAxNUE5RjAeFw0yNjA3MjgwODU4NDNaFw0yNjA4MDExNTA5NDNaMDMxMTAvBgNV BAMTKDk2N0EzRTRGMTRFRjQ5OUE0RDhCOTIzNEIwQzdENzFCRDE2RjhGQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ZEyyeOcIxMJJNbIpc9zD7izm ZCIPVfrtb9nyHPxijbxLD5to7Fng8NA5S1tzhosHoWjl/bUMbfiKlMA2SqhLPTze qsnNxtaIkQCPp8NZdcQDJiGxlS2HVn9dktoSnH9Js5BLX4pIolmcyK22shhiMol4 rUMouz6oKGTxajygu313BfX7N0rbWsZJtodlQLjVXmDVbh9A2wY3uOvZ92ySm/j4 AA88xAG/yaOJkyiItcTnFB8mLqz+jxFy3KEROsQXSm5Afcgr46/2C6A8vARcJI1i l6UGnPjuilA09FFJuzvVlB4NSoMZWAUckCm0Uz0iUQKlBxvPVEnbxCj6PWbtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUlno+TxTvSZpNi5I0sMfXG9Fvj64wHwYDVR0j BBgwFoAU1olw1vKiiY6K3liGbB6NG0gBWp8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85RTZENUVEQzc0MzlFNzkyQTkwNDBEREZDODJFNEEzOTlE ODkyQkQxNjFDMDY4NkRGRURDN0MzMEEwMEZDMjI1LzAvRDY4OTcwRDZGMkEyODk4 RThBREU1ODg2NkMxRThEMUI0ODAxNUE5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjg5NzBENkYyQTI4OThFOEFE RTU4ODY2QzFFOEQxQjQ4MDE1QTlGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUU2RDVFREM3NDM5RTc5MkE5MDQwRERGQzgyRTRBMzk5RDg5MkJEMTYx QzA2ODZERkVEQzdDMzBBMDBGQzIyNS8wL0Q2ODk3MEQ2RjJBMjg5OEU4QURFNTg4 NjZDMUU4RDFCNDgwMTVBOUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSq8Mh6GGibCeqGaD88nwohICo W+aY/veXHtgSL/Kle3yTZOLwHBQnjHbV4Jt28kfxAr/nO9tarFRlbiaaSgk/gink 4/QPdRGXXyZe1tzY3skguT7C2EXhxh/odHVYvG339eavv44x7tTwdNoTeMyZ9Ylo 2wUewQsLzUGptIruooSPxJKEt27ibvTBYMYwOs8QVxnysFWGtn9ID2+E9BXybwVm pcdClj2y/2IN+0bU6B+JRyzGnRsH1AFDntbSpRAV42GYoErDCG9zOIYv9UAyMMbo IKo13mutPLI1eXnBlNFV+/SiB41H4RguQVXq04o9O7fA1UGTGco6RqFS+IQY -----END CERTIFICATE-----Generated at Wed Jul 29 15:48:50 2026 by rpki-client