$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft File: 28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft (raw, json) Hash identifier: 823waWR4HE1iGBNa4sd9S/hGU8X6EG8MfZoFcHuWM0A= Subject key identifier: A2:4B:C1:92:9D:1A:AD:79:FC:42:49:42:E5:77:05:3F:B9:5E:6C:5C Authority key identifier: 28:D3:87:F6:3A:EA:E0:AA:9E:95:54:1B:C0:B6:AF:1F:11:CE:54:76 Certificate issuer: /CN=28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476 Certificate serial: 06D40CC70BEB3D0AA19B27A72736980D19A9CC39 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft Manifest number: 11 Signing time: Mon 27 Jul 2026 00:32:32 +0000 Manifest this update: Mon 27 Jul 2026 00:27:32 +0000 Manifest next update: Sat 01 Aug 2026 08:01:32 +0000 Files and hashes: 1: 28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.crl (hash: B0QY8OQR7t2oAEr7cGn+8BUDevO8FPnatq6t0C+qSiU=) 2: 323830333a323933303a3a2f33322d3438203d3e20323734393435.roa (hash: MVqLtzm/kEO+r6vqyMAnOk87BLBVTGDz8flj0sRHAFo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.crl rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 01 Aug 2026 06:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d4:0c:c7:0b:eb:3d:0a:a1:9b:27:a7:27:36:98:0d:19:a9:cc:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476 Validity Not Before: Jul 27 00:27:32 2026 GMT Not After : Aug 1 08:01:32 2026 GMT Subject: CN=A24BC1929D1AAD79FC424942E577053FB95E6C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:19:f6:c6:98:2f:ec:4e:6c:56:6d:16:83: 08:df:0d:21:d9:69:61:e8:bd:4e:95:c5:8c:ba:02: 53:82:e8:09:69:7a:77:d3:ef:f5:8d:1b:b9:6a:ac: 9f:3e:ef:aa:00:a3:97:d0:10:b7:e7:d1:df:0c:cc: ea:68:64:ba:b2:d0:69:c8:f0:23:ed:1d:68:cb:9e: 74:ab:22:e4:48:3f:d2:2f:e0:95:a5:d5:b6:1e:e8: 7a:75:7e:42:ac:52:b6:90:e1:4a:0b:74:84:52:16: ea:33:07:85:a7:7e:f6:79:e6:9b:78:c5:de:e4:ea: d9:34:a3:cb:29:64:40:41:d3:f1:3c:16:ce:3e:5e: 54:0c:94:de:ce:60:0d:5e:0f:5e:6e:e7:9e:1a:03: 6e:2a:12:7f:ed:f4:47:43:93:9e:64:b9:c3:68:4a: 3e:3a:81:9e:23:e4:3d:c7:76:0b:ac:b2:39:6f:1f: e0:ce:bf:3f:2d:d2:c3:d8:2f:b9:fe:5b:c1:a2:c0: 02:44:19:94:cd:09:29:55:82:5b:0d:0c:06:0b:6e: 07:3e:b6:2d:b0:cb:c1:17:0c:c5:e4:ae:aa:2c:53: ce:d1:6d:c8:0a:20:4d:c0:f4:c9:c3:65:54:e3:6c: bf:ac:38:7b:3f:c2:ab:eb:0c:fc:ec:67:02:38:4f: 97:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4B:C1:92:9D:1A:AD:79:FC:42:49:42:E5:77:05:3F:B9:5E:6C:5C X509v3 Authority Key Identifier: keyid:28:D3:87:F6:3A:EA:E0:AA:9E:95:54:1B:C0:B6:AF:1F:11:CE:54:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:51:f4:13:ba:45:57:b2:cd:24:88:7d:b7:3c:20:94:1c:f7: 95:c9:bf:16:5d:3c:36:b4:c6:1c:47:b7:75:3e:49:6f:f4:ff: ec:0e:00:82:1c:2b:b9:42:56:d7:c8:79:b7:07:f1:73:17:17: 08:63:2a:78:ac:b5:29:1d:06:97:93:b1:d8:30:25:cd:06:59: cf:ab:c1:b5:38:d1:e5:1b:a9:5e:4b:d4:7a:3a:2d:53:d7:72: 10:9f:66:b7:97:9c:ce:9e:f1:04:b9:58:c3:ed:60:0a:bd:03: 63:93:f2:86:4d:c4:e4:2d:c9:98:71:b1:de:40:1c:85:72:7d: 4c:46:13:4a:b4:c4:30:11:65:9f:5d:b1:d2:64:f7:21:e5:37: b6:26:81:1a:df:2e:47:2e:06:f8:93:87:06:51:e9:0d:8d:85: 1a:95:7f:2d:b2:ec:19:f7:65:e2:c4:5d:4a:2a:e2:7b:8d:47: 31:31:1f:5d:b0:30:96:ce:6d:d8:c5:e7:63:8d:ea:64:9a:9f: 9e:55:33:7e:d3:3f:3c:6e:e7:e8:4e:fc:a4:90:61:08:6f:fb: 4a:4d:66:9b:32:30:c0:32:e7:d9:94:ee:0d:3b:67:a3:00:58: 54:8d:ee:80:c9:24:b0:20:c4:df:56:6e:a6:09:97:a4:57:fd: 66:1b:01:d8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBtQMxwvrPQqhmyenJzaYDRmpzDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhEMzg3RjYzQUVBRTBBQTlFOTU1NDFCQzBCNkFGMUYx MUNFNTQ3NjAeFw0yNjA3MjcwMDI3MzJaFw0yNjA4MDEwODAxMzJaMDMxMTAvBgNV BAMTKEEyNEJDMTkyOUQxQUFENzlGQzQyNDk0MkU1NzcwNTNGQjk1RTZDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIWRn2xpgv7E5sVm0WgwjfDSHZ aWHovU6VxYy6AlOC6AlpenfT7/WNG7lqrJ8+76oAo5fQELfn0d8MzOpoZLqy0GnI 8CPtHWjLnnSrIuRIP9Iv4JWl1bYe6Hp1fkKsUraQ4UoLdIRSFuozB4WnfvZ55pt4 xd7k6tk0o8spZEBB0/E8Fs4+XlQMlN7OYA1eD15u554aA24qEn/t9EdDk55kucNo Sj46gZ4j5D3HdgussjlvH+DOvz8t0sPYL7n+W8GiwAJEGZTNCSlVglsNDAYLbgc+ ti2wy8EXDMXkrqosU87RbcgKIE3A9MnDZVTjbL+sOHs/wqvrDPzsZwI4T5c5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUokvBkp0arXn8QklC5XcFP7lebFwwHwYDVR0j BBgwFoAUKNOH9jrq4KqelVQbwLavHxHOVHYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTQ3NkFDMzIxNUM0N0IwMEEwODhBMEQ0NzI3MEE3ODI3 NTAyREMzNUNGNTQ3NUY3Qzg1MEVCQkE1MjA5RkVFLzAvMjhEMzg3RjYzQUVBRTBB QTlFOTU1NDFCQzBCNkFGMUYxMUNFNTQ3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEQzODdGNjNBRUFFMEFBOUU5 NTU0MUJDMEI2QUYxRjExQ0U1NDc2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkE0NzZBQzMyMTVDNDdCMDBBMDg4QTBENDcyNzBBNzgyNzUwMkRDMzVD RjU0NzVGN0M4NTBFQkJBNTIwOUZFRS8wLzI4RDM4N0Y2M0FFQUUwQUE5RTk1NTQx QkMwQjZBRjFGMTFDRTU0NzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVUfQTukVXss0kiH23PCCUHPeV yb8WXTw2tMYcR7d1Pklv9P/sDgCCHCu5QlbXyHm3B/FzFxcIYyp4rLUpHQaXk7HY MCXNBlnPq8G1ONHlG6leS9R6Oi1T13IQn2a3l5zOnvEEuVjD7WAKvQNjk/KGTcTk LcmYcbHeQByFcn1MRhNKtMQwEWWfXbHSZPch5Te2JoEa3y5HLgb4k4cGUekNjYUa lX8tsuwZ92XixF1KKuJ7jUcxMR9dsDCWzm3Yxedjjepkmp+eVTN+0z88bufoTvyk kGEIb/tKTWabMjDAMufZlO4NO2ejAFhUje6AySSwIMTfVm6mCZekV/1mGwHY -----END CERTIFICATE-----Generated at Tue Jul 28 22:03:36 2026 by rpki-client