$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft File: 28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft (raw, json) Hash identifier: r9TzNGmkiQhbEJSSxpItbWA5WjPx7yBlXVnW0AP/OLE= Subject key identifier: 12:84:0F:41:7F:4E:B3:0C:89:97:AE:C2:A9:C2:24:F1:A4:5A:1F:1B Authority key identifier: 28:D3:87:F6:3A:EA:E0:AA:9E:95:54:1B:C0:B6:AF:1F:11:CE:54:76 Certificate issuer: /CN=28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476 Certificate serial: 1ECF72FDD10DF0852FF813EC5FC50BA1B30B8F24 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft Manifest number: 3B Signing time: Wed 14 Oct 2026 09:10:00 +0000 Manifest this update: Wed 14 Oct 2026 09:05:00 +0000 Manifest next update: Mon 19 Oct 2026 07:27:00 +0000 Files and hashes: 1: AS274945.asa (hash: AS3SJxu66pBQ9r9zdhC+3h+zf1K3W2tqexIjKHKJ2aw=) 2: 28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.crl (hash: 2fM56jymKlAnUcWKCMkHRCHdrYV5JZC05UNPmqQo3vk=) 3: 323830333a323933303a3a2f33322d3438203d3e20323734393435.roa (hash: HW92fTYYA7iBg9cu1T39nhU6j0idQftDfLQ3njkN7mo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.crl rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 19 Oct 2026 07:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:cf:72:fd:d1:0d:f0:85:2f:f8:13:ec:5f:c5:0b:a1:b3:0b:8f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476 Validity Not Before: Oct 14 09:05:00 2026 GMT Not After : Oct 19 07:27:00 2026 GMT Subject: CN=12840F417F4EB30C8997AEC2A9C224F1A45A1F1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:55:69:60:be:3c:b1:47:79:b4:b9:f9:c1: c1:f5:06:70:34:2d:f0:a6:48:cb:ad:bb:d9:47:46: 47:86:07:b2:b6:d4:67:08:88:ed:7e:37:e1:2d:ea: 42:8e:b0:df:5d:6b:11:de:da:16:ac:70:f2:fb:15: f1:ef:3f:ec:4d:0e:02:04:d2:c5:2b:8d:bb:d9:34: f9:b9:9e:f1:0d:7b:fe:75:c8:ba:c8:9c:b0:1b:16: 36:0a:4c:49:34:32:83:7b:33:fe:fc:a7:2f:f1:7d: f9:d1:5c:4b:68:bd:28:43:58:77:ea:28:c7:67:02: 2c:74:11:da:a3:9e:86:c1:52:20:0e:f0:43:28:6a: 0c:a0:d1:0f:0b:a8:5a:da:4e:5e:95:cd:93:e5:1e: c8:fd:58:91:fb:72:da:d4:d1:87:b0:04:d0:a7:d7: d9:cf:8c:89:bf:19:31:a1:9c:02:f1:be:7f:5d:26: 68:ff:6f:5a:ee:5d:be:17:74:6b:b1:c1:e1:52:67: 3b:3f:24:1f:d2:bd:b4:7c:82:4b:3a:5e:61:c0:44: 8b:78:bf:9b:ce:0f:35:bb:9a:d5:13:c2:07:cb:2d: 4c:e4:8d:6f:29:99:8d:e9:e8:33:d6:f9:ac:06:49: 6d:22:ed:0f:4a:6c:68:f9:d9:5b:7c:9a:a1:b0:44: 1b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:84:0F:41:7F:4E:B3:0C:89:97:AE:C2:A9:C2:24:F1:A4:5A:1F:1B X509v3 Authority Key Identifier: keyid:28:D3:87:F6:3A:EA:E0:AA:9E:95:54:1B:C0:B6:AF:1F:11:CE:54:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:65:22:61:21:9c:3f:5f:5b:a2:54:97:a5:c8:bb:82:ef:ce: c6:f8:81:9d:69:8c:f1:74:93:01:2e:c2:7d:af:4b:d3:1f:67: 14:5b:61:dc:e4:03:8e:8d:9c:11:6f:51:99:d8:44:17:7d:ae: 1b:32:a7:01:41:0c:18:ad:69:00:a7:a2:a4:ea:ad:45:4e:c6: 15:e7:77:5d:46:5b:38:90:3e:dd:9f:e2:e2:52:bb:81:35:ce: 65:6b:ba:16:f1:54:61:0c:93:ff:78:dd:c4:c0:61:78:99:af: b9:ca:b9:af:f5:5b:05:13:f3:31:fd:34:80:3f:41:25:7a:61: f3:2d:6f:83:8c:e7:47:45:48:f0:01:40:7c:9e:93:d7:1b:5f: ee:83:a8:90:0d:be:ac:9e:86:91:0a:e2:82:b3:44:ac:18:b2: a7:13:e2:0d:35:28:71:c9:0c:5d:28:ab:74:52:c1:25:7e:b4: f9:42:d3:df:fe:bb:4b:7f:a0:5b:3f:4f:61:3d:ee:08:70:f9: c4:4d:01:09:6b:bb:38:27:aa:aa:4c:ab:32:ca:64:d4:5a:cf: ff:d7:b2:1d:22:7f:0d:f3:94:52:02:88:cc:ba:42:bd:fe:56: 15:c0:bc:1a:c0:c0:e9:0d:8b:70:b2:27:b4:cb:38:80:b6:74: 2c:37:97:14 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHs9y/dEN8IUv+BPsX8ULobMLjyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhEMzg3RjYzQUVBRTBBQTlFOTU1NDFCQzBCNkFGMUYx MUNFNTQ3NjAeFw0yNjEwMTQwOTA1MDBaFw0yNjEwMTkwNzI3MDBaMDMxMTAvBgNV BAMTKDEyODQwRjQxN0Y0RUIzMEM4OTk3QUVDMkE5QzIyNEYxQTQ1QTFGMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxm1VpYL48sUd5tLn5wcH1BnA0 LfCmSMutu9lHRkeGB7K21GcIiO1+N+Et6kKOsN9daxHe2hascPL7FfHvP+xNDgIE 0sUrjbvZNPm5nvENe/51yLrInLAbFjYKTEk0MoN7M/78py/xffnRXEtovShDWHfq KMdnAix0EdqjnobBUiAO8EMoagyg0Q8LqFraTl6VzZPlHsj9WJH7ctrU0YewBNCn 19nPjIm/GTGhnALxvn9dJmj/b1ruXb4XdGuxweFSZzs/JB/SvbR8gks6XmHARIt4 v5vODzW7mtUTwgfLLUzkjW8pmY3p6DPW+awGSW0i7Q9KbGj52Vt8mqGwRBupAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUEoQPQX9OswyJl67CqcIk8aRaHxswHwYDVR0j BBgwFoAUKNOH9jrq4KqelVQbwLavHxHOVHYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTQ3NkFDMzIxNUM0N0IwMEEwODhBMEQ0NzI3MEE3ODI3 NTAyREMzNUNGNTQ3NUY3Qzg1MEVCQkE1MjA5RkVFLzAvMjhEMzg3RjYzQUVBRTBB QTlFOTU1NDFCQzBCNkFGMUYxMUNFNTQ3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEQzODdGNjNBRUFFMEFBOUU5 NTU0MUJDMEI2QUYxRjExQ0U1NDc2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkE0NzZBQzMyMTVDNDdCMDBBMDg4QTBENDcyNzBBNzgyNzUwMkRDMzVD RjU0NzVGN0M4NTBFQkJBNTIwOUZFRS8wLzI4RDM4N0Y2M0FFQUUwQUE5RTk1NTQx QkMwQjZBRjFGMTFDRTU0NzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7ZSJhIZw/X1uiVJelyLuC787G +IGdaYzxdJMBLsJ9r0vTH2cUW2Hc5AOOjZwRb1GZ2EQXfa4bMqcBQQwYrWkAp6Kk 6q1FTsYV53ddRls4kD7dn+LiUruBNc5la7oW8VRhDJP/eN3EwGF4ma+5yrmv9VsF E/Mx/TSAP0ElemHzLW+DjOdHRUjwAUB8npPXG1/ug6iQDb6snoaRCuKCs0SsGLKn E+INNShxyQxdKKt0UsElfrT5QtPf/rtLf6BbP09hPe4IcPnETQEJa7s4J6qqTKsy ymTUWs//17IdIn8N85RSAojMukK9/lYVwLwawMDpDYtwsie0yziAtnQsN5cU -----END CERTIFICATE-----Generated at Thu Oct 15 08:40:06 2026 by rpki-client