$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft File: B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft (raw, json) Hash identifier: aPIbV3oJ7KpCissRyzhf6l9KytdlWtk6GfpyfnzdpAc= Subject key identifier: 8C:1D:B7:08:F5:42:B6:EB:FA:D3:12:5F:95:0D:2C:26:37:D4:86:C8 Authority key identifier: B3:2F:3F:6C:AB:8B:BA:CE:BE:74:DB:EC:2B:5B:3A:57:E2:1D:D0:A2 Certificate issuer: /CN=B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2 Certificate serial: 4AFA48C128874B005EE56F1C40B846A5397ED391 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft Manifest number: 24 Signing time: Mon 21 Sep 2026 16:03:17 +0000 Manifest this update: Mon 21 Sep 2026 15:58:17 +0000 Manifest next update: Fri 25 Sep 2026 20:21:17 +0000 Files and hashes: 1: 3230312e37312e322e302f32332d3234203d3e20323639393230.roa (hash: xVpYf3eqikso92q82uQTzaX0BL/TFizOohhgwjIYkpk=) 2: B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.crl (hash: UtjnquRz5cgMJH3xv2YBkXW2ilhFAbajR7UO1EZwcC8=) 3: 323830333a633265303a3a2f33322d3438203d3e20323639393230.roa (hash: vBT+TmLo+Up2GkMfeOlqfPKPDwNRCfn0vdqmhO1vkwM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.crl rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Sep 2026 20:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fa:48:c1:28:87:4b:00:5e:e5:6f:1c:40:b8:46:a5:39:7e:d3:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2 Validity Not Before: Sep 21 15:58:17 2026 GMT Not After : Sep 25 20:21:17 2026 GMT Subject: CN=8C1DB708F542B6EBFAD3125F950D2C2637D486C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7e:52:f9:a9:c3:57:ff:9c:86:8a:aa:03:d2: a5:47:0b:72:99:27:35:aa:08:12:66:ea:d0:43:10: e4:29:cc:6b:32:a2:94:5a:e7:b3:6c:5e:01:60:10: 91:c1:01:97:88:2e:af:2e:db:17:26:4b:72:1b:28: 14:5f:84:9a:e2:71:3c:d1:3e:b7:a4:7a:fd:4b:05: 9a:25:d8:90:80:41:bb:c1:9f:cd:ec:63:a2:bb:ae: 42:c0:76:0d:60:f0:b3:78:94:c2:36:ff:df:0f:fa: a9:5c:ec:d2:23:46:f9:e0:9d:fe:9a:7c:37:91:64: 32:7e:1b:e1:0b:f6:d9:46:81:19:7d:f0:89:ac:6f: d5:98:70:d8:d8:64:a5:0c:27:e0:06:97:dc:fb:7d: e2:18:95:38:0c:48:9d:b3:53:9c:5d:36:ca:13:d7: 9f:eb:07:f5:b8:19:a5:35:c6:4c:c6:67:43:e5:f3: 55:15:10:0c:57:81:eb:3e:aa:8d:85:09:82:6a:99: e4:da:ff:f7:48:fe:39:0c:d8:ee:11:ee:50:1d:25: 86:0e:47:97:6a:17:e1:77:d1:c5:a2:4b:12:20:c3: f3:05:e5:6a:2c:74:1b:75:c4:1f:5c:0b:97:41:90: c8:97:d3:86:c1:3a:59:0d:cb:8a:e9:3a:4c:09:ed: 03:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1D:B7:08:F5:42:B6:EB:FA:D3:12:5F:95:0D:2C:26:37:D4:86:C8 X509v3 Authority Key Identifier: keyid:B3:2F:3F:6C:AB:8B:BA:CE:BE:74:DB:EC:2B:5B:3A:57:E2:1D:D0:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:28:b0:74:73:e9:55:8f:d3:5c:68:c3:36:c5:fa:1d:86:9f: f9:4b:28:8b:32:01:b2:0c:cf:fb:d5:59:c3:f5:7b:92:19:01: e0:5f:6d:17:3c:dd:5f:00:e6:22:ce:7f:e9:dd:97:8a:d2:4e: 9d:ee:a0:cf:5f:00:46:be:37:dd:cc:2f:9a:e4:6c:b4:4b:23: 1a:e9:df:b0:4a:0a:32:7a:6f:a2:62:a9:94:68:df:97:c1:20: 83:a7:df:3a:dd:d8:b6:11:82:d9:7a:93:94:ac:18:7a:92:0d: 96:17:2f:30:6f:0b:48:54:ce:1a:42:3c:e1:dd:56:c3:b8:de: f3:8d:e1:2e:6b:ec:c0:a8:ee:93:5e:88:d1:72:70:98:c2:f1: ff:12:63:de:60:17:f9:2a:19:f4:a5:77:1b:2a:c0:7b:6e:c3: 65:fe:6c:08:00:49:3f:ca:a7:35:e4:90:b2:48:6f:8a:9f:54: c4:65:49:77:e0:3e:06:25:61:4e:a8:56:69:9c:5c:c1:e3:52: d6:0a:2f:f9:68:da:67:a7:44:09:14:ca:64:8e:43:76:eb:c4: cf:2b:91:90:8e:d4:12:11:b3:f6:85:43:d3:8e:01:c4:b8:6d: 39:17:53:fa:1d:af:a8:6d:8c:67:66:15:72:da:c4:3a:61:ef: 13:3f:5b:ee -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSvpIwSiHSwBe5W8cQLhGpTl+05EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRjNGNkNBQjhCQkFDRUJFNzREQkVDMkI1QjNBNTdF MjFERDBBMjAeFw0yNjA5MjExNTU4MTdaFw0yNjA5MjUyMDIxMTdaMDMxMTAvBgNV BAMTKDhDMURCNzA4RjU0MkI2RUJGQUQzMTI1Rjk1MEQyQzI2MzdENDg2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtflL5qcNX/5yGiqoD0qVHC3KZ JzWqCBJm6tBDEOQpzGsyopRa57NsXgFgEJHBAZeILq8u2xcmS3IbKBRfhJricTzR Prekev1LBZol2JCAQbvBn83sY6K7rkLAdg1g8LN4lMI2/98P+qlc7NIjRvngnf6a fDeRZDJ+G+EL9tlGgRl98Imsb9WYcNjYZKUMJ+AGl9z7feIYlTgMSJ2zU5xdNsoT 15/rB/W4GaU1xkzGZ0Pl81UVEAxXges+qo2FCYJqmeTa//dI/jkM2O4R7lAdJYYO R5dqF+F30cWiSxIgw/MF5WosdBt1xB9cC5dBkMiX04bBOlkNy4rpOkwJ7QNTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjB23CPVCtuv60xJflQ0sJjfUhsgwHwYDVR0j BBgwFoAUsy8/bKuLus6+dNvsK1s6V+Id0KIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTU0MUNCMDEwMzEyQkIwQjEwRkYwNENEMUFENDA0Q0Mw REZFMTE3QkExOEMzRkJCRTdBNkE5NzhDQzM1RDA0LzAvQjMyRjNGNkNBQjhCQkFD RUJFNzREQkVDMkI1QjNBNTdFMjFERDBBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzJGM0Y2Q0FCOEJCQUNFQkU3 NERCRUMyQjVCM0E1N0UyMUREMEEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkE1NDFDQjAxMDMxMkJCMEIxMEZGMDRDRDFBRDQwNENDMERGRTExN0JB MThDM0ZCQkU3QTZBOTc4Q0MzNUQwNC8wL0IzMkYzRjZDQUI4QkJBQ0VCRTc0REJF QzJCNUIzQTU3RTIxREQwQTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRKLB0c+lVj9NcaMM2xfodhp/5 SyiLMgGyDM/71VnD9XuSGQHgX20XPN1fAOYizn/p3ZeK0k6d7qDPXwBGvjfdzC+a 5Gy0SyMa6d+wSgoyem+iYqmUaN+XwSCDp9863di2EYLZepOUrBh6kg2WFy8wbwtI VM4aQjzh3VbDuN7zjeEua+zAqO6TXojRcnCYwvH/EmPeYBf5Khn0pXcbKsB7bsNl /mwIAEk/yqc15JCySG+Kn1TEZUl34D4GJWFOqFZpnFzB41LWCi/5aNpnp0QJFMpk jkN268TPK5GQjtQSEbP2hUPTjgHEuG05F1P6Ha+obYxnZhVy2sQ6Ye8TP1vu -----END CERTIFICATE-----Generated at Tue Sep 22 19:02:04 2026 by rpki-client