$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft File: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft (raw, json) Hash identifier: dd6+W64ki2Wh7Yz21tXDjkbnS5+J+AMglT0RqzOPpI8= Subject key identifier: A8:55:FD:96:0A:4A:50:D3:42:EB:8B:5E:3D:DE:E8:96:05:F4:3C:6F Authority key identifier: 3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D Certificate issuer: /CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D Certificate serial: 295D460C3FA914D1C92E1DC7AF70E909B1FF94A4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft Manifest number: 01E4 Signing time: Wed 28 Oct 2026 08:10:50 +0000 Manifest this update: Wed 28 Oct 2026 08:05:50 +0000 Manifest next update: Tue 03 Nov 2026 00:01:50 +0000 Files and hashes: 1: 3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa (hash: WD+eLyobsw/8MlklBmwopGTS4G6J3R053E42ZeLL7+w=) 2: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl (hash: ++eahMiamd7dS5UgUL3sq71TiOpRaAftCojD30jTNfA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 15:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5d:46:0c:3f:a9:14:d1:c9:2e:1d:c7:af:70:e9:09:b1:ff:94:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D Validity Not Before: Oct 28 08:05:50 2026 GMT Not After : Nov 3 00:01:50 2026 GMT Subject: CN=A855FD960A4A50D342EB8B5E3DDEE89605F43C6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:6b:37:7d:54:e4:b8:70:f2:f3:98:61:5f: 3d:c3:ce:1b:11:72:95:16:19:39:8b:d5:4d:41:d5: e8:e7:e7:b0:a6:68:69:da:72:2b:5f:11:eb:b2:89: 94:55:2c:8c:2e:a2:75:b2:21:2b:d4:85:ef:8c:3e: f4:ed:b7:e9:68:87:ce:f3:02:d4:a4:a3:64:53:77: e4:9f:24:5f:e8:e1:48:66:e5:a9:f7:66:e5:6e:a5: 55:79:56:83:85:2f:f5:12:ec:87:54:89:9e:b9:f3: 18:4b:ed:93:b7:0e:c3:d2:c5:57:31:fb:b3:41:9f: 76:98:7e:09:ce:de:29:57:cf:b6:a3:ba:25:ea:b6: ba:2a:d5:f6:12:5c:a0:e8:d3:b4:cd:60:1e:02:0a: 68:7f:c9:55:48:c5:cd:38:b6:80:a0:c6:0b:04:48: c8:43:3a:2c:46:3e:30:e9:8f:ee:04:ad:53:17:bc: 8e:e6:8e:97:41:e2:ff:0c:09:ef:68:a6:36:d4:fc: f1:82:0a:e9:44:45:03:1d:70:e1:2c:de:12:ac:4b: b1:6d:1e:f8:2c:07:68:37:42:f9:3b:66:3a:e5:da: 1b:53:70:20:4d:8b:4b:51:83:59:5b:2e:95:5d:53: 4b:e1:e5:25:53:90:8c:03:fc:46:0e:37:ae:74:8e: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:55:FD:96:0A:4A:50:D3:42:EB:8B:5E:3D:DE:E8:96:05:F4:3C:6F X509v3 Authority Key Identifier: keyid:3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9c:41:89:53:48:af:2b:29:5c:89:b4:71:ca:28:8f:28:fb: 4f:19:8b:d2:5b:6c:37:b4:c7:0d:e7:03:d6:14:3e:a3:00:75: 9a:b8:d0:84:d4:75:8d:aa:76:81:07:0f:4e:9b:06:20:c9:bb: 08:5e:c5:5b:11:e7:f0:fb:86:94:28:d5:3f:55:4d:58:49:cc: 0a:69:9c:2a:27:b3:7b:ed:17:eb:cc:8d:b7:33:f7:7d:55:2e: 04:f1:1b:b8:7f:d2:e0:ed:e3:d1:02:4a:63:69:9b:d8:fd:ca: 84:51:4a:be:73:e5:b7:8f:1e:bf:cc:4b:6c:2c:60:84:66:c5: df:ba:b5:c6:8d:b5:f0:83:fc:9c:ad:e2:c2:7f:c5:ad:1a:e8: 35:d7:aa:39:1f:7f:c2:f4:7f:64:8f:7a:10:02:dd:8f:8a:5f: b2:e9:bf:81:c7:f9:e5:21:d7:52:e0:55:2f:78:e4:d3:d9:93: e4:e2:08:e7:01:a7:1b:68:89:d4:9c:49:06:fa:66:16:9e:09: 8e:fa:76:a2:04:7e:b8:9d:7a:d1:97:1a:58:48:7d:79:01:f3: 38:00:a4:c2:40:44:8d:54:25:51:82:38:9b:36:ec:d2:17:0e: d4:39:91:d1:a0:76:0a:b4:92:0e:1f:04:c3:83:f9:10:23:43: e4:64:b8:5d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKV1GDD+pFNHJLh3Hr3DpCbH/lKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGRkE2MTU1RUUwQjg2MjdBNTVFRThFRUJDNzg0M0JG MDg3RDA4RDAeFw0yNjEwMjgwODA1NTBaFw0yNjExMDMwMDAxNTBaMDMxMTAvBgNV BAMTKEE4NTVGRDk2MEE0QTUwRDM0MkVCOEI1RTNEREVFODk2MDVGNDNDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWtWs3fVTkuHDy85hhXz3DzhsR cpUWGTmL1U1B1ejn57CmaGnacitfEeuyiZRVLIwuonWyISvUhe+MPvTtt+loh87z AtSko2RTd+SfJF/o4Uhm5an3ZuVupVV5VoOFL/US7IdUiZ658xhL7ZO3DsPSxVcx +7NBn3aYfgnO3ilXz7ajuiXqtroq1fYSXKDo07TNYB4CCmh/yVVIxc04toCgxgsE SMhDOixGPjDpj+4ErVMXvI7mjpdB4v8MCe9opjbU/PGCCulERQMdcOEs3hKsS7Ft HvgsB2g3Qvk7Zjrl2htTcCBNi0tRg1lbLpVdU0vh5SVTkIwD/EYON650jlohAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqFX9lgpKUNNC64tePd7olgX0PG8wHwYDVR0j BBgwFoAUOv+mFV7guGJ6Ve6O68eEO/CH0I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQjBGQzRGMUY2MkUyREYwNzA5QTc1NjZEMEJFNUU5QzA4 Mjg0NUM2QTMxMUMwNzgwNzlENDU4MTEzQjgyQzc4LzAvM0FGRkE2MTU1RUUwQjg2 MjdBNTVFRThFRUJDNzg0M0JGMDg3RDA4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQUZGQTYxNTVFRTBCODYyN0E1 NUVFOEVFQkM3ODQzQkYwODdEMDhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0IwRkM0RjFGNjJFMkRGMDcwOUE3NTY2RDBCRTVFOUMwODI4NDVDNkEz MTFDMDc4MDc5RDQ1ODExM0I4MkM3OC8wLzNBRkZBNjE1NUVFMEI4NjI3QTU1RUU4 RUVCQzc4NDNCRjA4N0QwOEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOnEGJU0ivKylcibRxyiiPKPtP GYvSW2w3tMcN5wPWFD6jAHWauNCE1HWNqnaBBw9OmwYgybsIXsVbEefw+4aUKNU/ VU1YScwKaZwqJ7N77RfrzI23M/d9VS4E8Ru4f9Lg7ePRAkpjaZvY/cqEUUq+c+W3 jx6/zEtsLGCEZsXfurXGjbXwg/ycreLCf8WtGug116o5H3/C9H9kj3oQAt2Pil+y 6b+Bx/nlIddS4FUveOTT2ZPk4gjnAacbaInUnEkG+mYWngmO+naiBH64nXrRlxpY SH15AfM4AKTCQESNVCVRgjibNuzSFw7UOZHRoHYKtJIOHwTDg/kQI0PkZLhd -----END CERTIFICATE-----Generated at Wed Oct 28 18:54:24 2026 by rpki-client