$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft File: CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft (raw, json) Hash identifier: RQYpOyeR9AlBqA6wVO/MfzvyparemtqH9NR2ajSFQJY= Subject key identifier: 8A:8B:DD:32:A3:26:A3:4F:A8:85:23:2B:67:6E:E7:7E:1D:FA:1B:82 Authority key identifier: CD:A0:1D:15:7A:F5:B5:BA:05:DE:A9:23:DA:DF:3E:D1:DB:59:C2:FA Certificate issuer: /CN=CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA Certificate serial: 23AE193124B40A1C0F5CEC2F0F43619EF688A333 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft Manifest number: 0B Signing time: Fri 25 Sep 2026 09:12:41 +0000 Manifest this update: Fri 25 Sep 2026 09:07:41 +0000 Manifest next update: Wed 30 Sep 2026 22:10:41 +0000 Files and hashes: 1: 34352e3139302e3138302e302f32322d3234203d3e20323635363138.roa (hash: wTOyNzoCO5ZqiBtFnDsbxOeajaPi+Hoo10vpt1ihoew=) 2: CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl (hash: dNENadu0jwxq35X3hz0VqLBN4KWGh5rbw9MyxTW08yc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Sep 2026 17:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ae:19:31:24:b4:0a:1c:0f:5c:ec:2f:0f:43:61:9e:f6:88:a3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA Validity Not Before: Sep 25 09:07:41 2026 GMT Not After : Sep 30 22:10:41 2026 GMT Subject: CN=8A8BDD32A326A34FA885232B676EE77E1DFA1B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:75:f0:b2:f2:bc:12:e8:7f:16:a5:9f:88:9a: 74:fc:43:60:7c:7d:2a:32:33:bd:47:34:6e:6b:87: 40:1f:53:9f:69:4d:bf:96:6b:91:e9:c7:3b:b0:e8: 21:fc:c0:7d:27:fe:a2:ed:90:30:d3:de:a0:5b:09: 8e:6e:b3:f9:ab:12:a5:93:af:71:d6:99:b3:74:69: 6a:66:cf:52:db:53:79:9f:64:41:12:ee:7e:1e:bd: 3f:77:33:a5:8c:20:25:f9:db:ff:16:07:19:db:ae: b8:1e:e2:87:40:d4:ae:90:2b:5d:61:cf:25:c5:9d: b8:40:17:bf:66:c7:72:34:de:e9:d2:d4:3a:f3:0d: 44:55:b5:c7:92:91:78:16:0c:32:13:a0:cb:f8:05: ca:fa:68:cb:05:bb:f9:cb:51:e2:fc:b1:c7:88:ff: a5:e1:da:c4:89:67:02:f5:36:21:dd:28:31:69:60: bb:39:0e:5e:94:3e:ce:a2:fc:72:b9:25:27:cb:fc: 85:6f:2b:2d:bb:4f:b7:ab:e7:30:77:39:3b:51:dd: 61:42:b5:da:13:f2:e7:70:58:ab:8b:51:7e:a4:24: d3:ca:4d:8c:1d:04:d3:b8:ef:32:ad:e3:69:ab:a7: ba:75:c5:b6:a2:1c:fc:b4:4d:66:d9:8a:18:1c:25: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8B:DD:32:A3:26:A3:4F:A8:85:23:2B:67:6E:E7:7E:1D:FA:1B:82 X509v3 Authority Key Identifier: keyid:CD:A0:1D:15:7A:F5:B5:BA:05:DE:A9:23:DA:DF:3E:D1:DB:59:C2:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:97:e7:e5:28:83:fe:e1:a5:6e:26:80:8b:0e:94:e8:ad:29: 90:8e:c5:63:38:7b:78:82:08:61:d6:f1:81:50:66:12:67:40: 8c:44:f3:c2:e2:4a:3a:fc:d7:ac:6f:b3:d1:cc:0a:3d:af:8a: 99:0e:dc:9b:ff:e1:e6:ec:45:46:7d:e4:fc:99:75:eb:34:37: 40:36:68:24:e7:11:d9:51:bd:97:a9:e0:46:7c:05:68:6c:ec: ef:28:7a:29:0a:22:fa:82:cc:31:bb:e8:ed:40:5d:9f:09:d6: 3a:52:43:a8:31:ac:a1:43:a5:84:d3:c8:26:63:f1:bc:e4:fd: 74:fc:cc:27:64:1b:e1:73:aa:d0:5e:15:7e:07:88:9e:ad:dc: d9:87:5c:31:4c:77:9e:c8:b9:cc:53:c3:4f:0b:78:fe:7d:ea: 0e:0d:8f:9e:a2:22:bd:17:b0:ed:a0:e5:a0:1a:72:59:34:4b: 1a:39:30:44:01:ed:dc:4b:64:32:8b:ae:c6:30:8e:fe:5a:84: 79:11:ca:ba:d9:8e:74:ef:65:84:18:73:ed:b4:3c:b0:fb:7c: f5:03:84:e4:9a:84:50:30:3b:61:e1:85:87:f7:41:5f:39:61: 0a:ad:af:71:ce:87:08:d2:54:02:f3:ca:5d:d1:0c:49:bf:ed: 68:20:31:c9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUI64ZMSS0ChwPXOwvD0NhnvaIozMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBMDFEMTU3QUY1QjVCQTA1REVBOTIzREFERjNFRDFE QjU5QzJGQTAeFw0yNjA5MjUwOTA3NDFaFw0yNjA5MzAyMjEwNDFaMDMxMTAvBgNV BAMTKDhBOEJERDMyQTMyNkEzNEZBODg1MjMyQjY3NkVFNzdFMURGQTFCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNdfCy8rwS6H8WpZ+ImnT8Q2B8 fSoyM71HNG5rh0AfU59pTb+Wa5Hpxzuw6CH8wH0n/qLtkDDT3qBbCY5us/mrEqWT r3HWmbN0aWpmz1LbU3mfZEES7n4evT93M6WMICX52/8WBxnbrrge4odA1K6QK11h zyXFnbhAF79mx3I03unS1DrzDURVtceSkXgWDDIToMv4Bcr6aMsFu/nLUeL8sceI /6Xh2sSJZwL1NiHdKDFpYLs5Dl6UPs6i/HK5JSfL/IVvKy27T7er5zB3OTtR3WFC tdoT8udwWKuLUX6kJNPKTYwdBNO47zKt42mrp7p1xbaiHPy0TWbZihgcJXKTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiovdMqMmo0+ohSMrZ27nfh36G4IwHwYDVR0j BBgwFoAUzaAdFXr1tboF3qkj2t8+0dtZwvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMDFEQzY5M0QzOUI5Q0NDQkY0Qzg0MDU4MUNGMjk0NDFC Q0NFMDVGNEM2MzNGMzMyM0I3NThBRERCOEE0NDg2LzAvQ0RBMDFEMTU3QUY1QjVC QTA1REVBOTIzREFERjNFRDFEQjU5QzJGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREEwMUQxNTdBRjVCNUJBMDVE RUE5MjNEQURGM0VEMURCNTlDMkZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDAxREM2OTNEMzlCOUNDQ0JGNEM4NDA1ODFDRjI5NDQxQkNDRTA1RjRD NjMzRjMzMjNCNzU4QUREQjhBNDQ4Ni8wL0NEQTAxRDE1N0FGNUI1QkEwNURFQTky M0RBREYzRUQxREI1OUMyRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZl+flKIP+4aVuJoCLDpTorSmQ jsVjOHt4gghh1vGBUGYSZ0CMRPPC4ko6/Nesb7PRzAo9r4qZDtyb/+Hm7EVGfeT8 mXXrNDdANmgk5xHZUb2XqeBGfAVobOzvKHopCiL6gswxu+jtQF2fCdY6UkOoMayh Q6WE08gmY/G85P10/MwnZBvhc6rQXhV+B4ierdzZh1wxTHeeyLnMU8NPC3j+feoO DY+eoiK9F7DtoOWgGnJZNEsaOTBEAe3cS2Qyi67GMI7+WoR5Ecq62Y5072WEGHPt tDyw+3z1A4TkmoRQMDth4YWH90FfOWEKra9xzocI0lQC88pd0QxJv+1oIDHJ -----END CERTIFICATE-----Generated at Sat Sep 26 22:37:39 2026 by rpki-client