$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: 8SRu/JjhUd2rRJL3d59mjEpOsakiVew/s20/EKZVQyo= Subject key identifier: 4E:EE:7A:80:93:C2:88:83:71:CB:E2:5A:66:AF:F8:2D:22:EC:AD:8C Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 39DD25EA4AD53A6CE5896C12775D53601408A480 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: 01BA Signing time: Mon 27 Jul 2026 13:48:32 +0000 Manifest this update: Mon 27 Jul 2026 13:43:32 +0000 Manifest next update: Sun 02 Aug 2026 10:35:32 +0000 Files and hashes: 1: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: lls2NOIQefkNui92Jx0iA7Lcnw+MwNLxm47JeaFpIdo=) 2: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: e/9GRW8TYHp7A2KIXzlJ9CLA+uoelJ8XQf6incQNuXQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Aug 2026 10:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:dd:25:ea:4a:d5:3a:6c:e5:89:6c:12:77:5d:53:60:14:08:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: Jul 27 13:43:32 2026 GMT Not After : Aug 2 10:35:32 2026 GMT Subject: CN=4EEE7A8093C2888371CBE25A66AFF82D22ECAD8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8a:ff:49:30:50:96:5a:e1:c0:68:2e:43:a6: 23:a3:ac:0a:b5:db:16:f1:0f:c5:0f:66:77:e7:c7: a2:ff:d3:1a:b4:ea:49:8d:6d:af:c5:2e:b1:34:54: 47:3f:ee:be:61:96:ee:43:b6:79:e0:20:69:09:a9: 21:b1:07:d5:d6:a8:f5:a4:93:4d:98:d1:e4:cb:db: 3d:39:e0:7e:56:a8:55:05:aa:f4:f0:1e:5c:60:ee: a5:04:81:d6:a0:3b:d6:a7:88:71:07:3c:80:90:c9: a1:89:e5:95:96:46:95:6b:42:35:cf:8a:f6:d6:4e: ff:bc:5b:7d:67:41:62:56:87:c4:31:22:53:69:00: 8a:05:54:e4:c4:85:e6:3c:99:d3:05:6a:4c:8e:08: 8a:43:e9:9d:00:c6:7a:b6:3a:cc:eb:3b:79:96:91: f0:c1:20:41:4e:6e:2a:4d:01:b5:32:51:ed:1e:86: d6:77:98:aa:15:73:64:60:82:80:4d:32:28:ee:99: b4:c3:4e:b4:e1:30:f3:79:46:71:8a:cd:50:88:e5: 5e:e6:19:46:c0:24:4f:67:a6:60:aa:f9:4a:fe:f1: 52:c9:97:d8:26:1c:f1:ef:0d:1c:1f:4f:50:86:c9: fb:ba:7e:86:7b:d3:00:18:11:53:67:6c:27:2b:e9: 9b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EE:7A:80:93:C2:88:83:71:CB:E2:5A:66:AF:F8:2D:22:EC:AD:8C X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cb:c7:d4:7f:3f:80:37:e4:5a:77:bf:33:60:82:26:fc:a0: 82:2d:97:80:38:a0:52:57:fd:0b:40:d2:dc:5f:15:b4:03:cf: 90:c5:7f:c6:95:b4:c7:b8:39:2c:7f:73:2e:cd:cd:0d:85:26: be:2a:b9:5b:8a:d7:73:20:37:49:81:1b:b5:57:07:fd:1d:fc: 57:7f:56:3c:63:9d:ca:65:b6:d6:5c:d8:fb:4b:75:2b:59:1a: 46:a8:34:69:4d:ef:f7:ae:a3:37:e0:a6:85:47:a5:96:b7:a7: f6:e6:8b:51:0e:9d:05:28:00:98:e9:c4:8f:0a:3d:1a:b2:5c: 82:bb:c3:30:a1:35:cb:e4:50:46:dd:94:7e:39:c0:38:34:35: 69:bc:ff:12:8b:9a:50:19:85:5e:c0:38:51:6a:dc:d7:1d:37: 31:ae:3d:54:72:15:29:75:e6:b3:7f:91:fa:39:6c:f2:89:fe: 60:02:35:f8:6d:95:32:37:44:ef:01:4c:ef:ca:40:ed:53:83: 85:53:9a:fa:39:70:65:1d:a5:b8:8e:4e:0a:ad:22:1c:63:78: be:dd:9d:03:3b:d2:84:23:04:96:1f:2b:f8:1a:85:d7:44:5e: fc:87:ed:7a:e1:8d:97:4c:02:09:61:dd:f3:e4:51:16:19:2c: 99:4a:45:7e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOd0l6krVOmzliWwSd11TYBQIpIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNjA3MjcxMzQzMzJaFw0yNjA4MDIxMDM1MzJaMDMxMTAvBgNV BAMTKDRFRUU3QTgwOTNDMjg4ODM3MUNCRTI1QTY2QUZGODJEMjJFQ0FEOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfiv9JMFCWWuHAaC5DpiOjrAq1 2xbxD8UPZnfnx6L/0xq06kmNba/FLrE0VEc/7r5hlu5DtnngIGkJqSGxB9XWqPWk k02Y0eTL2z054H5WqFUFqvTwHlxg7qUEgdagO9aniHEHPICQyaGJ5ZWWRpVrQjXP ivbWTv+8W31nQWJWh8QxIlNpAIoFVOTEheY8mdMFakyOCIpD6Z0Axnq2OszrO3mW kfDBIEFObipNAbUyUe0ehtZ3mKoVc2RggoBNMijumbTDTrThMPN5RnGKzVCI5V7m GUbAJE9npmCq+Ur+8VLJl9gmHPHvDRwfT1CGyfu6foZ70wAYEVNnbCcr6ZuZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTu56gJPCiINxy+JaZq/4LSLsrYwwHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQy8fUfz+AN+Rad78zYIIm/KCC LZeAOKBSV/0LQNLcXxW0A8+QxX/GlbTHuDksf3Muzc0NhSa+KrlbitdzIDdJgRu1 Vwf9HfxXf1Y8Y53KZbbWXNj7S3UrWRpGqDRpTe/3rqM34KaFR6WWt6f25otRDp0F KACY6cSPCj0aslyCu8MwoTXL5FBG3ZR+OcA4NDVpvP8Si5pQGYVewDhRatzXHTcx rj1UchUpdeazf5H6OWzyif5gAjX4bZUyN0TvAUzvykDtU4OFU5r6OXBlHaW4jk4K rSIcY3i+3Z0DO9KEIwSWHyv4GoXXRF78h+164Y2XTAIJYd3z5FEWGSyZSkV+ -----END CERTIFICATE-----Generated at Wed Jul 29 10:17:59 2026 by rpki-client