$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft File: 8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft (raw, json) Hash identifier: 0EYn6u7hbIHeQwsbmBB+32aD4CtRszGiW+1gp357Ynw= Subject key identifier: 27:55:C0:17:36:D0:26:CB:F9:EE:98:2B:04:0C:DC:8E:3A:53:8B:06 Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3 Certificate issuer: /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3 Certificate serial: 360F86D38843972EFDA33F23BA92E45C52413E28 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft Manifest number: DC Signing time: Wed 29 Jul 2026 09:29:07 +0000 Manifest this update: Wed 29 Jul 2026 09:24:07 +0000 Manifest next update: Sun 02 Aug 2026 13:11:07 +0000 Files and hashes: 1: 3230302e32342e332e302f32342d3234203d3e203138363738.roa (hash: 00cxniPFTJnv8p8Rd10tGt5olPWz3r7JrkjJ93suZnc=) 2: 3230302e32342e302e302f32332d3234203d3e203138363738.roa (hash: qlNVQTJS9bsebmyRB1fLYVQV+4MPQDPb3OMY5OT1oAk=) 3: 3230302e32342e352e302f32342d3234203d3e203138363738.roa (hash: dfXnOLM3KXWXzS14RiZ6MUOkZm9lqzrhusiAx2ZRr6c=) 4: 3230302e32342e322e302f32342d3234203d3e203138363738.roa (hash: +W+C9LEDHXz5oYJEuRZo37N/ALOEHrR52VzFe1rE4Q0=) 5: 8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl (hash: 9x8FjVBwpigplcWKFnl976gS8IGPhdsdIUIJEe0uiwY=) 6: 3230302e32342e372e302f32342d3234203d3e203138363738.roa (hash: ZC5yEKcfYthlNQWx3g3qQXAaImk/fXOYUJculnUgu2o=) 7: 3230302e32342e342e302f32342d3234203d3e203138363738.roa (hash: FEhNuENKKPbt7ogkJs7f/KOL0zppQjQN16/JEdZ4oKw=) 8: 3230302e32342e362e302f32342d3234203d3e203138363738.roa (hash: kusJ2qOjFBenVLKkUnrt0KGR21Y7z6JHrl9GdpawfB0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Aug 2026 13:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0f:86:d3:88:43:97:2e:fd:a3:3f:23:ba:92:e4:5c:52:41:3e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3 Validity Not Before: Jul 29 09:24:07 2026 GMT Not After : Aug 2 13:11:07 2026 GMT Subject: CN=2755C01736D026CBF9EE982B040CDC8E3A538B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:0a:5e:df:87:fd:b6:a7:12:dd:04:4c:39: 68:00:37:34:81:be:81:31:7a:09:88:57:50:0c:98: 58:ec:9b:6b:44:86:98:0b:66:4d:8d:77:7b:82:9d: d4:9e:9f:79:4e:97:dd:6f:7a:0c:6d:8b:f3:41:55: c3:e7:94:da:88:74:94:33:fb:9a:28:91:8f:dc:2b: 07:c0:ec:6f:f7:7b:fe:6b:cc:c8:25:49:4d:f8:ac: 44:27:58:85:14:8b:45:2e:8a:6a:e1:b9:94:3b:9a: 90:15:ce:b5:71:99:84:da:51:fd:90:f1:a2:c8:d0: 30:82:57:ec:87:15:f8:25:e2:44:10:61:88:18:f3: 5e:e0:27:0c:7d:38:74:25:9b:23:45:65:f7:52:ea: 49:ac:ee:7c:78:ab:4f:63:02:e9:c7:7a:12:f4:bb: 46:52:3d:cb:ae:22:24:58:35:30:e5:16:f9:2d:31: f2:91:f0:d8:49:d3:94:60:9f:ec:89:0b:aa:bb:0e: b9:60:d3:a4:8e:ad:a1:3b:15:85:ba:19:46:51:37: 60:6b:7a:d0:a3:04:94:0f:7e:b1:5b:9a:8d:c1:6b: 0f:2a:99:95:aa:98:ca:cc:5e:9c:15:cb:2c:07:3e: 7d:2a:3d:35:a5:29:80:24:42:f3:e4:e2:f0:f0:53: 3f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:55:C0:17:36:D0:26:CB:F9:EE:98:2B:04:0C:DC:8E:3A:53:8B:06 X509v3 Authority Key Identifier: keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:97:2a:ed:aa:7c:e5:40:95:38:51:b3:1d:2e:27:9f:d4:d8: fa:09:fc:d1:29:03:ac:02:19:16:ef:3e:dd:41:0f:53:4b:9f: 8f:17:ea:eb:95:ae:7a:83:f9:bf:59:c3:31:76:2b:cc:52:f2: dd:31:a1:69:bd:72:af:99:e3:6b:97:35:e0:78:95:e5:71:fe: da:a5:44:e4:f1:07:d2:5b:c1:ea:0e:0e:5d:0b:41:d7:87:04: b1:05:fb:af:60:c4:6a:29:5e:81:28:9b:3a:cf:99:06:63:86: 3d:c4:66:cc:c7:ed:45:ec:6e:69:0b:84:d4:5a:00:ac:bd:42: b8:49:1a:13:af:8e:a4:f2:6a:52:ba:75:08:f3:4e:36:fd:b2: ee:03:11:23:16:9f:6f:06:6e:1d:16:9b:30:9b:7f:01:fa:de: ab:3f:7e:97:1d:1b:ed:de:be:b3:45:21:2b:a5:85:c2:3a:3e: 4e:83:18:0e:fa:a3:28:bb:e4:f5:11:18:ab:0c:02:95:b4:7f: c7:c2:b9:fa:bb:c1:74:c4:73:fd:b9:b5:9d:9d:52:15:ce:94: 9c:63:30:96:95:9e:d9:3d:af:a2:82:c9:e7:f1:70:9b:87:c5: 6b:a3:c8:68:ad:ea:1e:f6:21:cf:a8:91:c3:b7:1c:86:cb:ae: b1:7d:9e:b1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNg+G04hDly79oz8jupLkXFJBPigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFOUYwMzVGOEIxNkQxRTk4QjkxOUI0RUZDNzM5NzhB M0EyRThBMzAeFw0yNjA3MjkwOTI0MDdaFw0yNjA4MDIxMzExMDdaMDMxMTAvBgNV BAMTKDI3NTVDMDE3MzZEMDI2Q0JGOUVFOTgyQjA0MENEQzhFM0E1MzhCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09Qpe34f9tqcS3QRMOWgANzSB voExegmIV1AMmFjsm2tEhpgLZk2Nd3uCndSen3lOl91vegxti/NBVcPnlNqIdJQz +5ookY/cKwfA7G/3e/5rzMglSU34rEQnWIUUi0UuimrhuZQ7mpAVzrVxmYTaUf2Q 8aLI0DCCV+yHFfgl4kQQYYgY817gJwx9OHQlmyNFZfdS6kms7nx4q09jAunHehL0 u0ZSPcuuIiRYNTDlFvktMfKR8NhJ05Rgn+yJC6q7Drlg06SOraE7FYW6GUZRN2Br etCjBJQPfrFbmo3Baw8qmZWqmMrMXpwVyywHPn0qPTWlKYAkQvPk4vDwUz+XAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJ1XAFzbQJsv57pgrBAzcjjpTiwYwHwYDVR0j BBgwFoAUjenwNfixbR6YuRm078c5eKOi6KMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERjMzRDkwOTc5QTlBRjMxNDc4QkFGQzRCQjczRkEyNTk5 OEE3MDkxOUVERjE4N0U4MTU0MEM4QUJGMTQyODk3LzAvOERFOUYwMzVGOEIxNkQx RTk4QjkxOUI0RUZDNzM5NzhBM0EyRThBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REU5RjAzNUY4QjE2RDFFOThC OTE5QjRFRkM3Mzk3OEEzQTJFOEEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREYzM0Q5MDk3OUE5QUYzMTQ3OEJBRkM0QkI3M0ZBMjU5OThBNzA5MTlF REYxODdFODE1NDBDOEFCRjE0Mjg5Ny8wLzhERTlGMDM1RjhCMTZEMUU5OEI5MTlC NEVGQzczOTc4QTNBMkU4QTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/lyrtqnzlQJU4UbMdLief1Nj6 CfzRKQOsAhkW7z7dQQ9TS5+PF+rrla56g/m/WcMxdivMUvLdMaFpvXKvmeNrlzXg eJXlcf7apUTk8QfSW8HqDg5dC0HXhwSxBfuvYMRqKV6BKJs6z5kGY4Y9xGbMx+1F 7G5pC4TUWgCsvUK4SRoTr46k8mpSunUI8042/bLuAxEjFp9vBm4dFpswm38B+t6r P36XHRvt3r6zRSErpYXCOj5OgxgO+qMou+T1ERirDAKVtH/Hwrn6u8F0xHP9ubWd nVIVzpScYzCWlZ7ZPa+igsnn8XCbh8Vro8horeoe9iHPqJHDtxyGy66xfZ6x -----END CERTIFICATE-----Generated at Wed Jul 29 15:29:50 2026 by rpki-client