$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft File: 4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft (raw, json) Hash identifier: nDh06Lfpfyb6HNjf0v5qa2s88fw4Tfy5EsgFzPnsiFY= Subject key identifier: 22:2E:90:77:41:02:F7:45:28:D4:04:5D:5F:2B:32:85:C1:72:19:1D Authority key identifier: 4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE Certificate issuer: /CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE Certificate serial: 6DAB5E4320D9623ACA0AC1FF63E0BEE2122467FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft Manifest number: 01D3 Signing time: Fri 16 Oct 2026 17:14:13 +0000 Manifest this update: Fri 16 Oct 2026 17:09:13 +0000 Manifest next update: Thu 22 Oct 2026 00:55:13 +0000 Files and hashes: 1: 323830333a6536303a3a2f33322d3334203d3e20323637393133.roa (hash: 4a5y+5cIu8HpyNfMmPy+zVDjFR0VRxV3BHVaP8ZMP/E=) 2: 34352e3137392e39322e302f32322d3234203d3e20323637393133.roa (hash: Zhx4w7q3b76P43TUty03e9cZBQ52Og/4LKtdyYtiVRk=) 3: 4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl (hash: Yevm8HPFaSmjQWrCPhLf1r5vt8g69LKzJQL1nwhB530=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 22 Oct 2026 00:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ab:5e:43:20:d9:62:3a:ca:0a:c1:ff:63:e0:be:e2:12:24:67:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE Validity Not Before: Oct 16 17:09:13 2026 GMT Not After : Oct 22 00:55:13 2026 GMT Subject: CN=222E90774102F74528D4045D5F2B3285C172191D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:a7:bc:8f:74:e0:1e:de:32:b6:fe:d1:0a: e9:05:81:73:88:ae:de:01:21:00:ba:74:fb:3a:3d: 84:32:bc:7f:67:40:69:f3:ad:f1:21:6a:93:48:09: da:89:4a:8e:4e:8b:26:55:ee:49:ec:5f:a3:fd:00: 4b:0b:14:09:9e:ff:39:7b:d8:af:f0:3f:2f:e1:ca: 94:a4:ce:c1:14:9d:a1:2e:63:01:b2:02:ad:89:1a: 51:6e:5d:b4:1e:2b:7e:d3:15:39:7c:52:67:8f:cc: be:68:e7:32:c8:d6:b2:61:b8:6a:a1:9c:69:47:fe: b5:15:6f:a2:51:4c:ff:2a:90:2c:8e:bf:c5:20:6d: 1e:37:cb:47:73:a5:5d:73:8f:45:92:f2:25:d8:05: 3d:71:31:cb:b0:f8:93:93:09:27:fa:3f:25:ee:e4: 18:9b:7b:e5:ed:da:aa:a3:f0:b3:30:8f:9a:27:af: 11:97:9d:47:f6:77:cd:2c:63:1b:55:8d:93:0d:bb: 92:bc:13:58:9b:a9:24:bb:a7:6b:8f:5c:c5:7d:0a: 8c:85:9e:6e:6c:e4:51:f0:f3:e0:0d:04:22:08:42: 53:40:5e:e6:12:a9:0e:40:b6:93:2f:3e:be:16:9d: 6a:97:56:29:f5:a3:85:2b:ff:7a:79:fc:f5:0a:91: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2E:90:77:41:02:F7:45:28:D4:04:5D:5F:2B:32:85:C1:72:19:1D X509v3 Authority Key Identifier: keyid:4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:97:09:da:49:99:11:4d:05:09:15:55:88:b5:46:4d:ec:48: d3:1e:eb:21:b2:3b:ae:57:65:06:6f:48:1d:41:af:07:41:f6: 66:24:42:c1:14:a0:e4:f9:81:83:ac:ff:2b:d5:fc:ee:5f:f8: 34:b4:08:ed:79:a0:1f:10:28:37:bb:54:56:c8:c0:71:f4:08: 44:1c:26:d2:14:a5:65:33:a2:76:c1:5b:52:45:7e:ce:45:77: e8:eb:be:26:1b:a4:6d:6a:b5:1c:ed:b3:13:86:2a:80:25:5a: 12:5c:58:53:dc:c7:c4:35:99:91:07:76:29:a9:9b:9c:ea:50: 18:29:ed:ea:95:f1:07:3c:eb:c4:22:92:95:8e:dc:79:a1:f4: 2d:b5:25:53:f3:ef:d6:b4:d2:53:4e:ef:f9:85:28:e2:8e:eb: 82:37:7e:c8:16:3f:4e:7e:b3:99:f6:60:56:88:1d:b8:71:be: 4d:19:03:20:72:f2:55:6b:57:b3:91:28:5b:4b:9d:a8:0f:a6: d0:df:85:e6:d0:54:34:83:f9:ed:a0:29:39:40:6c:33:3d:bb: 2a:33:59:0b:ce:ab:bd:03:71:30:57:6b:79:bb:a1:21:fe:3e: 40:de:cc:cf:bf:76:54:ec:47:cb:81:38:d3:38:27:c8:39:1e: e7:2f:a1:1f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbateQyDZYjrKCsH/Y+C+4hIkZ/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQzMwQzJEQkMzMUFDREMyRTI0NTU1RjUwMzFDM0NG NkJBMERFRTAeFw0yNjEwMTYxNzA5MTNaFw0yNjEwMjIwMDU1MTNaMDMxMTAvBgNV BAMTKDIyMkU5MDc3NDEwMkY3NDUyOEQ0MDQ1RDVGMkIzMjg1QzE3MjE5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC646e8j3TgHt4ytv7RCukFgXOI rt4BIQC6dPs6PYQyvH9nQGnzrfEhapNICdqJSo5OiyZV7knsX6P9AEsLFAme/zl7 2K/wPy/hypSkzsEUnaEuYwGyAq2JGlFuXbQeK37TFTl8UmePzL5o5zLI1rJhuGqh nGlH/rUVb6JRTP8qkCyOv8UgbR43y0dzpV1zj0WS8iXYBT1xMcuw+JOTCSf6PyXu 5Bibe+Xt2qqj8LMwj5onrxGXnUf2d80sYxtVjZMNu5K8E1ibqSS7p2uPXMV9CoyF nm5s5FHw8+ANBCIIQlNAXuYSqQ5AtpMvPr4WnWqXVin1o4Ur/3p5/PUKkaGpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIi6Qd0EC90Uo1ARdXysyhcFyGR0wHwYDVR0j BBgwFoAUSqwwwtvDGs3C4kVV9QMcPPa6De4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRDY2MDAxRTdERTg4NDRBRUQwQUI0MjBDNUUwOUU2OUM1 NDdDODZBQjNBRDY5QURCMjQzMjZBNTM2MzE1RUEzLzAvNEFBQzMwQzJEQkMzMUFD REMyRTI0NTU1RjUwMzFDM0NGNkJBMERFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QUFDMzBDMkRCQzMxQUNEQzJF MjQ1NTVGNTAzMUMzQ0Y2QkEwREVFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEQ2NjAwMUU3REU4ODQ0QUVEMEFCNDIwQzVFMDlFNjlDNTQ3Qzg2QUIz QUQ2OUFEQjI0MzI2QTUzNjMxNUVBMy8wLzRBQUMzMEMyREJDMzFBQ0RDMkUyNDU1 NUY1MDMxQzNDRjZCQTBERUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKlwnaSZkRTQUJFVWItUZN7EjT HushsjuuV2UGb0gdQa8HQfZmJELBFKDk+YGDrP8r1fzuX/g0tAjteaAfECg3u1RW yMBx9AhEHCbSFKVlM6J2wVtSRX7ORXfo674mG6RtarUc7bMThiqAJVoSXFhT3MfE NZmRB3YpqZuc6lAYKe3qlfEHPOvEIpKVjtx5ofQttSVT8+/WtNJTTu/5hSjijuuC N37IFj9OfrOZ9mBWiB24cb5NGQMgcvJVa1ezkShbS52oD6bQ34Xm0FQ0g/ntoCk5 QGwzPbsqM1kLzqu9A3EwV2t5u6Eh/j5A3szPv3ZU7EfLgTjTOCfIOR7nL6Ef -----END CERTIFICATE-----Generated at Sun Oct 18 14:28:16 2026 by rpki-client