$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft File: 298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft (raw, json) Hash identifier: jU6M1zhEuF3xBuP+qrNniCGtfnIHIBCtf/+pdmdys40= Subject key identifier: 1A:C4:F7:62:CF:31:5C:9B:F9:2E:AE:30:D0:BC:E4:D9:46:C5:C6:C4 Authority key identifier: 29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39 Certificate issuer: /CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39 Certificate serial: 37CCE556F4FE1AE74CB6DD59AC3134674D90275A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft Manifest number: 01E8 Signing time: Sat 31 Oct 2026 10:21:58 +0000 Manifest this update: Sat 31 Oct 2026 10:16:58 +0000 Manifest next update: Thu 05 Nov 2026 16:59:58 +0000 Files and hashes: 1: 34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa (hash: C3SeuOiJQiODCy4RvtWZf3srHrFSMSQy4kGCYri+Tss=) 2: 298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl (hash: wMeXIrwIO4XpQoR/PelNoS4bx4BjyXBzmH3KsyNBoFc=) 3: 323830333a623836303a3a2f33322d3332203d3e20323637383238.roa (hash: VnmDSU6NTApr21V6Y2gj5T20g0Oljnkj5FUUqJ7fLjc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 02:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:cc:e5:56:f4:fe:1a:e7:4c:b6:dd:59:ac:31:34:67:4d:90:27:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39 Validity Not Before: Oct 31 10:16:58 2026 GMT Not After : Nov 5 16:59:58 2026 GMT Subject: CN=1AC4F762CF315C9BF92EAE30D0BCE4D946C5C6C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:81:46:32:74:c5:38:7b:84:70:c7:0b:9f: e3:ac:6a:1d:c3:2a:84:51:b2:7e:c1:b1:61:e6:fa: f2:75:03:25:7f:08:31:19:c0:db:65:06:c7:cc:68: 65:cd:a1:50:0b:63:f1:4e:33:62:17:52:00:09:a9: db:9e:59:eb:52:78:9b:45:3c:a8:dd:41:66:5b:03: a9:c8:e7:18:fa:a6:99:81:cb:37:46:be:b2:27:5b: 77:c7:c9:5c:2b:5f:6b:13:14:4e:d3:9a:8a:a3:6d: f4:05:a9:65:13:e7:12:e1:90:bc:82:ad:c6:34:11: 53:ab:2e:51:86:2f:3a:ee:c6:e6:74:7d:64:bb:02: c9:02:4d:a1:5f:51:fb:d0:22:28:30:91:63:8d:ca: f2:9c:f2:fa:4c:57:1d:8e:35:16:35:98:fa:10:f1: f0:31:6e:ce:95:2c:e7:06:52:e4:7c:de:66:70:55: 3c:a9:c4:88:fa:3d:6f:34:76:d8:c2:dd:56:35:54: 80:42:04:7d:cf:cc:36:a8:04:74:9a:ff:62:34:35: aa:88:2e:34:e4:3d:74:84:e3:99:50:d5:99:fe:c1: 8a:4c:db:c7:ff:57:be:28:cf:55:3f:3d:e6:38:31: fd:62:84:bb:d6:93:01:0e:da:a7:5f:cc:2c:7f:22: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C4:F7:62:CF:31:5C:9B:F9:2E:AE:30:D0:BC:E4:D9:46:C5:C6:C4 X509v3 Authority Key Identifier: keyid:29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:62:66:6f:56:9b:d0:ef:3e:bb:40:08:1f:4f:3f:66:43:f9: 85:61:78:8a:be:aa:ad:87:3e:4b:24:b8:a3:0e:87:9f:e2:1e: 2a:e8:dd:df:f5:60:2f:45:46:f0:01:29:03:28:e1:fe:1e:ed: c2:1d:ca:9d:fd:70:2c:3d:8d:bd:0a:6e:bc:3d:6a:d3:1e:6c: 87:4c:77:c6:40:a5:8a:20:65:6d:e4:33:8f:a8:77:92:40:40: 70:dd:32:15:d7:13:04:d8:da:b1:ba:87:d9:3e:81:46:3b:dc: 5e:f8:9a:2f:41:1c:c2:69:0a:36:1d:cb:1e:16:11:5e:d5:5a: 33:66:c4:7e:19:a6:cb:0f:41:26:c2:49:39:a5:74:90:79:39: 82:70:c4:5f:10:a9:b9:38:09:92:4f:b1:4c:7e:a4:82:44:17: 40:e4:81:14:59:56:e6:a3:82:a0:c9:a6:56:b6:86:c8:31:b9: e8:85:a2:21:be:7d:78:41:65:ff:0b:c4:6a:f9:19:7b:a8:d3: 84:66:6c:ea:92:f2:87:38:c2:1b:57:2c:0b:6b:68:bf:b9:61: 44:4b:20:42:5a:2b:82:91:ea:39:52:67:64:8c:ce:5d:84:a6: c2:08:73:a5:f2:99:a3:16:ec:fc:da:0b:38:d6:b5:1b:15:59: b3:e4:c2:22 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUN8zlVvT+GudMtt1ZrDE0Z02QJ1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4OTM1QzlBNDNDNUM5QkRDOUFFMUY4MTg1QkZEOThG RjFBN0IzOTAeFw0yNjEwMzExMDE2NThaFw0yNjExMDUxNjU5NThaMDMxMTAvBgNV BAMTKDFBQzRGNzYyQ0YzMTVDOUJGOTJFQUUzMEQwQkNFNEQ5NDZDNUM2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVYFGMnTFOHuEcMcLn+Osah3D KoRRsn7BsWHm+vJ1AyV/CDEZwNtlBsfMaGXNoVALY/FOM2IXUgAJqdueWetSeJtF PKjdQWZbA6nI5xj6ppmByzdGvrInW3fHyVwrX2sTFE7TmoqjbfQFqWUT5xLhkLyC rcY0EVOrLlGGLzruxuZ0fWS7AskCTaFfUfvQIigwkWONyvKc8vpMVx2ONRY1mPoQ 8fAxbs6VLOcGUuR83mZwVTypxIj6PW80dtjC3VY1VIBCBH3PzDaoBHSa/2I0NaqI LjTkPXSE45lQ1Zn+wYpM28f/V74oz1U/PeY4Mf1ihLvWkwEO2qdfzCx/Is3RAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUGsT3Ys8xXJv5Lq4w0Lzk2UbFxsQwHwYDVR0j BBgwFoAUKYk1yaQ8XJvcmuH4GFv9mP8aezkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRTY5OUE0QUM1RTdFMzNFQTQ2MzE4NTlGOTcyNTI1NDMw MkQxQzE5NURFODQ1NzMyNTE4Mjk1ODdBM0JCNDY2LzAvMjk4OTM1QzlBNDNDNUM5 QkRDOUFFMUY4MTg1QkZEOThGRjFBN0IzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTg5MzVDOUE0M0M1QzlCREM5 QUUxRjgxODVCRkQ5OEZGMUE3QjM5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEU2OTlBNEFDNUU3RTMzRUE0NjMxODU5Rjk3MjUyNTQzMDJEMUMxOTVE RTg0NTczMjUxODI5NTg3QTNCQjQ2Ni8wLzI5ODkzNUM5QTQzQzVDOUJEQzlBRTFG ODE4NUJGRDk4RkYxQTdCMzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLYmZvVpvQ7z67QAgfTz9mQ/mF YXiKvqqthz5LJLijDoef4h4q6N3f9WAvRUbwASkDKOH+Hu3CHcqd/XAsPY29Cm68 PWrTHmyHTHfGQKWKIGVt5DOPqHeSQEBw3TIV1xME2NqxuofZPoFGO9xe+JovQRzC aQo2HcseFhFe1VozZsR+GabLD0Emwkk5pXSQeTmCcMRfEKm5OAmST7FMfqSCRBdA 5IEUWVbmo4KgyaZWtobIMbnohaIhvn14QWX/C8Rq+Rl7qNOEZmzqkvKHOMIbVywL a2i/uWFESyBCWiuCkeo5UmdkjM5dhKbCCHOl8pmjFuz82gs41rUbFVmz5MIi -----END CERTIFICATE-----Generated at Sat Oct 31 12:22:06 2026 by rpki-client