$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft File: CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft (raw, json) Hash identifier: oixU45gdrQAF+qdme6Q5S1uxKeymzWrRt3WCwgLKOfE= Subject key identifier: 8A:57:E7:CC:03:38:3C:4D:CB:42:37:D5:86:E0:E1:19:36:FC:1C:D2 Authority key identifier: CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8 Certificate issuer: /CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8 Certificate serial: 4A4FE313DC768F9442F7605AF2D37276A63D15D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft Manifest number: 01AB Signing time: Tue 21 Jul 2026 23:09:23 +0000 Manifest this update: Tue 21 Jul 2026 23:04:23 +0000 Manifest next update: Mon 27 Jul 2026 09:02:23 +0000 Files and hashes: 1: 34352e3233382e3139362e302f32322d3234203d3e20323636383438.roa (hash: L0rNgPF+0ZsBDw0mhIA2qIuloQe4H/6i0JbNB6mYa4Y=) 2: 323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa (hash: 9qOZHa21rgwI1dnCb7B9nBYn6je4ggvy47WxfX9OHl4=) 3: CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl (hash: ELOqRYASfpVl0lHL6j99OGtwTUZ1XK0MdS01r4N0uk4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Jul 2026 09:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4f:e3:13:dc:76:8f:94:42:f7:60:5a:f2:d3:72:76:a6:3d:15:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8 Validity Not Before: Jul 21 23:04:23 2026 GMT Not After : Jul 27 09:02:23 2026 GMT Subject: CN=8A57E7CC03383C4DCB4237D586E0E11936FC1CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:98:97:50:78:7f:6b:c7:5c:db:4c:89:a4:37: 5a:28:25:98:4e:75:ff:29:5f:9d:43:c0:ae:ce:8b: 78:3d:ed:27:35:45:2f:93:ce:bc:c9:74:9f:95:36: 5c:b7:62:2a:5c:ef:af:e4:c7:7d:2c:de:2e:3a:7c: 30:d3:15:90:59:3a:2a:7c:77:b0:01:d1:9b:b4:5e: d7:a7:9b:34:59:16:16:a6:09:1f:09:81:65:89:e5: 4c:25:25:0c:5f:d7:b2:e7:b8:c1:dd:15:c1:04:7c: 2d:50:be:b6:7a:10:c4:b3:75:d2:2e:59:c1:a4:07: 43:fd:da:96:4f:ed:e5:15:99:44:0b:0f:f4:79:f1: 16:dc:ef:97:f7:0f:db:af:c1:dd:e5:26:6f:79:c6: ab:7d:f6:9a:e2:03:4f:ee:86:9b:ce:6f:0d:7d:6d: a8:9e:97:31:c0:91:ce:3b:e0:2e:29:2c:95:6f:08: 85:c6:83:5c:ae:20:39:cc:66:22:ae:ac:47:07:7f: 8c:b8:16:a0:4b:b0:dd:33:8c:ac:c7:45:f0:1c:97: 56:dd:78:cc:f9:45:56:f6:0e:57:04:cd:f7:b4:59: c7:8b:13:a8:73:8f:b2:f6:62:6d:70:36:86:14:7d: 06:43:3a:2e:e7:ad:55:79:36:0b:bf:24:dd:f6:99: 34:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:57:E7:CC:03:38:3C:4D:CB:42:37:D5:86:E0:E1:19:36:FC:1C:D2 X509v3 Authority Key Identifier: keyid:CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:65:5f:dc:e9:73:87:e4:8e:72:de:5e:2e:68:f7:47:0a:06: 8f:8d:40:c8:10:18:cf:95:8a:27:b0:87:89:85:a1:26:4d:3f: 20:08:96:62:8a:92:57:dd:df:12:ba:bf:a6:92:ce:eb:5a:89: f0:c4:88:47:a8:46:e0:e5:6d:8c:95:61:8d:33:f1:2c:f7:d8: 8a:c6:56:d1:4d:61:44:50:92:fc:75:b1:a5:f0:8d:4b:ea:bd: 25:c3:b0:ac:5a:8e:30:fe:c4:10:61:80:d5:37:2b:d8:a9:8f: a0:07:2b:70:4f:e3:25:02:4a:34:30:92:82:b5:79:77:b7:04: 1e:60:8b:9c:f5:c3:82:b0:9f:4c:bd:df:95:66:18:b4:b4:3b: 30:c4:ff:c3:fb:40:85:6b:c1:72:05:0a:38:9a:ac:41:0d:fc: ef:7c:e7:14:95:23:92:b8:f8:11:60:0b:44:c0:17:c1:fa:00: cc:46:84:c0:2b:d2:84:30:34:25:ce:35:85:76:c7:d1:8b:81: 9e:23:5c:e9:92:19:73:a2:c7:89:07:fb:df:41:1c:c5:8d:a7: 18:d0:c8:96:79:63:98:a1:69:4d:55:dd:87:b6:87:48:4c:43: fd:e9:a3:8e:fd:d7:39:df:43:c8:0f:07:0e:bd:38:ec:e9:22: e0:ce:8b:cd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSk/jE9x2j5RC92Ba8tNydqY9FdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNTM2RDVGMEE5MTlEREYxQUQyQTBENkRGMzc2MDhG Nzg5QTRFODAeFw0yNjA3MjEyMzA0MjNaFw0yNjA3MjcwOTAyMjNaMDMxMTAvBgNV BAMTKDhBNTdFN0NDMDMzODNDNERDQjQyMzdENTg2RTBFMTE5MzZGQzFDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmmJdQeH9rx1zbTImkN1ooJZhO df8pX51DwK7Oi3g97Sc1RS+TzrzJdJ+VNly3Yipc76/kx30s3i46fDDTFZBZOip8 d7AB0Zu0XtenmzRZFhamCR8JgWWJ5UwlJQxf17LnuMHdFcEEfC1QvrZ6EMSzddIu WcGkB0P92pZP7eUVmUQLD/R58Rbc75f3D9uvwd3lJm95xqt99priA0/uhpvObw19 baielzHAkc474C4pLJVvCIXGg1yuIDnMZiKurEcHf4y4FqBLsN0zjKzHRfAcl1bd eMz5RVb2DlcEzfe0WceLE6hzj7L2Ym1wNoYUfQZDOi7nrVV5Ngu/JN32mTRpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUilfnzAM4PE3LQjfVhuDhGTb8HNIwHwYDVR0j BBgwFoAUzeU21fCpGd3xrSoNbfN2CPeJpOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMzNBRDQ5RjczNTYwQzJCMzdEMjdFNDEzRjYxRTgwRjM4 RTZFQzE3QjkwNkQwM0MyMEYwREZCODkxRUU5OUJDLzAvQ0RFNTM2RDVGMEE5MTlE REYxQUQyQTBENkRGMzc2MDhGNzg5QTRFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREU1MzZENUYwQTkxOURERjFB RDJBMEQ2REYzNzYwOEY3ODlBNEU4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjMzQUQ0OUY3MzU2MEMyQjM3RDI3RTQxM0Y2MUU4MEYzOEU2RUMxN0I5 MDZEMDNDMjBGMERGQjg5MUVFOTlCQy8wL0NERTUzNkQ1RjBBOTE5RERGMUFEMkEw RDZERjM3NjA4Rjc4OUE0RTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyZV/c6XOH5I5y3l4uaPdHCgaP jUDIEBjPlYonsIeJhaEmTT8gCJZiipJX3d8Sur+mks7rWonwxIhHqEbg5W2MlWGN M/Es99iKxlbRTWFEUJL8dbGl8I1L6r0lw7CsWo4w/sQQYYDVNyvYqY+gBytwT+Ml Ako0MJKCtXl3twQeYIuc9cOCsJ9Mvd+VZhi0tDswxP/D+0CFa8FyBQo4mqxBDfzv fOcUlSOSuPgRYAtEwBfB+gDMRoTAK9KEMDQlzjWFdsfRi4GeI1zpkhlzoseJB/vf QRzFjacY0MiWeWOYoWlNVd2HtodITEP96aOO/dc530PIDwcOvTjs6SLgzovN -----END CERTIFICATE-----Generated at Thu Jul 23 23:32:39 2026 by rpki-client