$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft File: 2522843848570F9C59A0A97D0D85367C510D573A.mft (raw, json) Hash identifier: gWIKIVN6Zh9V1+Z/M3Yv0ez/W+xMMyrLB6V9fxzo2S0= Subject key identifier: 60:08:B4:30:EA:73:25:6C:E0:CB:EB:3A:B8:58:20:5A:2C:BC:E9:2A Authority key identifier: 25:22:84:38:48:57:0F:9C:59:A0:A9:7D:0D:85:36:7C:51:0D:57:3A Certificate issuer: /CN=2522843848570F9C59A0A97D0D85367C510D573A Certificate serial: 4F3AAC00FC13425A424F9CF76991379F1EC3D1B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft Manifest number: D3 Signing time: Fri 24 Jul 2026 12:36:35 +0000 Manifest this update: Fri 24 Jul 2026 12:31:35 +0000 Manifest next update: Thu 30 Jul 2026 02:21:35 +0000 Files and hashes: 1: 323830333a656435303a313a3a2f34382d3438203d3e20323733383639.roa (hash: sj8AY77hrrbYzVdGiqZ18paCpZPpUy9Bgm84c5aNTgk=) 2: 2522843848570F9C59A0A97D0D85367C510D573A.crl (hash: MgWDjPwC3A6Qjnb+xrLZ8BW2JdU7M1S79oZMDgCRNcQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.crl rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3a:ac:00:fc:13:42:5a:42:4f:9c:f7:69:91:37:9f:1e:c3:d1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2522843848570F9C59A0A97D0D85367C510D573A Validity Not Before: Jul 24 12:31:35 2026 GMT Not After : Jul 30 02:21:35 2026 GMT Subject: CN=6008B430EA73256CE0CBEB3AB858205A2CBCE92A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:78:93:14:6f:35:e0:20:83:c5:69:01:13: 27:84:48:98:ce:f7:c8:f3:42:11:e5:7d:0c:85:2b: 3b:d6:e0:ef:16:12:0d:3f:56:54:7f:4d:0d:62:b3: 1b:4f:5e:d8:c2:de:db:d9:fe:6d:44:e1:14:29:42: b0:84:3b:cf:56:d9:1f:2c:9a:08:33:52:a0:97:ce: e9:c5:1a:06:84:03:c1:b9:3e:8e:99:c5:55:74:3a: 8f:f3:23:82:c5:25:ab:85:5c:de:11:30:e3:a5:8a: 9e:8c:87:58:80:0d:39:e0:5a:8e:dd:35:dd:de:76: dd:64:ae:85:a0:50:de:63:d3:5f:41:6f:87:b6:37: 0b:74:58:4b:d5:b5:b3:6b:e4:32:b4:19:b5:4e:3e: 60:91:42:1e:87:f5:a9:e4:23:0c:4a:32:9f:cd:1c: 64:9d:59:b9:e4:b6:aa:27:37:b2:75:cb:24:9f:88: cc:33:f0:f0:6f:d7:e7:6f:f7:19:e7:0e:9d:71:18: a2:51:c5:70:09:fa:e9:75:c4:d5:a6:99:53:91:f5: f8:5a:f9:8e:a0:ed:a0:d8:70:72:9f:ee:ec:2c:0e: cd:cd:f2:7c:e8:64:a5:90:50:f5:db:25:7d:3b:80: 78:01:69:e3:02:7e:26:8c:75:2a:a3:5e:6a:29:33: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:08:B4:30:EA:73:25:6C:E0:CB:EB:3A:B8:58:20:5A:2C:BC:E9:2A X509v3 Authority Key Identifier: keyid:25:22:84:38:48:57:0F:9C:59:A0:A9:7D:0D:85:36:7C:51:0D:57:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:89:96:da:30:18:90:90:8e:4e:8e:d3:ee:3d:24:60:6e:89: d6:39:a1:3b:ac:83:64:34:6e:4d:de:33:39:27:34:57:a7:a9: 32:02:f5:41:7b:8c:e0:6d:77:21:b2:c8:5e:a5:f5:19:25:f7: af:80:c5:58:d7:f4:6c:3a:fd:75:ee:3c:dc:80:c4:d3:1b:c8: 86:af:43:40:5b:8a:eb:ec:ec:e5:2a:8d:9d:9e:40:5a:df:ea: d7:af:3f:a0:38:72:d4:b3:cd:68:6e:ef:3c:15:19:27:93:18: 72:90:bc:e8:4c:0f:a4:f6:c1:e6:0e:80:a5:66:8d:95:0e:48: 9f:53:d9:d8:ab:44:cf:85:39:0e:d3:9e:35:5b:fc:92:34:f6: b8:19:56:52:dd:d6:25:c0:3a:ed:58:84:5f:68:19:73:35:20: ba:44:3f:2a:ac:b7:5c:97:04:8d:c9:f2:1f:ba:32:2c:2a:5a: a6:84:20:ff:c8:00:74:94:b1:8b:ca:42:57:6f:c1:c7:59:a6: 47:5d:44:11:af:5d:a7:5d:c9:8e:8a:33:ee:47:76:44:b2:09: 7f:84:cc:54:01:52:9c:6c:30:bb:ea:56:aa:71:c7:c0:b9:15: 37:0f:e0:d9:ad:e9:4a:c5:5c:cb:45:e8:82:5f:a9:5e:cd:77: f3:93:7c:07 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTzqsAPwTQlpCT5z3aZE3nx7D0bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUyMjg0Mzg0ODU3MEY5QzU5QTBBOTdEMEQ4NTM2N0M1 MTBENTczQTAeFw0yNjA3MjQxMjMxMzVaFw0yNjA3MzAwMjIxMzVaMDMxMTAvBgNV BAMTKDYwMDhCNDMwRUE3MzI1NkNFMENCRUIzQUI4NTgyMDVBMkNCQ0U5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWEniTFG814CCDxWkBEyeESJjO 98jzQhHlfQyFKzvW4O8WEg0/VlR/TQ1isxtPXtjC3tvZ/m1E4RQpQrCEO89W2R8s mggzUqCXzunFGgaEA8G5Po6ZxVV0Oo/zI4LFJauFXN4RMOOlip6Mh1iADTngWo7d Nd3edt1kroWgUN5j019Bb4e2Nwt0WEvVtbNr5DK0GbVOPmCRQh6H9ankIwxKMp/N HGSdWbnktqonN7J1yySfiMwz8PBv1+dv9xnnDp1xGKJRxXAJ+ul1xNWmmVOR9fha +Y6g7aDYcHKf7uwsDs3N8nzoZKWQUPXbJX07gHgBaeMCfiaMdSqjXmopM7ytAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYAi0MOpzJWzgy+s6uFggWiy86SowHwYDVR0j BBgwFoAUJSKEOEhXD5xZoKl9DYU2fFENVzowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yODkxNjk4MzE2Rjc2QTg1OUIxRDgzRkYzMTFERUZGMEZG NDdEOERGRUExOEEyQkIyMjRDN0Y0MDUyQjEzNjZCLzAvMjUyMjg0Mzg0ODU3MEY5 QzU5QTBBOTdEMEQ4NTM2N0M1MTBENTczQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNTIyODQzODQ4NTcwRjlDNTlB MEE5N0QwRDg1MzY3QzUxMEQ1NzNBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjg5MTY5ODMxNkY3NkE4NTlCMUQ4M0ZGMzExREVGRjBGRjQ3RDhERkVB MThBMkJCMjI0QzdGNDA1MkIxMzY2Qi8wLzI1MjI4NDM4NDg1NzBGOUM1OUEwQTk3 RDBEODUzNjdDNTEwRDU3M0EubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCaiZbaMBiQkI5OjtPuPSRgbonW OaE7rINkNG5N3jM5JzRXp6kyAvVBe4zgbXchsshepfUZJfevgMVY1/RsOv117jzc gMTTG8iGr0NAW4rr7OzlKo2dnkBa3+rXrz+gOHLUs81obu88FRknkxhykLzoTA+k 9sHmDoClZo2VDkifU9nYq0TPhTkO0541W/ySNPa4GVZS3dYlwDrtWIRfaBlzNSC6 RD8qrLdclwSNyfIfujIsKlqmhCD/yAB0lLGLykJXb8HHWaZHXUQRr12nXcmOijPu R3ZEsgl/hMxUAVKcbDC76laqccfAuRU3D+DZrelKxVzLReiCX6lezXfzk3wH -----END CERTIFICATE-----Generated at Fri Jul 24 20:03:38 2026 by rpki-client