$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft File: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft (raw, json) Hash identifier: 7tAhVXtAPJaWISMOFT8BASpw26tl4wIVeZcWveFPjms= Subject key identifier: 8E:DA:D6:B6:A5:65:AA:AA:A6:57:66:F2:D2:DB:75:62:BD:B9:27:7E Authority key identifier: 00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36 Certificate issuer: /CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336 Certificate serial: 22F6E6D70A6011B053B61D03AB60A918E0B7285A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft Manifest number: 01D3 Signing time: Mon 12 Oct 2026 03:27:26 +0000 Manifest this update: Mon 12 Oct 2026 03:22:26 +0000 Manifest next update: Sun 18 Oct 2026 02:38:26 +0000 Files and hashes: 1: 323830333a663161303a3a2f33322d3438203d3e20323637373035.roa (hash: lOlWH3izOIP9jT4nkQr5zu9tgsYS+V0gmQeSBDoe8OE=) 2: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl (hash: GBxsaEXa+cK8O4I0IxarSLigMxKD0KUh0JXw4yogATQ=) 3: 34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa (hash: 0bUC3ySC4jCELAl7tmSMZ40weK3hv4Gzxv3ntwNuM+s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Oct 2026 09:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f6:e6:d7:0a:60:11:b0:53:b6:1d:03:ab:60:a9:18:e0:b7:28:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336 Validity Not Before: Oct 12 03:22:26 2026 GMT Not After : Oct 18 02:38:26 2026 GMT Subject: CN=8EDAD6B6A565AAAAA65766F2D2DB7562BDB9277E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:67:62:97:48:f1:64:a0:93:7a:eb:62:4c: 36:62:0a:4a:6c:b4:7b:9a:0b:32:26:5c:19:7d:90: 7e:ce:aa:ee:d8:db:78:b0:d1:3f:5a:08:91:e0:68: 2b:60:34:68:41:98:2f:3f:5e:97:48:0a:24:9c:31: 3f:ee:9e:b9:e3:f2:67:20:7a:c6:b9:e8:cf:15:9c: d6:b6:0b:13:82:09:0b:e1:8c:8d:1b:bc:2a:25:ed: bc:12:dc:cb:f1:ec:ad:75:b1:20:85:f8:c8:28:fe: 26:a3:b7:36:a7:9d:56:97:a0:be:56:93:3c:ce:44: 6c:35:42:88:73:75:90:d0:97:b6:fb:4f:e3:1a:c6: 63:9c:29:30:fd:d7:c3:7e:ac:d9:ae:6b:78:4a:ae: 89:32:5b:0b:eb:14:f9:2c:d5:d0:84:8f:44:10:bf: 15:17:f4:11:42:15:e1:9f:dd:68:3b:a7:d6:03:eb: 77:82:46:cc:07:61:02:15:13:bf:b9:00:7f:1f:52: 06:d0:53:6a:1d:c9:48:13:ba:cb:e1:64:e9:18:55: 6d:2c:60:a1:68:2f:0d:a8:9b:71:26:33:b0:d2:77: 5b:b7:e7:29:9e:d0:07:9b:75:b5:5a:e2:12:85:05: 36:9f:70:fb:e9:0d:3f:4e:01:37:0f:a8:53:bd:7d: 7d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DA:D6:B6:A5:65:AA:AA:A6:57:66:F2:D2:DB:75:62:BD:B9:27:7E X509v3 Authority Key Identifier: keyid:00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f1:9f:48:48:11:01:64:9c:77:3d:24:90:6c:52:0e:9f:14: 55:c2:df:ec:51:60:8f:cb:8e:38:86:ad:64:c7:d5:0f:da:e3: c4:7b:da:b4:c8:d4:ed:b9:27:e1:4a:d4:73:35:9f:89:fe:7f: 54:f4:28:8e:4e:f3:b1:74:df:a6:07:27:65:0a:ad:24:86:d5: 87:e6:82:9e:85:2e:1a:90:d2:d0:f6:fb:25:5a:bc:a7:a8:d9: 92:e2:6e:87:f4:93:52:bd:64:72:8f:87:87:2a:4a:84:a9:e6: bf:83:90:a9:ac:43:f7:dd:6f:07:f3:53:fb:9b:b5:f3:a4:37: f8:57:d3:eb:2c:dd:e1:cd:51:01:13:9c:79:e0:25:d5:f9:0a: 32:4c:27:48:12:e9:e4:4d:93:ed:2b:a9:43:fe:89:96:76:38: 24:c1:aa:61:e6:81:29:7c:f6:a8:32:da:3c:f3:52:3e:8b:b4: a6:cd:11:b7:bb:18:bc:02:47:f8:a8:f1:7c:49:a0:f5:e1:c7: 35:3f:34:b9:9d:34:71:1a:c0:b0:ae:7a:1f:5d:65:da:96:46: 12:0a:53:28:8b:c8:55:83:b0:5b:fb:47:54:0c:73:f6:39:55: ef:e7:8f:c3:b6:f2:79:73:f0:a4:a1:b5:f7:71:0f:7a:58:bf: ac:a2:0c:40 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIvbm1wpgEbBTth0Dq2CpGOC3KFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGRjI5NUI5MzlBRDcyNTg5Q0UyNEI3RTRFRDQxRkM1 QzU2QTMzNjAeFw0yNjEwMTIwMzIyMjZaFw0yNjEwMTgwMjM4MjZaMDMxMTAvBgNV BAMTKDhFREFENkI2QTU2NUFBQUFBNjU3NjZGMkQyREI3NTYyQkRCOTI3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HGdil0jxZKCTeutiTDZiCkps tHuaCzImXBl9kH7Oqu7Y23iw0T9aCJHgaCtgNGhBmC8/XpdICiScMT/unrnj8mcg esa56M8VnNa2CxOCCQvhjI0bvCol7bwS3Mvx7K11sSCF+Mgo/iajtzannVaXoL5W kzzORGw1QohzdZDQl7b7T+MaxmOcKTD918N+rNmua3hKrokyWwvrFPks1dCEj0QQ vxUX9BFCFeGf3Wg7p9YD63eCRswHYQIVE7+5AH8fUgbQU2odyUgTusvhZOkYVW0s YKFoLw2om3EmM7DSd1u35yme0AebdbVa4hKFBTafcPvpDT9OATcPqFO9fX0PAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjtrWtqVlqqqmV2by0tt1Yr25J34wHwYDVR0j BBgwFoAUAP8pW5Oa1yWJziS35O1B/FxWozYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yQzM1RTlERjJDOUU3QUNEQzU3MzNDNkFEOUQ0QUZENDA3 OEVFNURFQTU1RjlFNjIwQjU0QjRDNTAxQTIxRkNCLzAvMDBGRjI5NUI5MzlBRDcy NTg5Q0UyNEI3RTRFRDQxRkM1QzU2QTMzNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEZGMjk1QjkzOUFENzI1ODlD RTI0QjdFNEVENDFGQzVDNTZBMzM2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkMzNUU5REYyQzlFN0FDREM1NzMzQzZBRDlENEFGRDQwNzhFRTVERUE1 NUY5RTYyMEI1NEI0QzUwMUEyMUZDQi8wLzAwRkYyOTVCOTM5QUQ3MjU4OUNFMjRC N0U0RUQ0MUZDNUM1NkEzMzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBj8Z9ISBEBZJx3PSSQbFIOnxRV wt/sUWCPy444hq1kx9UP2uPEe9q0yNTtuSfhStRzNZ+J/n9U9CiOTvOxdN+mBydl Cq0khtWH5oKehS4akNLQ9vslWrynqNmS4m6H9JNSvWRyj4eHKkqEqea/g5CprEP3 3W8H81P7m7XzpDf4V9PrLN3hzVEBE5x54CXV+QoyTCdIEunkTZPtK6lD/omWdjgk waph5oEpfPaoMto881I+i7SmzRG3uxi8Akf4qPF8SaD14cc1PzS5nTRxGsCwrnof XWXalkYSClMoi8hVg7Bb+0dUDHP2OVXv54/DtvJ5c/CkobX3cQ96WL+sogxA -----END CERTIFICATE-----Generated at Tue Oct 13 23:42:10 2026 by rpki-client