$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft File: 28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft (raw, json) Hash identifier: UaVTURNw7aBPrP8deDKv40yxqQWsXYde5TwLc3OcLUg= Subject key identifier: 0E:FF:67:4C:71:C6:21:05:2A:65:F2:47:AC:90:3C:1F:C3:F3:6B:B8 Authority key identifier: 28:F4:CD:1B:A0:27:DE:A3:F4:E3:C7:BF:A0:84:13:27:82:DB:2E:FE Certificate issuer: /CN=28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE Certificate serial: 211D0AA37F5928E24F2FA4CCB9F3FCD0B255B73B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft Manifest number: 1F Signing time: Sat 10 Oct 2026 17:38:00 +0000 Manifest this update: Sat 10 Oct 2026 17:33:00 +0000 Manifest next update: Wed 14 Oct 2026 19:32:00 +0000 Files and hashes: 1: 28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.crl (hash: WuMh0iEaIeQJy1E5Vl2voeP9GAwGICjBn/gb5yNdhSs=) 2: 323830333a653933303a3a2f33322d3438203d3e20323734393439.roa (hash: GmKV00Kue1DSLeWWKUygjid4hE2VM50wIaqwbN7p/ws=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.crl rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 19:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1d:0a:a3:7f:59:28:e2:4f:2f:a4:cc:b9:f3:fc:d0:b2:55:b7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE Validity Not Before: Oct 10 17:33:00 2026 GMT Not After : Oct 14 19:32:00 2026 GMT Subject: CN=0EFF674C71C621052A65F247AC903C1FC3F36BB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d7:c1:15:37:7c:cc:95:d5:11:6e:94:45:e2: 06:ed:63:9e:fa:b2:26:82:f5:9e:63:24:96:61:3a: a9:d1:c8:9d:6c:20:7e:5e:a3:3c:39:f9:79:b4:f3: 97:3d:92:08:cc:bd:4d:86:df:bc:3c:0d:56:90:0b: 53:53:9c:86:ab:2d:db:29:a7:f4:96:36:25:9c:00: 4c:db:27:e3:39:20:cc:70:41:2e:7a:16:da:9c:9f: 9b:04:9a:e8:f7:1c:99:2c:88:9b:4d:29:32:35:7e: aa:94:4e:d0:93:f2:7c:a2:44:67:af:96:e5:d4:dc: 97:4a:0e:0e:cf:2b:b6:f9:bc:82:f5:81:73:d1:b2: 40:6f:ac:4e:b0:da:fd:90:3b:c0:f3:3f:8a:6c:aa: d5:46:51:f4:88:f4:ee:b0:ef:eb:b7:15:31:8b:43: 03:54:99:c9:74:3f:8f:8d:78:db:c2:ad:28:75:e0: ea:ab:e9:e5:f7:06:74:fc:57:7c:b1:ee:7d:81:16: 6a:4c:23:e7:b5:7b:0d:71:86:5c:3a:c2:47:a5:01: d4:6e:7d:dc:13:8c:f6:88:6b:85:c5:c9:ac:64:13: 92:b7:c7:94:0c:18:7d:81:75:0b:d1:dd:ba:fd:f7: c8:77:f3:6b:92:a9:9d:f7:c9:a2:f0:1b:3d:06:a9: d8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FF:67:4C:71:C6:21:05:2A:65:F2:47:AC:90:3C:1F:C3:F3:6B:B8 X509v3 Authority Key Identifier: keyid:28:F4:CD:1B:A0:27:DE:A3:F4:E3:C7:BF:A0:84:13:27:82:DB:2E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1f:97:fe:fc:62:24:d9:e6:b7:b3:f8:12:ed:1a:88:93:76: 86:12:12:d5:e0:10:82:d5:49:97:a6:7d:e7:c5:93:a0:37:dd: 82:82:c3:7a:43:76:8a:70:1f:8f:1f:33:9c:63:65:39:a9:50: a9:06:c8:0d:1d:b1:f5:9f:12:4f:c1:ea:ec:f3:4d:82:b7:a0: 79:6b:e8:24:c8:7d:9f:93:39:84:4b:26:34:57:a7:f7:ed:a0: 06:58:8d:b7:29:87:18:a2:c4:d8:f3:fe:80:aa:12:21:de:a4: 55:93:cc:6a:ac:3f:3c:13:73:f2:98:7a:c8:e2:92:a5:4b:5e: b1:37:5d:55:41:0d:9c:48:72:bd:39:59:e8:8f:5f:7e:c0:69: 82:49:a7:5b:e0:9d:51:eb:1e:43:b9:18:dc:28:2e:b3:63:b4: 49:3a:89:42:eb:d8:80:a4:ff:0a:14:2e:c4:a8:c4:62:d5:7d: ca:72:92:18:be:32:d9:02:fb:9d:c8:58:64:21:83:79:52:c2: 8e:6e:60:25:3f:60:88:80:ba:11:a6:29:65:2d:f6:bc:4c:d8: b6:4a:f2:88:6b:7b:10:50:96:fa:57:92:32:3d:e0:0b:71:27: 2d:f7:6e:3d:63:ee:17:85:65:53:db:58:45:42:33:7c:07:6a: 9d:4a:02:e1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIR0Ko39ZKOJPL6TMufP80LJVtzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhGNENEMUJBMDI3REVBM0Y0RTNDN0JGQTA4NDEzMjc4 MkRCMkVGRTAeFw0yNjEwMTAxNzMzMDBaFw0yNjEwMTQxOTMyMDBaMDMxMTAvBgNV BAMTKDBFRkY2NzRDNzFDNjIxMDUyQTY1RjI0N0FDOTAzQzFGQzNGMzZCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp18EVN3zMldURbpRF4gbtY576 siaC9Z5jJJZhOqnRyJ1sIH5eozw5+Xm085c9kgjMvU2G37w8DVaQC1NTnIarLdsp p/SWNiWcAEzbJ+M5IMxwQS56Ftqcn5sEmuj3HJksiJtNKTI1fqqUTtCT8nyiRGev luXU3JdKDg7PK7b5vIL1gXPRskBvrE6w2v2QO8DzP4psqtVGUfSI9O6w7+u3FTGL QwNUmcl0P4+NeNvCrSh14Oqr6eX3BnT8V3yx7n2BFmpMI+e1ew1xhlw6wkelAdRu fdwTjPaIa4XFyaxkE5K3x5QMGH2BdQvR3br998h382uSqZ33yaLwGz0GqdhzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDv9nTHHGIQUqZfJHrJA8H8Pza7gwHwYDVR0j BBgwFoAUKPTNG6An3qP048e/oIQTJ4LbLv4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMzYwMEM2NzU2NTlFRTBFNTJEMzgwMEFBNzQzMjFCRTZB MkUwMUJBQTZDODYwNjc4QUQxNEMxNTM3NzBDNkIwLzAvMjhGNENEMUJBMDI3REVB M0Y0RTNDN0JGQTA4NDEzMjc4MkRCMkVGRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEY0Q0QxQkEwMjdERUEzRjRF M0M3QkZBMDg0MTMyNzgyREIyRUZFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzM2MDBDNjc1NjU5RUUwRTUyRDM4MDBBQTc0MzIxQkU2QTJFMDFCQUE2 Qzg2MDY3OEFEMTRDMTUzNzcwQzZCMC8wLzI4RjRDRDFCQTAyN0RFQTNGNEUzQzdC RkEwODQxMzI3ODJEQjJFRkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByH5f+/GIk2ea3s/gS7RqIk3aG EhLV4BCC1UmXpn3nxZOgN92CgsN6Q3aKcB+PHzOcY2U5qVCpBsgNHbH1nxJPwers 802Ct6B5a+gkyH2fkzmESyY0V6f37aAGWI23KYcYosTY8/6AqhIh3qRVk8xqrD88 E3PymHrI4pKlS16xN11VQQ2cSHK9OVnoj19+wGmCSadb4J1R6x5DuRjcKC6zY7RJ OolC69iApP8KFC7EqMRi1X3KcpIYvjLZAvudyFhkIYN5UsKObmAlP2CIgLoRpill Lfa8TNi2SvKIa3sQUJb6V5IyPeALcSct9249Y+4XhWVT21hFQjN8B2qdSgLh -----END CERTIFICATE-----Generated at Sun Oct 11 19:19:38 2026 by rpki-client