$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json) Hash identifier: XrKcAZ5uBgfaISroTPkZ0lUKHWtMFwEYW1dxX8FIIpA= Subject key identifier: 3E:9C:EF:D3:4A:D7:DF:2C:DA:48:22:C4:20:F2:7D:FB:53:62:B5:E3 Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 2F0CDB4EF566000B17F96434011FE398B171A5DA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft Manifest number: 01B3 Signing time: Thu 23 Jul 2026 01:15:04 +0000 Manifest this update: Thu 23 Jul 2026 01:10:04 +0000 Manifest next update: Tue 28 Jul 2026 14:52:04 +0000 Files and hashes: 1: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=) 2: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: RhF5Mjy/2WY2JROxZJPKW5Z1/+xw2EpnNXS4Tgo/xEs=) 3: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: 4YT76mg5dITWNiH2hE5kgjyBgua4a3LhZgbWUTw9x8I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0c:db:4e:f5:66:00:0b:17:f9:64:34:01:1f:e3:98:b1:71:a5:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Jul 23 01:10:04 2026 GMT Not After : Jul 28 14:52:04 2026 GMT Subject: CN=3E9CEFD34AD7DF2CDA4822C420F27DFB5362B5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:f6:ea:ee:72:c3:f1:55:e8:c6:79:2b:60: 3f:c2:62:bf:3a:ab:9b:9d:aa:05:9d:17:cf:4e:e1: 4b:2d:2f:56:9b:6b:58:8c:b7:2b:f7:3a:b2:5b:e8: f1:56:ae:a9:11:ac:dd:5c:d6:bd:f1:20:c1:c0:af: 2e:14:5d:50:2a:cc:b1:71:a1:46:20:1c:72:e4:12: 82:16:56:95:97:0f:fd:65:94:6e:42:d0:45:a7:09: da:37:27:49:05:04:a7:2e:09:da:00:12:a8:dc:42: a0:60:93:c6:75:95:14:18:21:09:65:68:41:87:86: 29:f3:38:ad:98:15:10:a7:90:b7:59:97:63:ef:74: c9:db:36:1b:6a:6d:11:85:e1:7b:df:95:a7:63:dc: 4a:c9:17:2b:f8:90:48:5a:9e:12:d6:8b:13:95:2e: 8f:0e:6a:76:df:62:8f:a2:b1:25:2a:a0:f3:78:18: e5:e5:c0:25:61:0c:72:5b:82:2f:48:60:31:57:73: ce:2e:82:ad:e9:05:bf:74:17:00:60:f5:09:75:57: f2:c5:cb:35:e9:ac:44:c5:c0:61:48:e4:e0:55:15: 05:1e:57:e9:fa:07:b7:01:3e:fa:94:a7:a6:2e:63: be:f7:b4:ab:2a:37:cf:ed:11:d9:05:fb:84:a9:b6: ef:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9C:EF:D3:4A:D7:DF:2C:DA:48:22:C4:20:F2:7D:FB:53:62:B5:E3 X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:98:18:6f:c9:38:bd:d8:60:f6:c5:dd:ba:70:2e:c6:7b:5e: 9b:2c:97:d4:c8:df:66:20:cf:73:d0:a0:ad:0e:c3:9f:ed:87: 0d:8c:89:39:2b:f4:ae:60:7c:77:26:51:19:80:c7:de:45:5a: 15:c4:91:c5:72:7b:51:4f:08:d7:f8:51:09:2f:46:38:fc:6a: 35:2a:b1:f7:c5:9b:8e:d0:2f:1a:08:5d:45:67:25:8e:4c:7e: c2:19:a0:ce:8a:6f:68:6c:8c:46:4c:42:bc:ee:40:b8:0d:17: e1:c8:4f:2f:8b:74:78:43:0e:63:f7:8c:33:71:ae:22:2d:99: 24:8d:09:80:31:bc:4c:76:54:11:a4:d9:9f:78:fa:4b:2c:a1: 2f:a7:61:7f:1b:02:9e:ed:35:14:f7:5f:18:b9:65:18:9e:d0: 4b:ef:e3:ae:23:67:55:0b:72:a2:6b:d3:6c:c7:83:35:dd:6b: ad:a5:66:a8:4b:1b:be:7d:74:f3:2d:6f:a2:94:1a:a5:13:91: 23:cb:ec:93:82:04:33:96:5c:69:7f:56:59:0c:7f:f5:e0:79: 02:78:d0:74:b8:70:b5:38:77:6b:4d:20:d6:77:db:2d:2d:47: 0a:68:2d:7e:4c:b1:73:56:1a:5b:2f:f3:fd:ca:3d:26:76:96: b5:23:30:26 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULwzbTvVmAAsX+WQ0AR/jmLFxpdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNjA3MjMwMTEwMDRaFw0yNjA3MjgxNDUyMDRaMDMxMTAvBgNV BAMTKDNFOUNFRkQzNEFEN0RGMkNEQTQ4MjJDNDIwRjI3REZCNTM2MkI1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvS/bq7nLD8VXoxnkrYD/CYr86 q5udqgWdF89O4UstL1aba1iMtyv3OrJb6PFWrqkRrN1c1r3xIMHAry4UXVAqzLFx oUYgHHLkEoIWVpWXD/1llG5C0EWnCdo3J0kFBKcuCdoAEqjcQqBgk8Z1lRQYIQll aEGHhinzOK2YFRCnkLdZl2PvdMnbNhtqbRGF4Xvfladj3ErJFyv4kEhanhLWixOV Lo8OanbfYo+isSUqoPN4GOXlwCVhDHJbgi9IYDFXc84ugq3pBb90FwBg9Ql1V/LF yzXprETFwGFI5OBVFQUeV+n6B7cBPvqUp6YuY773tKsqN8/tEdkF+4Sptu+7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPpzv00rX3yzaSCLEIPJ9+1NiteMwHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAmBhvyTi92GD2xd26cC7Ge16b LJfUyN9mIM9z0KCtDsOf7YcNjIk5K/SuYHx3JlEZgMfeRVoVxJHFcntRTwjX+FEJ L0Y4/Go1KrH3xZuO0C8aCF1FZyWOTH7CGaDOim9obIxGTEK87kC4DRfhyE8vi3R4 Qw5j94wzca4iLZkkjQmAMbxMdlQRpNmfePpLLKEvp2F/GwKe7TUU918YuWUYntBL 7+OuI2dVC3Kia9Nsx4M13WutpWaoSxu+fXTzLW+ilBqlE5Ejy+yTggQzllxpf1ZZ DH/14HkCeNB0uHC1OHdrTSDWd9stLUcKaC1+TLFzVhpbL/P9yj0mdpa1IzAm -----END CERTIFICATE-----Generated at Fri Jul 24 01:01:44 2026 by rpki-client