$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft File: 525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft (raw, json) Hash identifier: YfWoIAZDQDQNGLXqif26i9UHp0TlYmgE2aVdH1n4Btk= Subject key identifier: 98:7F:E1:E7:15:E8:C9:F6:7E:0A:C1:43:55:CD:92:EE:E9:2D:8E:58 Authority key identifier: 52:5D:28:6D:D2:85:74:DE:DF:2E:1C:9E:1A:2E:E6:BC:BA:59:04:0C Certificate issuer: /CN=525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C Certificate serial: 0AD2160320182560845023F49C670FE29B3E7A5E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft Manifest number: 30 Signing time: Thu 23 Jul 2026 18:56:44 +0000 Manifest this update: Thu 23 Jul 2026 18:51:44 +0000 Manifest next update: Wed 29 Jul 2026 11:43:44 +0000 Files and hashes: 1: 323830333a636533303a3a2f33322d3438203d3e20323734393033.roa (hash: 9xqxvrW8nSVjy4FiJTCh+xFdQWf2ZSEBDG91qUqZ/RU=) 2: 525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.crl (hash: WBzdpM/2dSUH1GXPty66ozk/jB1xpsp1oLicewuaPr0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.crl rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d2:16:03:20:18:25:60:84:50:23:f4:9c:67:0f:e2:9b:3e:7a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C Validity Not Before: Jul 23 18:51:44 2026 GMT Not After : Jul 29 11:43:44 2026 GMT Subject: CN=987FE1E715E8C9F67E0AC14355CD92EEE92D8E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:57:6f:2e:2e:18:98:eb:5e:d6:6b:44:82: 09:df:44:dc:1e:d0:e4:f1:11:0c:1a:a4:ae:cc:ff: fa:d5:83:6f:1d:4e:b5:6e:a0:f0:7a:22:c8:cc:3f: 80:f2:65:a7:c1:9c:96:cb:6f:c9:14:c1:1d:d0:63: 24:ea:1e:3e:cf:29:f2:d4:dd:e1:86:2a:0d:5d:25: 38:26:c5:51:4b:34:44:51:5f:2c:7f:4c:43:a5:4a: ff:fd:32:9a:e7:dd:89:14:7c:bb:50:23:10:56:4e: 05:9d:c3:22:0e:6c:3e:76:86:f0:2e:ed:51:25:51: ac:5d:c7:5e:0b:48:30:0d:1b:96:fe:0f:fd:31:53: 5f:ce:b3:08:3f:6b:a4:d7:b7:09:e2:9f:ee:1f:b7: 6e:0a:d4:ff:4e:8c:b6:8b:97:d1:3f:ae:d6:ea:0e: 1e:4a:09:3d:c4:67:30:e5:34:aa:67:37:90:9d:12: 6f:45:1d:09:f0:34:8d:20:4c:70:50:ba:3d:7f:de: ef:d1:8b:4a:ca:09:2c:01:34:7b:7f:67:ac:77:60: 9d:c1:b5:e6:f9:75:04:14:45:e8:ae:52:d0:78:c8: 2c:f0:f2:ac:0d:bf:c0:47:82:d2:ac:ea:ea:5a:32: 40:33:e2:88:a7:ca:cc:81:11:86:2c:eb:20:25:33: 25:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7F:E1:E7:15:E8:C9:F6:7E:0A:C1:43:55:CD:92:EE:E9:2D:8E:58 X509v3 Authority Key Identifier: keyid:52:5D:28:6D:D2:85:74:DE:DF:2E:1C:9E:1A:2E:E6:BC:BA:59:04:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6c:fa:4d:7e:b7:32:79:6e:4a:c7:79:c5:db:e0:56:f9:07: 37:8d:e6:fa:ae:c8:3e:67:3c:18:c4:bb:ba:0e:2b:ce:8f:b9: 91:ae:ec:89:c5:6e:a0:9d:80:df:17:20:4f:14:40:e5:38:f4: 08:ee:c0:ea:a9:2f:b1:38:2d:7d:31:e7:9a:06:98:19:db:0f: e7:33:3a:d4:53:46:0a:69:eb:1f:a6:f3:8a:dc:8b:8d:72:57: b8:87:8b:f1:c5:3d:85:75:7d:de:72:54:f9:f7:3c:5f:21:e1: e6:bd:d3:c7:0e:3b:a3:ae:fd:b8:5b:72:bb:3f:86:08:e8:d3: f7:af:a8:5a:69:4f:1d:d6:94:dc:07:cc:89:82:fa:a8:c6:3e: 0f:f0:9b:98:55:68:1a:0c:d7:a8:2c:d8:ee:0c:ff:af:a2:dc: 77:0b:30:87:3a:47:2a:6f:ee:22:7f:10:ae:ae:c9:2f:31:48: 7f:ec:57:ad:65:b9:4a:31:be:9a:cf:9d:dd:eb:18:13:cc:52: c4:4e:8d:7e:4e:fe:a3:1a:78:05:98:82:b2:c9:a8:97:29:45: c8:25:af:f5:3e:0c:6f:d0:1e:1e:6e:06:93:88:44:2a:4d:aa: e0:6d:8c:fc:44:d1:2d:ca:86:d4:4c:47:3b:f3:2a:5f:a3:14: d5:0e:5e:c8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCtIWAyAYJWCEUCP0nGcP4ps+el4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI1RDI4NkREMjg1NzRERURGMkUxQzlFMUEyRUU2QkNC QTU5MDQwQzAeFw0yNjA3MjMxODUxNDRaFw0yNjA3MjkxMTQzNDRaMDMxMTAvBgNV BAMTKDk4N0ZFMUU3MTVFOEM5RjY3RTBBQzE0MzU1Q0Q5MkVFRTkyRDhFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC401dvLi4YmOte1mtEggnfRNwe 0OTxEQwapK7M//rVg28dTrVuoPB6IsjMP4DyZafBnJbLb8kUwR3QYyTqHj7PKfLU 3eGGKg1dJTgmxVFLNERRXyx/TEOlSv/9Mprn3YkUfLtQIxBWTgWdwyIObD52hvAu 7VElUaxdx14LSDANG5b+D/0xU1/Oswg/a6TXtwnin+4ft24K1P9OjLaLl9E/rtbq Dh5KCT3EZzDlNKpnN5CdEm9FHQnwNI0gTHBQuj1/3u/Ri0rKCSwBNHt/Z6x3YJ3B teb5dQQUReiuUtB4yCzw8qwNv8BHgtKs6upaMkAz4oinysyBEYYs6yAlMyU3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUmH/h5xXoyfZ+CsFDVc2S7uktjlgwHwYDVR0j BBgwFoAUUl0obdKFdN7fLhyeGi7mvLpZBAwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83NDE4N0YyOTVBQTkxMTFGMjE3RjlENzNDQTNDOEFCRTBF MjU2Q0ZCQ0ZGNzMwQTc1REVEMDY2RkU0RTVDMzFFLzAvNTI1RDI4NkREMjg1NzRE RURGMkUxQzlFMUEyRUU2QkNCQTU5MDQwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjVEMjg2REQyODU3NERFREYy RTFDOUUxQTJFRTZCQ0JBNTkwNDBDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzQxODdGMjk1QUE5MTExRjIxN0Y5RDczQ0EzQzhBQkUwRTI1NkNGQkNG RjczMEE3NURFRDA2NkZFNEU1QzMxRS8wLzUyNUQyODZERDI4NTc0REVERjJFMUM5 RTFBMkVFNkJDQkE1OTA0MEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/bPpNfrcyeW5Kx3nF2+BW+Qc3 jeb6rsg+ZzwYxLu6DivOj7mRruyJxW6gnYDfFyBPFEDlOPQI7sDqqS+xOC19Meea BpgZ2w/nMzrUU0YKaesfpvOK3IuNcle4h4vxxT2FdX3eclT59zxfIeHmvdPHDjuj rv24W3K7P4YI6NP3r6haaU8d1pTcB8yJgvqoxj4P8JuYVWgaDNeoLNjuDP+votx3 CzCHOkcqb+4ifxCurskvMUh/7FetZblKMb6az53d6xgTzFLETo1+Tv6jGngFmIKy yaiXKUXIJa/1Pgxv0B4ebgaTiEQqTargbYz8RNEtyobUTEc78ypfoxTVDl7I -----END CERTIFICATE-----Generated at Fri Jul 24 17:41:04 2026 by rpki-client