$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft File: 2D8A5D8A34E265B308F626454D8A6E920C65D608.mft (raw, json) Hash identifier: cRpXfzWM9FomCHpAZxJpMrZQePuRKIELO29kgHUFs0Y= Subject key identifier: 32:B5:3F:4E:04:E0:AE:7D:0C:68:D8:B8:D4:4E:71:7E:CD:35:50:E8 Authority key identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08 Certificate issuer: /CN=2D8A5D8A34E265B308F626454D8A6E920C65D608 Certificate serial: 7E3E8730586400B00BEF8935DA1011427B758446 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft Manifest number: 0108 Signing time: Tue 27 Oct 2026 09:50:43 +0000 Manifest this update: Tue 27 Oct 2026 09:45:43 +0000 Manifest next update: Mon 02 Nov 2026 03:25:43 +0000 Files and hashes: 1: 323830333a3539303a3a2f33322d3332203d3e20323732393634.roa (hash: MiRAETUfH9BlCGg8tfP4JXli3fS+cIDzZ05tQ8zDulw=) 2: 2D8A5D8A34E265B308F626454D8A6E920C65D608.crl (hash: LrVJb6e3VR1yYTAI30TAvm7C2d6NOyKY1YLqY9VeplE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 03:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3e:87:30:58:64:00:b0:0b:ef:89:35:da:10:11:42:7b:75:84:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D8A5D8A34E265B308F626454D8A6E920C65D608 Validity Not Before: Oct 27 09:45:43 2026 GMT Not After : Nov 2 03:25:43 2026 GMT Subject: CN=32B53F4E04E0AE7D0C68D8B8D44E717ECD3550E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:85:69:5a:60:9e:44:53:88:83:f7:ca:e5: 02:5e:f4:1b:a6:09:c9:aa:f2:a1:cc:e5:a7:a0:62: 05:48:62:0a:38:97:5d:12:ed:30:f0:b9:34:e3:b9: d5:cb:f9:74:37:87:0c:68:26:f6:d7:4c:d8:d0:02: 5d:99:c4:94:63:15:d1:d5:50:f0:e4:8c:31:4a:cb: 1e:0f:cd:f6:5e:73:5c:44:a5:44:96:67:30:e0:ea: 89:ce:06:23:ff:d0:b0:51:13:c1:db:cf:36:3a:0d: 7e:a3:cf:02:46:f1:d3:60:33:81:f0:b2:48:68:8e: 5d:e1:f7:58:cf:b9:73:c9:18:d3:ba:08:ed:2f:be: 84:d7:a9:59:6c:6d:a7:8c:06:a5:38:e6:9a:da:78: 11:f1:1f:2e:7e:7d:2f:4d:0a:79:ad:eb:9d:cd:2f: b5:8c:95:75:44:12:b1:9d:90:34:3c:e4:b5:32:4a: b4:97:cf:31:2d:63:40:7a:b1:72:6f:36:84:91:a5: a3:76:df:f2:e9:e4:89:ae:6f:39:4e:4d:6f:b2:14: 1e:5f:3a:7e:05:a8:f3:be:bc:d8:07:c7:9b:97:17: a6:52:55:8f:f8:f3:c1:8a:83:57:55:37:24:05:eb: 86:b9:75:f4:56:fb:d7:cf:ba:57:f7:a5:6f:71:e6: f4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B5:3F:4E:04:E0:AE:7D:0C:68:D8:B8:D4:4E:71:7E:CD:35:50:E8 X509v3 Authority Key Identifier: keyid:2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d8:2e:da:9e:74:ed:7f:20:04:82:45:b0:c2:c2:e7:b9:f0: f5:de:81:f5:93:e8:98:11:42:ae:03:18:bd:64:d4:3e:80:12: 26:e1:98:f9:22:75:f2:0a:45:26:13:e9:0d:85:06:e5:9f:dc: c4:b7:ca:7a:9e:60:5c:11:28:3f:79:aa:27:f9:92:fb:9b:8c: 93:1e:a3:1d:97:be:70:f6:ec:fc:47:27:fb:ad:df:68:41:7a: 39:da:dd:d5:db:18:a9:fc:db:8f:47:7a:48:d8:60:9c:59:61: 06:e7:83:36:14:d2:f4:49:0c:c0:ba:78:6c:76:b6:8f:ca:86: b8:13:ad:bb:d7:2e:de:c7:4d:9f:7f:b8:81:dd:10:f2:60:4f: da:67:d6:ba:5b:19:03:4e:63:ca:1b:8f:01:6e:43:7f:21:02: 3e:68:d4:52:5f:15:3b:98:a1:4a:d2:90:35:b5:04:ee:65:40: 0c:f3:ba:e3:dd:18:de:d5:3f:33:08:bf:f1:d3:d9:0d:93:f8: a7:25:ec:50:a0:89:e3:22:c7:1c:cb:4a:6b:20:4b:01:2e:08: b1:2d:6d:f6:68:ba:f6:06:25:f6:e2:f9:41:8f:8d:ff:29:ce: f8:8d:48:ef:5e:16:25:91:02:f1:05:59:c2:fb:c2:4d:0a:ff: 9c:9b:bb:1e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfj6HMFhkALAL74k12hARQnt1hEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ4QTVEOEEzNEUyNjVCMzA4RjYyNjQ1NEQ4QTZFOTIw QzY1RDYwODAeFw0yNjEwMjcwOTQ1NDNaFw0yNjExMDIwMzI1NDNaMDMxMTAvBgNV BAMTKDMyQjUzRjRFMDRFMEFFN0QwQzY4RDhCOEQ0NEU3MTdFQ0QzNTUwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nYVpWmCeRFOIg/fK5QJe9Bum Ccmq8qHM5aegYgVIYgo4l10S7TDwuTTjudXL+XQ3hwxoJvbXTNjQAl2ZxJRjFdHV UPDkjDFKyx4PzfZec1xEpUSWZzDg6onOBiP/0LBRE8HbzzY6DX6jzwJG8dNgM4Hw skhojl3h91jPuXPJGNO6CO0vvoTXqVlsbaeMBqU45praeBHxHy5+fS9NCnmt653N L7WMlXVEErGdkDQ85LUySrSXzzEtY0B6sXJvNoSRpaN23/Lp5ImubzlOTW+yFB5f On4FqPO+vNgHx5uXF6ZSVY/488GKg1dVNyQF64a5dfRW+9fPulf3pW9x5vQpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMrU/TgTgrn0MaNi41E5xfs01UOgwHwYDVR0j BBgwFoAULYpdijTiZbMI9iZFTYpukgxl1ggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84NkFGN0Y1QTkxRTJEOTUxMzA4OEExQkFBOUU4QjhENzg2 QkM1MkE3RkJDRkNDQTczRDI5QzZCQjZBREQ2MkMwLzAvMkQ4QTVEOEEzNEUyNjVC MzA4RjYyNjQ1NEQ4QTZFOTIwQzY1RDYwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDhBNUQ4QTM0RTI2NUIzMDhG NjI2NDU0RDhBNkU5MjBDNjVENjA4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODZBRjdGNUE5MUUyRDk1MTMwODhBMUJBQTlFOEI4RDc4NkJDNTJBN0ZC Q0ZDQ0E3M0QyOUM2QkI2QURENjJDMC8wLzJEOEE1RDhBMzRFMjY1QjMwOEY2MjY0 NTREOEE2RTkyMEM2NUQ2MDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAf2C7annTtfyAEgkWwwsLnufD1 3oH1k+iYEUKuAxi9ZNQ+gBIm4Zj5InXyCkUmE+kNhQbln9zEt8p6nmBcESg/eaon +ZL7m4yTHqMdl75w9uz8Ryf7rd9oQXo52t3V2xip/NuPR3pI2GCcWWEG54M2FNL0 SQzAunhsdraPyoa4E6271y7ex02ff7iB3RDyYE/aZ9a6WxkDTmPKG48BbkN/IQI+ aNRSXxU7mKFK0pA1tQTuZUAM87rj3Rje1T8zCL/x09kNk/inJexQoInjIsccy0pr IEsBLgixLW32aLr2BiX24vlBj43/Kc74jUjvXhYlkQLxBVnC+8JNCv+cm7se -----END CERTIFICATE-----Generated at Thu Oct 29 20:51:53 2026 by rpki-client