$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: B1lySREXH2BcPBTwAmvwI8kXXwIgevWV/vFdn5o1QFg= Subject key identifier: 00:31:ED:AA:3E:F4:36:FE:B9:7D:92:7F:A0:B5:64:18:66:CE:99:82 Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 0ECD504BED58A6A34B4F543EC06EAE83F2FF33E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: 01C0 Signing time: Thu 23 Jul 2026 10:57:58 +0000 Manifest this update: Thu 23 Jul 2026 10:52:58 +0000 Manifest next update: Tue 28 Jul 2026 00:11:58 +0000 Files and hashes: 1: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: n2Np3ZSzs9Qry+n/QcWI/XVwI4Adzscpv34w6aLelEs=) 2: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: +HchcWgnICe6ZOBzH1IrVY9EAVbVfK1VBgYFvgLr1OQ=) 3: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: pROQMKsiDV21pFjsta+9j86ncqU60mdI9hZdoI3SRKo=) 4: 34352e3136342e32322e302f32342d3234203d3e203238343233.roa (hash: nzyKnIKIISe/UrSpui0CPT44hI//cDpiy8iUynUn8js=) 5: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: 2ROMy1hMNtl4LlD4eAmab5XkXJI77b/wCGmKJrMFckU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 00:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cd:50:4b:ed:58:a6:a3:4b:4f:54:3e:c0:6e:ae:83:f2:ff:33:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Jul 23 10:52:58 2026 GMT Not After : Jul 28 00:11:58 2026 GMT Subject: CN=0031EDAA3EF436FEB97D927FA0B5641866CE9982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7d:14:e0:09:af:8a:3b:38:ed:1b:40:ed:65: e8:01:c5:ed:57:ab:18:26:8b:37:67:e5:8e:a4:c3: e3:47:da:1b:0e:40:3e:5e:51:2c:e6:9f:da:0a:8a: 81:72:c0:d7:0c:ad:09:e9:87:b8:7e:21:09:bd:23: 02:ea:f4:e3:d9:ab:60:ef:0f:9d:a6:f0:29:8e:d2: 01:67:c8:ca:4d:2a:37:a8:62:e3:a5:44:d9:86:92: ab:c6:80:c6:9f:f6:55:d4:eb:31:67:ba:c5:3d:47: bc:ad:a5:46:d1:76:1d:44:4a:97:d1:7b:ec:6f:4c: 20:c7:6c:f1:8b:b0:d7:14:83:42:00:32:ca:56:3d: bc:e2:cd:71:5a:44:dc:62:45:19:27:29:2d:3e:1d: 79:76:e1:57:40:20:7e:45:82:f0:d2:21:90:db:cc: 0e:da:30:34:90:b4:bf:57:8d:28:26:20:74:e6:73: 10:8f:f9:01:2e:f0:de:bd:67:4b:d1:dc:fd:0b:a7: 17:15:ef:0e:73:4c:08:fa:cc:f0:a9:ad:08:6a:16: 74:c1:8d:aa:ba:d6:03:f4:60:b0:a6:69:5c:1a:77: 62:35:72:e1:1b:d8:20:70:16:a6:0c:85:07:5e:0e: ee:f8:ee:c8:cf:6c:58:9d:cf:66:c9:1c:26:52:50: 16:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:31:ED:AA:3E:F4:36:FE:B9:7D:92:7F:A0:B5:64:18:66:CE:99:82 X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e9:a1:0d:72:55:23:a3:fa:aa:df:e7:bc:6f:62:78:9e:c3: 9f:5b:13:f8:8b:df:95:12:9d:90:29:65:c4:79:84:c3:f9:04: 4f:d1:c7:aa:85:e6:85:93:98:aa:b3:7e:9e:40:96:93:26:e3: 05:8d:46:7c:0d:ba:60:3f:48:8d:2a:b5:4d:8f:d7:94:93:fe: da:17:4f:3b:60:ca:39:c4:07:8e:56:85:50:5e:20:fb:6e:38: 11:6e:7f:6d:e6:3c:a7:65:98:94:c0:49:05:40:6c:cd:24:5c: f1:91:db:ef:94:4a:a6:34:c6:c1:50:2e:c1:09:9d:46:86:42: 57:c6:9b:1e:c9:bd:26:28:6f:55:7b:4d:22:fc:61:8e:92:a0: f1:58:f7:6e:b0:24:80:73:fe:7f:4a:25:26:ee:a7:24:98:16: f6:75:3b:f1:a8:fc:41:c6:c6:5e:83:70:bb:6e:50:b3:15:cf: 43:41:c1:50:70:22:3e:7d:89:43:70:b4:b0:f6:6d:84:2b:84: 6d:c3:0a:34:32:da:40:d7:0d:2b:e8:de:22:e0:11:8b:ca:e1: 42:92:33:05:fb:4e:6e:7c:a7:18:0e:1d:fa:d3:75:1a:71:b3: 63:a5:8f:ad:af:dc:4e:83:fe:92:25:d5:0d:c6:2e:a2:20:47: 05:8c:1b:b6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDs1QS+1YpqNLT1Q+wG6ug/L/M+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNjA3MjMxMDUyNThaFw0yNjA3MjgwMDExNThaMDMxMTAvBgNV BAMTKDAwMzFFREFBM0VGNDM2RkVCOTdEOTI3RkEwQjU2NDE4NjZDRTk5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfRTgCa+KOzjtG0DtZegBxe1X qxgmizdn5Y6kw+NH2hsOQD5eUSzmn9oKioFywNcMrQnph7h+IQm9IwLq9OPZq2Dv D52m8CmO0gFnyMpNKjeoYuOlRNmGkqvGgMaf9lXU6zFnusU9R7ytpUbRdh1ESpfR e+xvTCDHbPGLsNcUg0IAMspWPbzizXFaRNxiRRknKS0+HXl24VdAIH5FgvDSIZDb zA7aMDSQtL9XjSgmIHTmcxCP+QEu8N69Z0vR3P0LpxcV7w5zTAj6zPCprQhqFnTB jaq61gP0YLCmaVwad2I1cuEb2CBwFqYMhQdeDu747sjPbFidz2bJHCZSUBbtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUADHtqj70Nv65fZJ/oLVkGGbOmYIwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAO6aENclUjo/qq3+e8b2J4nsOf WxP4i9+VEp2QKWXEeYTD+QRP0ceqheaFk5iqs36eQJaTJuMFjUZ8DbpgP0iNKrVN j9eUk/7aF087YMo5xAeOVoVQXiD7bjgRbn9t5jynZZiUwEkFQGzNJFzxkdvvlEqm NMbBUC7BCZ1GhkJXxpseyb0mKG9Ve00i/GGOkqDxWPdusCSAc/5/SiUm7qckmBb2 dTvxqPxBxsZeg3C7blCzFc9DQcFQcCI+fYlDcLSw9m2EK4Rtwwo0MtpA1w0r6N4i 4BGLyuFCkjMF+05ufKcYDh3603UacbNjpY+tr9xOg/6SJdUNxi6iIEcFjBu2 -----END CERTIFICATE-----Generated at Sat Jul 25 02:05:41 2026 by rpki-client