$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft File: 325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft (raw, json) Hash identifier: 3Lq9nLqq4rydSgHprSAnO3z1RD9xG1xHxCMPpzMGJbQ= Subject key identifier: 3A:7D:36:5C:04:E5:B7:45:86:CD:FD:50:8D:E2:AA:23:31:16:83:7C Authority key identifier: 32:5C:30:A6:2A:28:F1:CC:67:6D:EC:2E:F9:7A:F6:60:C7:A2:99:85 Certificate issuer: /CN=325C30A62A28F1CC676DEC2EF97AF660C7A29985 Certificate serial: 19CBEDAFF9872C16CC316878D6EE31F291D660B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft Manifest number: 01B3 Signing time: Thu 23 Jul 2026 23:32:13 +0000 Manifest this update: Thu 23 Jul 2026 23:27:13 +0000 Manifest next update: Wed 29 Jul 2026 00:53:13 +0000 Files and hashes: 1: 3136382e3132312e3132382e302f32322d3232203d3e203238303035.roa (hash: c+hvBq769sPADm4+1m+EVnH3LljNXin+++6aC9x05JU=) 2: 325C30A62A28F1CC676DEC2EF97AF660C7A29985.crl (hash: a6Fu6UyaDn7tiJ/TfQcLYhv9P6HcZ5PtzK6WdPesOIw=) 3: 3133312e3130382e32302e302f32322d3232203d3e20323632323438.roa (hash: VFIEHma75tY63lxcFTJJOidAJSPYQWRhw1i0G6jI70A=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.crl rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:cb:ed:af:f9:87:2c:16:cc:31:68:78:d6:ee:31:f2:91:d6:60:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325C30A62A28F1CC676DEC2EF97AF660C7A29985 Validity Not Before: Jul 23 23:27:13 2026 GMT Not After : Jul 29 00:53:13 2026 GMT Subject: CN=3A7D365C04E5B74586CDFD508DE2AA233116837C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:a5:42:eb:e3:cb:3b:b5:14:78:e4:85:46: 42:00:f3:5f:37:de:d4:ed:49:47:91:8f:78:7c:8f: e9:42:52:b3:50:ed:69:41:84:93:eb:ab:fb:0f:70: 5a:b1:76:17:8a:79:4d:43:93:14:08:07:6b:54:f8: e4:f8:8a:07:ae:4c:1e:ef:e4:cd:de:7f:ef:35:e9: de:20:bf:4f:0c:37:46:42:68:e2:2b:e7:fb:15:9a: cb:73:51:69:b9:b7:0a:75:16:89:48:02:8a:c6:e0: 48:06:52:08:d7:11:51:c7:9e:10:da:bc:75:e3:99: 00:ef:b2:cf:a5:e1:94:b1:52:ed:09:58:0b:0e:1d: e5:db:d8:93:0a:ad:31:11:71:33:c5:a8:da:95:80: bb:d8:1e:50:4a:88:78:cb:e0:ff:a5:5d:6b:1f:66: 10:3b:a2:b8:e5:a0:48:61:31:82:50:b9:ca:51:40: a7:5b:f1:18:b7:12:d2:36:be:fa:2c:4e:b6:42:8f: b0:fe:83:dd:9a:b6:85:b5:aa:af:99:47:5e:d4:bb: 83:4c:e1:67:a6:e5:74:87:fd:7a:59:49:08:1a:a7: ef:ed:ac:48:a4:3c:77:fc:be:ce:01:7b:fc:50:6c: a5:d3:22:22:4c:a7:46:bd:22:3e:d9:ab:f1:b6:b5: 17:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7D:36:5C:04:E5:B7:45:86:CD:FD:50:8D:E2:AA:23:31:16:83:7C X509v3 Authority Key Identifier: keyid:32:5C:30:A6:2A:28:F1:CC:67:6D:EC:2E:F9:7A:F6:60:C7:A2:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:86:b5:bf:c9:e2:ba:eb:52:63:cb:9d:a2:0d:fe:da:71:23: bf:40:87:70:79:cd:c2:70:db:98:b1:58:53:7d:2b:15:2a:92: f4:75:c4:13:f3:cc:72:99:13:6f:5a:1a:66:7b:f3:35:0c:ac: e9:67:ae:77:4c:9a:ea:d6:4a:18:42:c8:cd:a7:99:39:2a:e9: 93:81:fb:b8:8b:d6:2a:0d:9e:c6:30:f3:ed:9f:91:b4:9a:9e: 53:81:b4:10:98:bc:f7:6f:d1:c7:b3:fd:d6:21:82:1c:bd:7c: 0d:e6:00:ef:0d:1f:81:9b:28:7b:75:09:7f:a7:b6:6c:32:9d: ab:03:31:53:f5:c3:d6:96:07:fd:b4:aa:9a:80:46:1f:93:1d: 1d:ca:5f:ac:bb:31:dd:db:49:4b:f8:7a:76:cf:69:13:87:47: 4f:9d:e7:17:57:09:23:c1:39:43:f0:e2:28:12:b7:65:7c:4c: 07:fa:44:96:79:92:40:98:69:57:d3:fa:b7:4a:54:26:dd:62: ba:4c:6e:34:a8:94:ea:2a:7f:2f:00:c8:73:77:94:2e:fc:a9: 42:79:cc:1e:8b:d7:99:68:84:2f:b7:0b:34:b2:89:32:3d:c0: ec:a7:b7:d7:02:b3:bb:c0:a2:ea:af:02:7e:75:5b:16:dd:2e: 88:88:31:38 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGcvtr/mHLBbMMWh41u4x8pHWYLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI1QzMwQTYyQTI4RjFDQzY3NkRFQzJFRjk3QUY2NjBD N0EyOTk4NTAeFw0yNjA3MjMyMzI3MTNaFw0yNjA3MjkwMDUzMTNaMDMxMTAvBgNV BAMTKDNBN0QzNjVDMDRFNUI3NDU4NkNERkQ1MDhERTJBQTIzMzExNjgzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC526VC6+PLO7UUeOSFRkIA8183 3tTtSUeRj3h8j+lCUrNQ7WlBhJPrq/sPcFqxdheKeU1DkxQIB2tU+OT4igeuTB7v 5M3ef+816d4gv08MN0ZCaOIr5/sVmstzUWm5twp1FolIAorG4EgGUgjXEVHHnhDa vHXjmQDvss+l4ZSxUu0JWAsOHeXb2JMKrTERcTPFqNqVgLvYHlBKiHjL4P+lXWsf ZhA7orjloEhhMYJQucpRQKdb8Ri3EtI2vvosTrZCj7D+g92atoW1qq+ZR17Uu4NM 4Wem5XSH/XpZSQgap+/trEikPHf8vs4Be/xQbKXTIiJMp0a9Ij7Zq/G2tRdzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOn02XATlt0WGzf1QjeKqIzEWg3wwHwYDVR0j BBgwFoAUMlwwpioo8cxnbewu+Xr2YMeimYUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMzM0MDcyMDRFMUE5QUU3Rjk1QTFFN0IxOTQ4OTFFN0FC QUY2Q0M1Q0VBNzc2NTBERkI5NkIwREU2REM3QjhGLzAvMzI1QzMwQTYyQTI4RjFD QzY3NkRFQzJFRjk3QUY2NjBDN0EyOTk4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjVDMzBBNjJBMjhGMUNDNjc2 REVDMkVGOTdBRjY2MEM3QTI5OTg1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjMzNDA3MjA0RTFBOUFFN0Y5NUExRTdCMTk0ODkxRTdBQkFGNkNDNUNF QTc3NjUwREZCOTZCMERFNkRDN0I4Ri8wLzMyNUMzMEE2MkEyOEYxQ0M2NzZERUMy RUY5N0FGNjYwQzdBMjk5ODUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAhrW/yeK661Jjy52iDf7acSO/ QIdwec3CcNuYsVhTfSsVKpL0dcQT88xymRNvWhpme/M1DKzpZ653TJrq1koYQsjN p5k5KumTgfu4i9YqDZ7GMPPtn5G0mp5TgbQQmLz3b9HHs/3WIYIcvXwN5gDvDR+B myh7dQl/p7ZsMp2rAzFT9cPWlgf9tKqagEYfkx0dyl+suzHd20lL+Hp2z2kTh0dP necXVwkjwTlD8OIoErdlfEwH+kSWeZJAmGlX0/q3SlQm3WK6TG40qJTqKn8vAMhz d5Qu/KlCecwei9eZaIQvtws0sokyPcDsp7fXArO7wKLqrwJ+dVsW3S6IiDE4 -----END CERTIFICATE-----Generated at Fri Jul 24 17:39:02 2026 by rpki-client