$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft File: 28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft (raw, json) Hash identifier: ND/9L9HsCKiFFR+9vycT3JKmHYXSaS/fEfA6l63ztIY= Subject key identifier: 97:FA:63:53:6F:0D:1A:BB:BC:80:7D:E2:FA:65:73:BD:B5:7F:AE:6D Authority key identifier: 28:D3:87:F6:3A:EA:E0:AA:9E:95:54:1B:C0:B6:AF:1F:11:CE:54:76 Certificate issuer: /CN=28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476 Certificate serial: 344DC498621C6CA413BDD072AC62D22963786964 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft Manifest number: 0F Signing time: Wed 22 Jul 2026 11:45:21 +0000 Manifest this update: Wed 22 Jul 2026 11:40:21 +0000 Manifest next update: Mon 27 Jul 2026 23:20:21 +0000 Files and hashes: 1: 323830333a323933303a3a2f33322d3438203d3e20323734393435.roa (hash: MVqLtzm/kEO+r6vqyMAnOk87BLBVTGDz8flj0sRHAFo=) 2: 28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.crl (hash: DqE9jK+y1lgc0rJjBvnApPwVr3rUXOS6NEwyaOJvoXI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.crl rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Jul 2026 23:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4d:c4:98:62:1c:6c:a4:13:bd:d0:72:ac:62:d2:29:63:78:69:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476 Validity Not Before: Jul 22 11:40:21 2026 GMT Not After : Jul 27 23:20:21 2026 GMT Subject: CN=97FA63536F0D1ABBBC807DE2FA6573BDB57FAE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:fa:45:7f:32:d6:15:63:c2:a7:c8:3d:9e: 5c:81:07:26:53:76:96:73:33:bd:4c:36:35:76:64: 6b:3c:79:9b:0c:dc:df:db:7e:7f:7b:3e:da:dd:ae: 49:7b:7f:d3:63:b3:a9:cd:38:b7:5a:ca:f5:73:f9: ab:a7:ab:e1:9a:6a:34:43:bd:17:fa:68:97:96:34: c1:26:bd:21:40:a7:48:4d:30:c9:d8:36:8a:aa:7b: fb:86:63:a2:5d:7d:d8:67:94:3a:68:77:c8:73:f5: 1e:e6:b7:d6:d3:d5:b9:02:cb:76:31:e8:c4:ef:7e: 00:1a:5f:fa:75:ca:b2:a8:f9:14:79:eb:89:0b:5b: 14:90:b5:49:50:63:c8:7c:06:a3:64:53:be:13:6c: 9c:3d:d0:49:6f:af:0d:1b:52:e9:8f:2e:38:db:8d: 09:e7:be:64:0e:07:1f:2c:64:96:a5:63:8d:17:19: 59:4e:f8:ae:5c:89:7e:7e:43:ab:a0:8c:4f:90:7d: 51:29:08:ed:36:25:df:9b:1e:76:96:a5:8d:57:f9: 04:e7:96:f9:91:a2:f6:20:9b:0b:c1:33:c8:9d:23: e0:b3:5a:77:62:61:5e:3c:e5:5c:d3:e2:d7:5a:cc: 06:26:fe:58:47:f9:47:f6:d4:58:2c:40:da:5b:0f: 80:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FA:63:53:6F:0D:1A:BB:BC:80:7D:E2:FA:65:73:BD:B5:7F:AE:6D X509v3 Authority Key Identifier: keyid:28:D3:87:F6:3A:EA:E0:AA:9E:95:54:1B:C0:B6:AF:1F:11:CE:54:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:87:98:ef:20:ed:5f:18:fd:84:a2:f7:60:35:8b:a2:78:a4: cc:c7:95:80:3e:35:aa:d4:3a:b3:bc:54:b4:64:0d:c5:6a:36: c8:9e:68:ed:c4:b5:9a:84:47:d2:36:2b:e5:83:1a:2c:ff:62: 64:65:2f:7d:4d:a8:22:20:6e:e1:97:84:81:c8:4e:32:03:01: 37:b1:0e:8a:f7:9a:aa:25:3d:9e:16:79:5f:12:7f:db:91:1d: 8d:98:f8:36:3a:85:84:31:c7:3a:b6:1a:a1:f8:dc:06:31:ef: b3:2d:2e:12:52:d4:52:0a:52:4e:94:23:23:43:bd:79:50:91: 8d:b1:04:d4:59:56:9e:4c:5e:10:45:8f:d0:b3:c3:2f:21:f8: 7b:ff:86:ce:ec:92:bc:ec:96:1c:5a:c9:2b:8f:32:6a:4c:da: f8:55:ec:3d:5d:76:7f:62:17:3a:2a:aa:9c:b0:f3:90:a7:df: dc:06:72:fa:26:f1:d5:9a:93:b7:36:ac:d5:5f:47:b8:cb:a7: 82:da:05:d1:0f:2e:2e:93:31:9b:ba:16:5f:b4:a7:38:60:f4: de:be:b6:fb:a8:b6:f6:26:e2:45:88:7b:73:79:6f:80:a6:51: d1:04:ea:7e:04:4f:27:24:55:58:3c:2b:e4:84:f6:45:0f:d2: b7:35:86:a3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNE3EmGIcbKQTvdByrGLSKWN4aWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhEMzg3RjYzQUVBRTBBQTlFOTU1NDFCQzBCNkFGMUYx MUNFNTQ3NjAeFw0yNjA3MjIxMTQwMjFaFw0yNjA3MjcyMzIwMjFaMDMxMTAvBgNV BAMTKDk3RkE2MzUzNkYwRDFBQkJCQzgwN0RFMkZBNjU3M0JEQjU3RkFFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6/pFfzLWFWPCp8g9nlyBByZT dpZzM71MNjV2ZGs8eZsM3N/bfn97Ptrdrkl7f9Njs6nNOLdayvVz+aunq+GaajRD vRf6aJeWNMEmvSFAp0hNMMnYNoqqe/uGY6JdfdhnlDpod8hz9R7mt9bT1bkCy3Yx 6MTvfgAaX/p1yrKo+RR564kLWxSQtUlQY8h8BqNkU74TbJw90Elvrw0bUumPLjjb jQnnvmQOBx8sZJalY40XGVlO+K5ciX5+Q6ugjE+QfVEpCO02Jd+bHnaWpY1X+QTn lvmRovYgmwvBM8idI+CzWndiYV485VzT4tdazAYm/lhH+Uf21FgsQNpbD4ANAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUl/pjU28NGru8gH3i+mVzvbV/rm0wHwYDVR0j BBgwFoAUKNOH9jrq4KqelVQbwLavHxHOVHYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTQ3NkFDMzIxNUM0N0IwMEEwODhBMEQ0NzI3MEE3ODI3 NTAyREMzNUNGNTQ3NUY3Qzg1MEVCQkE1MjA5RkVFLzAvMjhEMzg3RjYzQUVBRTBB QTlFOTU1NDFCQzBCNkFGMUYxMUNFNTQ3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEQzODdGNjNBRUFFMEFBOUU5 NTU0MUJDMEI2QUYxRjExQ0U1NDc2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkE0NzZBQzMyMTVDNDdCMDBBMDg4QTBENDcyNzBBNzgyNzUwMkRDMzVD RjU0NzVGN0M4NTBFQkJBNTIwOUZFRS8wLzI4RDM4N0Y2M0FFQUUwQUE5RTk1NTQx QkMwQjZBRjFGMTFDRTU0NzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFh5jvIO1fGP2EovdgNYuieKTM x5WAPjWq1DqzvFS0ZA3FajbInmjtxLWahEfSNivlgxos/2JkZS99TagiIG7hl4SB yE4yAwE3sQ6K95qqJT2eFnlfEn/bkR2NmPg2OoWEMcc6thqh+NwGMe+zLS4SUtRS ClJOlCMjQ715UJGNsQTUWVaeTF4QRY/Qs8MvIfh7/4bO7JK87JYcWskrjzJqTNr4 Vew9XXZ/Yhc6KqqcsPOQp9/cBnL6JvHVmpO3NqzVX0e4y6eC2gXRDy4ukzGbuhZf tKc4YPTevrb7qLb2JuJFiHtzeW+AplHRBOp+BE8nJFVYPCvkhPZFD9K3NYaj -----END CERTIFICATE-----Generated at Fri Jul 24 18:50:29 2026 by rpki-client