$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft File: B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft (raw, json) Hash identifier: +VoNZLAjmAgC6lAIN1iqed6oPwr/6/bgtXL2kYvqg/g= Subject key identifier: 31:40:12:15:0A:4E:C6:C0:BD:5C:C9:CB:8D:F2:E1:D0:39:62:3C:59 Authority key identifier: B3:2F:3F:6C:AB:8B:BA:CE:BE:74:DB:EC:2B:5B:3A:57:E2:1D:D0:A2 Certificate issuer: /CN=B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2 Certificate serial: 4DC8D3069549CDF4C8FD65F139D6054C63ABDD03 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft Manifest number: 26 Signing time: Thu 24 Sep 2026 01:19:02 +0000 Manifest this update: Thu 24 Sep 2026 01:14:02 +0000 Manifest next update: Tue 29 Sep 2026 18:06:02 +0000 Files and hashes: 1: 3230312e37312e322e302f32332d3234203d3e20323639393230.roa (hash: xVpYf3eqikso92q82uQTzaX0BL/TFizOohhgwjIYkpk=) 2: B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.crl (hash: jLEoz/zKh+74c8VCBiRWBVvkWCfB8796IeiIA/om3vM=) 3: 323830333a633265303a3a2f33322d3438203d3e20323639393230.roa (hash: vBT+TmLo+Up2GkMfeOlqfPKPDwNRCfn0vdqmhO1vkwM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.crl rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Sep 2026 07:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c8:d3:06:95:49:cd:f4:c8:fd:65:f1:39:d6:05:4c:63:ab:dd:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2 Validity Not Before: Sep 24 01:14:02 2026 GMT Not After : Sep 29 18:06:02 2026 GMT Subject: CN=314012150A4EC6C0BD5CC9CB8DF2E1D039623C59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9f:72:f9:f8:31:90:53:df:34:41:9e:92:a1: 6e:61:5d:21:68:21:c5:d4:8d:53:ad:fc:11:92:ce: 10:7f:46:fb:5d:49:3e:6e:c5:e6:f5:b6:ee:6b:3e: 33:7b:9a:aa:a9:ab:40:75:8a:93:f0:a2:ca:dd:65: 25:2d:de:e8:9d:7e:37:a4:48:bf:3e:9e:18:b0:bd: 9b:72:4a:3d:d8:62:72:44:4f:ee:a5:bd:6a:cc:0f: 95:94:df:ad:85:8b:a3:ba:5c:df:b2:24:e1:34:b6: d5:37:d1:57:cd:2f:1e:d9:9a:cf:e1:8f:77:27:41: 1c:6c:43:4e:67:60:59:c4:99:1c:9e:86:01:ca:e4: 50:96:a8:6a:d2:ac:66:08:7a:aa:2b:30:84:3c:dd: 81:ba:6e:53:74:45:1f:b6:82:e8:54:76:96:df:37: c6:d4:f8:36:17:1c:a4:7a:57:3d:e0:89:0b:f4:26: b0:b5:f0:51:d5:fd:0c:69:49:ea:38:b8:2b:70:fd: e8:67:d7:54:f3:72:cd:7d:9f:4f:ad:1d:be:74:b1: 5d:80:82:28:df:10:b3:b6:38:e7:b0:29:f2:81:1c: e8:e6:7c:12:4c:00:f3:69:17:3d:6b:52:35:f1:8b: 82:87:3d:c2:26:94:53:60:e1:d3:78:59:c1:d3:8b: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:40:12:15:0A:4E:C6:C0:BD:5C:C9:CB:8D:F2:E1:D0:39:62:3C:59 X509v3 Authority Key Identifier: keyid:B3:2F:3F:6C:AB:8B:BA:CE:BE:74:DB:EC:2B:5B:3A:57:E2:1D:D0:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f2:ea:8d:cb:f5:25:60:e6:5c:9d:f2:d5:47:35:93:81:97: fb:67:9e:3c:85:a1:28:23:2d:b1:8e:26:fb:6a:33:88:98:4f: 57:44:3b:42:bc:b1:1c:09:8a:ee:09:70:f1:44:1c:42:1c:d5: 4b:61:4f:20:6d:a5:88:3a:26:82:51:ea:42:68:93:8f:58:5e: 4e:72:7d:de:be:93:14:85:b2:7b:b6:3d:b9:6e:91:92:20:a5: 80:c1:16:2d:10:77:29:62:a9:1a:63:90:b2:a6:17:59:59:d7: 5c:c0:bf:04:23:4f:6c:5a:d3:62:94:9b:05:db:05:24:ce:a6: c8:6c:51:50:66:c2:a3:35:f6:b3:0e:cb:a9:26:39:0e:a9:df: 3b:1a:0b:6a:98:1f:f1:7a:df:39:6a:d7:30:af:f0:de:8b:af: 18:19:fa:74:1f:31:a3:07:94:cc:a8:8f:f7:15:6e:6a:9f:5b: 82:5f:cb:b0:63:c5:99:47:a3:e2:04:da:0f:33:af:c2:55:75: 94:10:e3:79:45:54:43:2c:84:3a:0d:89:3a:90:ad:40:bb:d9: 8d:9b:03:72:a2:6b:dd:43:70:08:ad:de:55:e9:e4:bd:f8:f6: 56:51:a2:d0:d4:40:b5:18:03:36:fe:c8:26:84:67:34:08:53: ba:bb:03:99 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTcjTBpVJzfTI/WXxOdYFTGOr3QMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRjNGNkNBQjhCQkFDRUJFNzREQkVDMkI1QjNBNTdF MjFERDBBMjAeFw0yNjA5MjQwMTE0MDJaFw0yNjA5MjkxODA2MDJaMDMxMTAvBgNV BAMTKDMxNDAxMjE1MEE0RUM2QzBCRDVDQzlDQjhERjJFMUQwMzk2MjNDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYn3L5+DGQU980QZ6SoW5hXSFo IcXUjVOt/BGSzhB/RvtdST5uxeb1tu5rPjN7mqqpq0B1ipPwosrdZSUt3uidfjek SL8+nhiwvZtySj3YYnJET+6lvWrMD5WU362Fi6O6XN+yJOE0ttU30VfNLx7Zms/h j3cnQRxsQ05nYFnEmRyehgHK5FCWqGrSrGYIeqorMIQ83YG6blN0RR+2guhUdpbf N8bU+DYXHKR6Vz3giQv0JrC18FHV/QxpSeo4uCtw/ehn11Tzcs19n0+tHb50sV2A gijfELO2OOewKfKBHOjmfBJMAPNpFz1rUjXxi4KHPcImlFNg4dN4WcHTi9GDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMUASFQpOxsC9XMnLjfLh0DliPFkwHwYDVR0j BBgwFoAUsy8/bKuLus6+dNvsK1s6V+Id0KIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQTU0MUNCMDEwMzEyQkIwQjEwRkYwNENEMUFENDA0Q0Mw REZFMTE3QkExOEMzRkJCRTdBNkE5NzhDQzM1RDA0LzAvQjMyRjNGNkNBQjhCQkFD RUJFNzREQkVDMkI1QjNBNTdFMjFERDBBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzJGM0Y2Q0FCOEJCQUNFQkU3 NERCRUMyQjVCM0E1N0UyMUREMEEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkE1NDFDQjAxMDMxMkJCMEIxMEZGMDRDRDFBRDQwNENDMERGRTExN0JB MThDM0ZCQkU3QTZBOTc4Q0MzNUQwNC8wL0IzMkYzRjZDQUI4QkJBQ0VCRTc0REJF QzJCNUIzQTU3RTIxREQwQTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCc8uqNy/UlYOZcnfLVRzWTgZf7 Z548haEoIy2xjib7ajOImE9XRDtCvLEcCYruCXDxRBxCHNVLYU8gbaWIOiaCUepC aJOPWF5Ocn3evpMUhbJ7tj25bpGSIKWAwRYtEHcpYqkaY5CyphdZWddcwL8EI09s WtNilJsF2wUkzqbIbFFQZsKjNfazDsupJjkOqd87GgtqmB/xet85atcwr/Dei68Y Gfp0HzGjB5TMqI/3FW5qn1uCX8uwY8WZR6PiBNoPM6/CVXWUEON5RVRDLIQ6DYk6 kK1Au9mNmwNyomvdQ3AIrd5V6eS9+PZWUaLQ1EC1GAM2/sgmhGc0CFO6uwOZ -----END CERTIFICATE-----Generated at Fri Sep 25 22:31:00 2026 by rpki-client