$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft File: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft (raw, json) Hash identifier: s885CQB+5pI0ExwXLWl7Win3sBeJldk5K6I3FOr08uo= Subject key identifier: 2A:21:31:1F:0F:A1:25:BE:45:DC:B9:E1:AD:12:97:98:7F:2F:3B:11 Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 Certificate issuer: /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Certificate serial: 17C9BBF33BDAAD92B1F57D74364C082C163696EA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft Manifest number: 01BA Signing time: Fri 24 Jul 2026 15:36:22 +0000 Manifest this update: Fri 24 Jul 2026 15:31:22 +0000 Manifest next update: Wed 29 Jul 2026 16:28:22 +0000 Files and hashes: 1: 3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa (hash: 5PtwY/I4K1sqbgk4oepM0bf77G8DSkxSrrobd+DAweY=) 2: 3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa (hash: +9wicyU9h998wF2wwBYP3APlY+qNPrGJ9U0p+EVkmDU=) 3: 3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa (hash: R4wTjBxWlpExbHfGaT9L7bqgCN2JZ/n8GYHNr7wl5ec=) 4: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl (hash: AHSZhixYQtOPNaKFIeDE64pma07s26YP25XOhZ43hy4=) 5: 3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa (hash: m0NGfYx5qfHiIZeFiCvtxN+EDVGwFXPY/gwPeOs7NQM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c9:bb:f3:3b:da:ad:92:b1:f5:7d:74:36:4c:08:2c:16:36:96:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Validity Not Before: Jul 24 15:31:22 2026 GMT Not After : Jul 29 16:28:22 2026 GMT Subject: CN=2A21311F0FA125BE45DCB9E1AD1297987F2F3B11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:19:90:97:90:9d:03:db:be:ec:f7:f6:36: f3:2d:2e:ba:3b:3d:6e:7b:2c:46:6e:28:bc:67:f4: d2:ef:bd:b6:fd:cd:23:64:6d:8f:f5:b4:0d:fe:90: f6:a1:36:c2:c1:72:ed:ae:f2:d0:90:c1:73:48:1a: 9f:cd:f0:62:a0:3b:09:b4:07:2a:cc:c1:f6:d2:d2: 7c:9a:cc:60:ce:dc:20:9d:20:ee:56:7a:89:17:91: 89:56:69:bc:1a:42:06:9c:3d:89:bb:8e:57:0b:d5: 3e:f1:17:a7:72:f9:eb:61:f5:d9:ef:0b:8d:77:9c: 78:5b:8e:f4:84:65:dd:6c:75:05:4c:a4:f1:ca:ba: 12:3e:48:89:3c:58:e5:68:d8:2b:b1:3a:16:e9:fb: c9:d5:b2:77:c5:76:2d:13:c5:7c:36:6c:cf:30:fc: 14:54:90:43:e0:78:db:94:87:f1:d2:9c:9b:4d:dc: 12:18:83:6a:53:1c:0c:04:3c:c3:3b:41:ec:15:62: 03:61:00:a0:94:79:90:cd:bf:56:e4:43:d0:25:4b: 08:d6:e6:42:18:99:d0:db:09:f2:25:15:ec:4d:be: 35:c7:43:63:dc:10:53:24:5e:80:86:d2:4d:76:7c: 6c:77:fd:01:aa:4f:0f:fc:2f:ab:10:f5:4d:5b:bb: f5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:21:31:1F:0F:A1:25:BE:45:DC:B9:E1:AD:12:97:98:7F:2F:3B:11 X509v3 Authority Key Identifier: keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9d:fc:0a:fb:3b:26:0c:03:b7:16:01:cb:4f:fb:53:00:44: 1e:08:37:5e:63:6a:fa:20:bf:9d:68:ee:3e:ca:6c:f2:0b:65: 17:bf:69:38:07:60:50:8a:24:13:51:d8:3e:e0:63:6a:de:7e: ab:f5:8f:72:c8:8e:be:b3:de:db:b1:57:e4:58:c0:f1:bf:ef: 77:46:47:4c:6d:47:e7:b1:76:38:60:59:45:14:71:71:22:ff: 2d:fe:b7:20:3a:f7:9a:39:b6:35:35:2b:1e:3b:00:ae:34:9a: 0c:10:2d:5d:30:54:61:41:11:7b:2c:0a:af:9c:b1:be:3f:30: 9d:b4:b8:74:ff:f5:60:05:e2:8e:da:b1:aa:31:53:cb:ea:51: 0f:66:2e:5c:a5:80:0a:4d:3a:19:92:21:c7:5b:91:ac:09:2b: cb:01:3d:6d:1e:03:42:90:b8:01:2f:31:d9:58:33:23:73:4b: a9:39:23:71:49:14:13:7b:6e:ca:89:db:8c:88:74:21:28:fe: f8:1c:87:b3:29:cd:e5:c1:89:43:e8:8a:57:7c:c8:f1:43:0f: a7:5f:81:de:41:fc:33:c9:8d:f5:48:26:6c:69:6e:21:a8:f2: 83:90:ec:c2:48:4f:e7:cd:53:48:5d:79:bc:57:5f:33:e4:dc: 11:fc:1b:1e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUF8m78zvarZKx9X10NkwILBY2luowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5QUZEM0E5MTI1RERDODhBRENFMkI2REZCQzYzN0Uz OEE3MTFGNTAeFw0yNjA3MjQxNTMxMjJaFw0yNjA3MjkxNjI4MjJaMDMxMTAvBgNV BAMTKDJBMjEzMTFGMEZBMTI1QkU0NURDQjlFMUFEMTI5Nzk4N0YyRjNCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYBmQl5CdA9u+7Pf2NvMtLro7 PW57LEZuKLxn9NLvvbb9zSNkbY/1tA3+kPahNsLBcu2u8tCQwXNIGp/N8GKgOwm0 ByrMwfbS0nyazGDO3CCdIO5WeokXkYlWabwaQgacPYm7jlcL1T7xF6dy+eth9dnv C413nHhbjvSEZd1sdQVMpPHKuhI+SIk8WOVo2CuxOhbp+8nVsnfFdi0TxXw2bM8w /BRUkEPgeNuUh/HSnJtN3BIYg2pTHAwEPMM7QewVYgNhAKCUeZDNv1bkQ9AlSwjW 5kIYmdDbCfIlFexNvjXHQ2PcEFMkXoCG0k12fGx3/QGqTw/8L6sQ9U1bu/URAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKiExHw+hJb5F3LnhrRKXmH8vOxEwHwYDVR0j BBgwFoAUmJr9OpEl3ciK3OK237xjfjinEfUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjA1NjMwMEY3MDM0NEZFRjA2RkNFOTQwNjQ1MDI4Mjkz NzAwMUVBMUM3M0JGQzQzQjBBMDQ2NTc5MEE1REU0LzAvOTg5QUZEM0E5MTI1RERD ODhBRENFMkI2REZCQzYzN0UzOEE3MTFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODlBRkQzQTkxMjVEREM4OEFE Q0UyQjZERkJDNjM3RTM4QTcxMUY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkIwNTYzMDBGNzAzNDRGRUYwNkZDRTk0MDY0NTAyODI5MzcwMDFFQTFD NzNCRkM0M0IwQTA0NjU3OTBBNURFNC8wLzk4OUFGRDNBOTEyNUREQzg4QURDRTJC NkRGQkM2MzdFMzhBNzExRjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5nfwK+zsmDAO3FgHLT/tTAEQe CDdeY2r6IL+daO4+ymzyC2UXv2k4B2BQiiQTUdg+4GNq3n6r9Y9yyI6+s97bsVfk WMDxv+93RkdMbUfnsXY4YFlFFHFxIv8t/rcgOveaObY1NSseOwCuNJoMEC1dMFRh QRF7LAqvnLG+PzCdtLh0//VgBeKO2rGqMVPL6lEPZi5cpYAKTToZkiHHW5GsCSvL AT1tHgNCkLgBLzHZWDMjc0upOSNxSRQTe27KiduMiHQhKP74HIezKc3lwYlD6IpX fMjxQw+nX4HeQfwzyY31SCZsaW4hqPKDkOzCSE/nzVNIXXm8V18z5NwR/Bse -----END CERTIFICATE-----Generated at Fri Jul 24 18:53:26 2026 by rpki-client