$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft File: DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft (raw, json) Hash identifier: sDBP2ZFUOFHBltNbfnYNiKniJwuftP0t+nyA9TO/S1Y= Subject key identifier: 7C:72:FB:48:A9:30:8A:06:25:5A:39:59:7A:C0:84:08:82:24:90:F8 Authority key identifier: DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03 Certificate issuer: /CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603 Certificate serial: 5125DC37E1142DA873A413C4F84A731C9FF6F0A3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft Manifest number: 01B2 Signing time: Thu 23 Jul 2026 02:11:46 +0000 Manifest this update: Thu 23 Jul 2026 02:06:46 +0000 Manifest next update: Tue 28 Jul 2026 12:53:46 +0000 Files and hashes: 1: DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl (hash: mbyXOuGKnom/YuehX21gcAW3zrMlOyHM+9bG2Nhcj4s=) 2: 323830333a336232303a3a2f33322d3438203d3e203532333431.roa (hash: 6Oq1a+DIoWFTX3rnxsSwHjGM2/eCVePRGd/D8+kmZSo=) 3: 34352e3233322e39322e302f32322d3234203d3e203532333431.roa (hash: FzvSXZtiOeJ/NEzGDXITuL7kgcUnFHr3KAiTqPIV228=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:25:dc:37:e1:14:2d:a8:73:a4:13:c4:f8:4a:73:1c:9f:f6:f0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603 Validity Not Before: Jul 23 02:06:46 2026 GMT Not After : Jul 28 12:53:46 2026 GMT Subject: CN=7C72FB48A9308A06255A39597AC08408822490F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:e0:98:77:be:05:14:ab:5d:c0:98:bc:91: c2:64:4a:ed:d7:d6:f3:54:a5:1e:f7:08:8e:51:21: ec:96:d1:cd:93:87:37:2d:53:23:58:66:20:ee:df: 78:be:bd:21:bc:ca:0b:06:17:b6:65:1d:e4:c6:bb: f7:70:5f:7f:08:86:85:a0:90:74:a0:09:37:5a:c4: 15:26:ff:8e:26:d4:bd:f7:93:ae:7a:c6:25:64:fd: 98:98:31:51:35:e7:1e:d6:cd:be:60:5c:7b:e0:7a: 83:9f:c0:ea:d5:53:62:79:ff:bb:18:80:28:f7:c7: 2b:6e:33:a9:22:d1:c7:41:7a:3b:07:65:64:cd:a3: 33:9e:32:14:98:1f:46:cd:12:42:7d:a3:7d:c3:5b: e0:00:7a:3c:e0:cd:6a:56:1c:40:84:4a:7f:9f:20: 70:37:a1:15:df:c2:6b:64:fd:5e:57:98:e1:79:97: ca:91:e8:8a:00:b7:7e:4d:17:aa:14:99:bf:99:db: 33:83:69:21:04:ce:f1:d2:e5:7c:a1:01:e6:11:28: bb:34:37:32:80:fd:60:9c:84:92:a0:7b:db:18:de: de:7b:b4:36:3f:71:d7:72:07:86:86:c0:89:9d:88: 4b:25:20:e9:41:e7:28:2d:8a:de:0f:45:86:52:bc: d2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:72:FB:48:A9:30:8A:06:25:5A:39:59:7A:C0:84:08:82:24:90:F8 X509v3 Authority Key Identifier: keyid:DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:6f:0a:df:ef:6b:46:44:ea:ad:35:5a:b8:f8:94:b8:1e:67: c0:39:7f:2e:39:dc:6b:f9:ba:1b:a0:c8:80:22:61:32:ad:e2: d7:45:bd:ae:40:0b:c5:c1:1b:aa:5f:62:79:58:f5:4a:32:f7: 4e:c4:60:88:a1:a8:9f:a0:2d:38:54:a2:0d:ce:d0:a6:37:e0: 00:6d:e3:fa:76:23:47:cc:78:90:ce:29:b7:43:a8:33:f9:b4: 08:8d:f6:a3:d5:95:d9:6d:ee:2f:d0:cf:75:cb:88:38:0e:7f: 83:b5:3b:ac:ca:03:eb:8e:15:11:05:32:01:91:3e:8d:65:83: ac:0c:1f:46:8a:2c:6c:f6:6e:1f:57:86:71:52:82:b1:de:62: 9a:20:fe:af:06:bf:a5:65:67:92:85:09:77:60:c4:5d:fc:29: 7b:5b:09:4c:38:21:6d:c6:4f:26:14:f9:76:d1:2f:b5:9b:0e: ce:0c:37:8b:4a:95:62:55:20:59:c7:2c:63:aa:12:d8:31:dd: cc:67:04:78:93:39:27:25:7b:49:54:4f:91:0c:77:0e:54:9b: 1b:57:8a:f5:d0:cf:ea:c1:44:53:49:0e:16:3b:5b:74:ac:f3: 0a:ed:70:53:74:07:41:59:9e:aa:ff:30:ae:a2:eb:51:cd:ac: a7:a6:62:e2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUSXcN+EULahzpBPE+EpzHJ/28KMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4M0EzOEMxQjkyNkNENUYyRjk3NDFGOEFGRUU3QzMx NzlENjYwMzAeFw0yNjA3MjMwMjA2NDZaFw0yNjA3MjgxMjUzNDZaMDMxMTAvBgNV BAMTKDdDNzJGQjQ4QTkzMDhBMDYyNTVBMzk1OTdBQzA4NDA4ODIyNDkwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVhuCYd74FFKtdwJi8kcJkSu3X 1vNUpR73CI5RIeyW0c2ThzctUyNYZiDu33i+vSG8ygsGF7ZlHeTGu/dwX38IhoWg kHSgCTdaxBUm/44m1L33k656xiVk/ZiYMVE15x7Wzb5gXHvgeoOfwOrVU2J5/7sY gCj3xytuM6ki0cdBejsHZWTNozOeMhSYH0bNEkJ9o33DW+AAejzgzWpWHECESn+f IHA3oRXfwmtk/V5XmOF5l8qR6IoAt35NF6oUmb+Z2zODaSEEzvHS5XyhAeYRKLs0 NzKA/WCchJKge9sY3t57tDY/cddyB4aGwImdiEslIOlB5ygtit4PRYZSvNIVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUfHL7SKkwigYlWjlZesCECIIkkPgwHwYDVR0j BBgwFoAU3YOjjBuSbNXy+XQfiv7nwxedZgMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjk1MTFFQkE5RTZCQ0NBMzlBMEM0MDdEQkVCRTNFRUYx RjEwMjZGRTQzNjZBNjgzMUUxQjkwNDM3MDY4ODZELzAvREQ4M0EzOEMxQjkyNkNE NUYyRjk3NDFGOEFGRUU3QzMxNzlENjYwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDgzQTM4QzFCOTI2Q0Q1RjJG OTc0MUY4QUZFRTdDMzE3OUQ2NjAzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkI5NTExRUJBOUU2QkNDQTM5QTBDNDA3REJFQkUzRUVGMUYxMDI2RkU0 MzY2QTY4MzFFMUI5MDQzNzA2ODg2RC8wL0REODNBMzhDMUI5MjZDRDVGMkY5NzQx RjhBRkVFN0MzMTc5RDY2MDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIbwrf72tGROqtNVq4+JS4HmfA OX8uOdxr+boboMiAImEyreLXRb2uQAvFwRuqX2J5WPVKMvdOxGCIoaifoC04VKIN ztCmN+AAbeP6diNHzHiQzim3Q6gz+bQIjfaj1ZXZbe4v0M91y4g4Dn+DtTusygPr jhURBTIBkT6NZYOsDB9Giixs9m4fV4ZxUoKx3mKaIP6vBr+lZWeShQl3YMRd/Cl7 WwlMOCFtxk8mFPl20S+1mw7ODDeLSpViVSBZxyxjqhLYMd3MZwR4kzknJXtJVE+R DHcOVJsbV4r10M/qwURTSQ4WO1t0rPMK7XBTdAdBWZ6q/zCuoutRzaynpmLi -----END CERTIFICATE-----Generated at Fri Jul 24 16:34:16 2026 by rpki-client