$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft File: CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft (raw, json) Hash identifier: G1igE0HWvsXVhWAnctUPdH/q6IQQfGHRnPyunI2vAO4= Subject key identifier: 04:DD:F7:3B:B9:C2:2E:EA:59:46:83:A3:13:C2:5F:53:60:9D:E6:D8 Authority key identifier: CD:A0:1D:15:7A:F5:B5:BA:05:DE:A9:23:DA:DF:3E:D1:DB:59:C2:FA Certificate issuer: /CN=CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA Certificate serial: 335E6126E17CCD2A8A77C163C019865628B5C12F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft Manifest number: 0A Signing time: Tue 22 Sep 2026 12:38:08 +0000 Manifest this update: Tue 22 Sep 2026 12:33:08 +0000 Manifest next update: Mon 28 Sep 2026 09:09:08 +0000 Files and hashes: 1: CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl (hash: ArC9BxSkWw/uRvh4bQMkP5fEfsHkKF0r7QHxyxmELu0=) 2: 34352e3139302e3138302e302f32322d3234203d3e20323635363138.roa (hash: wTOyNzoCO5ZqiBtFnDsbxOeajaPi+Hoo10vpt1ihoew=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Sep 2026 09:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5e:61:26:e1:7c:cd:2a:8a:77:c1:63:c0:19:86:56:28:b5:c1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA Validity Not Before: Sep 22 12:33:08 2026 GMT Not After : Sep 28 09:09:08 2026 GMT Subject: CN=04DDF73BB9C22EEA594683A313C25F53609DE6D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:8f:1e:f1:09:71:6c:e4:7d:07:95:d0:b6: 98:5d:d3:b9:35:cd:f8:3a:f1:d2:ff:1a:87:6e:6c: 7e:24:3d:85:d0:cf:54:50:22:fc:0f:88:a2:34:55: af:a2:23:30:ce:3f:cd:0b:3a:57:b7:39:32:f0:12: b8:5f:48:51:cb:31:81:1e:c4:63:a6:e1:1a:1a:75: e2:95:60:e8:30:f0:cb:e2:14:5c:f9:05:32:54:02: e0:8d:d9:70:ef:5d:62:b0:7b:82:84:86:d3:74:7c: eb:47:54:10:d8:4e:80:14:ca:a0:dc:50:6e:8c:1f: f0:74:a4:11:d0:a6:a9:bd:74:97:46:48:ec:f5:39: 78:6f:50:f4:87:ff:6b:d7:ca:3a:5f:6d:c1:cf:4e: 2b:a8:ec:f6:49:20:10:4f:f0:ff:bd:d4:06:43:3c: 06:ca:65:82:5c:95:fd:9a:c9:ae:36:81:19:91:99: 69:87:93:34:35:b1:c6:25:58:6c:7f:07:13:15:d7: 7f:63:a7:42:c1:46:c7:54:d4:87:35:95:1e:28:2b: 54:ba:dd:47:b0:7b:c1:66:a1:9c:21:7c:e7:56:63: b7:8a:59:5f:a9:8f:d1:91:2f:7b:df:90:a7:ca:59: b1:1f:2d:6c:9e:88:f3:bf:0d:26:45:36:e8:e4:9e: 29:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DD:F7:3B:B9:C2:2E:EA:59:46:83:A3:13:C2:5F:53:60:9D:E6:D8 X509v3 Authority Key Identifier: keyid:CD:A0:1D:15:7A:F5:B5:BA:05:DE:A9:23:DA:DF:3E:D1:DB:59:C2:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7b:75:16:e8:fa:0c:6c:c6:2a:2d:93:b3:8e:05:b4:27:c8: 1b:0c:2e:89:17:60:75:72:c9:b8:81:af:fc:5c:6a:44:e4:1c: 85:7e:81:3e:f6:fe:53:a9:ae:fb:98:9e:cb:af:f1:d1:18:dc: ea:2b:36:a8:b9:cb:ce:f1:07:09:6f:a4:48:75:1a:2c:63:03: d2:48:39:21:cd:39:97:4c:57:1a:0f:55:37:92:0e:a0:df:40: ee:a6:93:63:4e:52:78:50:da:c6:89:0d:73:cd:78:c6:56:1e: c7:4c:de:aa:ef:a8:9f:25:01:35:90:e9:de:26:48:f4:5b:42: 55:84:f3:62:cc:7f:5b:ac:f2:60:54:6f:1e:35:dd:d3:eb:bd: f6:a6:21:f0:6a:c3:75:bc:91:00:cb:51:bf:57:b4:4a:ad:95: 41:1e:ca:0a:f0:d0:bb:ed:aa:82:5f:51:97:0d:c0:d0:a0:56: 4e:f7:42:d9:2a:93:cd:c9:94:81:67:97:9a:f4:94:63:ec:72: d5:39:c6:83:98:5b:e4:50:46:74:01:b5:8f:a2:2e:13:e4:1f: 81:72:f1:0b:16:b3:f4:78:38:e8:76:44:52:50:65:38:33:49: c4:78:49:80:1f:1c:e6:4d:2e:a0:16:8d:44:59:2c:b2:58:a0: 56:f1:69:76 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUM15hJuF8zSqKd8FjwBmGVii1wS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBMDFEMTU3QUY1QjVCQTA1REVBOTIzREFERjNFRDFE QjU5QzJGQTAeFw0yNjA5MjIxMjMzMDhaFw0yNjA5MjgwOTA5MDhaMDMxMTAvBgNV BAMTKDA0RERGNzNCQjlDMjJFRUE1OTQ2ODNBMzEzQzI1RjUzNjA5REU2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/I8e8QlxbOR9B5XQtphd07k1 zfg68dL/GodubH4kPYXQz1RQIvwPiKI0Va+iIzDOP80LOle3OTLwErhfSFHLMYEe xGOm4RoadeKVYOgw8MviFFz5BTJUAuCN2XDvXWKwe4KEhtN0fOtHVBDYToAUyqDc UG6MH/B0pBHQpqm9dJdGSOz1OXhvUPSH/2vXyjpfbcHPTiuo7PZJIBBP8P+91AZD PAbKZYJclf2aya42gRmRmWmHkzQ1scYlWGx/BxMV139jp0LBRsdU1Ic1lR4oK1S6 3Uewe8FmoZwhfOdWY7eKWV+pj9GRL3vfkKfKWbEfLWyeiPO/DSZFNujknim3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUBN33O7nCLupZRoOjE8JfU2Cd5tgwHwYDVR0j BBgwFoAUzaAdFXr1tboF3qkj2t8+0dtZwvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMDFEQzY5M0QzOUI5Q0NDQkY0Qzg0MDU4MUNGMjk0NDFC Q0NFMDVGNEM2MzNGMzMyM0I3NThBRERCOEE0NDg2LzAvQ0RBMDFEMTU3QUY1QjVC QTA1REVBOTIzREFERjNFRDFEQjU5QzJGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREEwMUQxNTdBRjVCNUJBMDVE RUE5MjNEQURGM0VEMURCNTlDMkZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDAxREM2OTNEMzlCOUNDQ0JGNEM4NDA1ODFDRjI5NDQxQkNDRTA1RjRD NjMzRjMzMjNCNzU4QUREQjhBNDQ4Ni8wL0NEQTAxRDE1N0FGNUI1QkEwNURFQTky M0RBREYzRUQxREI1OUMyRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANe3UW6PoMbMYqLZOzjgW0J8gb DC6JF2B1csm4ga/8XGpE5ByFfoE+9v5Tqa77mJ7Lr/HRGNzqKzaoucvO8QcJb6RI dRosYwPSSDkhzTmXTFcaD1U3kg6g30DuppNjTlJ4UNrGiQ1zzXjGVh7HTN6q76if JQE1kOneJkj0W0JVhPNizH9brPJgVG8eNd3T6732piHwasN1vJEAy1G/V7RKrZVB HsoK8NC77aqCX1GXDcDQoFZO90LZKpPNyZSBZ5ea9JRj7HLVOcaDmFvkUEZ0AbWP oi4T5B+BcvELFrP0eDjodkRSUGU4M0nEeEmAHxzmTS6gFo1EWSyyWKBW8Wl2 -----END CERTIFICATE-----Generated at Fri Sep 25 06:19:30 2026 by rpki-client