$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft File: DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft (raw, json) Hash identifier: fbQCItVM03eJ2Zo4N34BILADLlLgI+7udDD/wYuX2Gg= Subject key identifier: 79:21:97:3D:0B:B1:F6:04:4E:BD:D9:8F:AA:DD:34:BA:FA:EF:96:97 Authority key identifier: DE:8A:21:D3:81:A2:A8:57:4B:0F:6A:2D:86:54:9E:47:F4:FB:87:D8 Certificate issuer: /CN=DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8 Certificate serial: 6721B17716C294685F87DFF1A68392581B4928E7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft Manifest number: 86 Signing time: Wed 22 Jul 2026 09:11:11 +0000 Manifest this update: Wed 22 Jul 2026 09:06:11 +0000 Manifest next update: Tue 28 Jul 2026 03:06:11 +0000 Files and hashes: 1: 323830313a31653a663830303a3a2f34382d3438203d3e203133343839.roa (hash: SlzPnJ5AL9Ad3rN32w40SC3dtu6ziK56idtD+G1TPA0=) 2: 323830313a31653a663830303a3a2f34382d3438203d3e203237393531.roa (hash: /TWHYacLQ2VcHMhBLiriVERdLXzF8txlA1CLYUcai7c=) 3: DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl (hash: JaMF2r4z57UEpO0i1vKzKqRIeSw5NMaBXjMjSJpGBrk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:21:b1:77:16:c2:94:68:5f:87:df:f1:a6:83:92:58:1b:49:28:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8 Validity Not Before: Jul 22 09:06:11 2026 GMT Not After : Jul 28 03:06:11 2026 GMT Subject: CN=7921973D0BB1F6044EBDD98FAADD34BAFAEF9697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:af:4e:5b:59:89:9e:aa:b8:a5:36:2d:a0: e4:67:67:e0:a2:9f:10:af:19:b8:c3:0a:10:38:ae: 05:68:e1:13:6e:56:e3:bd:95:3d:7b:69:ae:2e:fe: 40:5d:89:4b:dc:ed:5b:5d:50:81:02:5f:6b:09:33: f3:de:cd:b6:80:05:66:8e:49:2b:db:99:b3:be:b6: 1a:d3:f7:5c:0a:53:ec:ad:0c:e5:e6:b7:ad:66:2f: 53:2d:1b:11:d8:05:ab:ce:29:73:f4:d0:de:b5:b7: 0b:d4:eb:de:63:15:5a:ba:2d:ee:2d:2e:ff:67:24: 9d:06:c0:3b:a2:72:90:ad:a2:32:77:88:da:34:4d: 25:71:40:df:e5:44:92:82:d4:21:c3:02:4c:99:a6: d6:0d:d7:ab:05:57:b7:8c:bf:d7:5f:86:8a:ed:3c: 3a:bf:d5:14:4b:1f:1f:18:e3:0a:59:59:25:5b:83: f0:a2:66:85:bc:d7:1b:fd:da:3b:a8:f3:be:5e:7f: ce:bd:83:d9:d8:15:bd:37:fe:14:e2:f3:af:ad:28: 4b:65:aa:5c:8b:22:ca:40:bc:bf:cd:bc:b6:3f:16: 29:ab:54:58:29:22:4f:ce:66:e4:77:f8:31:57:d1: f6:cc:67:75:be:27:96:12:1d:66:d5:51:59:77:7e: 03:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:21:97:3D:0B:B1:F6:04:4E:BD:D9:8F:AA:DD:34:BA:FA:EF:96:97 X509v3 Authority Key Identifier: keyid:DE:8A:21:D3:81:A2:A8:57:4B:0F:6A:2D:86:54:9E:47:F4:FB:87:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d8:3f:74:61:76:63:bb:fc:62:8b:4f:ff:4a:36:3a:e8:47: 53:b8:29:d0:15:eb:74:36:7f:8e:85:b5:23:3f:17:4a:97:b2: 53:d6:87:f1:7e:02:27:af:a7:35:c6:d7:cc:8a:9f:6a:fa:3c: 7b:bb:a3:99:13:88:d1:88:8c:d4:51:49:65:3f:4e:21:64:0b: ad:42:02:02:d2:5a:2f:c5:b5:d5:a6:b8:ef:14:d2:83:50:40: 43:87:a0:85:79:21:66:55:d6:4a:1b:29:01:fc:c7:ed:05:5a: 65:84:eb:c8:ff:06:29:5c:5f:7f:4c:3e:6f:98:61:46:12:6f: c6:e1:61:0a:42:db:d9:71:71:e3:00:f6:53:ed:70:aa:ff:d9: df:f0:18:62:f9:1c:46:31:32:c2:92:d6:7a:f1:ea:85:c8:4d: 95:39:b4:b0:df:a6:0c:26:58:f0:29:6f:3a:4c:24:4c:e9:95: 49:93:36:1c:9e:7b:28:0a:85:1f:6a:e0:49:c8:8b:67:f9:c2: 49:18:fa:49:a5:bd:7c:0b:28:1b:34:31:19:43:ac:0d:f7:55: 37:f2:9f:0a:d4:e0:09:d0:46:3d:d0:66:4f:19:31:41:70:bf: e2:1d:bf:d5:a1:47:b2:ef:f9:67:eb:34:cc:31:4a:4b:72:9d: a4:3a:f4:db -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZyGxdxbClGhfh9/xpoOSWBtJKOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4QTIxRDM4MUEyQTg1NzRCMEY2QTJEODY1NDlFNDdG NEZCODdEODAeFw0yNjA3MjIwOTA2MTFaFw0yNjA3MjgwMzA2MTFaMDMxMTAvBgNV BAMTKDc5MjE5NzNEMEJCMUY2MDQ0RUJERDk4RkFBREQzNEJBRkFFRjk2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwla9OW1mJnqq4pTYtoORnZ+Ci nxCvGbjDChA4rgVo4RNuVuO9lT17aa4u/kBdiUvc7VtdUIECX2sJM/PezbaABWaO SSvbmbO+thrT91wKU+ytDOXmt61mL1MtGxHYBavOKXP00N61twvU695jFVq6Le4t Lv9nJJ0GwDuicpCtojJ3iNo0TSVxQN/lRJKC1CHDAkyZptYN16sFV7eMv9dfhort PDq/1RRLHx8Y4wpZWSVbg/CiZoW81xv92juo875ef869g9nYFb03/hTi86+tKEtl qlyLIspAvL/NvLY/FimrVFgpIk/OZuR3+DFX0fbMZ3W+J5YSHWbVUVl3fgPfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUeSGXPQux9gROvdmPqt00uvrvlpcwHwYDVR0j BBgwFoAU3ooh04GiqFdLD2othlSeR/T7h9gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENjBEODdBQ0Q3Q0MxRDhGRjhBNTcxRUMzNUM4MTE1MDhF REJBNTAwQTk3MDM5QzgxRjUyRUMxRUY3M0RFNTFCLzAvREU4QTIxRDM4MUEyQTg1 NzRCMEY2QTJEODY1NDlFNDdGNEZCODdEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERThBMjFEMzgxQTJBODU3NEIw RjZBMkQ4NjU0OUU0N0Y0RkI4N0Q4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDYwRDg3QUNEN0NDMUQ4RkY4QTU3MUVDMzVDODExNTA4RURCQTUwMEE5 NzAzOUM4MUY1MkVDMUVGNzNERTUxQi8wL0RFOEEyMUQzODFBMkE4NTc0QjBGNkEy RDg2NTQ5RTQ3RjRGQjg3RDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAE2D90YXZju/xii0//SjY66EdT uCnQFet0Nn+OhbUjPxdKl7JT1ofxfgInr6c1xtfMip9q+jx7u6OZE4jRiIzUUUll P04hZAutQgIC0lovxbXVprjvFNKDUEBDh6CFeSFmVdZKGykB/MftBVplhOvI/wYp XF9/TD5vmGFGEm/G4WEKQtvZcXHjAPZT7XCq/9nf8Bhi+RxGMTLCktZ68eqFyE2V ObSw36YMJljwKW86TCRM6ZVJkzYcnnsoCoUfauBJyItn+cJJGPpJpb18CygbNDEZ Q6wN91U38p8K1OAJ0EY90GZPGTFBcL/iHb/VoUey7/ln6zTMMUpLcp2kOvTb -----END CERTIFICATE-----Generated at Fri Jul 24 17:42:29 2026 by rpki-client