$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft File: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft (raw, json) Hash identifier: nXruqKp4Hzw+Hsr/5VZfJQbDYViC7iUhy6/muzQDkoY= Subject key identifier: 8E:56:4C:A7:F8:A5:FD:5B:24:BF:33:DD:3B:0D:5C:28:C1:32:98:5D Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A Certificate issuer: /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Certificate serial: 36BE789E8686E2AA5444126C545F5A3A5943DA8F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft Manifest number: 01D1 Signing time: Thu 15 Oct 2026 09:26:41 +0000 Manifest this update: Thu 15 Oct 2026 09:21:41 +0000 Manifest next update: Tue 20 Oct 2026 03:08:41 +0000 Files and hashes: 1: 3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa (hash: xGM+NbHWopBvvPH46YQ4xiS44h2wG95TA1HWO6+z76w=) 2: 323830333a333031303a3a2f33322d3438203d3e20323731383038.roa (hash: QWz0+n/ad69Wco3gy1gw1Q1zuepxx0eFx0sCwdvdyw4=) 3: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl (hash: 2pWOnl3WmEVS0ro5Jzgs+dNZEpqq2YDrxLzUKAfM8h4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 19 Oct 2026 12:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:be:78:9e:86:86:e2:aa:54:44:12:6c:54:5f:5a:3a:59:43:da:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Validity Not Before: Oct 15 09:21:41 2026 GMT Not After : Oct 20 03:08:41 2026 GMT Subject: CN=8E564CA7F8A5FD5B24BF33DD3B0D5C28C132985D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:e5:98:b6:54:5e:e6:0a:f9:48:e0:af:f4: 3a:d2:df:67:3a:20:37:ca:da:c3:18:16:aa:ef:62: 36:30:76:ac:00:ff:01:17:29:ec:b7:3c:ea:24:91: 4b:cc:c3:9d:46:58:83:44:16:82:22:3d:4c:25:66: 22:81:e2:6e:5e:eb:6a:08:f6:b8:fc:1c:92:93:01: 37:fe:b3:58:22:2f:11:ff:69:99:67:a9:f3:49:b7: 82:8a:5f:98:be:c3:d0:c9:87:4b:63:0b:6f:91:cf: 39:f6:65:c7:f1:fd:ea:bf:d7:05:38:64:1a:ac:0c: 53:e0:e5:0e:c1:a9:e6:6a:53:10:f6:cf:02:d9:d4: ec:56:27:b8:51:8e:3e:fb:73:11:78:04:22:64:74: 71:2e:59:57:9f:ed:f6:bb:82:65:8a:1a:c7:39:46: 30:dc:b0:ce:1e:32:ad:00:34:3f:0b:63:de:e7:85: b3:aa:a4:f1:53:1a:59:db:55:45:c2:b8:27:59:1a: 2a:c4:f3:5f:bc:09:67:21:65:24:48:5a:96:0f:9a: 9c:79:4b:7f:06:08:96:7c:bc:94:f7:60:98:0e:eb: ff:29:a6:9d:bc:f1:00:75:a7:50:27:15:b4:06:51: 24:ee:dc:71:6f:db:ab:e7:c0:e8:60:f7:a8:20:91: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:56:4C:A7:F8:A5:FD:5B:24:BF:33:DD:3B:0D:5C:28:C1:32:98:5D X509v3 Authority Key Identifier: keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:12:43:80:0f:28:76:99:0c:75:0f:cd:d7:ec:f3:2d:7e:62: 17:d4:e2:20:ed:10:e0:7b:9c:fc:9b:2e:3e:1f:b8:61:d5:3e: 65:99:4e:12:18:eb:17:52:b3:12:f3:f0:da:03:c0:55:17:a3: d5:8c:65:89:8c:6d:28:7a:67:e5:68:e4:b8:e7:81:9e:f2:83: 76:36:06:2d:01:59:3d:6f:22:7c:c8:ce:d5:a8:f7:7f:da:61: 8b:be:33:95:b9:fc:93:9b:00:66:c3:00:b1:d3:4a:13:21:24: 53:36:99:37:96:d5:de:d7:82:d3:6a:38:0b:ac:15:01:bf:c4: 5c:c7:5c:30:57:b1:8d:c1:99:2f:9f:e6:6a:38:ae:7f:8b:32: a7:bd:1b:9d:40:57:96:a3:8b:e8:af:58:f6:28:f0:ae:a8:bf: 66:f8:3b:b3:f4:96:78:93:6f:a4:41:63:36:d3:97:0f:91:13: b9:50:b1:b8:e6:d3:81:21:04:6c:57:4e:53:f7:1f:b4:81:a0: b4:f9:ea:4f:92:d1:0b:66:b0:74:77:70:3c:6f:41:2a:68:ad: e1:9e:bb:79:01:90:7a:dc:6c:16:01:34:7e:92:eb:0f:16:eb: 50:6e:3f:7e:88:2a:1a:d5:1e:48:a3:7d:1f:aa:0f:c7:ba:43: d4:16:ec:bb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNr54noaG4qpURBJsVF9aOllD2o8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ1QUZCQjlERDVFRjZGQjc5NTlBRjc4NENBMzYyRjFG QTA4RDIwQTAeFw0yNjEwMTUwOTIxNDFaFw0yNjEwMjAwMzA4NDFaMDMxMTAvBgNV BAMTKDhFNTY0Q0E3RjhBNUZENUIyNEJGMzNERDNCMEQ1QzI4QzEzMjk4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNuWYtlRe5gr5SOCv9DrS32c6 IDfK2sMYFqrvYjYwdqwA/wEXKey3POokkUvMw51GWINEFoIiPUwlZiKB4m5e62oI 9rj8HJKTATf+s1giLxH/aZlnqfNJt4KKX5i+w9DJh0tjC2+Rzzn2Zcfx/eq/1wU4 ZBqsDFPg5Q7BqeZqUxD2zwLZ1OxWJ7hRjj77cxF4BCJkdHEuWVef7fa7gmWKGsc5 RjDcsM4eMq0AND8LY97nhbOqpPFTGlnbVUXCuCdZGirE81+8CWchZSRIWpYPmpx5 S38GCJZ8vJT3YJgO6/8ppp288QB1p1AnFbQGUSTu3HFv26vnwOhg96ggkXA9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjlZMp/il/VskvzPdOw1cKMEymF0wHwYDVR0j BBgwFoAUnVr7ud1e9vt5Wa94TKNi8foI0gowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FQTVDOEU0RDUzQ0UyNjU0RUZDMTcyMjUxRjk0OTJGQjY0 NzkxM0I2MzRGODMzMjY5N0I2N0FDQUUzRTQ3MUMzLzAvOUQ1QUZCQjlERDVFRjZG Qjc5NTlBRjc4NENBMzYyRjFGQTA4RDIwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDVBRkJCOURENUVGNkZCNzk1 OUFGNzg0Q0EzNjJGMUZBMDhEMjBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRUE1QzhFNEQ1M0NFMjY1NEVGQzE3MjI1MUY5NDkyRkI2NDc5MTNCNjM0 RjgzMzI2OTdCNjdBQ0FFM0U0NzFDMy8wLzlENUFGQkI5REQ1RUY2RkI3OTU5QUY3 ODRDQTM2MkYxRkEwOEQyMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArEkOADyh2mQx1D83X7PMtfmIX 1OIg7RDge5z8my4+H7hh1T5lmU4SGOsXUrMS8/DaA8BVF6PVjGWJjG0oemflaOS4 54Ge8oN2NgYtAVk9byJ8yM7VqPd/2mGLvjOVufyTmwBmwwCx00oTISRTNpk3ltXe 14LTajgLrBUBv8Rcx1wwV7GNwZkvn+ZqOK5/izKnvRudQFeWo4vor1j2KPCuqL9m +Duz9JZ4k2+kQWM205cPkRO5ULG45tOBIQRsV05T9x+0gaC0+epPktELZrB0d3A8 b0EqaK3hnrt5AZB63GwWATR+kusPFutQbj9+iCoa1R5Io30fqg/HukPUFuy7 -----END CERTIFICATE-----Generated at Thu Oct 15 14:33:26 2026 by rpki-client