$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft File: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft (raw, json) Hash identifier: cWBdB3npLi/KW6tiiyNt0UONnCTxyOB1NbT/k7Xn+v0= Subject key identifier: D0:94:0D:6E:E8:04:A6:B5:F8:2A:DB:48:5A:A4:8F:2A:C0:2C:9A:FF Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A Certificate issuer: /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Certificate serial: 1AF0773D75D765D99FD312D0F2116B3099D88C7A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft Manifest number: 01A9 Signing time: Wed 22 Jul 2026 17:46:45 +0000 Manifest this update: Wed 22 Jul 2026 17:41:45 +0000 Manifest next update: Tue 28 Jul 2026 00:26:45 +0000 Files and hashes: 1: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl (hash: bGE/PxpriPux71cOX51VkS9V7dHXQ/JE/ZoBOqT+qS0=) 2: 323830333a333031303a3a2f33322d3332203d3e20323731383038.roa (hash: ycgTaa6XtkZ44he6da0OLX1fdjnjoEwGBmaH4AloShg=) 3: 3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa (hash: xGM+NbHWopBvvPH46YQ4xiS44h2wG95TA1HWO6+z76w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 00:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f0:77:3d:75:d7:65:d9:9f:d3:12:d0:f2:11:6b:30:99:d8:8c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Validity Not Before: Jul 22 17:41:45 2026 GMT Not After : Jul 28 00:26:45 2026 GMT Subject: CN=D0940D6EE804A6B5F82ADB485AA48F2AC02C9AFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:34:93:0b:6f:1d:84:6f:2f:d3:99:4f:42:f3: 17:00:98:85:4d:e7:88:ca:0d:2b:7f:34:64:42:78: 4c:a0:f8:3f:59:e2:42:a8:79:bf:a3:fe:19:e3:54: aa:a7:4f:ba:23:1f:57:8d:91:03:c6:09:8a:05:bb: 26:44:8a:93:b6:fc:2c:d9:8e:40:a4:25:a0:31:c8: ff:b4:8a:03:15:4a:e7:24:92:e2:c2:de:b8:2c:0b: 5d:70:c4:40:b8:bc:3b:08:e4:27:e3:f4:bd:b4:03: 29:5b:0a:b3:4f:b6:a7:b5:8d:ca:70:59:2e:63:37: 26:de:93:10:c0:40:db:19:3a:bf:cf:91:bc:ec:b5: cb:a5:63:f4:f5:fe:98:4b:82:1b:4e:0a:b5:26:65: 67:d2:c8:38:1d:29:d2:27:12:1a:14:e9:01:3d:77: f3:2a:ed:8b:5b:f3:f4:8f:07:55:b2:7a:62:c0:5a: a3:4d:b3:98:1f:22:9b:b9:20:bd:41:0c:61:e5:06: da:13:4b:11:cc:36:84:85:a2:53:db:44:55:98:6c: a0:45:cc:f0:59:ba:03:71:4b:75:29:39:c0:97:04: 8b:11:b8:e1:f3:17:5e:1e:3a:7d:ee:35:c5:51:8a: ec:90:d3:65:1e:fa:31:3a:ab:52:db:63:f8:70:34: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:94:0D:6E:E8:04:A6:B5:F8:2A:DB:48:5A:A4:8F:2A:C0:2C:9A:FF X509v3 Authority Key Identifier: keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:71:42:5d:8a:ce:41:ae:51:21:92:51:90:11:85:de:4c:a4: 9e:1c:f1:82:98:a1:95:c3:83:9d:7c:69:c0:04:bb:c2:a0:d7: 49:aa:61:d6:de:b0:41:c1:4c:87:95:89:ec:21:a9:85:db:22: 3d:a6:68:b1:8d:db:4d:88:28:61:c4:6e:2f:04:8b:b0:5a:c8: 19:48:27:6e:a5:19:1a:c6:76:c2:56:8c:49:d6:8a:4b:85:1f: f8:b8:3a:4e:0a:7e:0d:49:ef:f2:f7:b2:09:f6:31:17:20:8d: 81:ae:4e:ba:99:29:94:98:07:57:d8:1f:6c:e6:b0:f4:18:7a: ae:54:30:35:11:29:46:87:93:a5:d3:8d:e1:8d:08:af:eb:96: c0:f2:49:2e:ea:75:0b:01:19:84:e4:ee:ae:22:bc:14:35:ba: 36:79:89:58:0d:2b:6f:bb:98:8a:db:03:25:35:3a:f0:ff:fc: 9c:b7:63:40:bc:a3:85:d5:24:a6:f6:d3:84:cf:15:e3:04:a7: 5b:28:ed:0d:d9:93:71:c0:9d:7e:63:8f:9b:23:fa:af:d7:eb: ff:bd:46:54:a3:45:f9:63:2c:ee:b9:4a:80:1a:c2:ce:b8:ce: 70:29:e9:34:f5:68:e9:13:05:f6:aa:1f:2b:68:3d:d7:97:18: a0:e0:b4:eb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGvB3PXXXZdmf0xLQ8hFrMJnYjHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ1QUZCQjlERDVFRjZGQjc5NTlBRjc4NENBMzYyRjFG QTA4RDIwQTAeFw0yNjA3MjIxNzQxNDVaFw0yNjA3MjgwMDI2NDVaMDMxMTAvBgNV BAMTKEQwOTQwRDZFRTgwNEE2QjVGODJBREI0ODVBQTQ4RjJBQzAyQzlBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNJMLbx2Eby/TmU9C8xcAmIVN 54jKDSt/NGRCeEyg+D9Z4kKoeb+j/hnjVKqnT7ojH1eNkQPGCYoFuyZEipO2/CzZ jkCkJaAxyP+0igMVSuckkuLC3rgsC11wxEC4vDsI5Cfj9L20AylbCrNPtqe1jcpw WS5jNybekxDAQNsZOr/PkbzstculY/T1/phLghtOCrUmZWfSyDgdKdInEhoU6QE9 d/Mq7Ytb8/SPB1WyemLAWqNNs5gfIpu5IL1BDGHlBtoTSxHMNoSFolPbRFWYbKBF zPBZugNxS3UpOcCXBIsRuOHzF14eOn3uNcVRiuyQ02Ue+jE6q1LbY/hwNNvhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0JQNbugEprX4KttIWqSPKsAsmv8wHwYDVR0j BBgwFoAUnVr7ud1e9vt5Wa94TKNi8foI0gowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FQTVDOEU0RDUzQ0UyNjU0RUZDMTcyMjUxRjk0OTJGQjY0 NzkxM0I2MzRGODMzMjY5N0I2N0FDQUUzRTQ3MUMzLzAvOUQ1QUZCQjlERDVFRjZG Qjc5NTlBRjc4NENBMzYyRjFGQTA4RDIwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDVBRkJCOURENUVGNkZCNzk1 OUFGNzg0Q0EzNjJGMUZBMDhEMjBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRUE1QzhFNEQ1M0NFMjY1NEVGQzE3MjI1MUY5NDkyRkI2NDc5MTNCNjM0 RjgzMzI2OTdCNjdBQ0FFM0U0NzFDMy8wLzlENUFGQkI5REQ1RUY2RkI3OTU5QUY3 ODRDQTM2MkYxRkEwOEQyMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMcUJdis5BrlEhklGQEYXeTKSe HPGCmKGVw4OdfGnABLvCoNdJqmHW3rBBwUyHlYnsIamF2yI9pmixjdtNiChhxG4v BIuwWsgZSCdupRkaxnbCVoxJ1opLhR/4uDpOCn4NSe/y97IJ9jEXII2Brk66mSmU mAdX2B9s5rD0GHquVDA1ESlGh5Ol043hjQiv65bA8kku6nULARmE5O6uIrwUNbo2 eYlYDStvu5iK2wMlNTrw//yct2NAvKOF1SSm9tOEzxXjBKdbKO0N2ZNxwJ1+Y4+b I/qv1+v/vUZUo0X5YyzuuUqAGsLOuM5wKek09WjpEwX2qh8raD3Xlxig4LTr -----END CERTIFICATE-----Generated at Sat Jul 25 00:42:13 2026 by rpki-client