$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.mft File: A2B7697124E3E04C84077E519A3633A382D4378C.mft (raw, json) Hash identifier: s3kGYgg+GpcLS4uOb9zpKyYeqrkyP2HraFykebVT5+4= Subject key identifier: D1:9D:42:12:98:99:48:97:31:DA:57:EF:D7:F4:F9:A3:5D:C2:92:EE Authority key identifier: A2:B7:69:71:24:E3:E0:4C:84:07:7E:51:9A:36:33:A3:82:D4:37:8C Certificate issuer: /CN=A2B7697124E3E04C84077E519A3633A382D4378C Certificate serial: 31B5E25E53B3C01BBE24858A9BDD75EEE3BC5A25 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.mft Manifest number: 0122 Signing time: Thu 16 Apr 2026 09:24:40 +0000 Manifest this update: Thu 16 Apr 2026 09:19:40 +0000 Manifest next update: Tue 21 Apr 2026 06:42:40 +0000 Files and hashes: 1: 34352e3137332e36382e302f32322d3234203d3e20323637383037.roa (hash: aN+7ugIZqlbqDxZGpokoCdOUqg/52MaGOm1O6NCEtNU=) 2: 323830333a613036303a3a2f33322d3438203d3e20323637383037.roa (hash: Us/4AjYXrH1J6I7JJfgrxwthZpQH5PGblIT5UEDKY70=) 3: A2B7697124E3E04C84077E519A3633A382D4378C.crl (hash: 85RzEUO4dUfhpHYHn3+kAUazA3PmBcrIJxqJnmTWkYE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.crl rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 06:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b5:e2:5e:53:b3:c0:1b:be:24:85:8a:9b:dd:75:ee:e3:bc:5a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2B7697124E3E04C84077E519A3633A382D4378C Validity Not Before: Apr 16 09:19:40 2026 GMT Not After : Apr 21 06:42:40 2026 GMT Subject: CN=D19D42129899489731DA57EFD7F4F9A35DC292EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:3d:8c:4f:31:9b:42:e6:41:e6:de:6f:e1: 71:67:47:1c:f3:3f:17:63:58:82:0d:ab:4c:40:8c: e5:26:7b:98:43:72:71:d3:14:30:97:04:58:84:04: 4a:8c:32:58:6b:4b:91:e4:9e:5e:f1:15:d1:ae:05: 27:f5:64:dd:ed:32:0a:95:56:c8:d7:df:a7:c5:82: e7:14:6e:d0:32:52:00:7d:b2:0a:c5:81:a6:b8:af: f9:e5:90:6d:a1:a9:d5:b2:a9:6a:a5:59:50:34:8a: 6c:38:f6:5a:c8:5c:ce:a7:1b:e2:27:92:1d:f1:f2: 97:ef:bb:67:59:32:6a:07:19:34:06:86:f4:43:97: b6:d7:58:32:9b:c8:1e:76:f0:11:be:c9:47:85:7a: c4:98:68:df:8a:f9:4d:b4:c6:ce:7a:23:a9:7c:42: e9:ed:b1:50:88:73:c2:65:f7:eb:26:43:2c:8b:53: ca:89:42:47:aa:ba:de:ff:60:61:73:d6:b4:1e:3e: 0a:7a:f8:b1:d8:6f:f0:ff:97:2a:15:97:9f:6c:7f: aa:14:7f:f4:17:85:bd:70:c0:01:9d:29:1e:45:c7: f6:94:1c:6b:8c:ab:93:24:7d:59:2d:ba:f4:96:b0: b9:85:ac:80:e2:a6:56:d3:28:df:2f:10:86:33:1c: be:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9D:42:12:98:99:48:97:31:DA:57:EF:D7:F4:F9:A3:5D:C2:92:EE X509v3 Authority Key Identifier: keyid:A2:B7:69:71:24:E3:E0:4C:84:07:7E:51:9A:36:33:A3:82:D4:37:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:00:8f:c1:9e:ee:42:5a:f7:cc:26:ec:9a:90:c1:43:7d:11: 5b:65:08:a4:52:2b:bf:11:60:97:f8:70:b2:bd:2a:1f:41:96: 83:5f:27:79:f0:af:ea:85:be:44:68:9a:5d:f8:f0:14:05:c8: 7c:0f:19:94:b3:56:1e:71:e8:d3:38:a3:29:37:01:86:4a:53: 0b:7b:e5:c0:19:45:1f:51:b6:ec:3c:09:8a:49:90:52:26:10: 63:bf:8f:a4:46:ae:d8:fa:33:7d:50:dd:b9:e0:dd:5d:9d:c7: 9d:87:3b:58:2d:30:20:0f:12:cb:e5:1b:05:fe:91:1f:44:df: c0:31:80:95:e5:84:74:be:7c:b3:98:44:91:c3:ae:17:b3:6f: 90:b7:21:00:2f:1c:18:a7:be:fc:ea:e2:cb:36:b5:1a:a6:6a: e7:ba:81:52:30:42:91:ef:c5:97:33:b0:6e:1a:15:02:5f:14: e2:4e:fc:c2:a3:70:16:51:38:56:ac:90:74:bb:a4:eb:0b:e2: c2:a4:9b:db:3a:81:84:b0:5f:d3:9a:07:85:ee:30:ec:14:be: b8:93:3a:1d:d5:f2:e9:c7:99:4d:9c:ba:fc:dc:df:84:c0:e7: 66:c7:01:c3:cd:aa:81:20:f6:62:23:b4:df:9a:f0:70:a9:00: 27:54:30:aa -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMbXiXlOzwBu+JIWKm9117uO8WiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJCNzY5NzEyNEUzRTA0Qzg0MDc3RTUxOUEzNjMzQTM4 MkQ0Mzc4QzAeFw0yNjA0MTYwOTE5NDBaFw0yNjA0MjEwNjQyNDBaMDMxMTAvBgNV BAMTKEQxOUQ0MjEyOTg5OTQ4OTczMURBNTdFRkQ3RjRGOUEzNURDMjkyRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDlj2MTzGbQuZB5t5v4XFnRxzz PxdjWIINq0xAjOUme5hDcnHTFDCXBFiEBEqMMlhrS5Hknl7xFdGuBSf1ZN3tMgqV VsjX36fFgucUbtAyUgB9sgrFgaa4r/nlkG2hqdWyqWqlWVA0imw49lrIXM6nG+In kh3x8pfvu2dZMmoHGTQGhvRDl7bXWDKbyB528BG+yUeFesSYaN+K+U20xs56I6l8 QuntsVCIc8Jl9+smQyyLU8qJQkequt7/YGFz1rQePgp6+LHYb/D/lyoVl59sf6oU f/QXhb1wwAGdKR5Fx/aUHGuMq5MkfVktuvSWsLmFrIDiplbTKN8vEIYzHL5nAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0Z1CEpiZSJcx2lfv1/T5o13Cku4wHwYDVR0j BBgwFoAUordpcSTj4EyEB35RmjYzo4LUN4wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wQkYzMkQzN0MxNzY4OTVCNDE3RjA3NjE0NTdFRDZEQzY3 NTdDOTRFM0YxQjhBN0YyQjc1NUNCNzU1QjVEQThELzAvQTJCNzY5NzEyNEUzRTA0 Qzg0MDc3RTUxOUEzNjMzQTM4MkQ0Mzc4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMkI3Njk3MTI0RTNFMDRDODQw NzdFNTE5QTM2MzNBMzgyRDQzNzhDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEJGMzJEMzdDMTc2ODk1QjQxN0YwNzYxNDU3RUQ2REM2NzU3Qzk0RTNG MUI4QTdGMkI3NTVDQjc1NUI1REE4RC8wL0EyQjc2OTcxMjRFM0UwNEM4NDA3N0U1 MTlBMzYzM0EzODJENDM3OEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGAI/Bnu5CWvfMJuyakMFDfRFb ZQikUiu/EWCX+HCyvSofQZaDXyd58K/qhb5EaJpd+PAUBch8DxmUs1YecejTOKMp NwGGSlMLe+XAGUUfUbbsPAmKSZBSJhBjv4+kRq7Y+jN9UN254N1dncedhztYLTAg DxLL5RsF/pEfRN/AMYCV5YR0vnyzmESRw64Xs2+QtyEALxwYp7786uLLNrUapmrn uoFSMEKR78WXM7BuGhUCXxTiTvzCo3AWUThWrJB0u6TrC+LCpJvbOoGEsF/TmgeF 7jDsFL64kzod1fLpx5lNnLr83N+EwOdmxwHDzaqBIPZiI7TfmvBwqQAnVDCq -----END CERTIFICATE-----Generated at Fri Apr 17 23:09:53 2026 by rpki-client