$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.mft File: 0CBCF0206A415643408AB138E12C0382581355FF.mft (raw, json) Hash identifier: 6xmhJ+j59Pr6FkVrDJVEp2CEsWDDALu/nn72aOq84qM= Subject key identifier: 4D:06:1D:2C:D2:A8:E9:39:67:1D:D9:F2:19:60:02:63:93:98:AE:07 Authority key identifier: 0C:BC:F0:20:6A:41:56:43:40:8A:B1:38:E1:2C:03:82:58:13:55:FF Certificate issuer: /CN=0CBCF0206A415643408AB138E12C0382581355FF Certificate serial: 0ABF32D5AE5E6122536F29FF43F5FBB71C3D96BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CBCF0206A415643408AB138E12C0382581355FF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.mft Manifest number: 0187 Signing time: Fri 17 Apr 2026 01:19:10 +0000 Manifest this update: Fri 17 Apr 2026 01:14:10 +0000 Manifest next update: Wed 22 Apr 2026 14:22:10 +0000 Files and hashes: 1: 0CBCF0206A415643408AB138E12C0382581355FF.crl (hash: 0PBY6v+UbLG9hI0QvAdkdh0cDhbplmfz2KEUQYr6wpY=) 2: 323830313a31343a343830303a3a2f34382d3438203d3e203139343239.roa (hash: Na0W3SBKj62tQdap1uMHHZCxuFm+cZR3kSu57tXuPDA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.crl rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CBCF0206A415643408AB138E12C0382581355FF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:bf:32:d5:ae:5e:61:22:53:6f:29:ff:43:f5:fb:b7:1c:3d:96:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CBCF0206A415643408AB138E12C0382581355FF Validity Not Before: Apr 17 01:14:10 2026 GMT Not After : Apr 22 14:22:10 2026 GMT Subject: CN=4D061D2CD2A8E939671DD9F2196002639398AE07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:a2:80:a8:7a:fc:d2:66:be:6a:01:83:ff: 10:9a:ec:c4:2b:df:5c:c8:9b:ff:54:16:f9:12:a0: 6f:e2:e6:51:23:37:d1:3a:b8:e8:db:6f:6c:ad:1a: 5f:20:c1:ae:a9:cc:aa:1e:cd:04:c7:7e:bd:14:1b: eb:bb:8b:30:63:09:04:c4:d9:18:4c:d6:50:f5:fe: 21:06:c3:77:8d:23:27:e7:16:72:87:6e:a5:7b:b6: 50:ca:99:aa:5e:51:a2:1f:d5:6e:f4:2d:ba:54:5c: 70:f9:4c:1f:43:fc:1c:88:81:18:56:8f:bd:8c:e5: e7:9f:48:2d:31:22:af:df:8c:a7:f7:8c:84:25:fb: 28:76:b6:c9:fd:47:03:1f:60:18:0d:5d:9a:43:7d: f3:c7:c2:5e:3c:fa:97:d0:7e:80:73:3a:c7:df:86: 05:68:df:2e:64:d1:af:3e:d2:b7:d7:c4:1e:b3:43: f6:13:9a:75:a1:38:83:53:92:32:ce:a4:ff:7a:0a: 96:e4:dc:81:cc:bf:08:08:8a:88:e9:b1:0b:0c:2c: 5f:ef:7e:97:d0:6e:69:f6:8e:ed:50:56:6c:d9:72: da:74:9f:b2:fd:b2:9a:cf:1b:75:b0:10:08:21:c8: 4e:5d:cf:55:67:a4:23:87:cf:7e:1b:ae:3f:b1:42: 65:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:06:1D:2C:D2:A8:E9:39:67:1D:D9:F2:19:60:02:63:93:98:AE:07 X509v3 Authority Key Identifier: keyid:0C:BC:F0:20:6A:41:56:43:40:8A:B1:38:E1:2C:03:82:58:13:55:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CBCF0206A415643408AB138E12C0382581355FF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c6:8e:67:78:57:e6:f7:4f:c0:2e:db:ba:bc:8b:8a:f5:59: b8:ff:98:4c:f4:da:b2:16:55:01:7d:16:b8:fb:42:75:eb:b2: e6:79:45:b9:b9:b4:95:6f:75:19:15:82:b1:24:bf:85:c5:7c: d4:51:56:fa:70:b8:c0:fe:b2:0b:d3:89:b5:3c:55:54:b6:68: 47:dc:43:f4:da:ad:94:5d:51:a6:8c:7b:91:60:2d:a7:8a:7e: 38:bc:38:f1:db:f2:ab:78:9e:f4:c1:3e:1b:d6:dc:f0:51:13: ab:8c:0c:b0:c6:86:77:e3:1e:b7:2e:8c:15:52:ac:17:0c:de: 66:3a:57:65:c1:fa:79:33:b4:5e:40:35:6c:21:f8:72:fc:7b: 68:28:04:7e:45:2c:07:4c:4d:f6:1d:0a:d0:a1:04:e5:1d:8f: 90:76:02:5a:35:22:56:bd:bb:b4:c1:c9:c6:ad:d1:b8:de:fb: fd:94:1e:af:de:bc:97:53:7b:8c:61:d5:7b:32:20:45:26:ab: 31:4f:d7:3e:a4:ef:95:c8:cf:9b:8f:7a:b9:1a:00:63:c8:6e: 37:1a:2c:f5:a5:09:50:05:62:23:9a:aa:5c:0f:16:33:d5:7a: 11:8c:ab:50:88:d1:f4:7c:60:2e:92:6d:1a:c4:56:79:e4:95: 0f:fc:25:1c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCr8y1a5eYSJTbyn/Q/X7txw9lr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENCQ0YwMjA2QTQxNTY0MzQwOEFCMTM4RTEyQzAzODI1 ODEzNTVGRjAeFw0yNjA0MTcwMTE0MTBaFw0yNjA0MjIxNDIyMTBaMDMxMTAvBgNV BAMTKDREMDYxRDJDRDJBOEU5Mzk2NzFERDlGMjE5NjAwMjYzOTM5OEFFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6A6KAqHr80ma+agGD/xCa7MQr 31zIm/9UFvkSoG/i5lEjN9E6uOjbb2ytGl8gwa6pzKoezQTHfr0UG+u7izBjCQTE 2RhM1lD1/iEGw3eNIyfnFnKHbqV7tlDKmapeUaIf1W70LbpUXHD5TB9D/ByIgRhW j72M5eefSC0xIq/fjKf3jIQl+yh2tsn9RwMfYBgNXZpDffPHwl48+pfQfoBzOsff hgVo3y5k0a8+0rfXxB6zQ/YTmnWhOINTkjLOpP96Cpbk3IHMvwgIiojpsQsMLF/v fpfQbmn2ju1QVmzZctp0n7L9sprPG3WwEAghyE5dz1VnpCOHz34brj+xQmUnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTQYdLNKo6TlnHdnyGWACY5OYrgcwHwYDVR0j BBgwFoAUDLzwIGpBVkNAirE44SwDglgTVf8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMzREMUI3ODYzNzYxNzU3QkZGQ0MyNTcyQTBCNzczNEI4 MzlDMUZFQjcyMDA3MDU3M0QzMUFDRDk3MjI1QTY1LzAvMENCQ0YwMjA2QTQxNTY0 MzQwOEFCMTM4RTEyQzAzODI1ODEzNTVGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0JDRjAyMDZBNDE1NjQzNDA4 QUIxMzhFMTJDMDM4MjU4MTM1NUZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTM0RDFCNzg2Mzc2MTc1N0JGRkNDMjU3MkEwQjc3MzRCODM5QzFGRUI3 MjAwNzA1NzNEMzFBQ0Q5NzIyNUE2NS8wLzBDQkNGMDIwNkE0MTU2NDM0MDhBQjEz OEUxMkMwMzgyNTgxMzU1RkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmxo5neFfm90/ALtu6vIuK9Vm4 /5hM9NqyFlUBfRa4+0J167LmeUW5ubSVb3UZFYKxJL+FxXzUUVb6cLjA/rIL04m1 PFVUtmhH3EP02q2UXVGmjHuRYC2nin44vDjx2/KreJ70wT4b1tzwUROrjAywxoZ3 4x63LowVUqwXDN5mOldlwfp5M7ReQDVsIfhy/HtoKAR+RSwHTE32HQrQoQTlHY+Q dgJaNSJWvbu0wcnGrdG43vv9lB6v3ryXU3uMYdV7MiBFJqsxT9c+pO+VyM+bj3q5 GgBjyG43Giz1pQlQBWIjmqpcDxYz1XoRjKtQiNH0fGAukm0axFZ55JUP/CUc -----END CERTIFICATE-----Generated at Fri Apr 17 22:37:00 2026 by rpki-client