$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft File: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft (raw, json) Hash identifier: VXV657lkzUFOJ0qKKefQTPWWVnfCNR8sDYEzq5llQ5U= Subject key identifier: F4:C5:64:DF:69:EC:F8:9A:97:21:51:4A:50:A3:26:0E:C1:BD:D9:CF Authority key identifier: 2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA Certificate issuer: /CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA Certificate serial: 7D0C29DEB7A71BC87F8EE9C66B8A27684828D7B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft Manifest number: 0189 Signing time: Thu 16 Apr 2026 15:53:18 +0000 Manifest this update: Thu 16 Apr 2026 15:48:18 +0000 Manifest next update: Mon 20 Apr 2026 22:49:18 +0000 Files and hashes: 1: 3137392e302e39362e302f32322d3234203d3e20323731383736.roa (hash: 2RY99k5r4m7LTiiAEglPIkVdsaJV7PELr5NUpSbrO5E=) 2: 323830333a616331303a3a2f33322d3332203d3e20323731383736.roa (hash: RinAQGqkXRV26MCQom++5ZvzDcuNbvW//nd+nedLhQ0=) 3: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl (hash: YIcu4npX6Afh0DwUd4jpiSCEoOGTmcRQLplFgJuI7lQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Apr 2026 22:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0c:29:de:b7:a7:1b:c8:7f:8e:e9:c6:6b:8a:27:68:48:28:d7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA Validity Not Before: Apr 16 15:48:18 2026 GMT Not After : Apr 20 22:49:18 2026 GMT Subject: CN=F4C564DF69ECF89A9721514A50A3260EC1BDD9CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:be:e5:e9:cd:6b:25:0c:68:d7:7c:53:49:ce: 5c:d9:9a:8b:45:58:04:51:43:d7:f1:20:b1:a3:f5: 29:90:4d:c6:ac:9a:75:ef:e0:41:5b:b8:a4:84:70: 58:b0:d1:c0:79:b1:92:ee:33:dd:0f:68:18:b0:fe: 22:4c:21:00:ba:4d:a7:61:63:aa:d3:c2:94:35:f2: f7:d0:ec:51:d5:0e:ac:94:96:a2:00:db:dd:db:d4: ba:3a:e6:dd:65:f8:79:e3:f9:14:24:0e:fa:02:42: 5d:6f:c8:eb:bc:d3:38:94:36:46:02:b7:1f:5a:97: d9:68:fd:0b:98:eb:74:4a:70:3c:3d:b2:78:50:c4: 4a:f7:86:15:7c:52:37:2c:25:81:ee:cc:f9:f8:1b: 32:60:17:88:5b:d4:61:02:1c:e0:6a:75:35:1b:5a: ae:c5:df:8f:4a:f7:65:16:89:af:69:11:69:1c:e6: 4e:4e:bf:0e:0c:c7:8f:65:fd:89:6c:c6:cf:f2:ac: d6:b4:3c:e0:af:fc:82:ef:c8:18:12:b4:c7:23:d1: 6d:68:24:92:a5:d4:44:8c:59:7c:d9:88:3a:fa:f0: fa:44:af:bc:ae:1e:72:ce:71:f9:df:62:c2:f3:4e: 00:77:84:3a:b8:ee:2b:48:1f:13:bc:30:8e:fd:59: 2f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C5:64:DF:69:EC:F8:9A:97:21:51:4A:50:A3:26:0E:C1:BD:D9:CF X509v3 Authority Key Identifier: keyid:2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7b:1c:b9:a6:ff:c8:36:9c:24:3d:00:76:ad:ae:02:a9:a7: 33:6d:e7:50:13:f7:ae:46:cf:ef:10:12:c2:20:04:83:ba:8b: db:5d:69:ca:f1:ed:a4:13:b6:43:28:a9:04:b0:6e:db:b4:24: 2f:b3:b8:15:12:6c:98:e7:de:fa:ae:2a:ea:43:24:79:d6:ec: 56:de:bc:14:43:dd:d8:04:2b:68:a6:39:70:05:96:4c:62:08: 62:e7:aa:ae:4e:fd:9a:01:6c:ca:07:c2:9f:79:e6:c8:64:00: 9f:e0:5e:33:af:a0:7e:e1:49:3e:e1:19:fc:19:9b:8f:5d:08: 0f:e3:00:ab:75:fc:50:3c:74:f8:b6:89:ef:2e:d8:8e:c8:c9: a9:cf:24:8a:1e:aa:94:95:4b:46:4e:75:66:3f:4a:cd:ab:88: ba:ce:98:7c:19:fd:e8:49:b7:35:b9:02:9e:cc:92:bf:e0:29: f4:99:8c:50:cb:58:34:2f:46:67:42:38:a9:76:ae:48:5a:5f: 86:b0:60:09:6b:76:8b:7f:3d:07:13:95:db:4d:ca:bd:e4:41: ad:b6:30:50:e9:f1:70:14:cf:53:fa:a4:78:87:fe:2c:46:04: fb:ea:8b:55:d7:5a:0b:49:b1:ea:17:a9:c6:7e:6f:d1:da:d0: 01:5a:ac:43 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfQwp3renG8h/junGa4onaEgo17UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI4NjIwQUNFQTg4NDI0OTU2ODU1MDJDMkRENjU5QTQ0 QkRBQUFGQTAeFw0yNjA0MTYxNTQ4MThaFw0yNjA0MjAyMjQ5MThaMDMxMTAvBgNV BAMTKEY0QzU2NERGNjlFQ0Y4OUE5NzIxNTE0QTUwQTMyNjBFQzFCREQ5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPvuXpzWslDGjXfFNJzlzZmotF WARRQ9fxILGj9SmQTcasmnXv4EFbuKSEcFiw0cB5sZLuM90PaBiw/iJMIQC6Tadh Y6rTwpQ18vfQ7FHVDqyUlqIA293b1Lo65t1l+Hnj+RQkDvoCQl1vyOu80ziUNkYC tx9al9lo/QuY63RKcDw9snhQxEr3hhV8UjcsJYHuzPn4GzJgF4hb1GECHOBqdTUb Wq7F349K92UWia9pEWkc5k5Ovw4Mx49l/Ylsxs/yrNa0POCv/ILvyBgStMcj0W1o JJKl1ESMWXzZiDr68PpEr7yuHnLOcfnfYsLzTgB3hDq47itIHxO8MI79WS8rAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU9MVk32ns+JqXIVFKUKMmDsG92c8wHwYDVR0j BBgwFoAUK4YgrOqIQklWhVAsLdZZpEvaqvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRDExMjc2ODM1Mjk0RUFFNTMwQzc4QzQ3MTk2Q0ZGMzBD QTRCQjA0NTU3QzY4Rjg5RTQ0M0NGMzhGNUI2NjBDLzAvMkI4NjIwQUNFQTg4NDI0 OTU2ODU1MDJDMkRENjU5QTQ0QkRBQUFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjg2MjBBQ0VBODg0MjQ5NTY4 NTUwMkMyREQ2NTlBNDRCREFBQUZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUQxMTI3NjgzNTI5NEVBRTUzMEM3OEM0NzE5NkNGRjMwQ0E0QkIwNDU1 N0M2OEY4OUU0NDNDRjM4RjVCNjYwQy8wLzJCODYyMEFDRUE4ODQyNDk1Njg1NTAy QzJERDY1OUE0NEJEQUFBRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSexy5pv/INpwkPQB2ra4Cqacz bedQE/euRs/vEBLCIASDuovbXWnK8e2kE7ZDKKkEsG7btCQvs7gVEmyY5976rirq QyR51uxW3rwUQ93YBCtopjlwBZZMYghi56quTv2aAWzKB8KfeebIZACf4F4zr6B+ 4Uk+4Rn8GZuPXQgP4wCrdfxQPHT4tonvLtiOyMmpzySKHqqUlUtGTnVmP0rNq4i6 zph8Gf3oSbc1uQKezJK/4Cn0mYxQy1g0L0ZnQjipdq5IWl+GsGAJa3aLfz0HE5Xb Tcq95EGttjBQ6fFwFM9T+qR4h/4sRgT76otV11oLSbHqF6nGfm/R2tABWqxD -----END CERTIFICATE-----Generated at Fri Apr 17 21:11:03 2026 by rpki-client