$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft File: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft (raw, json) Hash identifier: QYHPd/1vYMO30HBMqAvTKNwp8qj/T1TE761SuimcuuM= Subject key identifier: 00:EE:8A:EF:99:3D:BA:97:D8:F3:C1:66:F0:1B:3A:2D:44:74:0A:61 Authority key identifier: 00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36 Certificate issuer: /CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336 Certificate serial: 4BF379330543AF5453D9D1468E2335E809244B3B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft Manifest number: 017D Signing time: Wed 15 Apr 2026 09:00:12 +0000 Manifest this update: Wed 15 Apr 2026 08:55:12 +0000 Manifest next update: Mon 20 Apr 2026 23:47:12 +0000 Files and hashes: 1: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl (hash: G1TwETnjBSsPR5tU2XAw3G2HnJmfHEVuwd0etgVq51g=) 2: 34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa (hash: 0bUC3ySC4jCELAl7tmSMZ40weK3hv4Gzxv3ntwNuM+s=) 3: 323830333a663161303a3a2f33322d3438203d3e20323637373035.roa (hash: lOlWH3izOIP9jT4nkQr5zu9tgsYS+V0gmQeSBDoe8OE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Apr 2026 23:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f3:79:33:05:43:af:54:53:d9:d1:46:8e:23:35:e8:09:24:4b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336 Validity Not Before: Apr 15 08:55:12 2026 GMT Not After : Apr 20 23:47:12 2026 GMT Subject: CN=00EE8AEF993DBA97D8F3C166F01B3A2D44740A61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:55:44:a9:13:95:85:0a:1a:be:dd:25:cd: e0:0f:4f:a0:d6:39:fb:15:9e:20:b6:50:f0:9e:4a: 1c:e3:f5:8e:a3:5a:3c:1e:72:a1:0f:41:a3:50:53: cd:1b:85:b1:88:84:3e:bb:fd:a4:25:cf:2b:fc:2f: e8:59:b0:fd:a1:89:24:ca:53:32:3a:7e:ad:47:c4: b8:b8:94:41:87:80:6e:b7:67:19:e6:e3:31:64:63: e4:0a:08:15:f4:94:e2:a0:69:ef:89:99:69:b7:bf: 07:60:49:aa:f0:72:6d:59:b3:09:41:ab:5b:3a:ad: eb:d0:4c:23:1c:de:c7:17:01:d6:ab:d5:a0:d0:1a: 5c:10:44:96:4a:97:f4:1e:26:3b:73:ed:28:c1:45: ea:36:36:37:57:ae:6e:61:bb:f8:8f:32:0e:e3:b7: 2a:72:89:ca:10:88:13:b3:ee:1f:8f:65:aa:fc:ac: 37:b6:3c:b7:27:5e:17:ce:a3:ac:6c:12:01:2b:c5: cc:bc:b5:2a:4f:5b:1e:03:cc:b7:a9:36:39:c5:19: 36:28:fd:54:46:0b:a3:0d:58:de:ac:1b:e9:15:47: c6:a7:9e:58:89:6f:0d:aa:4f:24:bf:71:9f:80:bb: 11:a4:0d:a8:da:84:29:ce:76:2b:8c:4a:d8:68:b0: 55:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EE:8A:EF:99:3D:BA:97:D8:F3:C1:66:F0:1B:3A:2D:44:74:0A:61 X509v3 Authority Key Identifier: keyid:00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ac:36:f1:8b:bb:35:16:cf:df:2a:f3:5d:aa:20:3d:f0:0f: d2:5f:54:9b:7b:07:29:1b:5b:9f:05:92:90:86:a8:4c:7d:1d: 59:67:2b:28:4a:5f:21:d4:92:17:17:2b:3c:2d:90:8d:c2:52: 90:60:d9:e4:80:35:37:4a:88:74:d3:d5:28:43:7f:db:76:da: ed:6a:d0:4b:35:0e:06:85:c8:2f:5e:63:70:80:8d:71:a2:e0: 8a:b5:24:8f:4c:ca:1f:23:ed:3d:7f:f9:2b:9a:0a:a0:92:de: 69:83:ed:79:95:d9:82:cb:d0:15:54:d1:a7:63:04:e3:96:6f: 72:1d:a4:97:8e:dd:e3:9b:53:ce:0b:20:19:46:04:c4:4d:54: b3:8e:f3:ea:80:21:9d:f5:3c:1f:f8:27:45:f4:14:d3:9b:db: 03:75:86:61:c3:f3:7f:ff:0a:16:71:d2:9f:91:38:3f:3d:2d: e2:af:93:8a:a9:2f:f7:e5:f1:29:89:4e:b3:3d:34:dd:bc:82: 84:67:c2:64:c0:07:99:dd:12:a1:fe:55:79:0d:29:d8:cf:97: 39:a3:a5:a3:44:07:29:74:a0:86:95:8c:62:f2:d5:e9:53:0f: cd:7e:29:60:dd:2a:e4:66:91:ca:42:8a:31:cb:1c:3b:13:6d: 23:c0:fd:c4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUS/N5MwVDr1RT2dFGjiM16AkkSzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGRjI5NUI5MzlBRDcyNTg5Q0UyNEI3RTRFRDQxRkM1 QzU2QTMzNjAeFw0yNjA0MTUwODU1MTJaFw0yNjA0MjAyMzQ3MTJaMDMxMTAvBgNV BAMTKDAwRUU4QUVGOTkzREJBOTdEOEYzQzE2NkYwMUIzQTJENDQ3NDBBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5J1VEqROVhQoavt0lzeAPT6DW OfsVniC2UPCeShzj9Y6jWjwecqEPQaNQU80bhbGIhD67/aQlzyv8L+hZsP2hiSTK UzI6fq1HxLi4lEGHgG63Zxnm4zFkY+QKCBX0lOKgae+JmWm3vwdgSarwcm1ZswlB q1s6revQTCMc3scXAdar1aDQGlwQRJZKl/QeJjtz7SjBReo2NjdXrm5hu/iPMg7j typyicoQiBOz7h+PZar8rDe2PLcnXhfOo6xsEgErxcy8tSpPWx4DzLepNjnFGTYo /VRGC6MNWN6sG+kVR8annliJbw2qTyS/cZ+AuxGkDajahCnOdiuMSthosFWjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUAO6K75k9upfY88Fm8Bs6LUR0CmEwHwYDVR0j BBgwFoAUAP8pW5Oa1yWJziS35O1B/FxWozYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yQzM1RTlERjJDOUU3QUNEQzU3MzNDNkFEOUQ0QUZENDA3 OEVFNURFQTU1RjlFNjIwQjU0QjRDNTAxQTIxRkNCLzAvMDBGRjI5NUI5MzlBRDcy NTg5Q0UyNEI3RTRFRDQxRkM1QzU2QTMzNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEZGMjk1QjkzOUFENzI1ODlD RTI0QjdFNEVENDFGQzVDNTZBMzM2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkMzNUU5REYyQzlFN0FDREM1NzMzQzZBRDlENEFGRDQwNzhFRTVERUE1 NUY5RTYyMEI1NEI0QzUwMUEyMUZDQi8wLzAwRkYyOTVCOTM5QUQ3MjU4OUNFMjRC N0U0RUQ0MUZDNUM1NkEzMzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrrDbxi7s1Fs/fKvNdqiA98A/S X1SbewcpG1ufBZKQhqhMfR1ZZysoSl8h1JIXFys8LZCNwlKQYNnkgDU3Soh009Uo Q3/bdtrtatBLNQ4GhcgvXmNwgI1xouCKtSSPTMofI+09f/krmgqgkt5pg+15ldmC y9AVVNGnYwTjlm9yHaSXjt3jm1POCyAZRgTETVSzjvPqgCGd9Twf+CdF9BTTm9sD dYZhw/N//woWcdKfkTg/PS3ir5OKqS/35fEpiU6zPTTdvIKEZ8JkwAeZ3RKh/lV5 DSnYz5c5o6WjRAcpdKCGlYxi8tXpUw/Nfilg3SrkZpHKQooxyxw7E20jwP3E -----END CERTIFICATE-----Generated at Sat Apr 18 00:27:57 2026 by rpki-client