$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft File: 2AA949233251849B5F79085FA81406E588FF36E5.mft (raw, json) Hash identifier: rMu3v3muk2HCyncCTR64t3nHFvazIxdu0KRzdKI3d5o= Subject key identifier: 67:F0:46:59:CD:2D:54:6B:09:F1:78:83:1C:46:A2:FE:C8:D6:12:5E Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 Certificate issuer: /CN=2AA949233251849B5F79085FA81406E588FF36E5 Certificate serial: 67879DB936E973529C8AB2EB0A03B46F46A6A28D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft Manifest number: 017C Signing time: Wed 15 Apr 2026 16:09:31 +0000 Manifest this update: Wed 15 Apr 2026 16:04:31 +0000 Manifest next update: Mon 20 Apr 2026 18:56:31 +0000 Files and hashes: 1: 323830333a333736303a3a2f33322d3332203d3e20323639383238.roa (hash: RifkABZsLCmRbyVKtsTZJib9sHbG7NxVmTf/yWidQbI=) 2: 2AA949233251849B5F79085FA81406E588FF36E5.crl (hash: M8D67i8Zyw+v1G2GtHjTHgL2KdgXayp66cMpHG2qFcs=) 3: 34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (hash: uCp0Q9i+9+veJ1b/OCdVe/YrScL0cJtyu9wRI4ruDrM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Apr 2026 18:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:87:9d:b9:36:e9:73:52:9c:8a:b2:eb:0a:03:b4:6f:46:a6:a2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5 Validity Not Before: Apr 15 16:04:31 2026 GMT Not After : Apr 20 18:56:31 2026 GMT Subject: CN=67F04659CD2D546B09F178831C46A2FEC8D6125E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:40:b7:7b:52:3e:ce:af:0f:8a:63:9a:44: d8:2e:45:5c:fc:68:3e:3e:1b:5a:65:09:63:02:ae: 3b:e1:d2:98:42:ff:b1:21:11:6a:e4:62:1d:9f:cc: 15:02:4a:08:12:69:37:7c:32:18:f2:32:d4:05:65: 33:6a:91:89:3e:86:4c:59:47:2d:08:e3:3e:33:fc: 78:b3:2a:48:fd:29:01:69:8c:77:2f:42:e0:f9:94: ae:20:45:69:10:5f:81:21:49:c9:97:00:73:b0:b4: 65:39:98:63:55:f3:66:40:67:40:70:db:e4:0f:66: 3a:76:2a:56:f2:b1:d6:47:03:f0:47:ff:d8:28:a0: 95:5c:d5:3f:fb:14:ba:53:ff:83:1d:92:ff:0c:02: e5:a6:69:8d:85:91:b2:2e:58:50:fe:16:f0:4e:32: 11:10:cf:d9:e9:7b:a3:95:da:67:bd:4a:ab:93:03: bd:8b:1e:1b:1b:3e:7a:8e:a0:bc:3d:87:aa:8c:c3: 9d:c9:29:08:af:4a:17:d0:7e:42:e3:dc:05:6f:f0: e1:da:b5:3b:bf:81:14:ae:8e:6b:2f:36:e1:55:95: 65:0c:71:78:70:38:4f:b3:44:12:d6:bd:c4:1f:1b: f3:8e:1b:fe:92:f0:ca:65:cb:dd:70:25:82:ce:91: 10:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F0:46:59:CD:2D:54:6B:09:F1:78:83:1C:46:A2:FE:C8:D6:12:5E X509v3 Authority Key Identifier: keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a7:6c:cb:f3:44:4a:91:03:34:17:5e:05:a3:72:e9:a0:da: 9d:6b:6c:03:db:34:a1:89:cd:2f:33:5a:ba:09:65:8a:e4:48: 29:27:0c:74:09:3c:81:0c:a8:c7:0b:68:82:05:f9:3d:f4:59: 22:ea:0e:eb:df:c7:14:fc:f6:c5:3a:8b:93:75:83:cf:da:5c: 31:83:29:2a:94:2c:e3:1b:b1:dd:b5:9a:c8:a7:eb:43:47:7b: 50:ef:43:d6:16:05:fb:22:9d:b7:f0:3d:c6:0c:05:4f:1a:a7: a2:20:66:f1:e1:ad:94:24:c2:22:b6:1e:ef:20:2b:67:11:84: e7:f0:bf:b6:5d:2b:03:99:24:4a:b8:5b:a8:e3:70:18:81:4a: f8:00:4b:09:fd:d9:ad:96:70:dd:6e:4d:cb:b5:a2:8b:5d:10: 57:61:4b:67:ff:1b:44:e8:9f:32:3a:14:a0:9c:78:d2:5a:6a: cb:ed:49:51:82:54:ae:8c:51:2a:bf:d4:95:62:11:db:ec:94: 5f:73:e0:34:b8:2d:16:10:29:03:bd:d1:26:50:fe:b1:a8:f1: 32:24:47:12:31:2c:d8:c7:bb:a9:86:cc:88:65:33:9c:06:9c: 38:56:36:5c:24:76:dc:63:3b:15:76:3b:e2:3b:a7:62:49:81: 9a:f1:c0:a2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZ4eduTbpc1KcirLrCgO0b0amoo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBOTQ5MjMzMjUxODQ5QjVGNzkwODVGQTgxNDA2RTU4 OEZGMzZFNTAeFw0yNjA0MTUxNjA0MzFaFw0yNjA0MjAxODU2MzFaMDMxMTAvBgNV BAMTKDY3RjA0NjU5Q0QyRDU0NkIwOUYxNzg4MzFDNDZBMkZFQzhENjEyNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe40C3e1I+zq8PimOaRNguRVz8 aD4+G1plCWMCrjvh0phC/7EhEWrkYh2fzBUCSggSaTd8MhjyMtQFZTNqkYk+hkxZ Ry0I4z4z/HizKkj9KQFpjHcvQuD5lK4gRWkQX4EhScmXAHOwtGU5mGNV82ZAZ0Bw 2+QPZjp2KlbysdZHA/BH/9gooJVc1T/7FLpT/4Mdkv8MAuWmaY2FkbIuWFD+FvBO MhEQz9npe6OV2me9SquTA72LHhsbPnqOoLw9h6qMw53JKQivShfQfkLj3AVv8OHa tTu/gRSujmsvNuFVlWUMcXhwOE+zRBLWvcQfG/OOG/6S8Mply91wJYLOkRAVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZ/BGWc0tVGsJ8XiDHEai/sjWEl4wHwYDVR0j BBgwFoAUKqlJIzJRhJtfeQhfqBQG5Yj/NuUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zOTFGNEMxRkNCREZDOTE4Q0ZCQzgxQTU4Q0JFNDQ2QTBE OTJEM0Q2M0UxMEM4NUREQkIzQ0Y2RUY1RjQ4RkJDLzAvMkFBOTQ5MjMzMjUxODQ5 QjVGNzkwODVGQTgxNDA2RTU4OEZGMzZFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUE5NDkyMzMyNTE4NDlCNUY3 OTA4NUZBODE0MDZFNTg4RkYzNkU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzkxRjRDMUZDQkRGQzkxOENGQkM4MUE1OENCRTQ0NkEwRDkyRDNENjNF MTBDODVEREJCM0NGNkVGNUY0OEZCQy8wLzJBQTk0OTIzMzI1MTg0OUI1Rjc5MDg1 RkE4MTQwNkU1ODhGRjM2RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABp2zL80RKkQM0F14Fo3LpoNqd a2wD2zShic0vM1q6CWWK5EgpJwx0CTyBDKjHC2iCBfk99Fki6g7r38cU/PbFOouT dYPP2lwxgykqlCzjG7HdtZrIp+tDR3tQ70PWFgX7Ip238D3GDAVPGqeiIGbx4a2U JMIith7vICtnEYTn8L+2XSsDmSRKuFuo43AYgUr4AEsJ/dmtlnDdbk3LtaKLXRBX YUtn/xtE6J8yOhSgnHjSWmrL7UlRglSujFEqv9SVYhHb7JRfc+A0uC0WECkDvdEm UP6xqPEyJEcSMSzYx7uphsyIZTOcBpw4VjZcJHbcYzsVdjviO6diSYGa8cCi -----END CERTIFICATE-----Generated at Fri Apr 17 20:41:40 2026 by rpki-client