$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.mft File: 64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.mft (raw, json) Hash identifier: GjM48ekTvgnTD0l9efJE+AhJvgIEnl9/+1ixOU27xFU= Subject key identifier: 44:DC:D1:92:6B:80:3D:A8:1F:73:7C:24:83:97:8D:F1:C4:BF:42:57 Authority key identifier: 64:AD:17:CB:5B:C0:70:8C:93:6D:4B:99:5E:E5:8F:7D:E3:9D:1F:5C Certificate issuer: /CN=64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C Certificate serial: 2767967C6AA9DA4C8BE2A9DE42FAF49DFB3DD981 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.mft Manifest number: 0189 Signing time: Thu 16 Apr 2026 14:07:17 +0000 Manifest this update: Thu 16 Apr 2026 14:02:17 +0000 Manifest next update: Tue 21 Apr 2026 22:11:17 +0000 Files and hashes: 1: 64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.crl (hash: NiewwLoxE297xUtonhF92LMRVX+PrQmZVvM1JMOyHv0=) 2: 34352e3136342e31362e302f32322d3234203d3e20323637363935.roa (hash: oz+2CK+n13iHwXi2FRGxW3J+B4aS4DR4hvKzBhJx8Po=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.crl rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 22:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:67:96:7c:6a:a9:da:4c:8b:e2:a9:de:42:fa:f4:9d:fb:3d:d9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C Validity Not Before: Apr 16 14:02:17 2026 GMT Not After : Apr 21 22:11:17 2026 GMT Subject: CN=44DCD1926B803DA81F737C2483978DF1C4BF4257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:64:5f:1e:ab:45:26:63:e2:cf:8b:62:fe: a3:c8:b1:3b:99:d1:98:66:04:a8:bf:0e:0b:b3:2a: bf:56:52:d5:ff:57:e7:42:2b:77:1a:da:f2:e5:37: 52:43:08:0f:52:b6:f2:88:f8:5b:4d:f2:80:97:e4: 54:ce:74:33:ce:6e:0a:fb:ff:5c:7f:25:1d:d1:21: b5:2b:a1:6f:32:22:37:3a:01:6f:8d:7b:79:b3:71: ad:5c:8f:17:99:51:f0:3d:3f:ad:fd:7e:60:41:72: 45:f3:eb:9c:ec:8f:80:89:e0:a7:3b:42:ec:f8:ce: 38:32:69:0a:19:ca:77:2c:55:f4:65:22:21:96:db: 5a:19:13:09:46:54:51:53:01:4b:e7:55:29:1b:5b: 71:31:c3:71:8b:16:a9:14:64:f1:4c:ab:8c:a0:52: 9b:8f:90:e0:e5:77:7e:45:55:4e:8b:9f:ca:46:71: 42:57:3b:82:38:1b:42:98:3d:30:ae:8a:d2:b1:f4: 5d:01:32:4e:ea:c0:18:c6:88:7e:fb:28:7e:44:69: 09:d1:9c:b8:ce:02:7f:56:af:e8:34:e5:92:45:61: 9f:f2:54:e2:dd:97:e4:fd:3d:5f:27:76:07:76:5b: 4d:43:21:52:02:36:96:55:45:47:c9:bc:f0:02:34: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DC:D1:92:6B:80:3D:A8:1F:73:7C:24:83:97:8D:F1:C4:BF:42:57 X509v3 Authority Key Identifier: keyid:64:AD:17:CB:5B:C0:70:8C:93:6D:4B:99:5E:E5:8F:7D:E3:9D:1F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:76:32:c4:ec:1b:13:81:3a:60:db:0c:98:87:de:ae:56:7c: 2d:65:bf:8f:5f:17:db:ac:f5:fc:ec:22:28:1e:22:81:65:28: d9:a1:d4:c5:64:eb:91:b2:27:6a:9c:b2:ca:65:8f:eb:bf:be: 9d:0e:87:a4:88:83:b4:d4:3c:10:ae:42:e6:c8:ce:5b:95:32: b4:9a:7f:73:6b:4f:ba:26:b7:98:eb:43:93:f4:40:cb:98:62: f3:86:88:17:4d:96:a9:9c:11:9a:33:8f:d8:e8:f7:99:66:ee: 9c:b3:4d:03:bb:b3:17:57:a8:e0:66:51:c6:80:55:24:86:ff: 5a:c1:e2:c1:54:b8:d1:2e:fe:47:10:c6:fb:51:98:10:9c:2a: 5d:47:5c:3e:b4:db:22:30:b2:62:25:d8:e3:19:b0:a7:1e:4f: ea:b0:7c:2c:26:b6:74:ca:55:09:10:32:ea:c9:16:80:03:08: 4d:1f:a6:78:29:35:7c:92:6b:d0:7e:81:e5:e1:a5:ee:ef:42: 20:f1:a3:84:64:fe:c1:75:c2:c7:83:66:3c:b1:ce:11:39:39: 70:5d:dd:fe:1c:8a:34:5e:f9:b3:33:a3:90:60:52:90:52:ed: 23:a2:9d:f1:45:f0:a4:f6:cd:94:68:ea:6f:06:55:7b:77:82: 33:c3:b5:16 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJ2eWfGqp2kyL4qneQvr0nfs92YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRBRDE3Q0I1QkMwNzA4QzkzNkQ0Qjk5NUVFNThGN0RF MzlEMUY1QzAeFw0yNjA0MTYxNDAyMTdaFw0yNjA0MjEyMjExMTdaMDMxMTAvBgNV BAMTKDQ0RENEMTkyNkI4MDNEQTgxRjczN0MyNDgzOTc4REYxQzRCRjQyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq72RfHqtFJmPiz4ti/qPIsTuZ 0ZhmBKi/DguzKr9WUtX/V+dCK3ca2vLlN1JDCA9StvKI+FtN8oCX5FTOdDPObgr7 /1x/JR3RIbUroW8yIjc6AW+Ne3mzca1cjxeZUfA9P639fmBBckXz65zsj4CJ4Kc7 Quz4zjgyaQoZyncsVfRlIiGW21oZEwlGVFFTAUvnVSkbW3Exw3GLFqkUZPFMq4yg UpuPkODld35FVU6Ln8pGcUJXO4I4G0KYPTCuitKx9F0BMk7qwBjGiH77KH5EaQnR nLjOAn9Wr+g05ZJFYZ/yVOLdl+T9PV8ndgd2W01DIVICNpZVRUfJvPACNE19AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQURNzRkmuAPagfc3wkg5eN8cS/QlcwHwYDVR0j BBgwFoAUZK0Xy1vAcIyTbUuZXuWPfeOdH1wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MTczRjcwODg4RDA4RjU4QUM0MjQ3OTg4ODc2NTk4QUJB RTFCRjJGOTBFNjVFRkI0RTYyNjhBNTgwRDI3M0MxLzAvNjRBRDE3Q0I1QkMwNzA4 QzkzNkQ0Qjk5NUVFNThGN0RFMzlEMUY1Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NEFEMTdDQjVCQzA3MDhDOTM2 RDRCOTk1RUU1OEY3REUzOUQxRjVDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDE3M0Y3MDg4OEQwOEY1OEFDNDI0Nzk4ODg3NjU5OEFCQUUxQkYyRjkw RTY1RUZCNEU2MjY4QTU4MEQyNzNDMS8wLzY0QUQxN0NCNUJDMDcwOEM5MzZENEI5 OTVFRTU4RjdERTM5RDFGNUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOdjLE7BsTgTpg2wyYh96uVnwt Zb+PXxfbrPX87CIoHiKBZSjZodTFZOuRsidqnLLKZY/rv76dDoekiIO01DwQrkLm yM5blTK0mn9za0+6JreY60OT9EDLmGLzhogXTZapnBGaM4/Y6PeZZu6cs00Du7MX V6jgZlHGgFUkhv9aweLBVLjRLv5HEMb7UZgQnCpdR1w+tNsiMLJiJdjjGbCnHk/q sHwsJrZ0ylUJEDLqyRaAAwhNH6Z4KTV8kmvQfoHl4aXu70Ig8aOEZP7BdcLHg2Y8 sc4ROTlwXd3+HIo0XvmzM6OQYFKQUu0jop3xRfCk9s2UaOpvBlV7d4Izw7UW -----END CERTIFICATE-----Generated at Fri Apr 17 21:10:59 2026 by rpki-client