$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft File: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json) Hash identifier: Tv/odHxvYothVIjw8pzxJbIb/E2CccT4ToY71CopgRY= Subject key identifier: B7:4A:FF:C3:8E:39:0A:18:32:D9:6B:29:1C:BD:AA:B0:69:5B:FE:6F Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 Certificate issuer: /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Certificate serial: 418AB09D65C501E390E936D2EAE45C8525ADF5F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft Manifest number: 017F Signing time: Fri 17 Apr 2026 06:48:01 +0000 Manifest this update: Fri 17 Apr 2026 06:43:01 +0000 Manifest next update: Wed 22 Apr 2026 07:17:01 +0000 Files and hashes: 1: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: Um86cEkZc1cblKMuUA3/7tQwstJEkeehuPwQs3wj8OI=) 2: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: 4LFf4uRlMxMf2oudTQtCgNr/ddYwiQolDdMBxGwEJcg=) 3: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: c52g4l37/Xwh2jRlAHpa3W6MAiSe9jRBQaqQWISmOvo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8a:b0:9d:65:c5:01:e3:90:e9:36:d2:ea:e4:5c:85:25:ad:f5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Validity Not Before: Apr 17 06:43:01 2026 GMT Not After : Apr 22 07:17:01 2026 GMT Subject: CN=B74AFFC38E390A1832D96B291CBDAAB0695BFE6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3f:be:71:34:02:f4:52:6d:57:27:f8:b4:4d: 14:21:53:e7:15:54:e7:25:18:98:df:05:88:2f:0d: d1:d5:8a:90:21:a2:dd:c2:f7:8e:28:87:8c:4b:92: 0c:23:a5:a1:53:14:a4:3e:35:01:1a:06:54:45:fd: 89:82:b4:e2:f6:bf:a8:57:1f:d2:f7:72:31:e2:f1: f9:0c:b5:a4:97:1e:82:f3:dc:6b:6a:14:7c:5e:bf: 84:c8:b9:54:da:8c:1c:c5:55:ea:14:f7:36:72:62: 7f:8b:d7:aa:b5:ea:e1:4d:b9:fa:1d:63:4c:be:28: 59:79:c0:0c:81:cc:77:9d:cb:42:b8:7d:38:2c:8f: 5a:c4:af:84:44:8b:fa:85:16:5b:7c:0a:c6:bc:b5: cc:ed:8d:0f:39:68:c7:d5:fe:b9:0d:eb:22:4b:7f: 4c:3a:a4:79:a0:04:a7:66:3c:1c:9b:c6:75:02:5b: 02:ef:af:fd:21:9a:9f:c3:92:f9:5e:3e:32:8b:f8: ca:bc:1b:33:e4:89:c6:ab:64:85:1f:ad:24:70:55: 11:78:dc:28:f8:eb:22:a4:e6:42:31:a1:72:3d:16: 04:a9:bb:ae:a1:f7:d1:d5:07:b7:d6:2a:3c:21:0d: ef:84:72:2e:fc:53:4e:52:13:f5:42:86:09:b7:50: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4A:FF:C3:8E:39:0A:18:32:D9:6B:29:1C:BD:AA:B0:69:5B:FE:6F X509v3 Authority Key Identifier: keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ee:10:38:cb:41:b9:c6:50:bb:e7:a0:a9:ed:12:03:d1:1f: 9e:50:e7:81:5f:b8:88:3c:f9:11:ce:9f:30:e6:e3:2d:ca:5f: e2:84:08:49:58:b3:50:df:cf:f9:63:3c:06:a3:13:29:41:ef: e4:72:9f:ee:92:24:19:da:91:76:eb:16:52:fe:a7:58:b3:15: bf:d8:c3:ff:ce:1b:84:7a:70:ab:d7:fa:ce:36:64:e3:58:cd: bd:72:44:52:4e:1a:ba:af:e4:8c:a4:7c:17:0c:bf:00:38:ef: ac:d9:30:01:b6:ae:22:fb:4d:b3:19:9e:40:44:38:cc:08:e7: 2f:d9:de:e6:9a:a0:8d:d0:dd:59:80:95:cf:6c:66:ec:96:3e: 96:5a:f1:cd:c1:c4:57:13:f2:9e:61:1d:a9:a2:2e:ee:0d:ee: 28:62:ec:3e:97:e0:4c:bb:e5:a6:d1:b4:2a:62:53:cd:82:2a: 12:01:fb:3b:2c:c7:9f:5b:bc:c4:37:7e:f3:2d:f0:d7:e2:2a: ca:ef:0c:a3:94:a9:3e:c6:60:4e:6b:1c:28:a7:79:a1:13:d3: e1:a7:59:68:f9:4e:6c:19:7f:57:f9:4c:83:c1:1d:74:94:c6: 7a:6b:2d:6f:41:09:67:8f:ab:9e:a7:ad:bf:53:c1:5c:d8:98: f8:bc:28:6b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQYqwnWXFAeOQ6TbS6uRchSWt9fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG MzU5RkFEOTAeFw0yNjA0MTcwNjQzMDFaFw0yNjA0MjIwNzE3MDFaMDMxMTAvBgNV BAMTKEI3NEFGRkMzOEUzOTBBMTgzMkQ5NkIyOTFDQkRBQUIwNjk1QkZFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsP75xNAL0Um1XJ/i0TRQhU+cV VOclGJjfBYgvDdHVipAhot3C944oh4xLkgwjpaFTFKQ+NQEaBlRF/YmCtOL2v6hX H9L3cjHi8fkMtaSXHoLz3GtqFHxev4TIuVTajBzFVeoU9zZyYn+L16q16uFNufod Y0y+KFl5wAyBzHedy0K4fTgsj1rEr4REi/qFFlt8Csa8tcztjQ85aMfV/rkN6yJL f0w6pHmgBKdmPBybxnUCWwLvr/0hmp/DkvlePjKL+Mq8GzPkicarZIUfrSRwVRF4 3Cj46yKk5kIxoXI9FgSpu66h99HVB7fWKjwhDe+Eci78U05SE/VChgm3ULIBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUt0r/w445Chgy2WspHL2qsGlb/m8wHwYDVR0j BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1 MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0 MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wL0Q4NkYwQzBCREZEQTcxQUZCNEY3NTc0 N0Y3NkE5QUY3RjM1OUZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ7hA4y0G5xlC756Cp7RID0R+e UOeBX7iIPPkRzp8w5uMtyl/ihAhJWLNQ38/5YzwGoxMpQe/kcp/ukiQZ2pF26xZS /qdYsxW/2MP/zhuEenCr1/rONmTjWM29ckRSThq6r+SMpHwXDL8AOO+s2TABtq4i +02zGZ5ARDjMCOcv2d7mmqCN0N1ZgJXPbGbslj6WWvHNwcRXE/KeYR2poi7uDe4o Yuw+l+BMu+Wm0bQqYlPNgioSAfs7LMefW7zEN37zLfDX4irK7wyjlKk+xmBOaxwo p3mhE9Php1lo+U5sGX9X+UyDwR10lMZ6ay1vQQlnj6uep62/U8Fc2Jj4vChr -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:46 2026 by rpki-client