$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft File: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft (raw, json) Hash identifier: ra8gKh3f2TXL1UGfobC5Kr6BPRgaAHBVHgl+kLUhsOE= Subject key identifier: C1:D2:27:89:6B:77:21:EC:59:54:7A:BC:A3:24:A1:8F:7E:06:3C:26 Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 Certificate issuer: /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Certificate serial: 361C2F337D3ECE46A2CDD10DEABB0B57A0250AF0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft Manifest number: 0184 Signing time: Wed 15 Apr 2026 11:31:51 +0000 Manifest this update: Wed 15 Apr 2026 11:26:51 +0000 Manifest next update: Tue 21 Apr 2026 10:06:51 +0000 Files and hashes: 1: 323830333a3332303a3a2f33322d3332203d3e20323636373130.roa (hash: d0+wEbbwR2kTQu0lXgYAYWdTD0+C2PsPGF8JdfVP9Pc=) 2: 34352e3233302e382e302f32322d3234203d3e20323636373130.roa (hash: PjdW6Gt115D0xt6IJ0qEdbS+zE7pSztNB769lXNLMxo=) 3: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl (hash: mIJvfD2pj/u1cBvje3DFTAFMlKxY574+BBBJDruQY5U=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 10:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1c:2f:33:7d:3e:ce:46:a2:cd:d1:0d:ea:bb:0b:57:a0:25:0a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Validity Not Before: Apr 15 11:26:51 2026 GMT Not After : Apr 21 10:06:51 2026 GMT Subject: CN=C1D227896B7721EC59547ABCA324A18F7E063C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:f7:3c:73:99:08:d5:3b:8d:67:11:7b:18: 93:4b:d4:f7:78:21:4c:87:9a:d0:6e:a4:f7:83:8e: 71:b0:af:68:3e:38:e7:8b:20:0d:e6:d4:3b:50:5a: 5a:06:37:56:02:e6:d6:06:67:de:fd:8d:f4:38:2b: 5a:78:89:05:c4:4b:c3:95:f7:5d:55:e3:3d:0b:8e: 02:77:00:79:06:66:55:26:55:81:10:ca:0e:70:d4: 23:61:9f:ac:bc:d4:ee:46:57:8c:dc:39:f2:ff:89: 5a:9e:ea:04:43:0d:4c:52:e6:2f:40:57:72:6e:fb: 42:8c:84:29:c2:d9:26:bf:75:b0:1d:44:8e:40:78: 9e:9c:6d:db:07:17:d7:f2:5d:5c:2a:a3:a5:d1:2b: 8f:ce:ac:22:ba:1a:01:65:95:b4:27:57:e7:cf:31: 8e:25:6a:fa:0d:05:43:1f:0c:91:48:65:42:d8:f6: f7:e1:70:0c:1a:b5:36:45:59:0c:bc:44:94:a3:0f: 14:80:df:92:ea:69:df:05:b4:99:d5:b5:e3:11:7a: 61:70:b2:98:13:bd:07:21:c2:3e:23:66:5e:b7:99: 74:b6:8f:1f:51:e8:4c:35:3b:fa:56:45:4d:a3:ab: 6c:2a:98:e1:21:3b:ea:12:cc:d1:46:29:6a:7c:be: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D2:27:89:6B:77:21:EC:59:54:7A:BC:A3:24:A1:8F:7E:06:3C:26 X509v3 Authority Key Identifier: keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:14:2f:e0:e4:41:c9:61:04:a6:21:5c:8c:4d:2e:7f:39:69: a5:3d:58:50:64:36:06:f5:a9:d9:20:a0:9c:4a:ed:3c:ce:87: fa:66:9d:8f:a5:0a:d9:75:fd:66:36:f9:1c:8d:d9:c2:c1:b9: 1f:2b:2a:32:8c:21:8c:78:77:0e:9d:c9:df:9b:ae:d0:a4:65: db:f9:25:d4:72:e2:98:c7:cb:73:6c:08:74:7e:e6:bd:28:42: 81:1f:85:5a:43:fc:0b:a2:4d:44:fd:f6:99:40:1d:26:28:8e: 96:25:55:2e:f8:04:de:db:90:dc:f8:c4:33:a1:f4:3c:57:38: 08:4d:2c:5b:7e:44:4e:2d:e8:e7:0c:a8:d9:79:e6:91:b2:d6: 3b:96:5f:51:84:1d:35:f2:c8:db:3b:9e:c3:b2:61:9d:8e:cb: 99:ed:7a:ee:27:95:3c:a2:b5:2b:95:57:88:8d:8c:02:66:22: 83:8c:4b:76:fd:b9:d6:a0:72:5e:ae:7e:c3:da:41:cb:a7:0c: 94:93:85:ee:19:b5:21:0a:3f:f3:61:37:06:93:a7:28:71:79: 8d:e6:b2:92:ae:65:f7:e0:c2:59:9e:81:ff:b0:58:ab:db:c6: 40:ab:d7:35:48:73:8d:97:bb:3b:31:e8:74:c9:90:32:1a:b3: e0:16:b9:d4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNhwvM30+zkaizdEN6rsLV6AlCvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEQzMwNjhBOUFFNzgzODRFNUE0RjRGNTI0NEJBRTQw ODgwNTlFNTAeFw0yNjA0MTUxMTI2NTFaFw0yNjA0MjExMDA2NTFaMDMxMTAvBgNV BAMTKEMxRDIyNzg5NkI3NzIxRUM1OTU0N0FCQ0EzMjRBMThGN0UwNjNDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf5Pc8c5kI1TuNZxF7GJNL1Pd4 IUyHmtBupPeDjnGwr2g+OOeLIA3m1DtQWloGN1YC5tYGZ979jfQ4K1p4iQXES8OV 911V4z0LjgJ3AHkGZlUmVYEQyg5w1CNhn6y81O5GV4zcOfL/iVqe6gRDDUxS5i9A V3Ju+0KMhCnC2Sa/dbAdRI5AeJ6cbdsHF9fyXVwqo6XRK4/OrCK6GgFllbQnV+fP MY4lavoNBUMfDJFIZULY9vfhcAwatTZFWQy8RJSjDxSA35Lqad8FtJnVteMRemFw spgTvQchwj4jZl63mXS2jx9R6Ew1O/pWRU2jq2wqmOEhO+oSzNFGKWp8vomjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUwdIniWt3IexZVHq8oyShj34GPCYwHwYDVR0j BBgwFoAUu9wwaKmueDhOWk9PUkS65AiAWeUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NDIzMzIwQzgwNUQ4QkVFRkM0MjQyQzU2NzFEODQ0NTY3 NjNBRERGQURFRTA0RTQyQTFBMUQ0NERDRkJEMkEzLzAvQkJEQzMwNjhBOUFFNzgz ODRFNUE0RjRGNTI0NEJBRTQwODgwNTlFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkRDMzA2OEE5QUU3ODM4NEU1 QTRGNEY1MjQ0QkFFNDA4ODA1OUU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDQyMzMyMEM4MDVEOEJFRUZDNDI0MkM1NjcxRDg0NDU2NzYzQURERkFE RUUwNEU0MkExQTFENDREQ0ZCRDJBMy8wL0JCREMzMDY4QTlBRTc4Mzg0RTVBNEY0 RjUyNDRCQUU0MDg4MDU5RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaFC/g5EHJYQSmIVyMTS5/OWml PVhQZDYG9anZIKCcSu08zof6Zp2PpQrZdf1mNvkcjdnCwbkfKyoyjCGMeHcOncnf m67QpGXb+SXUcuKYx8tzbAh0fua9KEKBH4VaQ/wLok1E/faZQB0mKI6WJVUu+ATe 25Dc+MQzofQ8VzgITSxbfkROLejnDKjZeeaRstY7ll9RhB018sjbO57DsmGdjsuZ 7XruJ5U8orUrlVeIjYwCZiKDjEt2/bnWoHJern7D2kHLpwyUk4XuGbUhCj/zYTcG k6cocXmN5rKSrmX34MJZnoH/sFir28ZAq9c1SHONl7s7Meh0yZAyGrPgFrnU -----END CERTIFICATE-----Generated at Fri Apr 17 20:21:40 2026 by rpki-client