$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json) Hash identifier: +QXvvvtZT3Jw2Sdo7OW4Gq8iRA8cZQkqUHNA1sp0CZc= Subject key identifier: 03:0A:A2:79:72:6B:BD:64:6A:C5:9A:36:F4:E5:C2:D0:F7:0A:04:0F Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 3D5608DD3FD4296867A8B6A6CA38B2A2A562F036 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft Manifest number: 0181 Signing time: Fri 17 Apr 2026 13:32:04 +0000 Manifest this update: Fri 17 Apr 2026 13:27:04 +0000 Manifest next update: Tue 21 Apr 2026 15:51:04 +0000 Files and hashes: 1: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: 4YT76mg5dITWNiH2hE5kgjyBgua4a3LhZgbWUTw9x8I=) 2: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: qQ9e3S7lopFF5kMCvlKi82RHr2b2/ZWYQIthtb9rgCA=) 3: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 15:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:56:08:dd:3f:d4:29:68:67:a8:b6:a6:ca:38:b2:a2:a5:62:f0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Apr 17 13:27:04 2026 GMT Not After : Apr 21 15:51:04 2026 GMT Subject: CN=030AA279726BBD646AC59A36F4E5C2D0F70A040F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:f0:b5:da:92:64:b8:2a:5b:a7:08:0c:19: c2:3c:cc:b8:f0:d1:63:8a:4c:04:12:e5:81:81:51: d9:31:0a:e1:8f:5f:4b:79:d5:c3:3d:91:59:43:e1: 1f:66:9c:6c:a4:43:69:05:db:6b:ae:90:83:82:a9: 48:be:d0:27:40:1e:68:e7:63:a2:b9:50:44:4f:fd: b9:ea:44:02:38:31:0f:00:68:f1:72:e2:cf:e3:bb: bf:0f:8c:68:6e:19:ed:48:ff:a6:22:42:c9:07:3f: 39:b2:5c:bb:8f:0f:91:f9:f1:7a:66:d6:1b:5c:2e: 12:bb:13:e4:59:92:e6:3c:72:e8:f9:e7:1b:c2:b1: cf:d4:7e:c6:bb:23:7f:41:e5:9c:67:2d:9a:2c:a2: e3:b8:e5:25:4f:b5:f6:6d:fe:db:d3:df:19:22:36: 9f:93:21:85:54:f5:49:f0:10:e1:3e:ac:00:3d:74: d2:49:82:70:20:ba:d6:19:ad:11:20:b8:56:a9:e4: 3e:af:49:b8:2a:62:7f:68:f9:6e:77:c2:bb:a3:f9: bb:4f:fd:bf:90:ce:0e:01:80:45:fd:a3:b1:6f:2a: 14:75:82:f1:5c:a9:04:f0:d8:b9:38:80:95:51:48: 76:30:32:40:31:87:82:e5:6d:06:ff:9f:24:2d:0b: f4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0A:A2:79:72:6B:BD:64:6A:C5:9A:36:F4:E5:C2:D0:F7:0A:04:0F X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:36:63:d5:1d:fb:74:6a:f4:ba:62:3e:74:38:88:12:19:80: f8:3c:8d:73:78:be:46:ad:c0:c0:cd:ed:c9:d7:61:dd:fc:92: be:60:c9:3b:65:60:8d:4f:bb:99:17:13:b5:55:8d:c3:d0:61: fc:60:7c:5b:8d:b2:a1:96:4b:b7:cd:ed:15:e5:7f:33:cb:a2: 51:b3:56:10:69:6c:cf:ac:8e:85:2d:4e:c5:17:cb:e7:3e:26: 54:77:ad:0c:a8:2a:c6:61:0e:89:2b:fd:90:44:b8:4c:57:75: f4:27:7f:b5:fd:96:6c:34:8f:4e:8e:c9:ef:36:18:ab:b4:5a: a0:7b:13:0d:23:1e:7a:76:39:a2:45:7f:f1:62:0c:2f:6a:bc: cc:75:38:6b:4e:25:9a:58:3f:65:a1:09:66:e7:a5:d7:dc:59: 5e:2e:33:df:83:0a:7c:9e:c7:07:3e:39:0e:8c:52:a8:30:19: 57:ab:68:5a:1f:3c:14:3c:94:eb:3f:6b:89:74:00:cb:45:41: a2:40:72:82:c7:a3:fc:32:3b:96:64:5a:1c:9e:b9:a4:8d:18: c5:a8:dd:c1:5f:a7:46:60:33:7b:c1:92:d3:e7:6f:c5:bd:7e: f2:7b:66:76:0e:b2:99:34:57:5b:b9:9f:68:8b:97:a9:94:f3: 74:02:26:a3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPVYI3T/UKWhnqLamyjiyoqVi8DYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNjA0MTcxMzI3MDRaFw0yNjA0MjExNTUxMDRaMDMxMTAvBgNV BAMTKDAzMEFBMjc5NzI2QkJENjQ2QUM1OUEzNkY0RTVDMkQwRjcwQTA0MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Z/C12pJkuCpbpwgMGcI8zLjw 0WOKTAQS5YGBUdkxCuGPX0t51cM9kVlD4R9mnGykQ2kF22uukIOCqUi+0CdAHmjn Y6K5UERP/bnqRAI4MQ8AaPFy4s/ju78PjGhuGe1I/6YiQskHPzmyXLuPD5H58Xpm 1htcLhK7E+RZkuY8cuj55xvCsc/Ufsa7I39B5ZxnLZosouO45SVPtfZt/tvT3xki Np+TIYVU9UnwEOE+rAA9dNJJgnAgutYZrREguFap5D6vSbgqYn9o+W53wruj+btP /b+Qzg4BgEX9o7FvKhR1gvFcqQTw2Lk4gJVRSHYwMkAxh4LlbQb/nyQtC/QjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUAwqieXJrvWRqxZo29OXC0PcKBA8wHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACNmPVHft0avS6Yj50OIgSGYD4 PI1zeL5GrcDAze3J12Hd/JK+YMk7ZWCNT7uZFxO1VY3D0GH8YHxbjbKhlku3ze0V 5X8zy6JRs1YQaWzPrI6FLU7FF8vnPiZUd60MqCrGYQ6JK/2QRLhMV3X0J3+1/ZZs NI9OjsnvNhirtFqgexMNIx56djmiRX/xYgwvarzMdThrTiWaWD9loQlm56XX3Fle LjPfgwp8nscHPjkOjFKoMBlXq2haHzwUPJTrP2uJdADLRUGiQHKCx6P8MjuWZFoc nrmkjRjFqN3BX6dGYDN7wZLT52/FvX7ye2Z2DrKZNFdbuZ9oi5eplPN0Aiaj -----END CERTIFICATE-----Generated at Fri Apr 17 18:48:21 2026 by rpki-client