$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft File: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft (raw, json) Hash identifier: WGzaDFLal6nJ5ntUOkDddMHnxBVBDzdFawcOFPMZVHI= Subject key identifier: 78:26:7E:4C:B5:71:E6:F8:51:3D:4D:1C:CA:13:6D:E9:8D:5A:3D:86 Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Certificate serial: 42B91B39D60B5FE9FB00DBAEEB746017BE845660 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft Manifest number: 0181 Signing time: Thu 16 Apr 2026 20:31:09 +0000 Manifest this update: Thu 16 Apr 2026 20:26:09 +0000 Manifest next update: Tue 21 Apr 2026 20:01:09 +0000 Files and hashes: 1: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl (hash: QQctbhlWBZYmqEyElaz0ZZLFcnJdmMi/b8JwYuQ4Zk0=) 2: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (hash: kTaf89zbV8DPx751zfxW+Rd67to9CAzT8zKeAESSzYo=) 3: 323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (hash: /6mQ5hvOd9I58Oo8ngAPKgLWxshGVRMkfruq/6TFz9M=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b9:1b:39:d6:0b:5f:e9:fb:00:db:ae:eb:74:60:17:be:84:56:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Validity Not Before: Apr 16 20:26:09 2026 GMT Not After : Apr 21 20:01:09 2026 GMT Subject: CN=78267E4CB571E6F8513D4D1CCA136DE98D5A3D86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:50:7d:e7:8a:9f:e2:2f:61:23:cf:3e:c7: 46:e6:27:94:f7:62:f2:40:ba:6d:54:24:c6:a4:53: 13:57:10:9d:5b:ce:04:a0:ea:61:7a:90:d4:1f:80: 4d:fa:c3:ce:41:30:35:35:80:9b:99:0f:1f:48:cb: ec:c3:ba:b5:e7:84:81:47:ba:0e:b4:a6:d8:93:59: 56:b2:de:8c:fb:40:30:92:98:4f:21:47:82:92:3c: 4d:d3:36:95:fe:bf:58:a2:71:3c:e7:cc:c4:dc:07: 4a:4f:6c:9a:01:e0:1e:35:0b:0c:e2:c8:1f:b8:ac: f6:b1:a3:50:42:65:e3:7b:36:06:c7:23:c5:d6:07: f7:97:8e:57:cb:49:11:d6:21:25:0f:a9:87:1b:e5: 23:13:ed:42:9e:90:11:30:83:94:32:49:b1:73:dc: 7e:97:a4:6f:b5:1e:dc:1b:27:24:f0:8b:1e:48:37: 21:f9:53:27:11:d2:30:75:97:0f:ce:89:65:99:96: 71:b2:ef:d3:1d:9d:d8:57:b3:0e:0d:de:51:49:d5: 04:2c:05:31:b0:85:28:18:ec:97:cb:e0:40:4a:1d: 79:be:01:16:fc:52:7a:36:bf:ed:d1:01:ba:d4:9b: 62:18:23:9b:01:2f:86:18:1a:59:ad:9f:c4:32:ad: 1a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:26:7E:4C:B5:71:E6:F8:51:3D:4D:1C:CA:13:6D:E9:8D:5A:3D:86 X509v3 Authority Key Identifier: keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c7:14:03:9e:f5:e1:0f:1f:2c:d9:7f:a2:95:07:bb:7e:93: 57:9b:c6:2a:e7:2c:4e:fa:29:72:3a:16:fb:35:62:42:9a:7c: dc:81:c7:2f:ee:9b:68:66:00:2b:9e:a3:d9:5e:ce:99:da:d7: a7:4e:73:d1:c3:d2:80:64:13:34:da:58:36:2a:3f:01:bd:13: f2:22:b5:6a:61:51:dc:82:d6:59:b7:e9:22:62:2f:10:ac:17: 75:0b:7d:67:95:c6:1f:30:da:75:5c:f6:c6:13:0b:45:c9:9d: ca:c4:40:b8:61:0b:5c:a7:1f:67:7d:c5:92:9f:f6:09:b5:04: 60:96:57:73:13:55:5d:a1:44:d3:49:bc:ee:8c:61:51:1a:03: bd:dd:2e:aa:85:13:8a:f7:31:22:07:58:b6:50:86:c1:62:b1: ad:14:62:e8:c3:68:b6:9c:02:a4:13:ec:03:eb:ab:fe:ac:23: 2a:ef:cb:20:96:b5:f2:cd:fd:cb:0a:a9:8d:57:49:1b:75:cd: 8c:7d:bc:fb:08:cc:15:8b:40:9e:76:e9:dd:21:d8:e2:56:35: b6:cd:0a:39:8d:eb:a9:a9:42:74:f5:51:fb:4f:6e:42:fb:2b: 30:75:69:34:8d:91:f5:1e:b3:cb:1f:ae:b7:b7:f6:9b:2d:52: a1:1d:d2:9c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQrkbOdYLX+n7ANuu63RgF76EVmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2MjdERUREODIy QzI1QThBRjAeFw0yNjA0MTYyMDI2MDlaFw0yNjA0MjEyMDAxMDlaMDMxMTAvBgNV BAMTKDc4MjY3RTRDQjU3MUU2Rjg1MTNENEQxQ0NBMTM2REU5OEQ1QTNEODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChr1B954qf4i9hI88+x0bmJ5T3 YvJAum1UJMakUxNXEJ1bzgSg6mF6kNQfgE36w85BMDU1gJuZDx9Iy+zDurXnhIFH ug60ptiTWVay3oz7QDCSmE8hR4KSPE3TNpX+v1iicTznzMTcB0pPbJoB4B41Cwzi yB+4rPaxo1BCZeN7NgbHI8XWB/eXjlfLSRHWISUPqYcb5SMT7UKekBEwg5QySbFz 3H6XpG+1HtwbJyTwix5INyH5UycR0jB1lw/OiWWZlnGy79MdndhXsw4N3lFJ1QQs BTGwhSgY7JfL4EBKHXm+ARb8Uno2v+3RAbrUm2IYI5sBL4YYGlmtn8QyrRrjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUeCZ+TLVx5vhRPU0cyhNt6Y1aPYYwHwYDVR0j BBgwFoAUr4VUAquNzJ6UDnsWJ97dgiwlqK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5 QkM5RDJEOUJBQzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5 RTk0MEU3QjE2MjdERUREODIyQzI1QThBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjg1NTQwMkFCOERDQzlFOTQw RTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjBFQTk2RDhBODVCNTk0MzExQjJERTJCOEFDMDFDQjkyOUJDOUQyRDlC QUM5NTJGNUUwODNERURFMDAxMTAxMS8wL0FGODU1NDAyQUI4RENDOUU5NDBFN0Ix NjI3REVERDgyMkMyNUE4QUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBxxQDnvXhDx8s2X+ilQe7fpNX m8Yq5yxO+ilyOhb7NWJCmnzcgccv7ptoZgArnqPZXs6Z2tenTnPRw9KAZBM02lg2 Kj8BvRPyIrVqYVHcgtZZt+kiYi8QrBd1C31nlcYfMNp1XPbGEwtFyZ3KxEC4YQtc px9nfcWSn/YJtQRglldzE1VdoUTTSbzujGFRGgO93S6qhROK9zEiB1i2UIbBYrGt FGLow2i2nAKkE+wD66v+rCMq78sglrXyzf3LCqmNV0kbdc2Mfbz7CMwVi0Cedund IdjiVjW2zQo5jeupqUJ09VH7T25C+yswdWk0jZH1HrPLH663t/abLVKhHdKc -----END CERTIFICATE-----Generated at Sat Apr 18 08:08:50 2026 by rpki-client