$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft File: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft (raw, json) Hash identifier: BCbchESiktZzxyFOl5habpZJ5RFAVT535RPO27dQ19w= Subject key identifier: 9E:21:9D:67:9D:87:5B:CA:0F:70:29:45:0B:66:69:E6:6B:EC:E1:BC Authority key identifier: BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7 Certificate issuer: /CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7 Certificate serial: 788E8BCB0CC821F2C8B4BDF8949981EB8FCF6166 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft Manifest number: 0188 Signing time: Thu 16 Apr 2026 13:37:00 +0000 Manifest this update: Thu 16 Apr 2026 13:32:00 +0000 Manifest next update: Mon 20 Apr 2026 23:19:00 +0000 Files and hashes: 1: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl (hash: O0KHQcMkxSYjsK0s5vVs4JrF07rXEItU9wyE1FU8Ag8=) 2: 323830333a663539303a3a2f33322d3438203d3e20323732393836.roa (hash: qiV3mbSCleZeiH8P5cTiossyGGceGqDaRLKvcaFSDVc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Apr 2026 23:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8e:8b:cb:0c:c8:21:f2:c8:b4:bd:f8:94:99:81:eb:8f:cf:61:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7 Validity Not Before: Apr 16 13:32:00 2026 GMT Not After : Apr 20 23:19:00 2026 GMT Subject: CN=9E219D679D875BCA0F7029450B6669E66BECE1BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:75:03:23:bb:05:f0:76:e0:1a:1c:02:67:8e: 64:e2:5e:9a:8d:50:10:3d:09:12:e2:c9:2f:5c:90: b1:26:35:40:50:99:2a:50:a7:f5:17:bd:df:ec:6e: c8:9a:33:92:4e:52:84:4f:7d:a3:4a:d4:44:a6:f6: 28:f6:27:a0:f8:b1:74:50:d2:52:d7:f7:49:f2:2b: b6:c9:f4:f3:33:e1:35:dc:5e:01:f9:4a:c8:77:a2: c9:8f:c1:0c:e9:08:9b:eb:00:94:c5:72:1e:ed:b1: fa:1d:f7:23:b2:58:b0:38:d6:20:dd:d1:ef:23:3c: 62:6e:ed:4d:75:8f:e5:23:0d:c8:4e:cf:5a:12:7f: 02:41:80:1d:4a:85:c6:09:cf:39:5a:e3:0d:4d:a4: 5e:12:14:b7:21:64:b6:7a:31:37:64:a9:67:0b:c3: e1:73:cf:91:be:f7:ec:d1:e8:94:32:ad:30:6d:95: c3:80:fa:2b:bb:9d:27:80:71:26:b6:10:47:89:5e: 97:43:09:2e:e1:5e:7d:ef:ad:5a:57:46:56:a9:73: e7:8f:59:13:a6:45:ba:c9:4e:9b:3b:0a:e3:e1:b1: 14:db:74:21:24:14:14:5a:87:20:05:dc:cf:5c:55: b7:89:d2:a0:8f:f9:03:82:39:9d:92:b5:8e:c7:ba: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:21:9D:67:9D:87:5B:CA:0F:70:29:45:0B:66:69:E6:6B:EC:E1:BC X509v3 Authority Key Identifier: keyid:BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:fc:39:ed:77:fd:9e:24:0c:83:f5:18:4b:d7:57:29:8a:64: 09:8a:36:0d:36:94:b8:4b:f6:8a:cf:02:80:96:29:40:9c:d9: d5:a9:e0:3b:b7:bf:62:2e:73:a7:53:97:83:ad:c8:2f:ef:84: 21:c8:49:85:c1:8b:c9:8d:80:e4:4f:b8:c8:51:5d:24:be:ce: 72:8a:25:06:f0:04:99:5c:09:b0:24:6a:d8:dc:45:4d:ed:f7: 53:57:d5:2e:eb:7d:4c:5d:34:21:9b:6c:7a:c1:68:42:45:b4: dd:42:c3:7d:6b:b4:db:d6:a8:b9:c4:5c:e0:84:61:6e:15:3f: 31:52:d2:02:ab:19:d3:d9:85:54:9d:e6:de:c1:4c:ad:08:56: d1:b2:c1:51:e0:66:09:bd:9c:4c:05:59:5d:f3:f8:96:1c:eb: 70:91:2e:2b:50:a8:5b:d0:55:bc:b7:f3:0f:05:a2:a7:5a:00: fd:2d:8c:fe:7b:57:9d:29:10:59:87:a4:40:9d:9d:40:76:e7: e1:7a:52:11:a1:6c:2f:21:fc:ac:56:45:33:1d:c5:1a:f7:0a: 92:0e:31:33:b4:36:b0:e4:55:b0:9e:59:97:a7:d9:ea:8b:1a: 53:ba:32:3e:b0:f6:c8:e2:56:b5:12:d0:69:c6:de:7e:c4:37: 66:2c:6c:b2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeI6LywzIIfLItL34lJmB64/PYWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDM5OEJBQ0UzOTBDMjZBMzJDRDRDNzc1OEFBMUZB OUUzN0NDNzAeFw0yNjA0MTYxMzMyMDBaFw0yNjA0MjAyMzE5MDBaMDMxMTAvBgNV BAMTKDlFMjE5RDY3OUQ4NzVCQ0EwRjcwMjk0NTBCNjY2OUU2NkJFQ0UxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrdQMjuwXwduAaHAJnjmTiXpqN UBA9CRLiyS9ckLEmNUBQmSpQp/UXvd/sbsiaM5JOUoRPfaNK1ESm9ij2J6D4sXRQ 0lLX90nyK7bJ9PMz4TXcXgH5Ssh3osmPwQzpCJvrAJTFch7tsfod9yOyWLA41iDd 0e8jPGJu7U11j+UjDchOz1oSfwJBgB1KhcYJzzla4w1NpF4SFLchZLZ6MTdkqWcL w+Fzz5G+9+zR6JQyrTBtlcOA+iu7nSeAcSa2EEeJXpdDCS7hXn3vrVpXRlapc+eP WROmRbrJTps7CuPhsRTbdCEkFBRahyAF3M9cVbeJ0qCP+QOCOZ2StY7HuuC3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUniGdZ52HW8oPcClFC2Zp5mvs4bwwHwYDVR0j BBgwFoAUvZ05i6zjkMJqMs1Md1iqH6njfMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NzdFQUQ3NjcyQzJCMUE1RTNEM0Y2OURGQ0I5NjRDODY2 RUQ0Q0E3QzlCMkZGN0RCMTMxRjc2RDY4QzRCQzA0LzAvQkQ5RDM5OEJBQ0UzOTBD MjZBMzJDRDRDNzc1OEFBMUZBOUUzN0NDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDlEMzk4QkFDRTM5MEMyNkEz MkNENEM3NzU4QUExRkE5RTM3Q0M3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjc3RUFENzY3MkMyQjFBNUUzRDNGNjlERkNCOTY0Qzg2NkVENENBN0M5 QjJGRjdEQjEzMUY3NkQ2OEM0QkMwNC8wL0JEOUQzOThCQUNFMzkwQzI2QTMyQ0Q0 Qzc3NThBQTFGQTlFMzdDQzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAM/Dntd/2eJAyD9RhL11cpimQJ ijYNNpS4S/aKzwKAlilAnNnVqeA7t79iLnOnU5eDrcgv74QhyEmFwYvJjYDkT7jI UV0kvs5yiiUG8ASZXAmwJGrY3EVN7fdTV9Uu631MXTQhm2x6wWhCRbTdQsN9a7Tb 1qi5xFzghGFuFT8xUtICqxnT2YVUnebewUytCFbRssFR4GYJvZxMBVld8/iWHOtw kS4rUKhb0FW8t/MPBaKnWgD9LYz+e1edKRBZh6RAnZ1AdufhelIRoWwvIfysVkUz HcUa9wqSDjEztDaw5FWwnlmXp9nqixpTujI+sPbI4la1EtBpxt5+xDdmLGyy -----END CERTIFICATE-----Generated at Fri Apr 17 20:06:30 2026 by rpki-client