$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft File: 2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft (raw, json) Hash identifier: nuLgnZUhG4cLR9yLJJVjOcntSwO81f+ccYeQMdTFo+4= Subject key identifier: 18:6E:9A:B2:00:F8:8A:80:EB:A9:2A:43:2A:08:1F:ED:0B:B7:CE:88 Authority key identifier: 2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86 Certificate issuer: /CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686 Certificate serial: 4691B67A4F612CA697C1750DB4F4C04F07878290 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft Manifest number: 0186 Signing time: Thu 16 Apr 2026 20:31:08 +0000 Manifest this update: Thu 16 Apr 2026 20:26:08 +0000 Manifest next update: Tue 21 Apr 2026 14:06:08 +0000 Files and hashes: 1: 323830333a333265303a3a2f33322d3438203d3e20323639393238.roa (hash: rKev2828foJAgoHcNjntqYKVDlmpjTHRQcC9MyFK2yQ=) 2: 3230302e3130382e3139302e302f32342d3234203d3e20323639393238.roa (hash: K7yaG0uYfvbUA+xOigGmo8C3NHzuSjCiNPQfP4aVJYw=) 3: 2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl (hash: OT6X2YkxKV54tZ0XtxmNz71oG1+2fR3Y1YcPhXIIUUQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 14:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:91:b6:7a:4f:61:2c:a6:97:c1:75:0d:b4:f4:c0:4f:07:87:82:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686 Validity Not Before: Apr 16 20:26:08 2026 GMT Not After : Apr 21 14:06:08 2026 GMT Subject: CN=186E9AB200F88A80EBA92A432A081FED0BB7CE88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:f0:75:96:8f:81:7c:b7:d6:5d:3c:f9:b9: d8:49:37:0f:5d:d0:08:30:89:62:c2:b7:ee:80:68: ba:0c:b9:68:ba:e9:86:63:5c:1c:ee:f9:04:87:80: b6:c7:ce:11:71:42:24:5c:b2:4c:2e:5f:95:f6:d6: 6a:8d:dd:ea:ab:57:27:54:66:c5:52:ce:d3:b9:e0: 88:b1:53:f7:5a:e3:45:bc:5f:d0:25:b4:f1:c9:09: ab:01:32:d6:c1:f1:7a:69:68:bf:b4:9a:71:02:f7: eb:66:ef:af:d8:0e:3b:f7:c3:80:5e:9e:b3:5c:9c: 6d:b6:59:5a:52:fd:fb:0f:e0:6f:87:65:e4:d2:35: e3:74:52:3e:43:24:9e:2a:9b:04:2d:cc:7a:f0:cb: ff:34:8b:da:04:e2:39:01:b4:97:00:62:06:87:ca: 8e:49:d1:f1:70:02:2f:db:11:34:23:e3:0b:db:ad: cc:6c:31:50:d0:1c:8a:06:a9:53:8e:49:b9:40:5c: 99:ef:1a:10:39:f0:84:e3:95:0a:5e:61:20:3d:75: 43:8a:15:19:73:b4:33:f4:50:e5:21:6b:7d:a8:cf: 9b:ce:e3:6e:90:2e:78:cd:88:70:e2:49:32:d3:81: 8b:2d:7f:0f:b5:c8:4c:95:0d:4d:c1:fb:b1:76:fc: bc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6E:9A:B2:00:F8:8A:80:EB:A9:2A:43:2A:08:1F:ED:0B:B7:CE:88 X509v3 Authority Key Identifier: keyid:2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8a:94:38:0c:75:ed:51:90:4c:42:b9:2a:b2:3a:54:c1:d7: 53:71:be:36:a2:35:1b:2d:72:42:ad:03:3a:7d:4a:bc:5f:4c: 5d:61:e0:39:33:f6:0e:eb:0c:e5:7b:61:31:87:b6:37:64:6b: 3b:2e:c2:f1:78:81:e4:1e:6f:05:b6:2d:28:29:de:ae:21:52: 32:8e:5e:84:da:f3:e4:8f:cc:4d:42:e8:dd:1a:56:9d:66:19: 23:7c:4c:47:56:04:ea:b9:55:2d:c3:43:b7:8a:9a:7e:87:ec: 91:3c:c0:64:66:db:85:a3:40:ea:07:dd:33:6a:4a:5f:cd:47: b5:11:f4:3d:40:23:59:78:bd:b4:79:d7:1f:fa:55:54:9d:a4: 7e:16:e5:ea:e3:04:a3:27:0e:d6:7b:81:66:89:6d:e0:5c:80: 57:b5:44:d4:7a:c5:2d:aa:92:03:30:dd:dc:da:de:fc:0e:15: e1:4d:db:8f:b8:e8:4a:2e:a3:e1:7b:0d:80:cc:db:29:37:29: e1:04:a7:72:a9:a4:8d:03:69:85:ad:0d:f7:bb:0f:b7:c4:85: 1e:5c:64:76:43:c6:31:cc:0f:c9:24:57:18:df:8e:4a:71:b2: b9:66:76:ce:12:42:b4:08:50:20:64:56:7a:82:d8:30:96:d9: c3:c4:be:03 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURpG2ek9hLKaXwXUNtPTATweHgpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIyQ0Q0RDZENDVFQUMyNUVFOTdENUU2NkJFOTM4RUYz MUE2MTY4NjAeFw0yNjA0MTYyMDI2MDhaFw0yNjA0MjExNDA2MDhaMDMxMTAvBgNV BAMTKDE4NkU5QUIyMDBGODhBODBFQkE5MkE0MzJBMDgxRkVEMEJCN0NFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+NPB1lo+BfLfWXTz5udhJNw9d 0AgwiWLCt+6AaLoMuWi66YZjXBzu+QSHgLbHzhFxQiRcskwuX5X21mqN3eqrVydU ZsVSztO54IixU/da40W8X9AltPHJCasBMtbB8XppaL+0mnEC9+tm76/YDjv3w4Be nrNcnG22WVpS/fsP4G+HZeTSNeN0Uj5DJJ4qmwQtzHrwy/80i9oE4jkBtJcAYgaH yo5J0fFwAi/bETQj4wvbrcxsMVDQHIoGqVOOSblAXJnvGhA58ITjlQpeYSA9dUOK FRlztDP0UOUha32oz5vO426QLnjNiHDiSTLTgYstfw+1yEyVDU3B+7F2/LzDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUGG6asgD4ioDrqSpDKggf7Qu3zogwHwYDVR0j BBgwFoAUKyzU1tRerCXul9Xma+k47zGmFoYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84Qjg4NEY1QTlGQTQ3MjhFODYwOEEzRERGODIxODA4NDkx M0I4QzE2QzdEMEZDOUZCMUUzODU3NEZERDE1NDU0LzAvMkIyQ0Q0RDZENDVFQUMy NUVFOTdENUU2NkJFOTM4RUYzMUE2MTY4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjJDRDRENkQ0NUVBQzI1RUU5 N0Q1RTY2QkU5MzhFRjMxQTYxNjg2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEI4ODRGNUE5RkE0NzI4RTg2MDhBM0RERjgyMTgwODQ5MTNCOEMxNkM3 RDBGQzlGQjFFMzg1NzRGREQxNTQ1NC8wLzJCMkNENEQ2RDQ1RUFDMjVFRTk3RDVF NjZCRTkzOEVGMzFBNjE2ODYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGipQ4DHXtUZBMQrkqsjpUwddT cb42ojUbLXJCrQM6fUq8X0xdYeA5M/YO6wzle2Exh7Y3ZGs7LsLxeIHkHm8Fti0o Kd6uIVIyjl6E2vPkj8xNQujdGladZhkjfExHVgTquVUtw0O3ipp+h+yRPMBkZtuF o0DqB90zakpfzUe1EfQ9QCNZeL20edcf+lVUnaR+FuXq4wSjJw7We4FmiW3gXIBX tUTUesUtqpIDMN3c2t78DhXhTduPuOhKLqPhew2AzNspNynhBKdyqaSNA2mFrQ33 uw+3xIUeXGR2Q8YxzA/JJFcY345KcbK5ZnbOEkK0CFAgZFZ6gtgwltnDxL4D -----END CERTIFICATE-----Generated at Sat Apr 18 03:11:38 2026 by rpki-client