$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft File: AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft (raw, json) Hash identifier: cks+lPDnq9c/G1KZm9C4Jre13VUMpr8W0ONGRkajz1g= Subject key identifier: 78:72:44:6B:4B:EA:0F:40:66:3F:FB:CB:97:1C:BA:40:9C:6C:09:B6 Authority key identifier: AF:4E:F7:30:0D:CD:35:72:D2:5A:D9:FC:9E:15:44:19:3A:D7:F4:14 Certificate issuer: /CN=AF4EF7300DCD3572D25AD9FC9E1544193AD7F414 Certificate serial: 0BB82B37D7D6CC405869D2A56E523319530CE5CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft Manifest number: 0185 Signing time: Wed 15 Apr 2026 14:48:38 +0000 Manifest this update: Wed 15 Apr 2026 14:43:38 +0000 Manifest next update: Mon 20 Apr 2026 19:05:38 +0000 Files and hashes: 1: 323830333a666132303a3a2f33322d3438203d3e203532333237.roa (hash: 2vHFJ/bzFmopwQt5qJdzKxCohOQuB7K1ddWfqYFZ2Gk=) 2: 34352e3232362e3130302e302f32322d3234203d3e203532333237.roa (hash: lOt19yKVgMA8Lb7KdzclnPjHCPulohYtKiwDu6GE0+Y=) 3: AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl (hash: qD3ZV9Ql4wttnXvlowBTGDpadIRpt1eFcfUkPyYi210=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Apr 2026 19:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b8:2b:37:d7:d6:cc:40:58:69:d2:a5:6e:52:33:19:53:0c:e5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4EF7300DCD3572D25AD9FC9E1544193AD7F414 Validity Not Before: Apr 15 14:43:38 2026 GMT Not After : Apr 20 19:05:38 2026 GMT Subject: CN=7872446B4BEA0F40663FFBCB971CBA409C6C09B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5d:65:76:78:e6:cf:8e:9d:25:e5:8b:1e:c9: 4c:f9:af:61:08:ce:fc:58:8a:ff:c0:c0:e6:2f:35: 6f:1e:42:83:24:d1:94:89:25:05:ea:ff:a1:60:f1: fc:79:2a:a3:eb:7c:52:d6:6f:99:ee:d6:d0:66:ef: 9d:81:65:92:5d:d5:54:38:62:aa:90:3e:27:d7:66: 32:d6:cc:63:65:ce:5d:ba:5f:61:e5:06:44:05:79: c2:33:39:78:c8:dc:24:e2:37:df:6a:b6:11:08:8b: 9c:cb:45:b5:d8:77:bd:68:76:33:a5:03:65:8b:5f: 2f:83:ab:35:1b:a0:a5:17:1a:7b:32:82:fa:65:b8: 50:e2:d3:82:07:ad:c1:1e:7b:ea:ea:2e:13:17:41: 0b:b3:41:00:71:82:cf:27:cf:ac:9c:ee:d8:77:74: 97:8a:cd:b6:88:58:ed:dd:18:f1:5f:c1:49:fc:19: 6b:f3:a7:65:ea:57:41:1e:c6:f9:d8:f4:22:b9:c3: 97:34:79:14:68:b6:28:d7:cc:da:71:98:56:6e:9a: ad:2e:a6:1b:62:57:9f:e7:be:5f:2f:26:41:6c:3b: fa:6b:ad:21:87:6e:49:9a:2c:ac:91:36:8a:ce:c0: d1:2b:06:a1:b0:17:bc:39:75:5a:1d:b3:a9:4f:b2: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:72:44:6B:4B:EA:0F:40:66:3F:FB:CB:97:1C:BA:40:9C:6C:09:B6 X509v3 Authority Key Identifier: keyid:AF:4E:F7:30:0D:CD:35:72:D2:5A:D9:FC:9E:15:44:19:3A:D7:F4:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9d:3a:fb:6e:29:d9:60:7e:86:2d:9d:c5:66:59:18:eb:3e: ce:54:bc:f7:29:c6:d8:e1:80:d8:9b:8f:c6:37:e0:d6:43:5c: 92:cd:76:0e:fd:23:5d:d3:5f:59:7f:dd:4a:3c:33:05:da:51: 0c:44:3d:67:dd:24:f9:34:16:b9:78:da:1f:86:9c:fb:87:28: 61:ed:de:95:0e:f4:3f:af:a1:66:bf:8d:4b:fd:d2:f8:d8:5b: dc:14:bf:4f:b4:85:b9:af:f2:5e:68:4a:f4:5c:27:60:de:3d: e8:5a:c2:1c:d1:af:31:40:25:5c:f2:f7:af:32:17:52:31:4f: 4d:98:b4:03:1a:7a:04:35:4b:f5:01:a0:30:1b:b3:e1:4b:0b: e2:72:31:c0:a0:a0:b2:2b:fd:ea:6a:23:44:ef:e5:3f:3c:42: 8e:fb:1b:79:d8:85:5d:0c:62:bf:b1:38:82:48:72:65:ec:fb: b0:ed:e8:03:b6:87:e0:5c:5c:f4:e2:f6:a1:41:8b:fe:48:90: 7c:ea:34:16:2a:16:c9:f3:ea:27:b0:cd:7e:cd:22:05:f5:d5: 82:99:36:c3:2c:47:c8:d4:5b:17:7b:de:61:af:8e:a2:dc:5a: d3:83:6f:0e:4f:8e:d1:e6:0e:99:8e:2a:41:86:f0:ab:3b:93: 44:a7:3a:68 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUC7grN9fWzEBYadKlblIzGVMM5c4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0RUY3MzAwRENEMzU3MkQyNUFEOUZDOUUxNTQ0MTkz QUQ3RjQxNDAeFw0yNjA0MTUxNDQzMzhaFw0yNjA0MjAxOTA1MzhaMDMxMTAvBgNV BAMTKDc4NzI0NDZCNEJFQTBGNDA2NjNGRkJDQjk3MUNCQTQwOUM2QzA5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XWV2eObPjp0l5YseyUz5r2EI zvxYiv/AwOYvNW8eQoMk0ZSJJQXq/6Fg8fx5KqPrfFLWb5nu1tBm752BZZJd1VQ4 YqqQPifXZjLWzGNlzl26X2HlBkQFecIzOXjI3CTiN99qthEIi5zLRbXYd71odjOl A2WLXy+DqzUboKUXGnsygvpluFDi04IHrcEee+rqLhMXQQuzQQBxgs8nz6yc7th3 dJeKzbaIWO3dGPFfwUn8GWvzp2XqV0EexvnY9CK5w5c0eRRotijXzNpxmFZumq0u phtiV5/nvl8vJkFsO/prrSGHbkmaLKyRNorOwNErBqGwF7w5dVods6lPsriRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUeHJEa0vqD0BmP/vLlxy6QJxsCbYwHwYDVR0j BBgwFoAUr073MA3NNXLSWtn8nhVEGTrX9BQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MzNBQjMwRkJFNUNFNDRDMUEwMjRCNUNEQjVFRTM1RUQ0 OUZFNTEyOEEzRTg3OTlFOTRERTQzNUYzNTlDQ0FCLzAvQUY0RUY3MzAwRENEMzU3 MkQyNUFEOUZDOUUxNTQ0MTkzQUQ3RjQxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjRFRjczMDBEQ0QzNTcyRDI1 QUQ5RkM5RTE1NDQxOTNBRDdGNDE0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTMzQUIzMEZCRTVDRTQ0QzFBMDI0QjVDREI1RUUzNUVENDlGRTUxMjhB M0U4Nzk5RTk0REU0MzVGMzU5Q0NBQi8wL0FGNEVGNzMwMERDRDM1NzJEMjVBRDlG QzlFMTU0NDE5M0FEN0Y0MTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMnTr7binZYH6GLZ3FZlkY6z7O VLz3KcbY4YDYm4/GN+DWQ1ySzXYO/SNd019Zf91KPDMF2lEMRD1n3ST5NBa5eNof hpz7hyhh7d6VDvQ/r6Fmv41L/dL42FvcFL9PtIW5r/JeaEr0XCdg3j3oWsIc0a8x QCVc8vevMhdSMU9NmLQDGnoENUv1AaAwG7PhSwvicjHAoKCyK/3qaiNE7+U/PEKO +xt52IVdDGK/sTiCSHJl7Puw7egDtofgXFz04vahQYv+SJB86jQWKhbJ8+onsM1+ zSIF9dWCmTbDLEfI1FsXe95hr46i3FrTg28OT47R5g6ZjipBhvCrO5NEpzpo -----END CERTIFICATE-----Generated at Fri Apr 17 18:30:11 2026 by rpki-client