$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft File: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft (raw, json) Hash identifier: ZqzH86PgGgHgH+NRRh2oPqKQbqA4TT7obskp1M4zB8Y= Subject key identifier: EB:03:D0:B9:CD:8D:11:E4:49:95:7A:F7:A7:CA:33:D5:C9:D5:8D:B7 Authority key identifier: 3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA Certificate issuer: /CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA Certificate serial: 11AF785F7D408C51366C92F0DF5C40F33F3802AA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft Manifest number: 0187 Signing time: Wed 15 Apr 2026 20:46:57 +0000 Manifest this update: Wed 15 Apr 2026 20:41:57 +0000 Manifest next update: Tue 21 Apr 2026 02:09:57 +0000 Files and hashes: 1: 323830333a393663303a3a2f33322d3438203d3e20323635363534.roa (hash: +4WvnzVOt/EVUDZN9YCaDCCRLy9YYWSvnAxw1LtprVk=) 2: 3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa (hash: yjzSJUZj4zGt1MHhVmbLi1zvCsq+jdBn4Xm2sgrDts0=) 3: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl (hash: aCIfY8ucN7B6iOFH0ExBQJFsetW5MJd0fRpL4f9k5+8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 02:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:af:78:5f:7d:40:8c:51:36:6c:92:f0:df:5c:40:f3:3f:38:02:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA Validity Not Before: Apr 15 20:41:57 2026 GMT Not After : Apr 21 02:09:57 2026 GMT Subject: CN=EB03D0B9CD8D11E449957AF7A7CA33D5C9D58DB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:53:02:fa:e7:1b:cc:ae:ba:54:63:18:db: 24:c2:29:f8:ca:8f:5d:a8:25:c0:f9:6b:01:23:37: be:8f:39:e7:3e:37:cc:45:cb:d3:d4:0a:09:f5:95: 25:c6:1a:30:29:ea:dc:66:88:b2:bb:b0:8a:8a:08: 31:35:96:a7:5d:32:76:50:f0:a3:73:dd:44:c7:a3: 3d:0d:f3:70:62:ea:d5:cb:ca:58:71:5d:23:fe:1a: 8c:a4:dd:a5:4d:00:95:9e:f7:f2:3f:9a:ba:da:27: 29:41:23:3a:2d:92:ed:be:ce:fa:ca:3d:fb:bc:73: c6:f0:7c:ba:05:11:26:88:09:69:26:02:8b:9c:2f: 89:10:6c:2a:d8:66:2a:55:1c:e4:1e:e0:fa:81:93: 55:26:82:82:10:81:5f:11:6c:aa:9c:18:08:49:71: 12:79:27:67:b2:85:db:62:0f:4d:cc:f0:3b:93:b0: fc:b6:09:16:36:14:25:84:6b:61:2a:d2:3a:a0:e3: 28:3d:95:43:81:46:75:44:bc:98:a9:7a:d5:a4:60: 07:6c:dd:10:a3:e6:49:e9:1a:f9:05:13:d3:5b:83: d3:92:34:68:9d:24:41:ad:27:29:03:df:c8:ef:19: 1c:23:d0:e5:ec:81:13:00:e2:d6:da:dd:8a:e2:48: c2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:03:D0:B9:CD:8D:11:E4:49:95:7A:F7:A7:CA:33:D5:C9:D5:8D:B7 X509v3 Authority Key Identifier: keyid:3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4c:50:5f:0f:39:91:09:ec:7d:8c:91:97:4b:e4:85:b3:90: df:dd:8d:30:15:67:e4:2c:9c:32:46:f3:44:10:a6:32:3c:9f: cb:30:d6:57:1d:9d:f9:a5:2b:48:c7:4f:e2:7c:36:ce:da:91: 2f:40:b9:3d:7f:95:2b:16:c7:ca:a0:b5:9b:03:a2:1a:2e:53: 5c:09:25:e3:80:8a:a4:13:03:ed:8d:11:33:85:ca:4c:e5:8c: 96:b9:f2:ea:b7:9e:88:44:5f:37:87:d4:21:7d:75:69:27:a3: 62:ab:2a:bc:3f:c4:89:ee:63:32:4e:d5:91:3d:56:66:4d:cd: 7e:1b:5d:74:a4:5d:22:6d:09:73:b0:9f:66:59:f5:88:c7:74: 23:0c:c7:89:3a:86:3c:fd:e3:d9:ce:dd:7b:bd:de:b8:0c:fe: fb:4f:4d:81:b1:6d:79:ce:b7:d7:ac:73:56:a0:3d:01:d2:f2: fe:1a:c4:95:13:17:42:31:2b:01:ba:48:4f:30:05:1d:b7:37: 0d:a4:95:a6:f8:23:a5:79:97:49:77:43:5e:81:03:24:43:5b: cf:34:3e:d3:1a:de:c1:ba:9a:25:fb:77:2a:90:22:94:79:5c: 16:ba:a7:31:19:ca:f3:93:fe:2e:4a:81:0a:4c:45:5a:db:55: 0c:51:72:ca -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEa94X31AjFE2bJLw31xA8z84AqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBQUFCQjk5RjVDRjc5Q0E3QzI1RjAyMkY4NUY4NUUw RENCMkNCQTAeFw0yNjA0MTUyMDQxNTdaFw0yNjA0MjEwMjA5NTdaMDMxMTAvBgNV BAMTKEVCMDNEMEI5Q0Q4RDExRTQ0OTk1N0FGN0E3Q0EzM0Q1QzlENThEQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCaVMC+ucbzK66VGMY2yTCKfjK j12oJcD5awEjN76POec+N8xFy9PUCgn1lSXGGjAp6txmiLK7sIqKCDE1lqddMnZQ 8KNz3UTHoz0N83Bi6tXLylhxXSP+Goyk3aVNAJWe9/I/mrraJylBIzotku2+zvrK Pfu8c8bwfLoFESaICWkmAoucL4kQbCrYZipVHOQe4PqBk1UmgoIQgV8RbKqcGAhJ cRJ5J2eyhdtiD03M8DuTsPy2CRY2FCWEa2Eq0jqg4yg9lUOBRnVEvJipetWkYAds 3RCj5knpGvkFE9Nbg9OSNGidJEGtJykD38jvGRwj0OXsgRMA4tba3YriSMIBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6wPQuc2NEeRJlXr3p8oz1cnVjbcwHwYDVR0j BBgwFoAUPKqruZ9c95ynwl8CL4X4Xg3LLLowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85NjU4NzI5NzhCNDJGRTk5OTcwRUUwNEQ4QjIwNjA3NzEw ODNFMzA3NDFBNTA5QkFFQjAwREI2M0NFQ0IyM0QzLzAvM0NBQUFCQjk5RjVDRjc5 Q0E3QzI1RjAyMkY4NUY4NUUwRENCMkNCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0FBQUJCOTlGNUNGNzlDQTdD MjVGMDIyRjg1Rjg1RTBEQ0IyQ0JBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTY1ODcyOTc4QjQyRkU5OTk3MEVFMDREOEIyMDYwNzcxMDgzRTMwNzQx QTUwOUJBRUIwMERCNjNDRUNCMjNEMy8wLzNDQUFBQkI5OUY1Q0Y3OUNBN0MyNUYw MjJGODVGODVFMERDQjJDQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwTFBfDzmRCex9jJGXS+SFs5Df 3Y0wFWfkLJwyRvNEEKYyPJ/LMNZXHZ35pStIx0/ifDbO2pEvQLk9f5UrFsfKoLWb A6IaLlNcCSXjgIqkEwPtjREzhcpM5YyWufLqt56IRF83h9QhfXVpJ6Niqyq8P8SJ 7mMyTtWRPVZmTc1+G110pF0ibQlzsJ9mWfWIx3QjDMeJOoY8/ePZzt17vd64DP77 T02BsW15zrfXrHNWoD0B0vL+GsSVExdCMSsBukhPMAUdtzcNpJWm+COleZdJd0Ne gQMkQ1vPND7TGt7Bupol+3cqkCKUeVwWuqcxGcrzk/4uSoEKTEVa21UMUXLK -----END CERTIFICATE-----Generated at Fri Apr 17 19:06:29 2026 by rpki-client