$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft File: D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft (raw, json) Hash identifier: Dnid1PHuf9TPWOevg0/14DZc9KgHd19snIF2usEZ02U= Subject key identifier: 32:1C:6B:54:6A:0B:26:74:EC:C2:D6:DA:E9:DD:72:DB:C4:30:4D:7B Authority key identifier: D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52 Certificate issuer: /CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52 Certificate serial: 5ABC1C33E9DB1063AB9E006EB74B8A1FDB5D132F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft Manifest number: 017F Signing time: Fri 17 Apr 2026 01:34:23 +0000 Manifest this update: Fri 17 Apr 2026 01:29:23 +0000 Manifest next update: Tue 21 Apr 2026 13:09:23 +0000 Files and hashes: 1: D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl (hash: XFfOgYky4SQRxK9lUxCwEC7VV0VFMVfCCgYGz6qBE8M=) 2: 34352e3137332e3138322e302f32332d3234203d3e20323637383237.roa (hash: OpEvqGpXZ1NhkLusoCwX9nCVxS/H9uMeazRwOm9M3T0=) 3: 34352e3137332e3138312e302f32342d3234203d3e20323637383237.roa (hash: Bf03kZFX4aTDpv9rMaSfA6rZQRBFqB3GV+XKp7tF7UU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 13:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:bc:1c:33:e9:db:10:63:ab:9e:00:6e:b7:4b:8a:1f:db:5d:13:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52 Validity Not Before: Apr 17 01:29:23 2026 GMT Not After : Apr 21 13:09:23 2026 GMT Subject: CN=321C6B546A0B2674ECC2D6DAE9DD72DBC4304D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e9:22:f1:0d:cb:da:cb:f7:da:a7:1a:ca:d1: c9:b0:01:0a:89:b8:b4:ef:1a:9d:eb:9a:4d:06:27: 85:3d:b5:b5:4a:08:80:c1:21:c2:06:3b:0d:29:ae: ab:c0:00:7f:3f:92:e8:9a:34:77:1c:08:de:9a:1b: f8:e7:1b:c2:cc:22:0a:87:35:d2:dc:41:ac:1d:27: b4:59:b1:ab:f9:1d:4a:8a:83:ab:19:a0:c4:34:e0: 06:0f:4d:a2:94:af:b9:c5:e1:45:28:57:fa:49:bd: 86:8a:bc:53:36:22:7d:a0:1a:a7:7e:a9:6b:12:fe: 9e:28:33:9c:da:6b:c5:5e:7f:a5:26:4e:17:a3:da: 34:78:e3:bf:01:f9:45:16:55:a4:e4:84:ed:af:76: 18:9b:43:7f:98:d4:cb:8a:65:c8:14:36:ad:a9:97: d9:99:bf:db:a7:8e:e4:09:ce:8a:34:84:13:cb:87: 95:e5:88:90:d1:b3:e7:13:ae:e3:56:24:97:72:a1: 52:aa:8a:30:93:c0:e3:91:ba:76:09:50:e8:e1:70: f7:d3:45:48:52:03:82:22:ad:39:63:4d:0c:30:6f: 18:df:50:c3:f1:ca:2d:25:4b:0e:61:43:9c:9f:3e: 33:eb:43:95:52:b0:c9:5c:70:ab:ba:f5:71:5f:f5: a0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1C:6B:54:6A:0B:26:74:EC:C2:D6:DA:E9:DD:72:DB:C4:30:4D:7B X509v3 Authority Key Identifier: keyid:D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1f:0e:05:7b:b0:8e:89:00:fb:a9:0b:98:13:9d:c4:27:d9: d3:d8:8a:fa:ac:85:83:2a:f9:0a:b2:6e:d0:57:f0:66:89:c6: 31:90:c1:e7:70:c7:8c:e8:cf:8f:bf:05:38:d3:53:85:5c:66: 63:69:1b:d7:64:f5:dd:10:9b:12:3d:01:cd:07:c5:dc:b0:2e: 63:81:46:79:87:b4:ae:c0:e2:a9:4f:48:b9:42:e5:ca:d8:60: ce:43:ad:f9:98:e1:f2:c4:40:8f:a1:53:4d:b5:66:c2:df:7d: 39:eb:68:5b:71:65:50:90:05:c5:d3:ff:75:bc:cd:e5:bb:9d: d8:a4:e5:4f:e6:ae:90:2c:e0:15:b1:64:ab:67:e9:43:ea:a0: d4:61:af:44:4d:9e:35:3b:d7:64:fa:e1:25:54:d0:12:a1:bf: 4e:36:1b:a4:0e:3f:f1:56:0f:f1:6b:a5:31:95:ec:f9:df:7b: 70:78:27:24:22:44:10:a0:8c:28:df:9d:d2:11:aa:bb:fa:5e: 56:d1:e7:39:68:a9:5c:5f:04:e9:26:e0:f5:4a:49:9b:31:46: b4:2c:c9:d1:01:1d:fc:71:7d:34:19:e9:7b:38:17:81:58:7e: 84:3a:78:45:d2:86:ad:78:53:ec:a3:a7:f2:cb:4f:82:99:22: fc:df:56:1c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWrwcM+nbEGOrngBut0uKH9tdEy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGODlCMDY3NUVGRjIzQTI1NjAyOUVDNzgyMzRBRTdC OTdGNkI1MjAeFw0yNjA0MTcwMTI5MjNaFw0yNjA0MjExMzA5MjNaMDMxMTAvBgNV BAMTKDMyMUM2QjU0NkEwQjI2NzRFQ0MyRDZEQUU5REQ3MkRCQzQzMDREN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa6SLxDcvay/fapxrK0cmwAQqJ uLTvGp3rmk0GJ4U9tbVKCIDBIcIGOw0prqvAAH8/kuiaNHccCN6aG/jnG8LMIgqH NdLcQawdJ7RZsav5HUqKg6sZoMQ04AYPTaKUr7nF4UUoV/pJvYaKvFM2In2gGqd+ qWsS/p4oM5zaa8Vef6UmThej2jR4478B+UUWVaTkhO2vdhibQ3+Y1MuKZcgUNq2p l9mZv9unjuQJzoo0hBPLh5XliJDRs+cTruNWJJdyoVKqijCTwOORunYJUOjhcPfT RUhSA4IirTljTQwwbxjfUMPxyi0lSw5hQ5yfPjPrQ5VSsMlccKu69XFf9aBhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMhxrVGoLJnTswtba6d1y28QwTXswHwYDVR0j BBgwFoAU2PibBnXv8jolYCnseCNK57l/a1IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85QjNERjlBOTZDQjlEQjVCQ0I2QzVFMEI1MzkxQzNEMTY4 QUZGMTVCMDU2RTI1NkI4ODY5OTMxRTM5QkNFRTIzLzAvRDhGODlCMDY3NUVGRjIz QTI1NjAyOUVDNzgyMzRBRTdCOTdGNkI1Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEY4OUIwNjc1RUZGMjNBMjU2 MDI5RUM3ODIzNEFFN0I5N0Y2QjUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUIzREY5QTk2Q0I5REI1QkNCNkM1RTBCNTM5MUMzRDE2OEFGRjE1QjA1 NkUyNTZCODg2OTkzMUUzOUJDRUUyMy8wL0Q4Rjg5QjA2NzVFRkYyM0EyNTYwMjlF Qzc4MjM0QUU3Qjk3RjZCNTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzHw4Fe7COiQD7qQuYE53EJ9nT 2Ir6rIWDKvkKsm7QV/BmicYxkMHncMeM6M+PvwU401OFXGZjaRvXZPXdEJsSPQHN B8XcsC5jgUZ5h7SuwOKpT0i5QuXK2GDOQ635mOHyxECPoVNNtWbC330562hbcWVQ kAXF0/91vM3lu53YpOVP5q6QLOAVsWSrZ+lD6qDUYa9ETZ41O9dk+uElVNASob9O NhukDj/xVg/xa6Uxlez533tweCckIkQQoIwo353SEaq7+l5W0ec5aKlcXwTpJuD1 SkmbMUa0LMnRAR38cX00Gel7OBeBWH6EOnhF0oateFPso6fyy0+CmSL831Yc -----END CERTIFICATE-----Generated at Sat Apr 18 03:28:16 2026 by rpki-client