$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: S+Z8hOZmmdOIqA26HKZMijNNKN/IHrbMyj010/qK0gc= Subject key identifier: EE:F5:32:88:0D:2C:14:80:D7:2D:80:0B:BD:BC:A8:2D:17:2A:BA:25 Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 352F9FB5E0B51297A75B22F161B5526629131270 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: 0191 Signing time: Fri 17 Apr 2026 12:36:32 +0000 Manifest this update: Fri 17 Apr 2026 12:31:32 +0000 Manifest next update: Thu 23 Apr 2026 03:44:32 +0000 Files and hashes: 1: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: azb0UPW1o9/DszpQQApr/57mD8UR43VsJ/ew7Sp/Ar0=) 2: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: 2ROMy1hMNtl4LlD4eAmab5XkXJI77b/wCGmKJrMFckU=) 3: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=) 4: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: pROQMKsiDV21pFjsta+9j86ncqU60mdI9hZdoI3SRKo=) 5: 34352e3136342e32322e302f32342d3234203d3e203238343233.roa (hash: jnDQ7QTvt7MtCmcH9i+dr1cBZcskNKDgGPqDpsYzawE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2f:9f:b5:e0:b5:12:97:a7:5b:22:f1:61:b5:52:66:29:13:12:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Apr 17 12:31:32 2026 GMT Not After : Apr 23 03:44:32 2026 GMT Subject: CN=EEF532880D2C1480D72D800BBDBCA82D172ABA25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:89:8f:63:35:bb:67:11:fd:22:84:94:b1:95: 27:10:1c:48:ea:6b:dc:fc:b4:e8:5e:dc:d6:e6:51: 17:d1:91:1d:10:b9:36:18:48:f7:c9:7a:d0:51:5b: 5e:71:f2:b9:14:72:00:f6:67:30:a3:2e:fc:2a:ed: 92:59:3e:3c:f8:ec:9c:4c:8a:8c:49:1f:66:29:2b: 92:e4:17:df:0f:3a:74:95:1a:8b:a9:37:11:e8:57: f4:2b:48:54:7c:69:95:fd:db:19:bd:fb:8f:bf:5d: 77:1a:f3:48:12:a9:f7:81:43:a6:4a:08:82:59:61: ae:09:c5:3d:4d:6a:29:a5:ce:bf:c2:6e:43:fa:0f: dc:03:8d:d6:12:07:89:8a:29:8c:b6:fa:75:86:a3: d7:00:af:f9:ad:97:c0:7f:27:1b:29:00:3a:3a:44: 48:d7:52:99:bd:d7:d2:02:6e:3f:8c:81:31:41:37: ac:5b:f9:3a:87:30:cc:3d:bd:d4:7a:15:d3:f1:a0: e7:2d:5c:af:e4:0b:fb:0f:f4:70:ef:cc:96:6d:a1: d8:8e:82:82:7d:74:a9:e0:98:fc:f9:dd:25:02:79: 23:ec:5c:32:95:ad:5d:74:4c:73:a5:df:b5:2f:1c: 4d:60:87:cd:7e:34:02:94:0c:a4:37:a1:6c:92:49: 36:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F5:32:88:0D:2C:14:80:D7:2D:80:0B:BD:BC:A8:2D:17:2A:BA:25 X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ee:3f:b6:b9:48:d1:72:78:3a:80:6a:91:2f:e2:b4:e6:e4: 3f:5f:87:9a:99:69:e3:04:35:e9:1b:36:37:a4:4f:1a:63:9d: c9:7a:e1:7c:d6:31:e1:76:b3:92:9f:a2:a7:1d:ab:5b:6c:c1: 0c:68:1e:f8:27:9d:e2:a2:65:68:67:9d:51:c1:86:92:7c:a2: 9a:ff:6e:94:22:0e:66:4f:68:1c:60:e9:30:04:67:a6:17:5f: ef:72:a1:87:54:f2:cc:64:98:de:39:33:1d:ae:fc:e3:bc:6d: 47:52:fc:66:aa:40:42:e8:65:7d:76:de:d8:d4:ae:7e:7c:35: 28:6b:36:dc:df:5e:68:82:34:f3:fa:6d:94:9f:15:7c:5b:a9: 42:a1:6a:e5:ed:3f:84:69:33:25:a1:6a:55:04:e5:98:35:76: c2:e3:e1:4c:16:cd:73:44:24:24:59:51:9f:41:ea:aa:ce:58: b3:bc:4b:f4:93:64:37:fa:f4:22:32:54:0e:a3:3f:cf:7c:2f: eb:da:12:06:f8:4f:8b:14:eb:53:a5:76:77:a0:ca:8e:42:9f: c0:a9:d7:02:7e:d6:50:c6:c4:2f:02:10:88:56:a9:38:83:49: 84:ca:1a:fe:b9:79:60:98:40:f6:d5:0e:b7:f3:20:8d:72:8d: ed:d4:7e:52 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNS+fteC1EpenWyLxYbVSZikTEnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNjA0MTcxMjMxMzJaFw0yNjA0MjMwMzQ0MzJaMDMxMTAvBgNV BAMTKEVFRjUzMjg4MEQyQzE0ODBENzJEODAwQkJEQkNBODJEMTcyQUJBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfiY9jNbtnEf0ihJSxlScQHEjq a9z8tOhe3NbmURfRkR0QuTYYSPfJetBRW15x8rkUcgD2ZzCjLvwq7ZJZPjz47JxM ioxJH2YpK5LkF98POnSVGoupNxHoV/QrSFR8aZX92xm9+4+/XXca80gSqfeBQ6ZK CIJZYa4JxT1Naimlzr/CbkP6D9wDjdYSB4mKKYy2+nWGo9cAr/mtl8B/JxspADo6 REjXUpm919ICbj+MgTFBN6xb+TqHMMw9vdR6FdPxoOctXK/kC/sP9HDvzJZtodiO goJ9dKngmPz53SUCeSPsXDKVrV10THOl37UvHE1gh81+NAKUDKQ3oWySSTZzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7vUyiA0sFIDXLYALvbyoLRcquiUwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAl7j+2uUjRcng6gGqRL+K05uQ/ X4eamWnjBDXpGzY3pE8aY53JeuF81jHhdrOSn6KnHatbbMEMaB74J53iomVoZ51R wYaSfKKa/26UIg5mT2gcYOkwBGemF1/vcqGHVPLMZJjeOTMdrvzjvG1HUvxmqkBC 6GV9dt7Y1K5+fDUoazbc315ogjTz+m2UnxV8W6lCoWrl7T+EaTMloWpVBOWYNXbC 4+FMFs1zRCQkWVGfQeqqzlizvEv0k2Q3+vQiMlQOoz/PfC/r2hIG+E+LFOtTpXZ3 oMqOQp/AqdcCftZQxsQvAhCIVqk4g0mEyhr+uXlgmED21Q638yCNco3t1H5S -----END CERTIFICATE-----Generated at Sat Apr 18 04:19:18 2026 by rpki-client