$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.mft File: BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.mft (raw, json) Hash identifier: TnmvaqueZc1kq9vxBl0Fl0jYYWEztKz1tOjorzR2Q4U= Subject key identifier: 57:EC:4D:DB:B8:6C:66:C6:75:E5:7F:05:60:F9:9F:6B:C7:15:A8:A6 Authority key identifier: BA:E4:07:EC:C8:4E:4D:75:57:E3:AF:02:37:AC:E5:0C:0E:F3:98:28 Certificate issuer: /CN=BAE407ECC84E4D7557E3AF0237ACE50C0EF39828 Certificate serial: 37835ADB77C14CACA5D2ABE808138764D37FA285 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.mft Manifest number: 018B Signing time: Fri 17 Apr 2026 12:31:27 +0000 Manifest this update: Fri 17 Apr 2026 12:26:27 +0000 Manifest next update: Tue 21 Apr 2026 20:55:27 +0000 Files and hashes: 1: 3133382e3132312e3130342e302f32322d3235203d3e20323633373930.roa (hash: kUKzNCBL+FqZVWQq2gRmP9d2hMpiUydhYYQ/+/9FFIc=) 2: BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.crl (hash: EDQSBxTtaVdgpJz3ZZDR0Dpipe/zU6mfpreDmpJlJ10=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.crl rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 20:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:83:5a:db:77:c1:4c:ac:a5:d2:ab:e8:08:13:87:64:d3:7f:a2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAE407ECC84E4D7557E3AF0237ACE50C0EF39828 Validity Not Before: Apr 17 12:26:27 2026 GMT Not After : Apr 21 20:55:27 2026 GMT Subject: CN=57EC4DDBB86C66C675E57F0560F99F6BC715A8A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:15:08:f3:7f:00:77:ce:61:87:49:b9:e5: e0:f4:e7:2c:55:78:51:29:b9:2a:d8:43:f5:8d:ca: 18:40:1e:31:e0:2c:96:f6:0e:56:b8:f1:65:3b:08: 4a:b3:cf:1a:cb:61:ea:6a:c4:08:6b:11:4f:9b:b6: 8d:38:89:6e:27:ef:df:29:38:b7:ed:03:6d:4f:b2: 9b:f9:f4:b7:98:17:98:16:32:bd:22:18:9f:cf:70: b9:55:30:7b:c4:28:b8:d6:0a:73:7b:3a:c5:29:97: 55:37:d4:ef:58:6c:d8:57:55:47:ba:3f:73:54:ca: f8:8d:5c:e6:d9:0a:c0:46:73:c5:8c:ea:0f:64:b7: 4c:9c:c6:b3:a5:a0:d3:3d:4d:7c:54:f3:2f:17:5e: 4f:37:df:c2:96:3f:3c:b1:ad:ff:16:48:e9:49:b4: 83:c7:df:9a:3b:38:35:dd:fd:b5:53:ca:98:5c:b1: 05:fa:9d:73:69:a7:8c:38:63:75:c9:7a:13:14:34: 7f:b8:f3:04:a9:79:30:46:19:cd:c0:ea:0c:1b:c0: 7e:1c:9a:61:97:c4:fc:d0:df:24:e9:79:12:00:8d: fb:f7:9f:36:b0:a2:7e:1f:e7:a0:51:34:a3:eb:45: 38:c3:09:d0:07:ad:98:45:0a:75:e4:92:c9:bb:33: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EC:4D:DB:B8:6C:66:C6:75:E5:7F:05:60:F9:9F:6B:C7:15:A8:A6 X509v3 Authority Key Identifier: keyid:BA:E4:07:EC:C8:4E:4D:75:57:E3:AF:02:37:AC:E5:0C:0E:F3:98:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:96:1f:7a:1d:07:3f:ec:1d:c3:9b:d4:ac:00:04:87:cb:0d: 14:e3:16:87:37:cb:41:a8:58:3a:cc:42:8c:b1:ea:4b:83:d9: a0:5a:f0:22:b2:a7:74:5d:e7:a6:e6:8c:60:0a:14:ee:38:3a: 17:fe:ee:b2:7e:74:f7:c5:fd:a9:db:0d:56:9d:d1:48:6d:fc: bf:3f:97:19:ec:41:48:9d:44:c3:8d:5b:b3:dd:13:de:e8:8f: f8:28:6a:ed:3a:bd:a7:29:d3:e0:62:8a:be:51:07:f7:bc:73: c5:7e:41:a8:62:31:c5:43:7f:6b:51:28:35:08:aa:03:4b:88: 8d:7b:e1:a2:35:e6:a7:9e:98:2b:16:4e:df:42:a6:b3:80:82: 3f:8a:19:09:75:1d:5a:61:41:1e:d6:9f:d1:63:47:99:7a:e3: c7:b5:c9:24:96:9e:19:d6:3b:83:b3:14:b4:b9:60:95:eb:e1: e9:f7:34:68:dd:85:76:21:ca:16:15:a4:b0:f0:75:e3:7b:79: 49:e4:07:78:40:91:26:e8:c8:8a:c1:20:a5:81:d7:f7:a3:fa: 6a:39:44:33:a5:53:fb:5d:ba:7b:5e:59:15:d0:91:40:f8:1c: 6e:2c:40:c2:4d:53:14:67:e1:66:df:11:0e:c5:4f:32:d1:7d: 19:cc:fe:9f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUN4Na23fBTKyl0qvoCBOHZNN/ooUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFFNDA3RUNDODRFNEQ3NTU3RTNBRjAyMzdBQ0U1MEMw RUYzOTgyODAeFw0yNjA0MTcxMjI2MjdaFw0yNjA0MjEyMDU1MjdaMDMxMTAvBgNV BAMTKDU3RUM0RERCQjg2QzY2QzY3NUU1N0YwNTYwRjk5RjZCQzcxNUE4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZBUI838Ad85hh0m55eD05yxV eFEpuSrYQ/WNyhhAHjHgLJb2Dla48WU7CEqzzxrLYepqxAhrEU+bto04iW4n798p OLftA21Pspv59LeYF5gWMr0iGJ/PcLlVMHvEKLjWCnN7OsUpl1U31O9YbNhXVUe6 P3NUyviNXObZCsBGc8WM6g9kt0ycxrOloNM9TXxU8y8XXk8338KWPzyxrf8WSOlJ tIPH35o7ODXd/bVTyphcsQX6nXNpp4w4Y3XJehMUNH+48wSpeTBGGc3A6gwbwH4c mmGXxPzQ3yTpeRIAjfv3nzawon4f56BRNKPrRTjDCdAHrZhFCnXkksm7MxIBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUV+xN27hsZsZ15X8FYPmfa8cVqKYwHwYDVR0j BBgwFoAUuuQH7MhOTXVX468CN6zlDA7zmCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMTAxOUE2Njg0OTRFOEUzREZCN0RFNTlGOUIwOUY4OUIz QTgwRTI4OTM2Qzc0NDJFQzk1QjNGMjUxMDAwMzkyLzAvQkFFNDA3RUNDODRFNEQ3 NTU3RTNBRjAyMzdBQ0U1MEMwRUYzOTgyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQUU0MDdFQ0M4NEU0RDc1NTdF M0FGMDIzN0FDRTUwQzBFRjM5ODI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjEwMTlBNjY4NDk0RThFM0RGQjdERTU5RjlCMDlGODlCM0E4MEUyODkz NkM3NDQyRUM5NUIzRjI1MTAwMDM5Mi8wL0JBRTQwN0VDQzg0RTRENzU1N0UzQUYw MjM3QUNFNTBDMEVGMzk4MjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChlh96HQc/7B3Dm9SsAASHyw0U 4xaHN8tBqFg6zEKMsepLg9mgWvAisqd0Xeem5oxgChTuODoX/u6yfnT3xf2p2w1W ndFIbfy/P5cZ7EFInUTDjVuz3RPe6I/4KGrtOr2nKdPgYoq+UQf3vHPFfkGoYjHF Q39rUSg1CKoDS4iNe+GiNeannpgrFk7fQqazgII/ihkJdR1aYUEe1p/RY0eZeuPH tckklp4Z1juDsxS0uWCV6+Hp9zRo3YV2IcoWFaSw8HXje3lJ5Ad4QJEm6MiKwSCl gdf3o/pqOUQzpVP7Xbp7XlkV0JFA+BxuLEDCTVMUZ+Fm3xEOxU8y0X0ZzP6f -----END CERTIFICATE-----Generated at Fri Apr 17 20:58:04 2026 by rpki-client