$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.mft File: D09418521EA53A7D75F8FDF01F073B4955B0B259.mft (raw, json) Hash identifier: sBPKq9o0Irn8QuTn0AYu9SbxutfLDXpJDSrYgT09jRI= Subject key identifier: 8D:11:D2:21:B4:54:AF:D9:40:22:AB:4C:36:30:5C:33:D4:92:97:21 Authority key identifier: D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59 Certificate issuer: /CN=D09418521EA53A7D75F8FDF01F073B4955B0B259 Certificate serial: 0DE02CC2664B89D63C4B22864BCED56E24C777E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.mft Manifest number: 0189 Signing time: Thu 16 Apr 2026 08:13:57 +0000 Manifest this update: Thu 16 Apr 2026 08:08:57 +0000 Manifest next update: Tue 21 Apr 2026 02:41:57 +0000 Files and hashes: 1: 34352e3233342e38382e302f32322d3234203d3e20323636373632.roa (hash: HklnkmYn4f3rA095ZoC1nUW/dwLMLj4KAR5O/DS7iOY=) 2: D09418521EA53A7D75F8FDF01F073B4955B0B259.crl (hash: T8TkduCELRA28weH365AqAzhFv7HObBXUGIqmUG+QJQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.crl rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 02:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e0:2c:c2:66:4b:89:d6:3c:4b:22:86:4b:ce:d5:6e:24:c7:77:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D09418521EA53A7D75F8FDF01F073B4955B0B259 Validity Not Before: Apr 16 08:08:57 2026 GMT Not After : Apr 21 02:41:57 2026 GMT Subject: CN=8D11D221B454AFD94022AB4C36305C33D4929721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ea:9d:3a:b1:24:49:8b:71:db:7b:45:d2:e6: 19:b4:aa:b6:9f:05:9d:2b:34:3f:99:e2:de:32:e9: 65:0e:ec:5d:67:cb:6d:77:30:53:24:3b:e1:bf:81: 3e:68:f7:43:54:8e:39:49:1f:2d:de:df:89:dc:dd: bb:7d:45:dd:bd:e1:9e:f6:e6:69:d4:d5:a3:14:8d: b9:8e:75:c4:ab:d8:ca:61:a3:1b:52:03:65:d7:87: 7d:16:71:56:85:c2:0f:1a:04:ba:fd:3c:96:97:2f: e2:99:be:48:fc:5e:be:68:42:24:39:66:f9:0d:ac: 7a:43:ea:87:7c:3c:63:c2:37:4f:af:41:43:47:fb: 57:61:71:b0:e6:17:68:f9:0c:3d:d0:0f:96:3a:5a: d2:2a:47:f4:a6:78:f3:ba:12:64:30:d6:18:68:00: 7a:ae:b6:03:fa:1b:64:0c:bb:03:aa:1d:a8:77:69: 26:85:f3:f9:24:bb:23:b1:f5:79:ad:6f:61:a5:5d: df:fe:03:e8:81:b9:7c:05:1d:43:55:dd:81:d6:0d: 85:8e:c6:2f:99:4b:49:c0:ae:66:72:69:cc:fa:3b: 48:34:f1:42:78:16:cb:d2:56:fa:e6:62:72:68:de: 92:28:c8:96:6c:68:04:59:b7:33:5e:c3:bf:10:7b: 36:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:11:D2:21:B4:54:AF:D9:40:22:AB:4C:36:30:5C:33:D4:92:97:21 X509v3 Authority Key Identifier: keyid:D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:50:95:ca:73:bf:85:10:c4:93:a0:5f:52:10:ac:f9:54:53: 7d:b9:4b:65:d0:12:0a:5d:2c:8a:9d:4a:8d:8a:82:6e:cd:d5: dd:96:48:6d:e7:30:b2:23:e4:b8:47:f5:79:69:e7:14:57:35: 61:db:97:dd:d2:59:bb:ac:cd:5c:f3:8a:1d:10:89:50:02:de: 95:84:f9:32:86:13:03:34:ec:b4:fa:f4:e0:a7:5d:27:d1:7b: 78:95:e6:69:de:5c:50:ff:0f:56:87:fe:d8:3b:19:e2:82:ae: 03:b2:b6:9a:34:09:b9:f3:69:4c:26:a1:7b:45:f4:c0:e4:9b: de:b5:65:f2:75:ec:54:f0:0d:b9:97:19:59:c1:5a:bd:55:8e: 56:11:21:ca:f0:01:38:af:fe:66:93:39:95:d0:20:09:f4:cc: f7:13:4d:8e:a8:d9:d3:35:ce:08:b9:90:d7:1c:c6:41:ce:a0: 5f:b5:79:a4:a3:28:1b:f0:04:79:f8:9d:6b:08:c0:09:aa:86: f1:84:2c:6c:7d:29:01:88:0e:7c:40:54:78:b5:43:e6:3c:2a: e0:49:4f:67:04:04:6c:93:7a:75:27:fd:92:20:6e:85:65:9a: 96:ce:b1:71:4b:3b:07:ab:55:87:33:4b:6f:5e:59:dd:80:a0: 02:98:13:bb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDeAswmZLidY8SyKGS87VbiTHd+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA5NDE4NTIxRUE1M0E3RDc1RjhGREYwMUYwNzNCNDk1 NUIwQjI1OTAeFw0yNjA0MTYwODA4NTdaFw0yNjA0MjEwMjQxNTdaMDMxMTAvBgNV BAMTKDhEMTFEMjIxQjQ1NEFGRDk0MDIyQUI0QzM2MzA1QzMzRDQ5Mjk3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE6p06sSRJi3Hbe0XS5hm0qraf BZ0rND+Z4t4y6WUO7F1ny213MFMkO+G/gT5o90NUjjlJHy3e34nc3bt9Rd294Z72 5mnU1aMUjbmOdcSr2MphoxtSA2XXh30WcVaFwg8aBLr9PJaXL+KZvkj8Xr5oQiQ5 ZvkNrHpD6od8PGPCN0+vQUNH+1dhcbDmF2j5DD3QD5Y6WtIqR/SmePO6EmQw1hho AHqutgP6G2QMuwOqHah3aSaF8/kkuyOx9Xmtb2GlXd/+A+iBuXwFHUNV3YHWDYWO xi+ZS0nArmZyacz6O0g08UJ4FsvSVvrmYnJo3pIoyJZsaARZtzNew78QezaLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjRHSIbRUr9lAIqtMNjBcM9SSlyEwHwYDVR0j BBgwFoAU0JQYUh6lOn11+P3wHwc7SVWwslkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRjlDRUE5QTBGMDcwQzlBOTUyQjdCOEJDQTJCQjUxOUVF MDAxMjg1RUMyREY0MTM5NDExODk4MUJGQkI1Mzg5LzAvRDA5NDE4NTIxRUE1M0E3 RDc1RjhGREYwMUYwNzNCNDk1NUIwQjI1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMDk0MTg1MjFFQTUzQTdENzVG OEZERjAxRjA3M0I0OTU1QjBCMjU5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkY5Q0VBOUEwRjA3MEM5QTk1MkI3QjhCQ0EyQkI1MTlFRTAwMTI4NUVD MkRGNDEzOTQxMTg5ODFCRkJCNTM4OS8wL0QwOTQxODUyMUVBNTNBN0Q3NUY4RkRG MDFGMDczQjQ5NTVCMEIyNTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqUJXKc7+FEMSToF9SEKz5VFN9 uUtl0BIKXSyKnUqNioJuzdXdlkht5zCyI+S4R/V5aecUVzVh25fd0lm7rM1c84od EIlQAt6VhPkyhhMDNOy0+vTgp10n0Xt4leZp3lxQ/w9Wh/7YOxnigq4DsraaNAm5 82lMJqF7RfTA5JvetWXydexU8A25lxlZwVq9VY5WESHK8AE4r/5mkzmV0CAJ9Mz3 E02OqNnTNc4IuZDXHMZBzqBftXmkoygb8AR5+J1rCMAJqobxhCxsfSkBiA58QFR4 tUPmPCrgSU9nBARsk3p1J/2SIG6FZZqWzrFxSzsHq1WHM0tvXlndgKACmBO7 -----END CERTIFICATE-----Generated at Fri Apr 17 20:58:14 2026 by rpki-client