$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft File: 2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft (raw, json) Hash identifier: ueHhC4fw5rVmWduk8LEFwfNHfPVbIU4XH53aaAekn8g= Subject key identifier: 75:8C:85:0F:19:BC:3D:A2:E7:17:F3:23:3B:46:DD:54:B0:0C:34:C9 Authority key identifier: 2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A Certificate issuer: /CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A Certificate serial: 19757B9BC9664C8CE5C3997CA81D2839D3242626 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft Manifest number: 018C Signing time: Fri 17 Apr 2026 13:27:00 +0000 Manifest this update: Fri 17 Apr 2026 13:22:00 +0000 Manifest next update: Wed 22 Apr 2026 12:20:00 +0000 Files and hashes: 1: 2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl (hash: dkNFeXgKR8F5+c2n8sYAkiXyautriOtNfQA9+8yCo0U=) 2: 3230302e35322e3132382e302f32302d3234203d3e203136353331.roa (hash: ZgrmsL6xfnG7g4+z7TMjWOpccNPG/t07ccwc7aRCO40=) 3: 3230302e37362e39362e302f32302d3234203d3e203136353331.roa (hash: 8JB8IF47Z+t5u7WXpUsmguipSCp3Lke2xVJPbcojdEQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 19:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:75:7b:9b:c9:66:4c:8c:e5:c3:99:7c:a8:1d:28:39:d3:24:26:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A Validity Not Before: Apr 17 13:22:00 2026 GMT Not After : Apr 22 12:20:00 2026 GMT Subject: CN=758C850F19BC3DA2E717F3233B46DD54B00C34C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:a7:a9:35:87:b9:99:01:da:5c:40:fb:34: f6:b7:7e:eb:78:8a:2b:a3:ac:d1:22:70:4d:97:4b: 59:97:94:0d:67:f7:2d:6d:f8:c4:09:47:95:bd:91: d9:a6:f1:e3:4e:30:9e:6e:dd:17:10:93:5b:e5:84: df:31:f9:27:8f:eb:28:da:48:ad:08:ba:39:dd:93: e8:97:05:99:9a:36:ee:41:1a:ba:a5:ee:83:10:9d: 6f:55:6a:28:13:38:a1:13:92:41:35:88:44:5a:88: 1d:24:63:dd:0b:14:6c:ae:a8:68:0f:ce:dd:7c:05: 33:c6:31:3c:c3:ef:da:cb:6f:a2:d8:82:9d:e6:24: da:f6:68:60:c7:fd:2a:c4:bf:90:a2:a3:2e:a8:7f: 24:04:69:27:fe:fd:78:e8:21:6c:89:69:52:af:e4: 30:84:02:e7:d3:f1:6c:52:8e:1b:73:bc:f7:e4:ab: 45:96:35:a6:18:25:90:ee:89:08:6d:93:22:7d:14: f3:73:6c:10:b7:14:5f:03:8d:49:a2:c1:d3:18:84: d7:53:4d:6a:ec:bf:01:af:62:4b:9c:44:e5:26:8e: cc:dd:5a:80:c7:a2:66:22:38:a2:be:71:e3:52:da: 3c:7a:91:d6:f7:0e:c2:10:86:1a:a9:cc:45:b0:76: d8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8C:85:0F:19:BC:3D:A2:E7:17:F3:23:3B:46:DD:54:B0:0C:34:C9 X509v3 Authority Key Identifier: keyid:2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:7c:8e:3c:bc:16:09:91:41:73:a8:aa:cd:77:1d:ba:f6:21: f1:16:a6:2b:d0:c2:03:e5:90:99:9e:c1:c5:c9:32:ff:4b:f5: f7:84:4d:94:78:46:99:b1:75:f2:7e:21:af:aa:b3:5d:eb:73: 8a:0d:1b:eb:79:4a:43:c9:73:3b:5f:8b:20:64:f7:9c:70:95: 24:57:16:91:c1:a5:fc:32:c8:2d:99:74:78:08:74:78:61:3f: d4:14:be:8d:2d:41:2a:ee:76:20:36:cc:d2:35:a3:ee:fa:b7: 83:c0:8e:9c:d7:b3:ec:b2:49:36:70:46:8f:92:ef:9d:29:c1: 05:20:d4:63:b0:a2:e7:d0:27:0a:03:9a:19:f5:a9:35:a7:72: 5c:2b:1f:10:c7:03:c1:9d:23:0c:dc:29:45:66:f7:6a:c2:bd: 52:4c:51:0a:ed:27:8d:76:fe:cd:5a:6b:76:15:37:7f:d6:4d: 33:ba:ff:4e:36:0f:80:77:eb:db:18:6f:8e:22:66:da:c6:e8: 34:ce:b7:43:d4:b8:53:5c:36:16:4a:bb:20:b6:e8:c6:cf:04: a2:78:5d:06:55:78:f7:a0:f6:c2:4c:0b:6a:d4:c8:d2:55:68: 0c:64:31:0f:73:13:c9:5b:9c:27:16:59:bf:d9:22:ef:29:60: 4c:17:07:54 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGXV7m8lmTIzlw5l8qB0oOdMkJiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCMDZFQkQyOEZFODNBNTY0RkEzREZDODNGNEY5OEFD NjIwQzk4QTAeFw0yNjA0MTcxMzIyMDBaFw0yNjA0MjIxMjIwMDBaMDMxMTAvBgNV BAMTKDc1OEM4NTBGMTlCQzNEQTJFNzE3RjMyMzNCNDZERDU0QjAwQzM0QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFO6epNYe5mQHaXED7NPa3fut4 iiujrNEicE2XS1mXlA1n9y1t+MQJR5W9kdmm8eNOMJ5u3RcQk1vlhN8x+SeP6yja SK0Iujndk+iXBZmaNu5BGrql7oMQnW9VaigTOKETkkE1iERaiB0kY90LFGyuqGgP zt18BTPGMTzD79rLb6LYgp3mJNr2aGDH/SrEv5Cioy6ofyQEaSf+/XjoIWyJaVKv 5DCEAufT8WxSjhtzvPfkq0WWNaYYJZDuiQhtkyJ9FPNzbBC3FF8DjUmiwdMYhNdT TWrsvwGvYkucROUmjszdWoDHomYiOKK+ceNS2jx6kdb3DsIQhhqpzEWwdtg7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUdYyFDxm8PaLnF/MjO0bdVLAMNMkwHwYDVR0j BBgwFoAUL7BuvSj+g6Vk+j38g/T5isYgyYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DOTU0QTg0NjQyMzZGMUJBOEU2MUM3QjZENjcyODZBMDA5 M0ZGRDQwOTM0NDY1M0ZGMEQ5QTc4NjkxRjQ3NDBGLzAvMkZCMDZFQkQyOEZFODNB NTY0RkEzREZDODNGNEY5OEFDNjIwQzk4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkIwNkVCRDI4RkU4M0E1NjRG QTNERkM4M0Y0Rjk4QUM2MjBDOThBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzk1NEE4NDY0MjM2RjFCQThFNjFDN0I2RDY3Mjg2QTAwOTNGRkQ0MDkz NDQ2NTNGRjBEOUE3ODY5MUY0NzQwRi8wLzJGQjA2RUJEMjhGRTgzQTU2NEZBM0RG QzgzRjRGOThBQzYyMEM5OEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5fI48vBYJkUFzqKrNdx269iHx FqYr0MID5ZCZnsHFyTL/S/X3hE2UeEaZsXXyfiGvqrNd63OKDRvreUpDyXM7X4sg ZPeccJUkVxaRwaX8MsgtmXR4CHR4YT/UFL6NLUEq7nYgNszSNaPu+reDwI6c17Ps skk2cEaPku+dKcEFINRjsKLn0CcKA5oZ9ak1p3JcKx8QxwPBnSMM3ClFZvdqwr1S TFEK7SeNdv7NWmt2FTd/1k0zuv9ONg+Ad+vbGG+OImbaxug0zrdD1LhTXDYWSrsg tujGzwSieF0GVXj3oPbCTAtq1MjSVWgMZDEPcxPJW5wnFlm/2SLvKWBMFwdU -----END CERTIFICATE-----Generated at Fri Apr 17 16:57:42 2026 by rpki-client