$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft File: 2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft (raw, json) Hash identifier: toWh42vHIuLfoRJ5gxrVquyLgyoFTPAQAPLF0D026Es= Subject key identifier: 2D:39:17:5E:DE:86:30:71:34:15:72:DE:F8:5F:65:73:36:8D:54:2E Authority key identifier: 2D:6E:02:9E:FD:DB:CA:B8:D0:BD:DD:E5:27:4D:B6:82:DD:41:54:B9 Certificate issuer: /CN=2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9 Certificate serial: 27F8C18793C58138352462C3FFAD81ED567418D7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft Manifest number: 0157 Signing time: Fri 17 Apr 2026 16:53:57 +0000 Manifest this update: Fri 17 Apr 2026 16:48:57 +0000 Manifest next update: Wed 22 Apr 2026 22:58:57 +0000 Files and hashes: 1: 323830333a333635303a3a2f33322d3438203d3e20323733323038.roa (hash: w7DUtVS/dEpirVcMXQdcPfC6zG74CFV1RXvfa1s7QZU=) 2: 323830333a333635303a3a2f34302d3438203d3e20323733323038.roa (hash: 28x2KfKbBKe899p6BMXZF/z53sMqTcq6P7YESU3A7C8=) 3: 2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl (hash: zddANgHkIJxV7cB8allj/xO/ztYyP1FRygedBApxwMk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f8:c1:87:93:c5:81:38:35:24:62:c3:ff:ad:81:ed:56:74:18:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9 Validity Not Before: Apr 17 16:48:57 2026 GMT Not After : Apr 22 22:58:57 2026 GMT Subject: CN=2D39175EDE863071341572DEF85F6573368D542E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:e9:28:f9:82:ca:63:5c:18:06:39:d1:65: 68:72:89:de:51:9d:f4:6b:10:19:ba:19:cc:b3:a2: be:c7:3e:2b:2b:5e:e9:3b:4c:ee:6b:f6:3d:30:94: ed:27:be:51:4c:9a:29:18:3b:41:1c:95:04:c6:9d: 4c:61:b5:0a:d5:31:3d:fe:ad:86:f3:4b:c8:32:71: 1c:2b:69:fc:26:e0:ce:51:94:41:e7:75:2f:22:21: dd:13:25:d3:06:b1:7d:8f:6c:c7:ce:b9:22:5d:db: c4:21:1a:b2:26:4b:ce:e4:94:e2:da:15:f0:36:17: 6c:ce:d1:9c:39:57:1a:9d:f9:ed:4e:8c:0b:29:3a: 07:e6:e8:ae:d8:10:0a:4d:c0:70:6e:84:60:c2:61: e3:da:cb:a2:cb:4f:24:fc:cb:03:24:43:97:a1:d4: 1e:9f:57:4e:d7:04:50:76:ff:f8:ca:77:e6:9f:7b: 40:30:2b:a6:81:c0:d5:52:79:13:c1:23:ee:14:21: a6:71:6c:0e:84:d0:05:ad:10:0a:44:b7:c1:e9:d2: 9f:52:d8:6f:84:5f:c5:2c:04:9d:4b:93:ce:90:22: e4:85:43:4a:b3:e9:72:cb:97:51:10:56:15:21:ff: 2c:32:0a:05:cb:19:ba:fb:54:c5:9f:82:ba:7b:dd: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:39:17:5E:DE:86:30:71:34:15:72:DE:F8:5F:65:73:36:8D:54:2E X509v3 Authority Key Identifier: keyid:2D:6E:02:9E:FD:DB:CA:B8:D0:BD:DD:E5:27:4D:B6:82:DD:41:54:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fb:d8:86:fa:10:e7:2f:79:85:2e:46:f1:f3:31:42:95:f1: 46:e8:f3:aa:32:02:92:f4:2b:c7:78:03:e7:ff:c8:bc:94:45: 9d:e4:08:01:ea:08:5c:c3:b7:c0:10:ce:17:2c:fd:70:eb:fe: f8:30:a3:97:7d:c9:54:3e:3e:6f:bc:a6:af:b4:f8:be:f6:14: 39:57:97:d6:86:95:b5:08:28:0d:2f:fe:87:b6:48:26:78:c2: e3:98:94:2c:43:5a:60:8f:4c:ef:0b:3b:f0:31:f2:2a:86:e8: 0e:f8:4c:87:58:9b:d4:68:4f:64:52:29:0e:b3:e7:a7:1d:b5: 18:3d:58:d0:b4:7c:e8:32:3d:ff:9a:a3:12:d3:15:0e:3f:a5: 4d:2c:bc:d1:92:06:54:06:f6:c0:c7:ec:cb:10:1d:7f:a8:e5: 10:e3:70:0f:3b:7a:30:87:14:74:7d:48:fb:5f:99:0e:2b:fa: 3a:e2:cb:2c:9c:c0:28:7b:bc:0d:55:5f:2a:53:93:71:b5:71: d7:a5:e0:02:37:25:28:bc:9b:f7:2e:61:16:4e:6a:b2:9a:7f: 7e:c2:db:4d:5e:5f:83:84:98:38:f3:e5:2a:83:ef:01:f5:21: 2f:cf:73:57:0f:13:96:3d:1e:70:7e:a4:9d:f8:1f:03:c2:fb: d7:aa:48:00 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJ/jBh5PFgTg1JGLD/62B7VZ0GNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RTAyOUVGRERCQ0FCOEQwQkREREU1Mjc0REI2ODJE RDQxNTRCOTAeFw0yNjA0MTcxNjQ4NTdaFw0yNjA0MjIyMjU4NTdaMDMxMTAvBgNV BAMTKDJEMzkxNzVFREU4NjMwNzEzNDE1NzJERUY4NUY2NTczMzY4RDU0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9OOko+YLKY1wYBjnRZWhyid5R nfRrEBm6Gcyzor7HPisrXuk7TO5r9j0wlO0nvlFMmikYO0EclQTGnUxhtQrVMT3+ rYbzS8gycRwrafwm4M5RlEHndS8iId0TJdMGsX2PbMfOuSJd28QhGrImS87klOLa FfA2F2zO0Zw5Vxqd+e1OjAspOgfm6K7YEApNwHBuhGDCYePay6LLTyT8ywMkQ5eh 1B6fV07XBFB2//jKd+afe0AwK6aBwNVSeRPBI+4UIaZxbA6E0AWtEApEt8Hp0p9S 2G+EX8UsBJ1Lk86QIuSFQ0qz6XLLl1EQVhUh/ywyCgXLGbr7VMWfgrp73Y5rAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULTkXXt6GMHE0FXLe+F9lczaNVC4wHwYDVR0j BBgwFoAULW4Cnv3byrjQvd3lJ022gt1BVLkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRDlCNzA5MDNDRUFDM0RDNkI3RTVGNTY3MjZDM0U0QzFG MTE0RkMxNTNFRTUwNTJEODM2MEJDRDFBNTg3QjdFLzAvMkQ2RTAyOUVGRERCQ0FC OEQwQkREREU1Mjc0REI2ODJERDQxNTRCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDZFMDI5RUZEREJDQUI4RDBC RERERTUyNzREQjY4MkRENDE1NEI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0Q5QjcwOTAzQ0VBQzNEQzZCN0U1RjU2NzI2QzNFNEMxRjExNEZDMTUz RUU1MDUyRDgzNjBCQ0QxQTU4N0I3RS8wLzJENkUwMjlFRkREQkNBQjhEMEJERERF NTI3NERCNjgyREQ0MTU0QjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBL+9iG+hDnL3mFLkbx8zFClfFG 6POqMgKS9CvHeAPn/8i8lEWd5AgB6ghcw7fAEM4XLP1w6/74MKOXfclUPj5vvKav tPi+9hQ5V5fWhpW1CCgNL/6HtkgmeMLjmJQsQ1pgj0zvCzvwMfIqhugO+EyHWJvU aE9kUikOs+enHbUYPVjQtHzoMj3/mqMS0xUOP6VNLLzRkgZUBvbAx+zLEB1/qOUQ 43APO3owhxR0fUj7X5kOK/o64sssnMAoe7wNVV8qU5NxtXHXpeACNyUovJv3LmEW Tmqymn9+wttNXl+DhJg48+Uqg+8B9SEvz3NXDxOWPR5wfqSd+B8DwvvXqkgA -----END CERTIFICATE-----Generated at Sat Apr 18 08:57:29 2026 by rpki-client