$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft File: AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft (raw, json) Hash identifier: 4cAyIDaxYXpAQ3ENrSTgmBh+vxxZcYRRSoOJlT6HwOU= Subject key identifier: A8:3A:58:F6:E5:0E:9B:5F:91:C9:44:43:3D:27:4C:73:CF:3D:01:9F Authority key identifier: AF:DB:6E:B0:A5:26:B5:C5:EB:6B:D0:15:66:C3:8D:FB:7F:DD:18:1D Certificate issuer: /CN=AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D Certificate serial: 3120BE904679BA79F6C5307A5FCCF4447FDE673C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft Manifest number: 0117 Signing time: Fri 17 Apr 2026 04:16:21 +0000 Manifest this update: Fri 17 Apr 2026 04:11:21 +0000 Manifest next update: Wed 22 Apr 2026 06:24:21 +0000 Files and hashes: 1: 3230312e3133312e3132322e302f32332d3234203d3e203139353531.roa (hash: 2lY1OF4W+oeIcQrhKofjRck7LX+NlAUcZj6ZQ7tShHU=) 2: 3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa (hash: fv54MAOJH1kRtBQyQBbVf0Qpb3qmrekZ3x2PX6Lf9hY=) 3: AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl (hash: SRc5FSo/bVorVlgghanbfrazi+gDr/Yp3dmzEDjQ85A=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 19:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:20:be:90:46:79:ba:79:f6:c5:30:7a:5f:cc:f4:44:7f:de:67:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D Validity Not Before: Apr 17 04:11:21 2026 GMT Not After : Apr 22 06:24:21 2026 GMT Subject: CN=A83A58F6E50E9B5F91C944433D274C73CF3D019F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:30:b0:68:41:57:3b:76:2a:fa:49:c9:8d: 86:ea:b9:fc:d7:79:2d:25:fb:ba:7f:4a:fd:57:d1: 7e:f1:66:c7:55:f7:2b:39:a1:ce:39:1a:b6:35:8e: 19:e3:53:94:33:b4:cb:34:80:7e:d0:ba:65:ba:e9: 2c:d5:a6:ed:3f:93:c5:e5:f0:ff:d9:94:20:ac:ac: cd:56:94:67:6e:4e:f4:59:f9:26:ee:89:13:fa:8a: 20:b2:75:79:d7:a4:60:0f:08:87:5e:02:fb:51:c3: 43:2b:7f:5d:d3:45:8c:c9:c4:ae:e5:1c:48:d7:21: a7:46:be:d4:e9:94:92:aa:8d:49:75:af:e0:9f:db: b1:2a:bb:72:82:c0:0d:c1:63:ce:6e:df:67:4b:17: c0:71:78:c3:f3:10:1e:38:59:a1:32:72:8c:11:e4: b9:27:94:d1:22:1c:14:77:75:30:9b:78:4f:9e:10: c8:79:50:f8:70:68:2b:2e:f4:70:de:1b:53:c3:b8: 92:4f:0e:6e:f1:94:0f:21:a7:38:8c:13:57:65:08: 39:ce:3a:3b:e8:87:a9:cb:94:c6:80:84:b5:f1:48: bb:d3:39:4a:b5:a2:4e:ed:03:10:6a:61:e0:7a:a6: ce:ca:c7:2d:16:2a:8e:e1:e5:2a:c9:d8:10:2e:1b: 0e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3A:58:F6:E5:0E:9B:5F:91:C9:44:43:3D:27:4C:73:CF:3D:01:9F X509v3 Authority Key Identifier: keyid:AF:DB:6E:B0:A5:26:B5:C5:EB:6B:D0:15:66:C3:8D:FB:7F:DD:18:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a5:95:b9:9c:65:1c:39:fc:fa:07:17:54:77:57:e1:e5:17: 1d:2d:a7:fc:15:b0:65:f2:74:31:61:33:69:6c:16:96:69:71: 40:f6:d7:38:cb:7b:22:2c:5f:20:ed:e7:36:d0:e7:ed:9b:90: 15:b7:1f:3b:40:4b:bb:d7:cc:ac:30:02:31:cc:9a:bb:50:30: f3:d9:83:19:04:5a:43:3b:12:f6:dc:d2:22:57:c3:32:38:40: 1f:20:af:f1:23:cb:02:a1:6d:84:a9:dd:aa:4b:a8:8b:70:5a: 36:36:26:19:f8:5c:96:c7:9f:4f:74:3f:23:55:e5:e7:63:de: 7e:04:e7:1c:ab:6e:0d:a3:85:97:00:b7:d8:20:a1:91:ae:f3: 3b:23:7c:3d:08:e7:f0:b2:73:e4:f3:c9:4c:47:36:77:f5:ba: e0:9e:07:10:93:12:a7:ca:99:9f:fc:d9:b2:7a:e2:2d:6a:76: dc:a4:cd:95:4f:bb:35:9f:41:05:e8:da:92:25:9a:59:fe:a1: d9:b2:42:a6:5e:ab:bf:59:63:3d:5a:da:fb:46:43:7c:9f:0f: 7d:37:18:f0:df:62:6a:60:f7:0e:d9:09:e8:4a:58:68:ee:3e: c7:d2:d4:19:68:9d:44:46:c8:c9:cd:96:28:68:8a:47:b7:a0: 40:a4:d4:bf -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMSC+kEZ5unn2xTB6X8z0RH/eZzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZEQjZFQjBBNTI2QjVDNUVCNkJEMDE1NjZDMzhERkI3 RkREMTgxRDAeFw0yNjA0MTcwNDExMjFaFw0yNjA0MjIwNjI0MjFaMDMxMTAvBgNV BAMTKEE4M0E1OEY2RTUwRTlCNUY5MUM5NDQ0MzNEMjc0QzczQ0YzRDAxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxzCwaEFXO3Yq+knJjYbqufzX eS0l+7p/Sv1X0X7xZsdV9ys5oc45GrY1jhnjU5QztMs0gH7QumW66SzVpu0/k8Xl 8P/ZlCCsrM1WlGduTvRZ+SbuiRP6iiCydXnXpGAPCIdeAvtRw0Mrf13TRYzJxK7l HEjXIadGvtTplJKqjUl1r+Cf27Equ3KCwA3BY85u32dLF8BxeMPzEB44WaEycowR 5LknlNEiHBR3dTCbeE+eEMh5UPhwaCsu9HDeG1PDuJJPDm7xlA8hpziME1dlCDnO Ojvoh6nLlMaAhLXxSLvTOUq1ok7tAxBqYeB6ps7Kxy0WKo7h5SrJ2BAuGw4jAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqDpY9uUOm1+RyURDPSdMc889AZ8wHwYDVR0j BBgwFoAUr9tusKUmtcXra9AVZsON+3/dGB0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EODhCQjlGREYxNzg1NUU2NDI4NEJCOENGMUE1RDBEQzk3 RDBENkEwNDAyQjQ2NTZGRkE3NjE1NzFFMTQ0M0ZCLzAvQUZEQjZFQjBBNTI2QjVD NUVCNkJEMDE1NjZDMzhERkI3RkREMTgxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkRCNkVCMEE1MjZCNUM1RUI2 QkQwMTU2NkMzOERGQjdGREQxODFELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDg4QkI5RkRGMTc4NTVFNjQyODRCQjhDRjFBNUQwREM5N0QwRDZBMDQw MkI0NjU2RkZBNzYxNTcxRTE0NDNGQi8wL0FGREI2RUIwQTUyNkI1QzVFQjZCRDAx NTY2QzM4REZCN0ZERDE4MUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSpZW5nGUcOfz6BxdUd1fh5Rcd Laf8FbBl8nQxYTNpbBaWaXFA9tc4y3siLF8g7ec20Oftm5AVtx87QEu718ysMAIx zJq7UDDz2YMZBFpDOxL23NIiV8MyOEAfIK/xI8sCoW2Eqd2qS6iLcFo2NiYZ+FyW x59PdD8jVeXnY95+BOccq24No4WXALfYIKGRrvM7I3w9COfwsnPk88lMRzZ39brg ngcQkxKnypmf/NmyeuItanbcpM2VT7s1n0EF6NqSJZpZ/qHZskKmXqu/WWM9Wtr7 RkN8nw99Nxjw32JqYPcO2QnoSlho7j7H0tQZaJ1ERsjJzZYoaIpHt6BApNS/ -----END CERTIFICATE-----Generated at Fri Apr 17 19:50:52 2026 by rpki-client