$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: 32QDa5DwGwu27VNYGLVpRUUXE1v9TRtyq0Z3g7TVOgg= Subject key identifier: 7E:16:61:93:64:30:CC:54:DB:65:34:29:D4:FD:82:CE:6B:4D:37:FD Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 0C84C9F50A32135DD68B86489F9185415277D9A7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: 0187 Signing time: Fri 17 Apr 2026 06:07:39 +0000 Manifest this update: Fri 17 Apr 2026 06:02:39 +0000 Manifest next update: Wed 22 Apr 2026 12:07:39 +0000 Files and hashes: 1: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: lls2NOIQefkNui92Jx0iA7Lcnw+MwNLxm47JeaFpIdo=) 2: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: vKaxJDkQ6xO8c9q0YkOca6FK6zTDQe55Osq0XYW6XEQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:84:c9:f5:0a:32:13:5d:d6:8b:86:48:9f:91:85:41:52:77:d9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: Apr 17 06:02:39 2026 GMT Not After : Apr 22 12:07:39 2026 GMT Subject: CN=7E1661936430CC54DB653429D4FD82CE6B4D37FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:68:f8:2b:0d:5b:b9:75:d1:89:fc:63:c9: 04:cf:33:f7:f4:ad:14:05:18:7c:7a:11:c9:ac:36: e6:a3:b0:5a:b7:92:fc:1b:04:ac:3a:f9:0d:fa:19: 87:19:64:79:62:19:01:d4:19:e4:8d:21:7e:0e:f7: 1e:ed:f2:52:7f:36:d4:d3:3d:bf:45:93:ef:e3:00: 54:d0:ff:fa:a7:be:58:c9:3c:cc:08:39:f0:60:86: 50:74:6a:de:5f:f4:0f:5b:34:bb:ef:16:3c:54:53: 04:37:96:92:78:2d:4c:24:d6:93:fd:27:f9:9c:70: 30:8f:14:e3:cc:96:43:93:4b:02:4e:49:ca:41:58: bf:59:8b:4b:c7:15:5c:71:fc:72:7c:68:b8:6f:be: 6e:da:ea:00:23:f1:23:20:60:7e:f9:bd:78:4b:7b: 48:b5:b2:d3:17:a6:e8:2c:ce:24:b3:ef:bc:1b:8e: 24:1b:9c:90:c7:35:0f:ad:14:dc:ef:27:4d:d7:5e: 70:48:9e:90:75:7d:6f:a4:85:39:1c:3a:ff:25:3f: 41:5a:89:c0:ce:8e:9f:97:65:13:48:91:96:15:1f: 21:27:2b:9c:a2:d8:0d:74:7d:17:0f:53:f5:b6:32: e6:01:b2:d5:92:fd:dd:12:7b:b2:47:6c:fe:a5:e6: d4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:16:61:93:64:30:CC:54:DB:65:34:29:D4:FD:82:CE:6B:4D:37:FD X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6c:ad:79:ec:9f:0b:f4:8f:5b:0e:2e:bf:76:d6:d5:0a:64: fa:dd:26:2b:99:3e:09:d7:cf:a4:05:57:1e:55:76:a6:47:ba: 72:b9:92:6c:3f:23:d3:35:b0:61:bc:f7:a1:21:8c:1b:fe:8e: 65:1b:22:05:f1:96:a7:6d:27:a3:00:ea:77:31:d2:d6:46:eb: fc:1b:54:e4:bb:61:e4:63:ba:48:06:28:22:b3:d0:86:4f:7b: f1:76:f5:1a:14:fc:6a:31:cd:14:b9:e6:fc:d3:cc:44:56:bf: cd:18:3a:bb:f7:e4:8e:47:82:c6:cc:99:f9:57:dd:ef:a6:f5: cc:2e:aa:32:d8:71:e2:76:ea:37:54:06:d9:83:cf:4e:09:17: a8:9d:82:1e:06:b0:6b:d1:b1:e1:f7:2b:7f:a7:3b:06:c2:03: 64:e2:2e:27:4f:b0:bd:42:ba:a0:c0:cc:11:cf:2e:80:92:83: 3b:c5:fa:7e:7d:c4:31:bf:7e:7f:5d:25:8b:4e:0b:d5:1d:75: a4:c6:fe:6b:f6:f8:0f:5c:82:3b:b0:ac:f0:02:24:d9:1b:1f: a3:e5:d3:ee:6d:3b:03:d5:63:70:51:1f:4f:72:45:58:a8:c5: 44:d6:30:27:87:04:72:6f:00:ba:3a:5f:94:00:73:a2:e5:88: 13:48:32:7e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDITJ9QoyE13Wi4ZIn5GFQVJ32acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNjA0MTcwNjAyMzlaFw0yNjA0MjIxMjA3MzlaMDMxMTAvBgNV BAMTKDdFMTY2MTkzNjQzMENDNTREQjY1MzQyOUQ0RkQ4MkNFNkI0RDM3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDWj4Kw1buXXRifxjyQTPM/f0 rRQFGHx6EcmsNuajsFq3kvwbBKw6+Q36GYcZZHliGQHUGeSNIX4O9x7t8lJ/NtTT Pb9Fk+/jAFTQ//qnvljJPMwIOfBghlB0at5f9A9bNLvvFjxUUwQ3lpJ4LUwk1pP9 J/mccDCPFOPMlkOTSwJOScpBWL9Zi0vHFVxx/HJ8aLhvvm7a6gAj8SMgYH75vXhL e0i1stMXpugsziSz77wbjiQbnJDHNQ+tFNzvJ03XXnBInpB1fW+khTkcOv8lP0Fa icDOjp+XZRNIkZYVHyEnK5yi2A10fRcPU/W2MuYBstWS/d0Se7JHbP6l5tSTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUfhZhk2QwzFTbZTQp1P2CzmtNN/0wHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALbK157J8L9I9bDi6/dtbVCmT6 3SYrmT4J18+kBVceVXamR7pyuZJsPyPTNbBhvPehIYwb/o5lGyIF8ZanbSejAOp3 MdLWRuv8G1Tku2HkY7pIBigis9CGT3vxdvUaFPxqMc0Uueb808xEVr/NGDq79+SO R4LGzJn5V93vpvXMLqoy2HHiduo3VAbZg89OCReonYIeBrBr0bHh9yt/pzsGwgNk 4i4nT7C9QrqgwMwRzy6AkoM7xfp+fcQxv35/XSWLTgvVHXWkxv5r9vgPXII7sKzw AiTZGx+j5dPubTsD1WNwUR9PckVYqMVE1jAnhwRybwC6Ol+UAHOi5YgTSDJ+ -----END CERTIFICATE-----Generated at Fri Apr 17 23:07:31 2026 by rpki-client