$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft File: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft (raw, json) Hash identifier: WKivmV6iQl1JBClWnOpt1FMTX6UN35Cf7WbvLGGg5Jw= Subject key identifier: 0A:8D:4C:42:7A:CB:48:64:32:CA:61:6A:BD:45:64:91:5B:19:78:75 Authority key identifier: AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C Certificate issuer: /CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C Certificate serial: 53A415DE6A0B37F13FA9F6EE5EF468240A939B65 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft Manifest number: 017B Signing time: Tue 07 Apr 2026 21:27:10 +0000 Manifest this update: Tue 07 Apr 2026 21:22:10 +0000 Manifest next update: Mon 13 Apr 2026 00:16:10 +0000 Files and hashes: 1: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl (hash: /A/v2To3qr5UcO4PdKYfCtOZ3nZdL2XIsEs3qe3PSZQ=) 2: 323830333a346135303a3a2f33322d3438203d3e20323733313736.roa (hash: UUBAOvgOUgq/NLYCC7QYqDjUg5uQSFav0HyuyzhrMSs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 12 Apr 2026 05:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a4:15:de:6a:0b:37:f1:3f:a9:f6:ee:5e:f4:68:24:0a:93:9b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C Validity Not Before: Apr 7 21:22:10 2026 GMT Not After : Apr 13 00:16:10 2026 GMT Subject: CN=0A8D4C427ACB486432CA616ABD4564915B197875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:40:71:98:7e:10:af:6b:60:53:82:e3:6a:29: 16:5e:22:ea:f9:c8:9b:63:d8:bf:2b:94:e3:1d:ef: 66:00:4b:f6:d5:a2:57:b6:ec:3c:a0:39:ee:ab:0f: a2:a5:88:23:b8:ad:b3:36:35:82:60:74:32:53:e6: 07:12:82:8b:17:f6:19:96:e9:4b:39:2a:59:1e:e9: 61:59:5f:f3:f5:3a:3c:74:96:ef:ed:30:a5:4c:d5: bc:d3:1c:1b:70:e8:9a:72:ef:82:e6:e3:e6:fe:3e: 3b:d2:7e:3b:b1:83:8c:0f:09:3c:5a:9c:30:1f:28: 7a:c1:51:75:a8:42:a5:d4:a2:30:7a:0c:aa:e6:c6: 2e:43:59:a5:dc:84:b9:6d:e1:61:94:fe:f3:c4:4b: 19:8c:cb:f6:da:80:6f:15:4f:d9:c7:7f:8f:07:61: 23:dd:da:e4:a5:d1:29:38:86:84:58:e2:f4:77:03: 2e:d4:8a:be:34:42:33:e9:59:68:9a:d4:c1:8f:f9: 9c:73:36:88:bf:ed:22:95:c3:e4:f1:f8:d8:bd:38: dc:51:b3:38:ee:7f:a6:7f:59:bc:05:1e:e7:4b:01: 21:ec:2c:62:d6:55:77:6b:06:02:f8:fb:f3:1f:22: 53:0f:b3:51:d5:4e:07:2b:98:03:1b:8c:b7:8c:95: 78:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8D:4C:42:7A:CB:48:64:32:CA:61:6A:BD:45:64:91:5B:19:78:75 X509v3 Authority Key Identifier: keyid:AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:2e:47:06:20:18:c5:9b:c6:50:5d:23:06:03:12:50:9e:0f: d7:90:63:23:cc:3e:8f:6c:8c:7a:4f:f0:11:09:5c:f7:b7:13: 7a:8f:49:e1:1e:86:c3:fa:83:6a:2d:0b:64:16:8b:a3:40:d2: 3a:41:1c:80:6d:ab:1f:e4:13:85:61:92:10:52:c0:36:fc:7e: 24:ff:b3:5c:44:6d:ad:e8:5a:6c:c0:6b:6e:8e:24:cd:6a:9f: 96:91:d2:bd:ed:84:74:a6:38:5f:38:20:b6:6c:5c:7f:9f:f2: dd:a7:ff:c8:66:d4:de:87:25:84:1f:43:80:7b:5d:19:14:df: 2e:be:d9:ee:e9:a2:69:32:bd:3b:20:0d:d1:e2:98:6f:50:5c: 97:84:54:56:f0:06:1d:96:c6:a4:80:fe:6b:6e:54:b5:c4:1f: 26:bb:d4:d8:01:89:29:5c:60:43:c1:8a:0d:fd:f7:7f:a5:2d: 7b:b3:95:78:c9:05:cb:a4:84:e3:0f:6f:61:8c:a7:5e:4b:fb: 25:85:49:70:a8:cb:45:ca:86:a2:dd:b5:1d:4e:4f:9f:68:92: bd:88:0d:49:d8:81:01:3b:64:4f:fc:50:9b:80:3d:d8:f7:b6: b1:de:9b:cc:ba:42:0f:ed:58:4e:8f:f9:dc:10:33:e0:67:b8: 0f:90:ee:98 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUU6QV3moLN/E/qfbuXvRoJAqTm2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFGODFBNkU3OUNGRjBCMUM0RUVGQkMzMkNGRDNCMzE0 NEE1MTA0QzAeFw0yNjA0MDcyMTIyMTBaFw0yNjA0MTMwMDE2MTBaMDMxMTAvBgNV BAMTKDBBOEQ0QzQyN0FDQjQ4NjQzMkNBNjE2QUJENDU2NDkxNUIxOTc4NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQHGYfhCva2BTguNqKRZeIur5 yJtj2L8rlOMd72YAS/bVole27DygOe6rD6KliCO4rbM2NYJgdDJT5gcSgosX9hmW 6Us5Klke6WFZX/P1Ojx0lu/tMKVM1bzTHBtw6Jpy74Lm4+b+PjvSfjuxg4wPCTxa nDAfKHrBUXWoQqXUojB6DKrmxi5DWaXchLlt4WGU/vPESxmMy/bagG8VT9nHf48H YSPd2uSl0Sk4hoRY4vR3Ay7Uir40QjPpWWia1MGP+ZxzNoi/7SKVw+Tx+Ni9ONxR szjuf6Z/WbwFHudLASHsLGLWVXdrBgL4+/MfIlMPs1HVTgcrmAMbjLeMlXhdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUCo1MQnrLSGQyymFqvUVkkVsZeHUwHwYDVR0j BBgwFoAUqvgabnnP8LHE7vvDLP07MUSlEEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEUyMzk4RTIxNEI4MDZFRDVGNkJFQUY5QzBGRDU4NjU1 NjM3NTk1MzFEODIwQjQ2NzFGNEE3RUY2NDQzOEQ2LzAvQUFGODFBNkU3OUNGRjBC MUM0RUVGQkMzMkNGRDNCMzE0NEE1MTA0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUY4MUE2RTc5Q0ZGMEIxQzRF RUZCQzMyQ0ZEM0IzMTQ0QTUxMDRDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhFMjM5OEUyMTRCODA2RUQ1RjZCRUFGOUMwRkQ1ODY1NTYzNzU5NTMx RDgyMEI0NjcxRjRBN0VGNjQ0MzhENi8wL0FBRjgxQTZFNzlDRkYwQjFDNEVFRkJD MzJDRkQzQjMxNDRBNTEwNEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRLkcGIBjFm8ZQXSMGAxJQng/X kGMjzD6PbIx6T/ARCVz3txN6j0nhHobD+oNqLQtkFoujQNI6QRyAbasf5BOFYZIQ UsA2/H4k/7NcRG2t6FpswGtujiTNap+WkdK97YR0pjhfOCC2bFx/n/Ldp//IZtTe hyWEH0OAe10ZFN8uvtnu6aJpMr07IA3R4phvUFyXhFRW8AYdlsakgP5rblS1xB8m u9TYAYkpXGBDwYoN/fd/pS17s5V4yQXLpITjD29hjKdeS/slhUlwqMtFyoai3bUd Tk+faJK9iA1J2IEBO2RP/FCbgD3Y97ax3pvMukIP7VhOj/ncEDPgZ7gPkO6Y -----END CERTIFICATE-----Generated at Wed Apr 8 11:02:02 2026 by rpki-client