$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft File: 291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft (raw, json) Hash identifier: hHacs076vjor/42g82HjTVXG6JW6OPb5+RB2oDA7lbE= Subject key identifier: 33:30:AB:AA:61:5A:B2:4A:BF:D0:06:E1:D3:6E:AF:66:96:B4:B8:D6 Authority key identifier: 29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2 Certificate issuer: /CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2 Certificate serial: 2A7C8789CA59A83B3C091EE5E99242626D722C5B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft Manifest number: 017D Signing time: Mon 06 Apr 2026 17:45:28 +0000 Manifest this update: Mon 06 Apr 2026 17:40:28 +0000 Manifest next update: Sat 11 Apr 2026 13:15:28 +0000 Files and hashes: 1: 323830363a3330633a3a2f33322d3332203d3e203238343431.roa (hash: 8iauoYEC8xOQa+YbZU88zYYKc1EdRdbbiUzfPtL1xlI=) 2: 34352e3136342e3130382e302f32322d3234203d3e20323730313733.roa (hash: Me8g4JiCINHoZsLuanIHVM9jbYYV/CgZtt6GSDgbt6k=) 3: 34352e3136342e3130382e302f32322d3234203d3e203238343431.roa (hash: Z1/fMwDRngfi187rEBqz5wwEhc5KqcE6VM9oy89ZYQc=) 4: 323830363a3330633a3a2f33322d3438203d3e20323730313733.roa (hash: 6W30v71+Q/cDoOQkzZgwqg4WKTw1SznmyVBjWAwbXiQ=) 5: 291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl (hash: WI2H3cVVRdKEr7y2XKSWC+OAALvwVpGFHOVtvx7Azi4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 11 Apr 2026 13:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:7c:87:89:ca:59:a8:3b:3c:09:1e:e5:e9:92:42:62:6d:72:2c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2 Validity Not Before: Apr 6 17:40:28 2026 GMT Not After : Apr 11 13:15:28 2026 GMT Subject: CN=3330ABAA615AB24ABFD006E1D36EAF6696B4B8D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:55:f4:a8:96:1c:4f:e8:6f:81:97:cc:b5: 12:a6:7e:ea:53:40:ba:c6:bb:d4:c8:19:3a:f3:63: d9:30:98:7c:1a:1f:f5:68:00:5c:31:82:0e:c5:cc: 1c:22:ef:7f:cc:bf:08:c2:c6:c1:7e:95:f4:f6:5e: 00:27:33:46:df:1e:ec:62:bd:58:aa:38:56:43:4c: c2:c7:64:ed:03:37:db:6c:0d:bc:6c:01:b7:7e:a8: 40:1c:bd:35:3d:4f:52:2d:64:10:99:51:a4:cb:a0: e1:e7:49:17:71:c9:86:58:05:81:01:87:a9:0b:48: 6f:62:97:68:e7:43:65:21:e0:24:fa:1f:3e:71:26: 39:e7:8a:0c:78:06:5b:32:cb:a7:91:ab:c2:74:60: db:6d:f3:67:99:a5:03:86:f7:bf:bc:d1:ef:db:97: 1c:6a:b7:b3:28:ed:9a:d0:97:bb:80:16:8d:1b:29: 0a:66:1c:02:4c:e5:e0:4f:62:41:a7:1b:89:c8:78: 5e:99:2d:2d:58:96:1d:be:bd:c8:18:dc:97:88:c4: 38:03:67:e8:89:e7:0a:78:e1:9d:84:04:da:20:d4: 7f:86:71:3b:2e:4a:22:13:3a:05:37:7e:44:33:a6: 7e:66:b6:8b:ae:f4:87:3b:44:82:c7:ca:ee:07:5a: 2f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:30:AB:AA:61:5A:B2:4A:BF:D0:06:E1:D3:6E:AF:66:96:B4:B8:D6 X509v3 Authority Key Identifier: keyid:29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:12:a8:53:a2:bb:0b:0e:a4:85:61:12:9d:e1:6b:7f:d0:f0: 7d:6e:05:f3:20:30:c8:05:cd:4e:29:d9:74:34:7b:b2:9a:bd: f8:33:8d:f0:0a:61:f3:d8:11:0a:c8:43:b7:c8:3a:16:55:b2: 9a:0c:3e:cf:36:d7:3f:e5:59:51:02:e0:d0:7d:bd:f1:d9:79: 56:13:82:04:46:aa:fe:2e:0d:5f:b8:a5:3e:1a:3e:3c:f3:32: da:3b:75:7e:4f:73:61:43:af:b6:e5:d9:98:56:3b:e7:6b:d8: 78:c3:47:5a:56:b9:a6:74:18:22:f3:f5:93:7e:3f:83:57:00: e9:44:14:fc:3d:b9:0c:17:62:0e:17:9b:4e:d1:1c:5e:99:c9: b4:f5:a3:06:94:ba:ee:3b:00:7b:90:7a:92:3c:45:74:01:2b: c2:04:fd:28:c7:9f:06:f6:62:41:2a:44:9c:52:b0:b6:e8:42: 20:19:c1:37:14:24:0a:1c:b2:78:4e:de:ac:c9:a2:e9:1a:29: fd:38:dd:04:3b:14:9f:92:d0:a9:5f:77:5c:fb:39:46:ab:0f: 45:4e:32:f3:59:5d:73:34:70:f8:86:8c:ad:bc:b0:0a:b1:bc: f7:bb:da:81:22:23:6a:90:ab:e3:c8:87:b5:6c:89:93:69:24: 10:8a:8d:10 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKnyHicpZqDs8CR7l6ZJCYm1yLFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkxQkYyNjRFM0RGQkUyOUE1RDUyQUUyNENFMTI0M0RG NkYzOThDMjAeFw0yNjA0MDYxNzQwMjhaFw0yNjA0MTExMzE1MjhaMDMxMTAvBgNV BAMTKDMzMzBBQkFBNjE1QUIyNEFCRkQwMDZFMUQzNkVBRjY2OTZCNEI4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzhFX0qJYcT+hvgZfMtRKmfupT QLrGu9TIGTrzY9kwmHwaH/VoAFwxgg7FzBwi73/MvwjCxsF+lfT2XgAnM0bfHuxi vViqOFZDTMLHZO0DN9tsDbxsAbd+qEAcvTU9T1ItZBCZUaTLoOHnSRdxyYZYBYEB h6kLSG9il2jnQ2Uh4CT6Hz5xJjnnigx4Blsyy6eRq8J0YNtt82eZpQOG97+80e/b lxxqt7Mo7ZrQl7uAFo0bKQpmHAJM5eBPYkGnG4nIeF6ZLS1Ylh2+vcgY3JeIxDgD Z+iJ5wp44Z2EBNog1H+GcTsuSiITOgU3fkQzpn5mtouu9Ic7RILHyu4HWi8DAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMzCrqmFaskq/0Abh026vZpa0uNYwHwYDVR0j BBgwFoAUKRvyZOPfviml1SriTOEkPfbzmMIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRkE3NzEzNzdBMzUzMDgxODg4MURDMjIyNjcwNUE1OEIx OTVCRDZFQzAzNTEwMzgyMTE3RTkyRUU5NjFEM0E5LzAvMjkxQkYyNjRFM0RGQkUy OUE1RDUyQUUyNENFMTI0M0RGNkYzOThDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTFCRjI2NEUzREZCRTI5QTVE NTJBRTI0Q0UxMjQzREY2RjM5OEMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0ZBNzcxMzc3QTM1MzA4MTg4ODFEQzIyMjY3MDVBNThCMTk1QkQ2RUMw MzUxMDM4MjExN0U5MkVFOTYxRDNBOS8wLzI5MUJGMjY0RTNERkJFMjlBNUQ1MkFF MjRDRTEyNDNERjZGMzk4QzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6EqhTorsLDqSFYRKd4Wt/0PB9 bgXzIDDIBc1OKdl0NHuymr34M43wCmHz2BEKyEO3yDoWVbKaDD7PNtc/5VlRAuDQ fb3x2XlWE4IERqr+Lg1fuKU+Gj488zLaO3V+T3NhQ6+25dmYVjvna9h4w0daVrmm dBgi8/WTfj+DVwDpRBT8PbkMF2IOF5tO0Rxemcm09aMGlLruOwB7kHqSPEV0ASvC BP0ox58G9mJBKkScUrC26EIgGcE3FCQKHLJ4Tt6syaLpGin9ON0EOxSfktCpX3dc +zlGqw9FTjLzWV1zNHD4hoytvLAKsbz3u9qBIiNqkKvjyIe1bImTaSQQio0Q -----END CERTIFICATE-----Generated at Wed Apr 8 08:48:07 2026 by rpki-client