$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.mft File: 8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.mft (raw, json) Hash identifier: pxtIsOvk0ns46xTVRh7ph5s7FBkRNtec1lMfr8VSdb4= Subject key identifier: 1D:C0:F5:BB:BA:B3:AA:3A:4D:83:39:A1:1C:D5:B5:6A:3A:38:F9:AA Authority key identifier: 87:16:FC:C1:EC:12:29:F4:CC:E3:91:7A:8A:D7:E8:FF:AD:D5:62:51 Certificate issuer: /CN=8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251 Certificate serial: 07B384C0E91AAB147E30703E6799534DBDB1425D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.mft Manifest number: 017F Signing time: Mon 06 Apr 2026 19:26:26 +0000 Manifest this update: Mon 06 Apr 2026 19:21:26 +0000 Manifest next update: Sun 12 Apr 2026 10:36:26 +0000 Files and hashes: 1: 8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.crl (hash: vQsdOClFSfPbYWT67ngqqW6V/vGr4YoGH0mRNUscOpc=) 2: 34352e3233372e34382e302f32322d3234203d3e20323636383135.roa (hash: 6PqMkEWouPdI+g44eTLuwLO1JXB5Co2ErpKwkXAQg/k=) 3: 323830333a373861303a3a2f33322d3332203d3e20323636383135.roa (hash: OIRjKTRlzBbZ2w5rcAT7UFLVdNMPsIPOniAV5AENPQs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.crl rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 12 Apr 2026 05:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b3:84:c0:e9:1a:ab:14:7e:30:70:3e:67:99:53:4d:bd:b1:42:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251 Validity Not Before: Apr 6 19:21:26 2026 GMT Not After : Apr 12 10:36:26 2026 GMT Subject: CN=1DC0F5BBBAB3AA3A4D8339A11CD5B56A3A38F9AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e1:0d:57:b5:65:b7:cc:a4:80:92:d7:f9:79: 5f:c5:8d:15:fb:53:fc:ea:6b:6b:72:f5:71:99:66: 79:a0:fd:07:3d:fb:00:63:fe:99:ba:fa:ed:5a:da: d6:34:c7:97:40:22:1c:01:a6:5e:4c:1b:56:93:a5: 8c:29:ca:45:f2:cb:13:19:31:4f:38:eb:a0:c1:2c: a7:55:53:87:2a:2f:d7:93:85:05:5f:94:c6:ed:c4: 71:1d:ad:55:26:22:73:2c:04:d7:e6:14:b7:ff:68: f3:78:4d:ea:b6:d6:0f:ff:02:be:b4:2f:d3:c2:45: 55:5a:89:84:9d:ed:42:08:48:b2:1d:f8:b6:d6:2c: 80:51:65:42:f7:37:50:ec:82:8d:65:6a:91:af:bf: 51:98:bb:2d:bf:0a:5d:45:18:f6:53:cd:86:4b:40: 0c:27:66:77:90:41:b5:7d:62:d8:3f:58:58:ee:9e: 55:3b:62:54:bc:1f:0c:67:58:99:69:c1:98:0c:0f: 7f:ba:80:ac:15:20:f6:f8:bf:a5:f3:fd:1f:78:62: 0d:15:03:20:51:31:9a:32:44:8e:6a:37:6e:83:53: 8b:7b:1d:d2:e5:15:c0:bf:8d:71:35:27:f8:41:a0: e3:bf:30:16:7b:66:7d:cc:1b:f3:9c:2d:65:01:97: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C0:F5:BB:BA:B3:AA:3A:4D:83:39:A1:1C:D5:B5:6A:3A:38:F9:AA X509v3 Authority Key Identifier: keyid:87:16:FC:C1:EC:12:29:F4:CC:E3:91:7A:8A:D7:E8:FF:AD:D5:62:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a9:d7:e8:4e:45:d0:78:60:67:d8:97:67:15:92:21:37:63: bf:8b:1e:48:d7:25:77:cc:64:34:c1:a2:93:69:e6:5b:ef:10: 07:8c:f9:45:5a:bc:4a:73:16:88:7f:bd:fc:f9:52:ea:5b:f7: 22:99:19:2e:7f:fb:45:f2:e9:52:60:fc:b3:d1:85:3a:6e:90: d7:67:db:0d:5e:b4:8a:96:9c:11:8b:c4:66:22:83:f2:ac:3e: 52:28:77:62:49:c8:53:48:d2:a4:92:df:d7:59:c8:97:4d:49: f3:31:b9:9b:a6:48:f2:9f:f9:af:39:4b:3b:4e:3a:07:9c:14: e7:b1:b5:fb:82:99:17:60:17:25:af:7b:cb:89:81:4f:e0:07: 8d:b2:96:ee:f1:2d:08:61:9b:c3:3c:32:58:f9:07:de:db:b1: 62:86:5a:f5:8e:a7:62:66:cd:ab:d9:c1:33:83:5e:9a:0d:88: 15:81:2a:ce:e7:34:3c:b7:85:96:18:ff:1b:bb:34:cb:3a:fa: af:84:3d:e8:14:eb:bf:85:d2:85:58:e6:63:ff:19:43:f0:2d: 0b:41:c6:f2:1c:d8:f3:2e:f1:0b:3f:63:92:79:13:cc:dd:70: 3e:1f:a8:91:17:30:26:03:4b:56:d9:a4:d2:de:d4:33:13:91: 9e:a0:a0:1c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUB7OEwOkaqxR+MHA+Z5lTTb2xQl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNkZDQzFFQzEyMjlGNENDRTM5MTdBOEFEN0U4RkZB REQ1NjI1MTAeFw0yNjA0MDYxOTIxMjZaFw0yNjA0MTIxMDM2MjZaMDMxMTAvBgNV BAMTKDFEQzBGNUJCQkFCM0FBM0E0RDgzMzlBMTFDRDVCNTZBM0EzOEY5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD54Q1XtWW3zKSAktf5eV/FjRX7 U/zqa2ty9XGZZnmg/Qc9+wBj/pm6+u1a2tY0x5dAIhwBpl5MG1aTpYwpykXyyxMZ MU8466DBLKdVU4cqL9eThQVflMbtxHEdrVUmInMsBNfmFLf/aPN4Teq21g//Ar60 L9PCRVVaiYSd7UIISLId+LbWLIBRZUL3N1Dsgo1lapGvv1GYuy2/Cl1FGPZTzYZL QAwnZneQQbV9Ytg/WFjunlU7YlS8HwxnWJlpwZgMD3+6gKwVIPb4v6Xz/R94Yg0V AyBRMZoyRI5qN26DU4t7HdLlFcC/jXE1J/hBoOO/MBZ7Zn3MG/OcLWUBl4V1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUHcD1u7qzqjpNgzmhHNW1ajo4+aowHwYDVR0j BBgwFoAUhxb8wewSKfTM45F6itfo/63VYlEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NDlFRTg2NjhDNjhGQkRBQzkxNENGMjQ2RUU2Mjc0MDk0 NUI1NTgzNEZBNDEyNjkzQ0E0QzcxRkRCREVBMDdELzAvODcxNkZDQzFFQzEyMjlG NENDRTM5MTdBOEFEN0U4RkZBREQ1NjI1MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzE2RkNDMUVDMTIyOUY0Q0NF MzkxN0E4QUQ3RThGRkFERDU2MjUxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDQ5RUU4NjY4QzY4RkJEQUM5MTRDRjI0NkVFNjI3NDA5NDVCNTU4MzRG QTQxMjY5M0NBNEM3MUZEQkRFQTA3RC8wLzg3MTZGQ0MxRUMxMjI5RjRDQ0UzOTE3 QThBRDdFOEZGQURENTYyNTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABqdfoTkXQeGBn2JdnFZIhN2O/ ix5I1yV3zGQ0waKTaeZb7xAHjPlFWrxKcxaIf738+VLqW/cimRkuf/tF8ulSYPyz 0YU6bpDXZ9sNXrSKlpwRi8RmIoPyrD5SKHdiSchTSNKkkt/XWciXTUnzMbmbpkjy n/mvOUs7TjoHnBTnsbX7gpkXYBclr3vLiYFP4AeNspbu8S0IYZvDPDJY+Qfe27Fi hlr1jqdiZs2r2cEzg16aDYgVgSrO5zQ8t4WWGP8buzTLOvqvhD3oFOu/hdKFWOZj /xlD8C0LQcbyHNjzLvELP2OSeRPM3XA+H6iRFzAmA0tW2aTS3tQzE5GeoKAc -----END CERTIFICATE-----Generated at Wed Apr 8 11:01:52 2026 by rpki-client