$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: +B55FqCsTuty61dCaGWAed5xjAPhFO0s2S7ywTNmcS8= Subject key identifier: C9:AA:61:14:09:A7:2B:57:3D:C2:FC:08:EC:36:80:D9:B6:5E:5A:0F Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 5DEA97EC9790815B86994A65B69419DB3437E2F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: 018C Signing time: Tue 07 Apr 2026 05:02:42 +0000 Manifest this update: Tue 07 Apr 2026 04:57:42 +0000 Manifest next update: Sat 11 Apr 2026 11:34:42 +0000 Files and hashes: 1: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: T8lq/LsKjiPrU2iE1zmTKyAGOpblc6BPcbBlKiqguSo=) 2: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: pROQMKsiDV21pFjsta+9j86ncqU60mdI9hZdoI3SRKo=) 3: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=) 4: 34352e3136342e32322e302f32342d3234203d3e203238343233.roa (hash: jnDQ7QTvt7MtCmcH9i+dr1cBZcskNKDgGPqDpsYzawE=) 5: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: 2ROMy1hMNtl4LlD4eAmab5XkXJI77b/wCGmKJrMFckU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 11 Apr 2026 11:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ea:97:ec:97:90:81:5b:86:99:4a:65:b6:94:19:db:34:37:e2:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Apr 7 04:57:42 2026 GMT Not After : Apr 11 11:34:42 2026 GMT Subject: CN=C9AA611409A72B573DC2FC08EC3680D9B65E5A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:b9:b0:d9:bb:a2:25:1b:a2:a0:3b:bf:48: e1:2d:cf:7e:a1:09:0d:d4:98:64:a1:a9:57:2f:b7: 58:da:32:b6:80:e6:bb:b9:c2:91:dc:8c:13:3b:4f: b6:45:80:77:4d:19:22:06:ab:56:ae:23:da:bf:73: a8:cd:16:63:18:08:54:3f:fc:f3:89:e8:d5:48:6a: d9:eb:11:66:cc:02:b1:32:ee:e8:6a:d1:a8:3c:76: c7:e7:41:74:74:49:a5:d5:de:55:d6:24:4a:e5:1a: 00:c3:09:a9:63:11:5a:22:25:54:7a:b6:c7:37:81: 91:3d:f2:62:c1:87:48:63:ac:61:20:c8:50:77:46: 8d:7b:4a:bf:fc:b0:a0:c6:f1:a8:ba:6e:81:2d:0a: dd:36:06:7b:3f:32:f1:af:35:56:42:6d:79:28:8d: 31:21:fa:31:c3:f2:03:ba:66:f4:08:37:2d:6a:fa: cc:35:71:da:b1:ee:8a:da:4a:3c:a8:c5:cc:8c:73: 8f:40:51:25:2c:9a:6f:4e:66:2d:48:f1:21:f0:df: 2e:93:04:7e:bf:35:dc:54:88:ff:ec:13:2a:ab:4a: 31:cb:e1:0e:61:84:36:a5:bf:33:90:f0:76:99:bd: 38:79:30:6d:40:03:94:ff:59:0f:9d:1e:f2:da:fe: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AA:61:14:09:A7:2B:57:3D:C2:FC:08:EC:36:80:D9:B6:5E:5A:0F X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:71:b5:00:1e:f8:22:56:67:d2:37:80:26:30:de:42:19:03: 4c:0f:0f:8b:93:5c:5f:2c:f1:33:60:da:36:08:45:6b:07:80: 1a:0c:7f:f5:c4:e4:c0:7d:f7:7c:a4:3a:a1:df:ae:85:f7:73: d5:f6:76:17:82:62:be:96:f0:52:37:5b:ed:89:fb:7c:8d:04: 01:02:3b:e2:fd:8c:2d:76:56:90:ec:4c:b5:3c:40:cc:fa:6f: 0e:fe:71:a7:28:2b:f3:fa:5a:37:81:20:fc:d7:7f:17:07:0d: 72:ee:74:91:11:f3:aa:24:0b:64:be:17:46:a9:82:95:a4:27: 4d:12:4a:ac:be:6f:06:2d:de:63:84:c1:be:ea:e0:53:c0:19: 8a:38:0a:34:02:45:b9:c5:c7:78:6b:a6:e8:75:02:46:da:75: e5:63:7d:03:6c:62:f0:8a:01:7c:d4:15:46:5b:a7:d8:14:84: 13:3a:b3:c0:92:18:c4:c3:b6:81:88:5f:3b:1b:f6:38:df:35: 3f:42:2a:a8:00:fd:cb:5a:35:bf:80:25:06:5a:60:ab:17:93: d5:df:1b:45:10:16:d9:38:f9:6d:17:1a:bc:aa:cb:e3:c7:32: 74:f4:20:2d:6f:74:fb:b8:90:87:5d:15:bb:21:82:38:49:47: 25:56:71:ff -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXeqX7JeQgVuGmUpltpQZ2zQ34vEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNjA0MDcwNDU3NDJaFw0yNjA0MTExMTM0NDJaMDMxMTAvBgNV BAMTKEM5QUE2MTE0MDlBNzJCNTczREMyRkMwOEVDMzY4MEQ5QjY1RTVBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlrmw2buiJRuioDu/SOEtz36h CQ3UmGShqVcvt1jaMraA5ru5wpHcjBM7T7ZFgHdNGSIGq1auI9q/c6jNFmMYCFQ/ /POJ6NVIatnrEWbMArEy7uhq0ag8dsfnQXR0SaXV3lXWJErlGgDDCaljEVoiJVR6 tsc3gZE98mLBh0hjrGEgyFB3Ro17Sr/8sKDG8ai6boEtCt02Bns/MvGvNVZCbXko jTEh+jHD8gO6ZvQINy1q+sw1cdqx7oraSjyoxcyMc49AUSUsmm9OZi1I8SHw3y6T BH6/NdxUiP/sEyqrSjHL4Q5hhDalvzOQ8HaZvTh5MG1AA5T/WQ+dHvLa/gNxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyaphFAmnK1c9wvwI7DaA2bZeWg8wHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYcbUAHvgiVmfSN4AmMN5CGQNM Dw+Lk1xfLPEzYNo2CEVrB4AaDH/1xOTAffd8pDqh366F93PV9nYXgmK+lvBSN1vt ift8jQQBAjvi/YwtdlaQ7Ey1PEDM+m8O/nGnKCvz+lo3gSD8138XBw1y7nSREfOq JAtkvhdGqYKVpCdNEkqsvm8GLd5jhMG+6uBTwBmKOAo0AkW5xcd4a6bodQJG2nXl Y30DbGLwigF81BVGW6fYFIQTOrPAkhjEw7aBiF87G/Y43zU/QiqoAP3LWjW/gCUG WmCrF5PV3xtFEBbZOPltFxq8qsvjxzJ09CAtb3T7uJCHXRW7IYI4SUclVnH/ -----END CERTIFICATE-----Generated at Wed Apr 8 07:21:13 2026 by rpki-client