$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft File: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft (raw, json) Hash identifier: nldZjzFdNV65SKDFiBQ/5vS+7Uw7/pFZxCaTTXl649U= Subject key identifier: B0:AC:36:ED:A4:0E:BB:F4:E8:3C:6F:32:74:38:4A:EF:68:C0:22:81 Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45 Certificate issuer: /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45 Certificate serial: 2E005F107420A7A897BC7E0F9E28526572418569 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft Manifest number: 017A Signing time: Tue 07 Apr 2026 09:05:00 +0000 Manifest this update: Tue 07 Apr 2026 09:00:00 +0000 Manifest next update: Sat 11 Apr 2026 18:25:00 +0000 Files and hashes: 1: 3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa (hash: PBLaMVSKpAeS+l0vIKmtM2omSi0up4GGuP3iwTFSVNY=) 2: 3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa (hash: 9LJetJ8G5qWqyqJMt7HfccEJLqmf8O70FC7AvkBWuRA=) 3: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl (hash: tYfra9VBsDv60HdGDiP7MzfeBOXshMSpjPFI5emjygo=) 4: 34352e3138392e3233352e302f32342d3234203d3e20323733303036.roa (hash: l6Px/cfx17p77guA4BogJ/Eyp53nnxwxjHHvSY7vDUM=) 5: 3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa (hash: /inl45FgHMmimgaoHswEbZwqHUN5h6utXgHufK7wkDk=) 6: 323830333a383465303a3a2f33322d3332203d3e20323733303036.roa (hash: Mb2m0k7C4vb1eifoEedb1d+l1x7QSKnJ6BRI9UyKuAw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 11 Apr 2026 18:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:00:5f:10:74:20:a7:a8:97:bc:7e:0f:9e:28:52:65:72:41:85:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45 Validity Not Before: Apr 7 09:00:00 2026 GMT Not After : Apr 11 18:25:00 2026 GMT Subject: CN=B0AC36EDA40EBBF4E83C6F3274384AEF68C02281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f5:74:3b:52:7c:ec:85:2c:6f:78:4b:d3:d0: 08:98:d8:b1:19:e3:4e:d2:99:3c:80:de:08:83:c6: dc:a9:24:5b:c1:42:97:ac:ee:0d:ca:09:3a:35:ab: b0:46:82:f5:e9:5d:4c:64:83:ed:44:22:15:a0:2f: 7d:22:23:61:43:58:c4:90:3b:ef:f2:a0:ee:60:07: 9c:3b:e1:f2:c2:b1:dd:17:bd:28:b8:a9:07:ef:d7: b5:35:e3:01:ae:22:6d:98:e0:bd:53:31:58:27:b1: e2:4b:3d:5e:3a:f3:76:6d:5f:b3:3a:9a:c0:12:69: b1:41:da:7c:86:8d:3d:c0:44:78:83:b5:c4:e1:11: 09:6d:d3:d9:d1:b4:c2:d3:3b:4c:49:34:ef:5f:d9: 3b:7a:97:da:5f:39:14:5a:b3:c6:ec:c1:d7:a2:de: 18:73:77:33:f4:4f:30:1f:b0:df:ae:67:97:c8:f1: 2f:a3:e7:c8:97:b6:97:ea:1c:7d:a7:37:f5:4e:74: 7d:44:40:4c:bc:9c:11:38:ae:cf:50:be:56:61:8b: 89:11:fe:58:22:82:f6:e6:1e:ec:79:df:73:68:76: de:83:55:76:52:8c:28:ff:a2:6f:a2:0f:84:7e:ca: f7:21:55:ed:3c:d1:99:17:36:89:a3:0c:8f:ea:81: 50:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AC:36:ED:A4:0E:BB:F4:E8:3C:6F:32:74:38:4A:EF:68:C0:22:81 X509v3 Authority Key Identifier: keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:29:22:8c:c7:99:66:d8:7d:32:b9:95:54:3d:5b:0c:4a:76: 0d:0e:18:be:4c:85:da:78:da:ae:e5:29:b5:2a:e0:c1:8b:d0: 60:68:cd:55:31:f3:df:8b:06:71:b2:20:7a:80:e1:66:c9:1c: 6c:08:3e:1e:db:cb:1e:08:3d:e1:94:8c:52:ae:3d:de:6b:a1: 52:89:f3:9e:34:1f:4c:cb:e0:b1:0a:0d:aa:9c:29:fa:d7:9b: 7d:81:6d:28:20:a3:9c:13:d5:00:9f:1a:0b:16:69:3c:89:83: 74:4d:7a:bf:d4:10:0e:56:ca:e1:2e:8f:ca:ef:cc:6e:f1:ec: 38:34:30:fd:dd:46:bc:22:98:c2:4a:57:2a:ff:e8:8c:f6:0c: c1:cb:82:bd:8c:e9:25:74:03:0b:98:25:ca:a3:6c:d4:48:aa: 29:b8:23:2c:c4:7b:3e:f9:75:97:4c:bf:ea:c3:8d:a7:e0:c4: d4:a4:fe:57:27:30:74:58:d5:d4:48:78:42:b6:61:ca:16:39: 6c:3f:21:0b:6c:ba:62:aa:b8:29:db:79:1e:6b:4c:1b:3c:b1: d2:73:4f:29:a7:4d:1b:67:a2:19:f1:d7:30:2e:18:3d:b8:c8: fb:54:8e:ce:66:99:c2:79:88:a9:77:91:64:af:ec:10:2a:e5: da:a2:13:1f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULgBfEHQgp6iXvH4PnihSZXJBhWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBRjFGRkE4MTVDNkUzRjNCOTA2OEFERDNEM0FGQjEx MERBN0Q0NTAeFw0yNjA0MDcwOTAwMDBaFw0yNjA0MTExODI1MDBaMDMxMTAvBgNV BAMTKEIwQUMzNkVEQTQwRUJCRjRFODNDNkYzMjc0Mzg0QUVGNjhDMDIyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT9XQ7UnzshSxveEvT0AiY2LEZ 407SmTyA3giDxtypJFvBQpes7g3KCTo1q7BGgvXpXUxkg+1EIhWgL30iI2FDWMSQ O+/yoO5gB5w74fLCsd0XvSi4qQfv17U14wGuIm2Y4L1TMVgnseJLPV4683ZtX7M6 msASabFB2nyGjT3ARHiDtcThEQlt09nRtMLTO0xJNO9f2Tt6l9pfORRas8bswdei 3hhzdzP0TzAfsN+uZ5fI8S+j58iXtpfqHH2nN/VOdH1EQEy8nBE4rs9QvlZhi4kR /lgigvbmHux533Nodt6DVXZSjCj/om+iD4R+yvchVe080ZkXNomjDI/qgVCbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUsKw27aQOu/ToPG8ydDhK72jAIoEwHwYDVR0j BBgwFoAUIK8f+oFcbj87kGit09OvsRDafUUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRUIzQjM3NTU2QThEQTJFNzA2QTRBNzMzN0Y3REJCQzQ3 QUJCQUNENzEzMjI5QjU0Q0FDRDY3MEVCQzA1RTUxLzAvMjBBRjFGRkE4MTVDNkUz RjNCOTA2OEFERDNEM0FGQjExMERBN0Q0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEFGMUZGQTgxNUM2RTNGM0I5 MDY4QUREM0QzQUZCMTEwREE3RDQ1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUVCM0IzNzU1NkE4REEyRTcwNkE0QTczMzdGN0RCQkM0N0FCQkFDRDcx MzIyOUI1NENBQ0Q2NzBFQkMwNUU1MS8wLzIwQUYxRkZBODE1QzZFM0YzQjkwNjhB REQzRDNBRkIxMTBEQTdENDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADKSKMx5lm2H0yuZVUPVsMSnYN Dhi+TIXaeNqu5Sm1KuDBi9BgaM1VMfPfiwZxsiB6gOFmyRxsCD4e28seCD3hlIxS rj3ea6FSifOeNB9My+CxCg2qnCn615t9gW0oIKOcE9UAnxoLFmk8iYN0TXq/1BAO VsrhLo/K78xu8ew4NDD93Ua8IpjCSlcq/+iM9gzBy4K9jOkldAMLmCXKo2zUSKop uCMsxHs++XWXTL/qw42n4MTUpP5XJzB0WNXUSHhCtmHKFjlsPyELbLpiqrgp23ke a0wbPLHSc08pp00bZ6IZ8dcwLhg9uMj7VI7OZpnCeYipd5Fkr+wQKuXaohMf -----END CERTIFICATE-----Generated at Wed Apr 8 10:28:27 2026 by rpki-client