$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft File: F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft (raw, json) Hash identifier: utM6F2jPXGV7hE9BkjLhWoOGqu3sGVL4m6ykrCJRljg= Subject key identifier: 32:B8:5A:2A:FA:37:CA:AA:70:F1:E4:00:D5:FA:02:E0:5C:0F:58:3B Authority key identifier: F7:E5:D3:5C:28:04:01:09:AA:C6:0D:F0:41:0F:2F:F5:0C:BF:37:EC Certificate issuer: /CN=F7E5D35C28040109AAC60DF0410F2FF50CBF37EC Certificate serial: 4394BC321C1F6766FD2BF7B0315529109C4BEAA8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft Manifest number: 0194 Signing time: Thu 28 May 2026 09:16:37 +0000 Manifest this update: Thu 28 May 2026 09:11:37 +0000 Manifest next update: Tue 02 Jun 2026 16:36:37 +0000 Files and hashes: 1: 323830333a623835303a3a2f33322d313238203d3e20323733313230.roa (hash: GjcRh4KpABCanocLZ2946lh2wN0j53+E5EHLnwOSQks=) 2: F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.crl (hash: hDDy6GjLed5COBCTCQIXdYZzoVmNqMoNBphvzIgX4NM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.crl rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jun 2026 13:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:94:bc:32:1c:1f:67:66:fd:2b:f7:b0:31:55:29:10:9c:4b:ea:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7E5D35C28040109AAC60DF0410F2FF50CBF37EC Validity Not Before: May 28 09:11:37 2026 GMT Not After : Jun 2 16:36:37 2026 GMT Subject: CN=32B85A2AFA37CAAA70F1E400D5FA02E05C0F583B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:f5:2b:0f:41:59:a7:08:69:03:af:74:2a: aa:de:01:34:ea:11:1d:cb:bd:ac:fd:cc:4f:9e:69: cd:ad:4f:2c:76:52:7d:50:0f:ab:d0:fc:55:91:8f: 46:e2:31:ac:cc:63:cf:87:3a:7c:40:9f:a2:3a:56: 1c:ea:29:08:ba:cc:b9:4e:c4:ae:3b:8a:53:c2:c7: ad:0c:bf:cb:57:61:60:a4:65:e7:26:58:35:ba:46: 5b:ae:29:04:f7:c5:b5:5e:1a:7b:15:93:be:67:5a: 28:aa:1e:a9:01:0a:8f:c8:9b:15:9a:b8:20:49:3e: 75:b8:24:a5:03:38:1d:22:25:b6:59:52:63:2f:33: a8:47:c1:7d:9e:c8:2a:bc:98:86:ba:f4:93:e3:cd: 01:68:d5:c2:c4:d4:c8:a1:80:dc:20:d4:2e:c0:1e: f3:f4:89:58:fe:06:2b:43:0b:4b:21:66:fb:bc:5b: 2c:60:68:b4:b9:e2:a7:28:c9:fd:0f:b1:46:58:8f: 4b:6c:40:c1:01:ed:c4:47:47:df:17:d4:92:2d:d8: 17:5b:2a:7f:8a:39:09:7a:e1:5d:68:69:90:15:63: 80:5e:b0:cf:e5:0a:5e:7a:bc:36:44:0f:92:2b:40: 8c:58:53:9e:de:81:af:80:89:1b:67:82:07:88:0a: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B8:5A:2A:FA:37:CA:AA:70:F1:E4:00:D5:FA:02:E0:5C:0F:58:3B X509v3 Authority Key Identifier: keyid:F7:E5:D3:5C:28:04:01:09:AA:C6:0D:F0:41:0F:2F:F5:0C:BF:37:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:79:c0:51:b1:4b:89:0f:50:00:a6:2b:11:0e:2e:40:c5:e2: c3:8a:48:9b:3a:14:93:b8:ea:e1:a5:c8:23:bd:9f:a3:1a:52: 25:90:4d:83:80:3d:40:92:d2:53:59:92:d7:4f:d7:7a:72:8d: ae:fb:53:7e:97:b2:d2:81:cf:c7:e5:e6:f9:7b:53:20:d0:49: 67:a6:ae:46:db:85:f7:f0:59:3c:11:64:bc:6a:6c:fe:4a:c3: fd:ea:bc:00:63:d5:1b:3e:ac:36:c6:c3:ab:08:3b:8b:c9:28: 49:91:fd:ce:25:97:b5:ca:49:1d:04:71:30:93:cd:73:6f:3d: 0c:66:52:8e:af:a7:00:ed:99:e0:88:43:47:87:6e:ae:df:6f: 8c:53:ae:4e:71:ab:99:c0:b6:47:45:3b:06:f9:c0:23:81:a8: 44:53:65:07:f1:e0:9f:3a:9b:e9:08:64:39:cc:2d:87:56:64: de:c0:0e:e9:f0:c2:ff:16:eb:07:2e:0f:0d:f1:f9:d5:ec:6d: 60:09:d9:80:7b:b2:a6:08:07:b5:c1:8e:57:2e:a0:68:5a:e0: b3:cb:20:91:dd:20:27:9c:87:bc:87:ee:16:22:61:b6:eb:35: aa:6a:36:1f:a0:cc:3d:0c:75:73:8d:66:8a:4f:4d:65:be:48: 33:37:0f:a5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQ5S8MhwfZ2b9K/ewMVUpEJxL6qgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdFNUQzNUMyODA0MDEwOUFBQzYwREYwNDEwRjJGRjUw Q0JGMzdFQzAeFw0yNjA1MjgwOTExMzdaFw0yNjA2MDIxNjM2MzdaMDMxMTAvBgNV BAMTKDMyQjg1QTJBRkEzN0NBQUE3MEYxRTQwMEQ1RkEwMkUwNUMwRjU4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8c/UrD0FZpwhpA690KqreATTq ER3Lvaz9zE+eac2tTyx2Un1QD6vQ/FWRj0biMazMY8+HOnxAn6I6VhzqKQi6zLlO xK47ilPCx60Mv8tXYWCkZecmWDW6RluuKQT3xbVeGnsVk75nWiiqHqkBCo/ImxWa uCBJPnW4JKUDOB0iJbZZUmMvM6hHwX2eyCq8mIa69JPjzQFo1cLE1MihgNwg1C7A HvP0iVj+BitDC0shZvu8WyxgaLS54qcoyf0PsUZYj0tsQMEB7cRHR98X1JIt2Bdb Kn+KOQl64V1oaZAVY4BesM/lCl56vDZED5IrQIxYU57ega+AiRtnggeICvy7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMrhaKvo3yqpw8eQA1foC4FwPWDswHwYDVR0j BBgwFoAU9+XTXCgEAQmqxg3wQQ8v9Qy/N+wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRkM4NDlCNTMwOEM3NzgyOTFENEY2MjI4NTcwRDgzMTY1 RTQ0RkJDQ0M5MUM1ODk3QUREODExOTdDQ0Y3QjJELzAvRjdFNUQzNUMyODA0MDEw OUFBQzYwREYwNDEwRjJGRjUwQ0JGMzdFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GN0U1RDM1QzI4MDQwMTA5QUFD NjBERjA0MTBGMkZGNTBDQkYzN0VDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkZDODQ5QjUzMDhDNzc4MjkxRDRGNjIyODU3MEQ4MzE2NUU0NEZCQ0ND OTFDNTg5N0FERDgxMTk3Q0NGN0IyRC8wL0Y3RTVEMzVDMjgwNDAxMDlBQUM2MERG MDQxMEYyRkY1MENCRjM3RUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/ecBRsUuJD1AApisRDi5AxeLD ikibOhSTuOrhpcgjvZ+jGlIlkE2DgD1AktJTWZLXT9d6co2u+1N+l7LSgc/H5eb5 e1Mg0Elnpq5G24X38Fk8EWS8amz+SsP96rwAY9UbPqw2xsOrCDuLyShJkf3OJZe1 ykkdBHEwk81zbz0MZlKOr6cA7ZngiENHh26u32+MU65OcauZwLZHRTsG+cAjgahE U2UH8eCfOpvpCGQ5zC2HVmTewA7p8ML/FusHLg8N8fnV7G1gCdmAe7KmCAe1wY5X LqBoWuCzyyCR3SAnnIe8h+4WImG26zWqajYfoMw9DHVzjWaKT01lvkgzNw+l -----END CERTIFICATE-----Generated at Sat May 30 00:16:02 2026 by rpki-client