$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: oJcvxxPed74a9YH3ObHO8H65v623x7sI94SjpQB0Ydw= Subject key identifier: 23:F3:E3:EE:84:4B:F3:DC:49:B8:6E:E2:62:14:63:D1:89:35:DA:90 Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 2D8D68382BAD4946000A41D8912B534C02F477B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: 0182 Signing time: Wed 08 Apr 2026 02:09:53 +0000 Manifest this update: Wed 08 Apr 2026 02:04:53 +0000 Manifest next update: Sun 12 Apr 2026 21:15:53 +0000 Files and hashes: 1: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: 0LramAjDqQPAros2peWhbmTCHIi87gHcKGklQ4pegRg=) 2: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: lls2NOIQefkNui92Jx0iA7Lcnw+MwNLxm47JeaFpIdo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 12 Apr 2026 05:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:8d:68:38:2b:ad:49:46:00:0a:41:d8:91:2b:53:4c:02:f4:77:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: Apr 8 02:04:53 2026 GMT Not After : Apr 12 21:15:53 2026 GMT Subject: CN=23F3E3EE844BF3DC49B86EE2621463D18935DA90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:42:14:e2:bf:01:37:d4:24:e6:59:63:1b: ab:3f:33:22:79:fd:71:81:44:11:4e:dc:53:8a:16: 25:ed:4a:a4:10:6f:11:12:8a:27:9d:c8:7a:9f:15: 28:20:dc:80:75:6f:4d:af:1c:29:4a:f0:99:f5:8d: bc:68:8f:f7:fd:b3:84:7f:dd:6b:3d:11:3b:cc:c6: b9:5a:6d:05:c0:50:56:89:3b:38:b6:32:84:44:8e: 90:d1:e9:cb:64:c1:50:20:ca:cd:84:2f:54:a1:45: 34:dd:cf:85:6c:8d:ea:52:f9:69:d6:d0:ac:1a:28: e3:7e:60:d3:4a:cc:83:42:ee:d9:8b:77:53:4d:58: 7a:a7:47:62:ee:01:9c:fc:34:db:fe:ad:b6:75:86: 3c:04:49:b5:55:46:5f:c8:83:73:82:b1:53:2b:76: bc:bb:03:53:f7:81:ee:c2:b6:34:6b:dc:31:84:f1: 33:ab:e2:36:51:5c:17:bc:56:c7:e4:be:6a:0f:a5: dc:f1:fb:0b:7d:ee:a9:6a:4e:9a:43:ce:7c:51:91: a4:a0:77:28:b8:8c:17:71:f4:ce:a4:f7:c2:87:46: 93:19:85:ab:67:75:04:9b:d4:ca:02:d9:87:48:8d: 21:47:fa:d4:a8:fe:bc:61:52:7e:33:c6:bb:14:45: ae:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F3:E3:EE:84:4B:F3:DC:49:B8:6E:E2:62:14:63:D1:89:35:DA:90 X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:68:4a:9e:8b:9b:bf:e3:c0:1e:32:f0:3e:4b:d6:eb:ef:da: 45:74:71:26:fa:e5:c3:29:a9:25:ff:f3:d8:ea:fe:c7:6a:2e: 90:b6:8f:41:62:17:6d:05:f2:46:99:48:a6:2d:f2:dd:bb:2c: 2e:c3:e1:6e:c7:31:c0:c5:44:38:34:a3:57:41:e6:54:ef:3b: be:d5:a9:53:ca:90:93:6c:38:8a:7d:4a:74:7d:6e:b9:fc:03: 06:77:33:27:68:a8:51:cb:ce:18:aa:7b:ae:77:d7:5e:1e:e6: ff:51:25:a1:4f:9f:c5:a1:9a:16:e2:19:63:2c:6e:f1:1f:f5: 35:2e:ec:14:7e:a6:69:81:d8:c7:89:5e:24:b6:71:d3:e3:46: 69:d6:87:f1:a1:65:0b:42:0f:ea:3c:2b:c1:26:90:34:f5:e0: 84:53:e2:f7:58:e5:af:1b:e8:7c:b5:d7:bb:d4:b8:fc:31:0b: d7:db:b0:68:f1:ca:36:91:3d:5e:c0:f0:59:d6:98:76:41:32: b1:74:1c:a5:5b:da:f1:29:fc:c9:74:41:71:6c:3b:88:1e:d9: 7b:5d:5b:bd:66:af:70:df:17:38:52:4b:ec:c5:0e:ab:6c:9e: 95:65:ce:e7:4e:85:61:43:32:72:6b:1a:cb:61:5a:b4:84:f9: 0f:e0:09:15 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULY1oOCutSUYACkHYkStTTAL0d7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNjA0MDgwMjA0NTNaFw0yNjA0MTIyMTE1NTNaMDMxMTAvBgNV BAMTKDIzRjNFM0VFODQ0QkYzREM0OUI4NkVFMjYyMTQ2M0QxODkzNURBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5kIU4r8BN9Qk5lljG6s/MyJ5 /XGBRBFO3FOKFiXtSqQQbxESiiedyHqfFSgg3IB1b02vHClK8Jn1jbxoj/f9s4R/ 3Ws9ETvMxrlabQXAUFaJOzi2MoREjpDR6ctkwVAgys2EL1ShRTTdz4VsjepS+WnW 0KwaKON+YNNKzINC7tmLd1NNWHqnR2LuAZz8NNv+rbZ1hjwESbVVRl/Ig3OCsVMr dry7A1P3ge7CtjRr3DGE8TOr4jZRXBe8VsfkvmoPpdzx+wt97qlqTppDznxRkaSg dyi4jBdx9M6k98KHRpMZhatndQSb1MoC2YdIjSFH+tSo/rxhUn4zxrsURa7LAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUI/Pj7oRL89xJuG7iYhRj0Yk12pAwHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoaEqei5u/48AeMvA+S9br79pF dHEm+uXDKakl//PY6v7Hai6Qto9BYhdtBfJGmUimLfLduywuw+FuxzHAxUQ4NKNX QeZU7zu+1alTypCTbDiKfUp0fW65/AMGdzMnaKhRy84Yqnuud9deHub/USWhT5/F oZoW4hljLG7xH/U1LuwUfqZpgdjHiV4ktnHT40Zp1ofxoWULQg/qPCvBJpA09eCE U+L3WOWvG+h8tde71Lj8MQvX27Bo8co2kT1ewPBZ1ph2QTKxdBylW9rxKfzJdEFx bDuIHtl7XVu9Zq9w3xc4UkvsxQ6rbJ6VZc7nToVhQzJyaxrLYVq0hPkP4AkV -----END CERTIFICATE-----Generated at Wed Apr 8 08:47:18 2026 by rpki-client