$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft File: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft (raw, json) Hash identifier: ObmoCjWC+Ok7SrB+5czEUZ6DOoSNct9kpGpyM/3DdB4= Subject key identifier: 2D:A1:A2:B8:8A:27:88:F4:70:20:2D:4F:60:46:21:0B:5C:50:0C:DD Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB Certificate issuer: /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Certificate serial: 453C10A5D5E268B209CD4DF7455E96DCB81FBE56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft Manifest number: 018F Signing time: Mon 06 Apr 2026 19:46:40 +0000 Manifest this update: Mon 06 Apr 2026 19:41:40 +0000 Manifest next update: Sat 11 Apr 2026 09:31:40 +0000 Files and hashes: 1: 323830333a6432303a3a2f33322d3332203d3e20323635363834.roa (hash: xgPx+dQWjLclN9xE6E/XYKB+eEv0I0+Tt3Ke/JN4uVA=) 2: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl (hash: H9NtZB3T05puXppeWP8p09/YczyZ42yHmO43etfJi30=) 3: 34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (hash: RjYwFPygnV0CajzN68cgTzZl3h7UfXxe+Bz7fg/no0g=) 4: 34352e3232382e3233322e302f32342d3234203d3e20323636363936.roa (hash: E0b13OM4B4olC5DtkwtnTO/VSW7DATHGA0OuT98pPXA=) 5: 323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (hash: ja5NzAS9zsurXlmAUDmehMIKhNL3KuIVCRoF+SlYZZk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 11 Apr 2026 09:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3c:10:a5:d5:e2:68:b2:09:cd:4d:f7:45:5e:96:dc:b8:1f:be:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Validity Not Before: Apr 6 19:41:40 2026 GMT Not After : Apr 11 09:31:40 2026 GMT Subject: CN=2DA1A2B88A2788F470202D4F6046210B5C500CDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:05:71:c0:fa:76:b1:68:5c:fa:a8:f7:32:66: cd:4d:f2:b4:99:d4:3c:01:26:ee:9a:f5:ef:0a:bd: 74:95:90:e7:ac:bd:ea:fe:67:c4:a1:4a:d3:1b:76: d7:74:f2:f1:aa:45:70:50:7a:00:cf:a6:dd:70:9c: b0:06:63:dd:e4:92:a1:ef:39:9a:43:24:25:b8:ab: 2a:ba:19:49:87:de:50:ca:a7:ec:eb:eb:41:7d:ea: ad:5b:a2:51:67:d1:bf:75:06:af:c7:c6:c2:73:14: a2:f2:c6:63:86:4e:51:b6:9c:f8:e1:54:f8:1f:0a: 0e:61:a2:76:18:81:0a:33:22:17:35:e9:4b:58:df: 51:c7:5e:ce:a0:47:54:29:29:41:e6:65:53:d6:9f: 6a:49:31:e0:bf:92:62:17:b4:4b:99:79:dc:3e:36: 17:45:12:84:52:82:7a:81:3c:ab:89:1a:5a:b0:1d: 9f:ca:10:4b:0f:6f:9f:7d:6b:a5:84:df:ea:b1:62: ae:d0:a5:1a:91:ce:e7:b6:d5:c2:f4:95:1b:e5:8e: 74:38:b4:95:3e:f9:98:41:e9:50:a2:fc:61:f0:fe: 4e:71:e5:0d:a4:61:58:4a:7b:b4:3f:7b:3d:11:04: 95:2a:84:24:a9:b1:cc:d1:3b:72:bb:1d:84:15:d1: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A1:A2:B8:8A:27:88:F4:70:20:2D:4F:60:46:21:0B:5C:50:0C:DD X509v3 Authority Key Identifier: keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c7:97:b6:f6:85:1a:60:ab:e5:63:37:bd:8f:90:eb:43:6b: 8a:98:b7:ef:98:30:e1:c5:4d:f0:af:0e:c4:f4:cd:76:20:65: 1c:97:b4:7e:06:5d:02:f3:a7:2d:dd:f3:2b:86:d8:07:2d:1b: 74:b6:5d:60:91:65:41:b1:c0:a0:f7:50:ea:35:89:51:41:43: f5:53:c0:a0:42:92:38:e0:1e:b9:4d:1e:72:70:e2:8a:ae:64: 87:09:3e:5b:cb:23:e0:e6:35:82:67:99:0d:cc:b6:18:45:f4: 50:64:81:3b:2f:27:4e:c8:6a:94:60:06:a4:2f:05:a8:ac:9e: f6:ad:00:92:b4:ef:fc:1a:34:74:9a:4f:d3:aa:76:11:3d:67: a8:af:e2:3c:de:5c:af:4a:4b:75:ff:27:18:2c:16:01:be:e1: b4:79:c3:e4:f2:1d:af:57:20:12:37:39:26:77:5b:fa:07:96: 1d:a8:7a:76:f7:18:c4:c0:39:a6:14:d9:e1:07:71:7c:09:e9: 8e:5e:45:f9:d9:3f:30:27:bd:0c:c9:2d:ec:64:c6:e3:9e:a0: a2:3b:df:ff:ee:a0:f5:f8:b1:73:49:7c:86:af:ca:0a:30:5d: 7f:b2:09:b1:2f:e0:d2:cf:b2:53:4c:86:11:3d:38:cb:51:17: c3:41:65:6f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURTwQpdXiaLIJzU33RV6W3LgfvlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGQTVDNUFGRTYzRjZCMDJDM0MzMzM5OUQyQzE5MkUy NERDRjdGQjAeFw0yNjA0MDYxOTQxNDBaFw0yNjA0MTEwOTMxNDBaMDMxMTAvBgNV BAMTKDJEQTFBMkI4OEEyNzg4RjQ3MDIwMkQ0RjYwNDYyMTBCNUM1MDBDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiBXHA+naxaFz6qPcyZs1N8rSZ 1DwBJu6a9e8KvXSVkOesver+Z8ShStMbdtd08vGqRXBQegDPpt1wnLAGY93kkqHv OZpDJCW4qyq6GUmH3lDKp+zr60F96q1bolFn0b91Bq/HxsJzFKLyxmOGTlG2nPjh VPgfCg5honYYgQozIhc16UtY31HHXs6gR1QpKUHmZVPWn2pJMeC/kmIXtEuZedw+ NhdFEoRSgnqBPKuJGlqwHZ/KEEsPb599a6WE3+qxYq7QpRqRzue21cL0lRvljnQ4 tJU++ZhB6VCi/GHw/k5x5Q2kYVhKe7Q/ez0RBJUqhCSpsczRO3K7HYQV0YQHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULaGiuIoniPRwIC1PYEYhC1xQDN0wHwYDVR0j BBgwFoAU3vpcWv5j9rAsPDM5nSwZLiTc9/swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTM5RDlBQkVBNjkxNTcwQTVEODA0QzIwMzE0OUIzMEFE QTg3MERGOUQzNjhGRTE1QzUzRTU4QjFCNERFM0ZDLzAvREVGQTVDNUFGRTYzRjZC MDJDM0MzMzM5OUQyQzE5MkUyNERDRjdGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUZBNUM1QUZFNjNGNkIwMkMz QzMzMzk5RDJDMTkyRTI0RENGN0ZCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkzOUQ5QUJFQTY5MTU3MEE1RDgwNEMyMDMxNDlCMzBBREE4NzBERjlE MzY4RkUxNUM1M0U1OEIxQjRERTNGQy8wL0RFRkE1QzVBRkU2M0Y2QjAyQzNDMzMz OTlEMkMxOTJFMjREQ0Y3RkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByx5e29oUaYKvlYze9j5DrQ2uK mLfvmDDhxU3wrw7E9M12IGUcl7R+Bl0C86ct3fMrhtgHLRt0tl1gkWVBscCg91Dq NYlRQUP1U8CgQpI44B65TR5ycOKKrmSHCT5byyPg5jWCZ5kNzLYYRfRQZIE7LydO yGqUYAakLwWorJ72rQCStO/8GjR0mk/TqnYRPWeor+I83lyvSkt1/ycYLBYBvuG0 ecPk8h2vVyASNzkmd1v6B5YdqHp29xjEwDmmFNnhB3F8CemOXkX52T8wJ70MyS3s ZMbjnqCiO9//7qD1+LFzSXyGr8oKMF1/sgmxL+DSz7JTTIYRPTjLURfDQWVv -----END CERTIFICATE-----Generated at Wed Apr 8 07:25:35 2026 by rpki-client