$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.mft File: 8422A5C9039083170A21D8F8523768E40CD48430.mft (raw, json) Hash identifier: iaEfkIpzqXs04w0bDf43qLxDOlruYiCLQdy0CXqD/sc= Subject key identifier: 8E:95:0B:A2:73:22:59:52:F5:59:48:8D:76:A4:94:D1:D9:F1:A4:87 Authority key identifier: 84:22:A5:C9:03:90:83:17:0A:21:D8:F8:52:37:68:E4:0C:D4:84:30 Certificate issuer: /CN=8422A5C9039083170A21D8F8523768E40CD48430 Certificate serial: 3DCA08866F5D0FD445C172551C9024C99968ECB0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.mft Manifest number: 017A Signing time: Mon 06 Apr 2026 03:51:58 +0000 Manifest this update: Mon 06 Apr 2026 03:46:58 +0000 Manifest next update: Sun 12 Apr 2026 02:32:58 +0000 Files and hashes: 1: 34352e3138312e3136342e302f32322d3234203d3e20323639373632.roa (hash: HJ8aIKL2l+4hOYR8+5v1iyl6vyHex5VyVj3EE1qL1vY=) 2: 323830333a383536303a3a2f33322d3332203d3e20323639373632.roa (hash: +79jmZM1jEkzGrzm0m+NGLj1+hRuzN/t2f51qLWItqI=) 3: 8422A5C9039083170A21D8F8523768E40CD48430.crl (hash: IpUYe0wYHd9Pr2xgIPUAODFhm6QdpDWapdxfeupSyAw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.crl rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 12 Apr 2026 02:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ca:08:86:6f:5d:0f:d4:45:c1:72:55:1c:90:24:c9:99:68:ec:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8422A5C9039083170A21D8F8523768E40CD48430 Validity Not Before: Apr 6 03:46:58 2026 GMT Not After : Apr 12 02:32:58 2026 GMT Subject: CN=8E950BA273225952F559488D76A494D1D9F1A487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:66:eb:68:aa:dc:0e:91:25:38:e7:17:48: 9e:5f:d7:a9:c0:3d:11:5e:b4:8d:24:bf:e6:6f:7b: 56:cd:92:42:f2:dd:45:a3:fa:4c:58:4b:49:be:22: a4:64:e9:df:fa:e0:9a:4f:cc:e6:7f:16:34:b9:67: 92:40:45:87:60:18:f0:6e:ab:bf:d2:02:85:9c:f3: fa:32:c6:6f:5d:16:d0:77:20:17:4e:d2:c2:72:1e: 1b:f0:fb:58:61:d3:74:0e:4a:d9:ea:51:0d:6f:d6: 66:05:36:6f:8e:20:5f:9a:ba:fa:bd:99:67:ba:5f: ae:22:86:de:a5:d3:d1:bf:4c:b6:e0:b5:e3:c7:b5: e3:86:00:d7:6b:ed:97:3c:b5:64:e6:7f:4c:85:67: bc:1d:e6:cc:9e:51:ee:f2:dd:93:2a:89:83:ee:d8: 93:3b:c6:ab:65:7f:53:2b:6b:05:c7:84:97:e9:e9: da:87:02:a0:fa:0a:03:bc:7b:ab:9c:08:f6:ea:a6: 43:80:48:72:c2:7a:0d:20:4c:3b:45:40:c6:82:5f: fd:29:2f:63:19:c4:7a:58:8e:79:8c:e5:cf:9a:9a: a3:17:c0:47:71:ac:d6:ab:fc:ed:40:68:86:32:a5: 78:40:f0:35:3e:7f:26:80:85:e8:19:27:44:98:d0: 77:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:95:0B:A2:73:22:59:52:F5:59:48:8D:76:A4:94:D1:D9:F1:A4:87 X509v3 Authority Key Identifier: keyid:84:22:A5:C9:03:90:83:17:0A:21:D8:F8:52:37:68:E4:0C:D4:84:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c6:61:c8:4e:f2:26:6d:b9:8f:59:e5:ea:2b:15:d5:20:2f: e8:2b:1f:11:66:85:28:b7:94:c6:ec:07:31:87:e9:44:25:7d: 96:c0:25:ed:4a:fd:c5:8d:b3:1a:5b:40:69:80:97:31:81:8e: b3:d7:54:e9:db:38:dd:a3:90:35:de:7c:5a:9f:4d:ee:45:59: f0:71:c9:e9:fc:f4:93:2b:c6:ce:82:be:db:16:21:e1:9a:1e: e0:bd:ab:04:1c:25:ef:89:26:8f:36:67:27:44:8c:13:98:7e: 00:eb:dc:8f:ec:4b:ee:5b:d3:76:f6:09:d9:c5:1b:a6:81:6b: 74:ae:eb:04:d8:75:8f:e6:8f:1a:43:e0:d1:58:1c:54:19:63: e1:21:28:f3:d0:60:a7:43:a2:ae:b9:03:15:59:74:2e:6e:94: 68:46:97:07:fa:4f:ea:1a:65:5a:3c:81:0d:60:1e:ba:ce:3d: 9e:d5:6f:0c:a5:fc:44:be:3e:f0:66:9e:2b:d9:24:60:bb:f2: 0a:68:c7:6f:ec:14:0f:15:74:08:b1:62:f6:7c:63:20:17:37: ab:3b:1c:6f:65:23:e7:dd:b7:b8:fc:3c:05:dd:41:25:42:5b: 38:02:bf:1e:4c:00:f8:5d:e6:a2:0d:ff:59:71:e5:52:11:ff: 42:88:0f:a6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPcoIhm9dD9RFwXJVHJAkyZlo7LAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMkE1QzkwMzkwODMxNzBBMjFEOEY4NTIzNzY4RTQw Q0Q0ODQzMDAeFw0yNjA0MDYwMzQ2NThaFw0yNjA0MTIwMjMyNThaMDMxMTAvBgNV BAMTKDhFOTUwQkEyNzMyMjU5NTJGNTU5NDg4RDc2QTQ5NEQxRDlGMUE0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/mbraKrcDpElOOcXSJ5f16nA PRFetI0kv+Zve1bNkkLy3UWj+kxYS0m+IqRk6d/64JpPzOZ/FjS5Z5JARYdgGPBu q7/SAoWc8/oyxm9dFtB3IBdO0sJyHhvw+1hh03QOStnqUQ1v1mYFNm+OIF+auvq9 mWe6X64iht6l09G/TLbgtePHteOGANdr7Zc8tWTmf0yFZ7wd5syeUe7y3ZMqiYPu 2JM7xqtlf1MrawXHhJfp6dqHAqD6CgO8e6ucCPbqpkOASHLCeg0gTDtFQMaCX/0p L2MZxHpYjnmM5c+amqMXwEdxrNar/O1AaIYypXhA8DU+fyaAhegZJ0SY0HflAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjpULonMiWVL1WUiNdqSU0dnxpIcwHwYDVR0j BBgwFoAUhCKlyQOQgxcKIdj4Ujdo5AzUhDAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FMEU2OUM1MzRGNDk1RjMwMzdCRjhEMjI0NjExRTYxMUM4 MDkyRDY1NDQ4NzFDOUFGNDUzMUI0Q0U2NkM1Q0MyLzAvODQyMkE1QzkwMzkwODMx NzBBMjFEOEY4NTIzNzY4RTQwQ0Q0ODQzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDIyQTVDOTAzOTA4MzE3MEEy MUQ4Rjg1MjM3NjhFNDBDRDQ4NDMwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTBFNjlDNTM0RjQ5NUYzMDM3QkY4RDIyNDYxMUU2MTFDODA5MkQ2NTQ0 ODcxQzlBRjQ1MzFCNENFNjZDNUNDMi8wLzg0MjJBNUM5MDM5MDgzMTcwQTIxRDhG ODUyMzc2OEU0MENENDg0MzAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAxmHITvImbbmPWeXqKxXVIC/o Kx8RZoUot5TG7Acxh+lEJX2WwCXtSv3FjbMaW0BpgJcxgY6z11Tp2zjdo5A13nxa n03uRVnwccnp/PSTK8bOgr7bFiHhmh7gvasEHCXviSaPNmcnRIwTmH4A69yP7Evu W9N29gnZxRumgWt0rusE2HWP5o8aQ+DRWBxUGWPhISjz0GCnQ6KuuQMVWXQubpRo RpcH+k/qGmVaPIENYB66zj2e1W8MpfxEvj7wZp4r2SRgu/IKaMdv7BQPFXQIsWL2 fGMgFzerOxxvZSPn3be4/DwF3UElQls4Ar8eTAD4XeaiDf9ZceVSEf9CiA+m -----END CERTIFICATE-----Generated at Wed Apr 8 08:47:40 2026 by rpki-client