$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/648541E68129C9782F979C83A78D0CB38FE6503F.mft File: 648541E68129C9782F979C83A78D0CB38FE6503F.mft (raw, json) Hash identifier: P/xeg1lLCTpz1Ktz7dZo/PYL0o/Q4xllc+mAvVKXfGA= Subject key identifier: 3E:32:96:81:55:A8:1C:AC:D6:4A:6B:C6:C5:33:B2:2F:F7:74:D8:C4 Authority key identifier: 64:85:41:E6:81:29:C9:78:2F:97:9C:83:A7:8D:0C:B3:8F:E6:50:3F Certificate issuer: /CN=648541E68129C9782F979C83A78D0CB38FE6503F Certificate serial: 6CA19FF5A0819EC9CBEAD485DF68EB521FE6E71C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648541E68129C9782F979C83A78D0CB38FE6503F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/648541E68129C9782F979C83A78D0CB38FE6503F.mft Manifest number: 0190 Signing time: Fri 29 May 2026 12:17:29 +0000 Manifest this update: Fri 29 May 2026 12:12:29 +0000 Manifest next update: Tue 02 Jun 2026 13:30:29 +0000 Files and hashes: 1: 323830333a373236303a3a2f33322d3438203d3e203532323338.roa (hash: cszIEAPzu5YFKlpRXgVTU05UrTmAT2rHwAqERKi0hwU=) 2: 3139302e39392e37322e302f32312d3234203d3e203532323338.roa (hash: 8EJDpDjqVBS74T5lLNmd4IE5blYc1uXHvTZ1NhIYE+o=) 3: 648541E68129C9782F979C83A78D0CB38FE6503F.crl (hash: aeN77Bba/FYS+X0oVIQNq45xOZ7OPpOnkkQhgKxDd2U=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/648541E68129C9782F979C83A78D0CB38FE6503F.crl rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/648541E68129C9782F979C83A78D0CB38FE6503F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648541E68129C9782F979C83A78D0CB38FE6503F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jun 2026 13:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a1:9f:f5:a0:81:9e:c9:cb:ea:d4:85:df:68:eb:52:1f:e6:e7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=648541E68129C9782F979C83A78D0CB38FE6503F Validity Not Before: May 29 12:12:29 2026 GMT Not After : Jun 2 13:30:29 2026 GMT Subject: CN=3E32968155A81CACD64A6BC6C533B22FF774D8C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:90:90:3d:f3:64:97:88:3a:6f:16:cf:67: 91:15:ce:5a:96:57:c7:a2:e2:55:7d:9c:ab:5a:fc: 10:85:c3:50:a8:1a:81:58:58:22:0d:ba:0b:6e:74: 08:72:23:2a:04:fe:41:7e:dd:3d:5c:ae:14:df:d2: 8b:5c:01:53:df:6a:90:24:3a:ad:9f:67:10:8e:10: 55:38:8f:d6:aa:01:f4:6d:2f:ed:77:53:c4:c6:94: 8e:f3:90:d4:8f:57:09:1f:84:63:9a:4e:58:8d:02: 3a:22:95:a8:c7:94:cc:12:da:aa:b2:25:6d:c5:5c: 42:f7:f8:de:3c:a7:13:03:d4:56:51:40:3e:84:01: ed:e3:db:6f:fa:2d:bc:8a:2b:d3:92:7f:c2:57:b3: e8:05:23:70:e3:7f:cd:48:7f:27:69:f8:0d:99:b3: bf:73:a8:d9:b5:36:1c:8e:3c:b3:7c:67:f1:96:cb: e1:7c:7c:84:98:6a:b2:fe:09:05:f2:ee:56:c5:7f: d2:93:3f:49:11:54:8e:7f:fe:0b:8a:90:66:c6:54: 59:85:0d:fa:57:50:e8:0b:e2:08:f7:de:80:5b:04: 6f:61:ce:c6:57:ec:cc:1e:97:e7:4a:a9:6e:bd:c5: 61:27:65:49:51:30:ef:31:57:81:98:96:b8:38:78: 50:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:32:96:81:55:A8:1C:AC:D6:4A:6B:C6:C5:33:B2:2F:F7:74:D8:C4 X509v3 Authority Key Identifier: keyid:64:85:41:E6:81:29:C9:78:2F:97:9C:83:A7:8D:0C:B3:8F:E6:50:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/648541E68129C9782F979C83A78D0CB38FE6503F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648541E68129C9782F979C83A78D0CB38FE6503F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/648541E68129C9782F979C83A78D0CB38FE6503F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e6:d2:57:c7:5c:20:79:d2:ae:14:ad:0b:3f:4c:89:65:ec: 8e:9e:1a:1f:8c:75:73:19:8c:0b:84:3c:0d:7b:25:78:a5:4e: a1:b1:9c:ff:12:06:8e:3a:aa:cf:53:9d:13:1d:82:ca:c2:79: 62:6e:56:4c:04:9d:64:9f:54:db:06:97:66:d3:3e:0b:37:f1: 1b:4c:e5:ec:cf:84:da:e6:9f:f8:3e:56:91:98:1f:eb:07:42: 70:e4:6c:4a:7d:41:c8:0f:de:25:6b:33:f0:ed:2b:b7:22:15: e3:43:7f:a0:37:c5:ef:dd:9f:4a:be:aa:27:a2:e2:bc:b5:63: 87:1a:a6:7a:b3:44:a0:c8:46:1b:8e:8a:b9:1a:aa:41:cd:bb: 2e:37:13:7e:36:01:97:56:45:5a:a1:09:5e:31:fa:2d:d4:4e: 97:ea:51:64:ff:d4:8f:11:77:3d:b8:a5:74:65:0b:97:85:56: 1f:d4:3b:64:d1:14:1f:ce:ba:fe:d5:8d:7e:92:49:9d:57:05: 79:83:c1:75:72:d3:cd:07:e2:b5:b2:76:4c:0f:3d:0d:3e:8f: a4:cc:a9:65:60:9b:23:53:c5:7f:0b:e8:61:5f:8b:11:b4:67: 2d:02:f0:50:7f:d6:4b:b7:1e:0f:af:f2:1e:79:28:ec:83:53: 74:6a:25:c9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbKGf9aCBnsnL6tSF32jrUh/m5xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4NTQxRTY4MTI5Qzk3ODJGOTc5QzgzQTc4RDBDQjM4 RkU2NTAzRjAeFw0yNjA1MjkxMjEyMjlaFw0yNjA2MDIxMzMwMjlaMDMxMTAvBgNV BAMTKDNFMzI5NjgxNTVBODFDQUNENjRBNkJDNkM1MzNCMjJGRjc3NEQ4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZJCQPfNkl4g6bxbPZ5EVzlqW V8ei4lV9nKta/BCFw1CoGoFYWCINugtudAhyIyoE/kF+3T1crhTf0otcAVPfapAk Oq2fZxCOEFU4j9aqAfRtL+13U8TGlI7zkNSPVwkfhGOaTliNAjoilajHlMwS2qqy JW3FXEL3+N48pxMD1FZRQD6EAe3j22/6LbyKK9OSf8JXs+gFI3Djf81Ifydp+A2Z s79zqNm1NhyOPLN8Z/GWy+F8fISYarL+CQXy7lbFf9KTP0kRVI5//guKkGbGVFmF DfpXUOgL4gj33oBbBG9hzsZX7Mwel+dKqW69xWEnZUlRMO8xV4GYlrg4eFCBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPjKWgVWoHKzWSmvGxTOyL/d02MQwHwYDVR0j BBgwFoAUZIVB5oEpyXgvl5yDp40Ms4/mUD8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GRUE4QkM0RkI3RTREODg1NDUyMjQ0RkM0Q0EzQzBCRjRD N0UyMDI5N0NGOTUyQTYwOURFMEIwMUVCODBEQjYzLzAvNjQ4NTQxRTY4MTI5Qzk3 ODJGOTc5QzgzQTc4RDBDQjM4RkU2NTAzRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDg1NDFFNjgxMjlDOTc4MkY5 NzlDODNBNzhEMENCMzhGRTY1MDNGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkVBOEJDNEZCN0U0RDg4NTQ1MjI0NEZDNENBM0MwQkY0QzdFMjAyOTdD Rjk1MkE2MDlERTBCMDFFQjgwREI2My8wLzY0ODU0MUU2ODEyOUM5NzgyRjk3OUM4 M0E3OEQwQ0IzOEZFNjUwM0YubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBy5tJXx1wgedKuFK0LP0yJZeyO nhofjHVzGYwLhDwNeyV4pU6hsZz/EgaOOqrPU50THYLKwnliblZMBJ1kn1TbBpdm 0z4LN/EbTOXsz4Ta5p/4PlaRmB/rB0Jw5GxKfUHID94lazPw7Su3IhXjQ3+gN8Xv 3Z9KvqonouK8tWOHGqZ6s0SgyEYbjoq5GqpBzbsuNxN+NgGXVkVaoQleMfot1E6X 6lFk/9SPEXc9uKV0ZQuXhVYf1Dtk0RQfzrr+1Y1+kkmdVwV5g8F1ctPNB+K1snZM Dz0NPo+kzKllYJsjU8V/C+hhX4sRtGctAvBQf9ZLtx4Pr/IeeSjsg1N0aiXJ -----END CERTIFICATE-----Generated at Sat May 30 00:17:09 2026 by rpki-client