$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft File: 4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft (raw, json) Hash identifier: ZbS3tCJ3g+TI4xyVmY8br3xPsIX/MOKZnlifsy+W/sk= Subject key identifier: 82:EE:68:7B:CF:60:97:25:C2:AF:C1:91:92:D3:61:40:3D:10:B3:62 Authority key identifier: 4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE Certificate issuer: /CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE Certificate serial: 3D3A079B41508CB0E57D737DF9B88E8BA62EE2D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft Manifest number: 0187 Signing time: Tue 28 Apr 2026 18:39:23 +0000 Manifest this update: Tue 28 Apr 2026 18:34:23 +0000 Manifest next update: Mon 04 May 2026 02:28:23 +0000 Files and hashes: 1: 34352e3137392e39322e302f32322d3234203d3e20323637393133.roa (hash: Zhx4w7q3b76P43TUty03e9cZBQ52Og/4LKtdyYtiVRk=) 2: 4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl (hash: uMcMJuOSC3t0G45hqj0Un27wp85tOAlv/WS8AQiiJE8=) 3: 323830333a6536303a3a2f33322d3334203d3e20323637393133.roa (hash: 4a5y+5cIu8HpyNfMmPy+zVDjFR0VRxV3BHVaP8ZMP/E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 02:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3a:07:9b:41:50:8c:b0:e5:7d:73:7d:f9:b8:8e:8b:a6:2e:e2:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE Validity Not Before: Apr 28 18:34:23 2026 GMT Not After : May 4 02:28:23 2026 GMT Subject: CN=82EE687BCF609725C2AFC19192D361403D10B362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:ae:3d:91:4e:95:b7:07:b4:67:e3:68:4d: fd:47:59:51:47:82:af:93:d7:5a:b4:b3:ef:2f:fd: bf:1b:bd:93:ae:19:ad:ff:00:76:7d:77:bd:74:59: f6:f3:67:fe:e8:cb:8c:3a:e0:66:f4:26:57:06:4a: c8:46:8c:dd:3b:7b:8b:83:90:1e:cb:48:da:89:18: 0b:a6:f7:99:a1:95:b8:fe:38:ce:1e:55:b4:64:2d: a7:21:bf:9e:34:d9:23:eb:26:5e:5a:ca:50:9a:7a: 00:b1:0a:bd:25:3a:9c:b5:6f:54:bb:d7:d8:70:ce: d1:b9:68:8e:d6:69:f3:7b:2a:dd:4d:aa:71:4d:31: 55:47:a7:fe:f1:18:6a:b2:f8:f1:20:2f:eb:00:49: c5:cc:3b:b4:39:10:a8:b4:df:24:21:39:93:5e:05: fd:c4:5d:fd:d3:65:4a:f4:ae:c2:fa:9b:96:68:75: ae:ae:12:3b:06:20:96:1d:28:c3:4b:b0:57:6b:44: 3a:75:4f:51:19:38:0d:1a:25:20:0c:63:4b:2b:7b: a4:39:a0:90:d4:03:52:b2:f7:fa:a2:20:3e:aa:3c: ae:d5:bc:f9:86:2a:85:72:0e:7c:64:ae:98:b4:26: 19:17:16:c6:4f:f1:33:4d:07:0e:11:e8:de:0b:a5: 98:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EE:68:7B:CF:60:97:25:C2:AF:C1:91:92:D3:61:40:3D:10:B3:62 X509v3 Authority Key Identifier: keyid:4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0c:38:f2:67:c8:9c:c2:50:7a:ac:70:ba:5d:c2:91:3e:40: 7d:29:f9:fd:e0:6a:c5:22:7c:72:ea:7d:ba:b3:fd:9e:2a:1f: e0:94:5c:8d:7d:29:a8:a5:59:5b:e4:65:58:18:bf:96:93:ab: c5:ca:7f:38:64:2d:21:d6:8a:73:5e:ff:68:1f:99:39:c8:83: 98:fb:23:42:00:e0:95:be:c7:af:1b:08:f6:41:84:b4:c8:78: 50:d6:ed:21:f7:16:74:cb:d6:7a:42:ff:60:4a:b6:23:84:47: e4:8c:cd:38:f6:c7:d4:6e:ac:57:cb:81:98:8f:c6:89:c9:55: a5:20:b3:2e:ea:f7:e2:08:fc:cd:f4:5f:47:f9:ae:88:e5:db: 48:d4:3c:4b:52:7f:cd:6d:9a:17:f1:98:c9:3f:a5:1e:00:ef: 48:cd:d5:e0:99:d0:81:42:5b:14:97:f0:08:60:32:26:43:dd: 04:54:0e:c3:cd:0c:ad:58:28:fa:da:e0:a9:8e:4e:85:ec:39: 5f:7a:75:6d:5f:dd:f3:6d:09:43:5f:96:72:9f:e3:64:fa:c5: 22:fe:15:2f:e7:80:3b:25:f3:7d:97:44:21:9e:1e:62:e7:9d: 28:9c:39:ce:b0:fc:88:61:b4:60:a6:f9:db:ce:0d:c0:70:66: 48:2a:02:b5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPToHm0FQjLDlfXN9+biOi6Yu4tYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQzMwQzJEQkMzMUFDREMyRTI0NTU1RjUwMzFDM0NG NkJBMERFRTAeFw0yNjA0MjgxODM0MjNaFw0yNjA1MDQwMjI4MjNaMDMxMTAvBgNV BAMTKDgyRUU2ODdCQ0Y2MDk3MjVDMkFGQzE5MTkyRDM2MTQwM0QxMEIzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPK49kU6Vtwe0Z+NoTf1HWVFH gq+T11q0s+8v/b8bvZOuGa3/AHZ9d710WfbzZ/7oy4w64Gb0JlcGSshGjN07e4uD kB7LSNqJGAum95mhlbj+OM4eVbRkLachv5402SPrJl5aylCaegCxCr0lOpy1b1S7 19hwztG5aI7WafN7Kt1NqnFNMVVHp/7xGGqy+PEgL+sAScXMO7Q5EKi03yQhOZNe Bf3EXf3TZUr0rsL6m5Zoda6uEjsGIJYdKMNLsFdrRDp1T1EZOA0aJSAMY0sre6Q5 oJDUA1Ky9/qiID6qPK7VvPmGKoVyDnxkrpi0JhkXFsZP8TNNBw4R6N4LpZhnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUgu5oe89glyXCr8GRktNhQD0Qs2IwHwYDVR0j BBgwFoAUSqwwwtvDGs3C4kVV9QMcPPa6De4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRDY2MDAxRTdERTg4NDRBRUQwQUI0MjBDNUUwOUU2OUM1 NDdDODZBQjNBRDY5QURCMjQzMjZBNTM2MzE1RUEzLzAvNEFBQzMwQzJEQkMzMUFD REMyRTI0NTU1RjUwMzFDM0NGNkJBMERFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QUFDMzBDMkRCQzMxQUNEQzJF MjQ1NTVGNTAzMUMzQ0Y2QkEwREVFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEQ2NjAwMUU3REU4ODQ0QUVEMEFCNDIwQzVFMDlFNjlDNTQ3Qzg2QUIz QUQ2OUFEQjI0MzI2QTUzNjMxNUVBMy8wLzRBQUMzMEMyREJDMzFBQ0RDMkUyNDU1 NUY1MDMxQzNDRjZCQTBERUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcDDjyZ8icwlB6rHC6XcKRPkB9 Kfn94GrFInxy6n26s/2eKh/glFyNfSmopVlb5GVYGL+Wk6vFyn84ZC0h1opzXv9o H5k5yIOY+yNCAOCVvsevGwj2QYS0yHhQ1u0h9xZ0y9Z6Qv9gSrYjhEfkjM049sfU bqxXy4GYj8aJyVWlILMu6vfiCPzN9F9H+a6I5dtI1DxLUn/NbZoX8ZjJP6UeAO9I zdXgmdCBQlsUl/AIYDImQ90EVA7DzQytWCj62uCpjk6F7DlfenVtX93zbQlDX5Zy n+Nk+sUi/hUv54A7JfN9l0Qhnh5i550onDnOsPyIYbRgpvnbzg3AcGZIKgK1 -----END CERTIFICATE-----Generated at Thu Apr 30 05:52:27 2026 by rpki-client