$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft File: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft (raw, json) Hash identifier: tc7kxJw8TzkFPy0scG+4BiRPcfSCOE7aqumcX2BDPx0= Subject key identifier: 34:07:FC:31:F7:3E:F0:44:81:1B:E6:F8:E3:2D:67:B6:6C:27:2D:BC Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A Certificate issuer: /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Certificate serial: 09BDD6D154E73A3CC97412F361A4A4C63FC57FE3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft Manifest number: 0187 Signing time: Mon 20 Apr 2026 22:14:38 +0000 Manifest this update: Mon 20 Apr 2026 22:09:38 +0000 Manifest next update: Sat 25 Apr 2026 16:21:38 +0000 Files and hashes: 1: 34352e3136312e34362e302f32342d3234203d3e20323636393032.roa (hash: OYkErxVkFOGZxhq/1ZBUj/Pq1MmJiX6jpjYhc42a4Zo=) 2: 34352e3136312e34342e302f32322d3232203d3e20323636393032.roa (hash: ZZSP353fDS9iHt0TLLBYI1AQYFQM0FreYbAbuwawbM8=) 3: 34352e3136312e34372e302f32342d3234203d3e20323636393032.roa (hash: 4xRWNn56iuB8SsKHMG6NQ0BkzHyDStl4JnUQRB/ntw0=) 4: 34352e3136312e34352e302f32342d3234203d3e20323636393032.roa (hash: 8k07EejMyoD1Te6jXbnRd6elHD9X3bZ7KfNVMGLhJ3g=) 5: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl (hash: b300LHvzJGYRIPT3Ko5UcUUqZo/fz6CFVykvytjZZFc=) 6: 323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa (hash: qaDOTAGGMhyGLnF1wxy44A+7aO4NuYBRy9k6EWlVPcU=) 7: 34352e3136312e34342e302f32342d3234203d3e20323636393032.roa (hash: FQbNleOfyELLhUVqcR1SfsqIOaLHmdUUaVmzzESfPWg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Apr 2026 15:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:bd:d6:d1:54:e7:3a:3c:c9:74:12:f3:61:a4:a4:c6:3f:c5:7f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Validity Not Before: Apr 20 22:09:38 2026 GMT Not After : Apr 25 16:21:38 2026 GMT Subject: CN=3407FC31F73EF044811BE6F8E32D67B66C272DBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:0b:14:63:0a:be:91:4e:e3:7a:5f:45:7a: 89:f8:0e:76:02:cc:78:e7:bd:19:3f:45:a9:68:e2: a0:35:97:34:82:94:64:65:1d:94:82:15:40:09:79: 9e:90:0d:a4:63:d2:a6:ff:33:65:9c:8a:05:0d:90: 81:9a:0a:cd:f1:78:8c:2f:f0:9c:58:70:be:ee:d2: 23:57:2e:22:76:4a:d3:9a:8e:68:b2:ae:b8:3c:4a: 14:db:27:9d:93:a9:63:17:23:e2:e9:38:95:ca:ef: 85:8a:96:f2:4d:54:7b:08:70:00:14:be:0d:c9:36: e5:3b:a2:23:cb:33:19:56:52:2d:bd:45:c9:03:36: 36:58:29:8d:74:07:95:ad:15:f0:1b:9d:67:62:e3: 10:38:95:c7:1b:c6:78:c8:87:59:3d:c1:ed:ac:dc: 86:94:9f:5b:93:68:35:28:b4:37:a4:3c:f6:84:10: 71:ba:5b:a0:a6:b7:7c:b9:c5:32:3c:52:ef:3a:a8: dd:89:72:58:d9:44:f0:38:e8:e5:fd:4e:35:f9:2e: 91:c1:9a:f3:6e:f7:b1:ec:a5:3f:3d:49:80:13:8e: 8e:40:83:4d:4d:81:6a:e4:a7:c0:4c:d8:98:10:f6: f3:a2:ea:85:ec:01:e0:65:d8:bf:b6:dc:eb:c6:b2: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:07:FC:31:F7:3E:F0:44:81:1B:E6:F8:E3:2D:67:B6:6C:27:2D:BC X509v3 Authority Key Identifier: keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:34:31:43:d9:d9:9b:e3:7e:f3:10:95:fe:36:c1:8d:e8:c0: 95:cf:e8:58:7f:bc:de:58:56:92:80:76:97:9a:7d:9d:6f:25: 99:4e:fe:72:0d:0d:e0:74:22:b4:64:ce:1f:64:f2:6e:5e:ff: 59:64:cf:51:f0:f7:53:43:c1:aa:ef:d2:9d:1c:91:97:c5:b9: 7a:89:80:fa:d7:b4:af:64:14:e8:94:76:4e:f2:58:ba:b6:32: ea:0e:d6:42:e6:d5:ba:5b:2e:03:4f:2f:80:6d:3c:fc:84:d7: 4b:18:36:49:a9:c9:56:93:2c:01:31:61:ec:78:ad:ef:29:db: f2:e7:6c:6b:ae:79:c4:18:dd:bc:05:c0:96:59:cb:9d:b8:bb: 3b:75:f8:88:1b:ed:7e:94:a7:f2:f1:d8:7f:72:a4:61:8c:17: a5:ac:22:d1:33:70:70:4d:b1:35:e9:e7:7b:9a:64:0b:30:5c: 0c:86:a4:e8:5b:9a:c5:84:2a:a3:18:0b:24:a9:6c:9d:03:d5: 70:a7:89:a0:62:c8:b8:51:f7:5e:88:69:4b:8c:00:f3:8e:3c: 3f:78:5c:db:3e:55:2c:32:dc:86:75:05:8b:2d:da:10:b1:97: 8a:49:1d:ca:36:f2:12:0a:dd:f1:66:6d:a5:a2:a1:73:b9:19: 07:42:60:79 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCb3W0VTnOjzJdBLzYaSkxj/Ff+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjhFRjBEMEY5M0E1MjhCMzVFMDdGMDREQ0NEN0M1 QzI2NDA2QTAeFw0yNjA0MjAyMjA5MzhaFw0yNjA0MjUxNjIxMzhaMDMxMTAvBgNV BAMTKDM0MDdGQzMxRjczRUYwNDQ4MTFCRTZGOEUzMkQ2N0I2NkMyNzJEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbwsUYwq+kU7jel9Feon4DnYC zHjnvRk/Ralo4qA1lzSClGRlHZSCFUAJeZ6QDaRj0qb/M2WcigUNkIGaCs3xeIwv 8JxYcL7u0iNXLiJ2StOajmiyrrg8ShTbJ52TqWMXI+LpOJXK74WKlvJNVHsIcAAU vg3JNuU7oiPLMxlWUi29RckDNjZYKY10B5WtFfAbnWdi4xA4lccbxnjIh1k9we2s 3IaUn1uTaDUotDekPPaEEHG6W6Cmt3y5xTI8Uu86qN2JcljZRPA46OX9TjX5LpHB mvNu97HspT89SYATjo5Ag01NgWrkp8BM2JgQ9vOi6oXsAeBl2L+23OvGssCdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNAf8Mfc+8ESBG+b44y1ntmwnLbwwHwYDVR0j BBgwFoAUJfKO8ND5OlKLNeB/BNzNfFwmQGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xN0Q5Nzg2MENERDE5RjkwNzZDRkM3OUUwRTJCNTAzRTQy M0FEQzQyOEE5NDRFMjhBRTQyMDIxQjQzN0MwNTI3LzAvMjVGMjhFRjBEMEY5M0E1 MjhCMzVFMDdGMDREQ0NEN0M1QzI2NDA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUYyOEVGMEQwRjkzQTUyOEIz NUUwN0YwNERDQ0Q3QzVDMjY0MDZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTdEOTc4NjBDREQxOUY5MDc2Q0ZDNzlFMEUyQjUwM0U0MjNBREM0MjhB OTQ0RTI4QUU0MjAyMUI0MzdDMDUyNy8wLzI1RjI4RUYwRDBGOTNBNTI4QjM1RTA3 RjA0RENDRDdDNUMyNjQwNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBINDFD2dmb437zEJX+NsGN6MCV z+hYf7zeWFaSgHaXmn2dbyWZTv5yDQ3gdCK0ZM4fZPJuXv9ZZM9R8PdTQ8Gq79Kd HJGXxbl6iYD617SvZBTolHZO8li6tjLqDtZC5tW6Wy4DTy+AbTz8hNdLGDZJqclW kywBMWHseK3vKdvy52xrrnnEGN28BcCWWcuduLs7dfiIG+1+lKfy8dh/cqRhjBel rCLRM3BwTbE16ed7mmQLMFwMhqToW5rFhCqjGAskqWydA9Vwp4mgYsi4UfdeiGlL jADzjjw/eFzbPlUsMtyGdQWLLdoQsZeKSR3KNvISCt3xZm2loqFzuRkHQmB5 -----END CERTIFICATE-----Generated at Tue Apr 21 10:14:13 2026 by rpki-client