$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft File: CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft (raw, json) Hash identifier: skzPcAY8+ToTaW3YgGvJHPcNf+k4+3+kDA5uyMCiQBM= Subject key identifier: 49:0F:4F:CA:9E:60:E4:D0:80:B2:CC:9F:D4:FA:34:8E:7D:0C:92:C1 Authority key identifier: CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3 Certificate issuer: /CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3 Certificate serial: 64611B6C27CC541C5EF55647EC95B46D1DF8C934 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft Manifest number: 0188 Signing time: Mon 20 Apr 2026 15:15:36 +0000 Manifest this update: Mon 20 Apr 2026 15:10:36 +0000 Manifest next update: Sun 26 Apr 2026 12:41:36 +0000 Files and hashes: 1: 3230362e3232312e38302e302f32302d3234203d3e203130363937.roa (hash: JIbqhT/IJsXKycm4NQnXDAEmr8Osnge1Pdf3/YHHbXQ=) 2: 3230362e3232312e38302e302f32302d3234203d3e20323634373937.roa (hash: X83qYelfUURKrxAX8gzIjUwj8cIb2cTLJ8SctSA319M=) 3: 323830333a376538303a3a2f33322d3332203d3e203130363937.roa (hash: 8DEEilEAfJ7N1eeqVwCQHwYtk63xjMjjibjeuvtO4qE=) 4: CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl (hash: PuwuKfgJrd20d/K7KppyWS0FeqXrtGo82xqw1ByYAjs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Apr 2026 15:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:61:1b:6c:27:cc:54:1c:5e:f5:56:47:ec:95:b4:6d:1d:f8:c9:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3 Validity Not Before: Apr 20 15:10:36 2026 GMT Not After : Apr 26 12:41:36 2026 GMT Subject: CN=490F4FCA9E60E4D080B2CC9FD4FA348E7D0C92C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:73:dd:26:08:a0:14:51:fe:ec:7b:68:08:ee: 90:73:ee:d2:42:b3:67:db:b0:4e:4f:7b:57:d9:5f: 60:2c:89:19:66:85:d0:15:dc:5f:be:30:97:6b:95: 5f:f9:4b:79:1c:56:14:f3:6f:72:f5:4a:74:75:0b: 88:26:68:9e:db:ec:3a:b9:88:7e:25:55:03:34:9f: 44:8f:a0:2d:97:a7:69:44:bf:98:2a:aa:e0:4b:2d: ad:8a:74:52:fb:fb:3d:a2:ca:5b:00:ba:2e:4c:e4: 61:ee:30:3d:e8:e2:f2:a7:44:25:c2:a0:bc:3b:e3: 53:42:19:40:cf:aa:69:ba:ae:8e:f7:87:3a:37:2c: de:23:94:7d:e2:c2:48:c1:e1:10:10:38:f7:28:8d: bb:e7:03:30:e2:6f:39:61:5d:ce:8a:e6:57:ed:c9: ef:22:38:20:70:6a:63:6c:7c:c0:75:c9:c4:4b:79: f2:1f:6d:1c:6b:d9:04:68:f5:f2:16:a3:24:ba:b5: 43:3d:9e:9f:c0:08:c1:32:c1:e8:0d:8f:65:9c:f7: fa:77:ff:2b:d7:51:ef:67:6d:c2:fe:3c:fc:8f:c0: b2:12:59:e6:23:a8:f0:e5:07:ef:62:73:84:8f:24: ca:77:56:5f:4b:a4:eb:67:a3:ff:8f:76:02:2d:e7: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0F:4F:CA:9E:60:E4:D0:80:B2:CC:9F:D4:FA:34:8E:7D:0C:92:C1 X509v3 Authority Key Identifier: keyid:CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:90:38:80:83:b4:1c:e5:21:24:88:b4:d1:77:ee:96:70:3d: cf:16:d7:05:79:32:f2:bb:be:8d:6a:b3:bd:04:56:4d:d6:8e: 1f:77:85:d6:be:be:55:89:c7:01:fc:fd:fb:f9:fa:44:d5:9d: 74:09:ba:45:e7:27:e7:d7:60:b1:94:54:29:9d:19:d9:33:da: cf:a1:ed:31:b8:a4:b4:af:9a:d4:61:77:9e:48:79:7b:61:8c: 58:bc:d4:9f:07:85:07:67:b0:9f:6f:ad:7c:10:31:ec:67:c5: c0:8f:bb:d9:f6:c6:f4:88:25:c6:28:d1:8b:51:6e:a5:f6:dc: 54:0e:18:a8:a5:38:d5:5e:6f:fc:66:3b:92:e2:83:fa:62:51: e5:a0:6a:3b:e8:30:35:38:7d:50:6a:1e:53:92:ea:a4:2d:3e: ea:8c:e8:bc:f1:99:8d:18:f7:b3:ea:f7:b7:e5:5d:e3:0a:cf: 6d:1d:27:dd:38:3d:c4:7b:e4:53:57:0d:9e:6c:d3:07:da:58: a8:3c:69:20:08:06:26:5e:2a:0f:e7:b0:9e:cb:21:b6:28:b9: 37:47:a4:49:d7:75:d7:ed:15:37:6f:92:43:c1:e2:cc:2d:21: 51:ca:fb:51:fd:88:95:00:54:05:55:77:4f:d7:a4:e2:35:0e: 0b:91:6e:f9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZGEbbCfMVBxe9VZH7JW0bR34yTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCOTM0QUE3QjIxRUU4MjYyQTdGNzQ1QkNDOTRCRDRD NDc5RkFEMzAeFw0yNjA0MjAxNTEwMzZaFw0yNjA0MjYxMjQxMzZaMDMxMTAvBgNV BAMTKDQ5MEY0RkNBOUU2MEU0RDA4MEIyQ0M5RkQ0RkEzNDhFN0QwQzkyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoc90mCKAUUf7se2gI7pBz7tJC s2fbsE5Pe1fZX2AsiRlmhdAV3F++MJdrlV/5S3kcVhTzb3L1SnR1C4gmaJ7b7Dq5 iH4lVQM0n0SPoC2Xp2lEv5gqquBLLa2KdFL7+z2iylsAui5M5GHuMD3o4vKnRCXC oLw741NCGUDPqmm6ro73hzo3LN4jlH3iwkjB4RAQOPcojbvnAzDibzlhXc6K5lft ye8iOCBwamNsfMB1ycRLefIfbRxr2QRo9fIWoyS6tUM9np/ACMEywegNj2Wc9/p3 /yvXUe9nbcL+PPyPwLISWeYjqPDlB+9ic4SPJMp3Vl9LpOtno/+PdgIt5/2bAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSQ9Pyp5g5NCAssyf1Po0jn0MksEwHwYDVR0j BBgwFoAUzbk0qnsh7oJip/dFvMlL1MR5+tMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRkU2MUVERTA3NTdGOUYxMjkzNUE1RjNCRTI0ODA3OUI3 RkU2MzI3MkY4NTUxOUQwMTVDQjA3RUQ1MjM0NjA4LzAvQ0RCOTM0QUE3QjIxRUU4 MjYyQTdGNzQ1QkNDOTRCRDRDNDc5RkFEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREI5MzRBQTdCMjFFRTgyNjJB N0Y3NDVCQ0M5NEJENEM0NzlGQUQzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkZFNjFFREUwNzU3RjlGMTI5MzVBNUYzQkUyNDgwNzlCN0ZFNjMyNzJG ODU1MTlEMDE1Q0IwN0VENTIzNDYwOC8wL0NEQjkzNEFBN0IyMUVFODI2MkE3Rjc0 NUJDQzk0QkQ0QzQ3OUZBRDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDckDiAg7Qc5SEkiLTRd+6WcD3P FtcFeTLyu76NarO9BFZN1o4fd4XWvr5ViccB/P37+fpE1Z10CbpF5yfn12CxlFQp nRnZM9rPoe0xuKS0r5rUYXeeSHl7YYxYvNSfB4UHZ7Cfb618EDHsZ8XAj7vZ9sb0 iCXGKNGLUW6l9txUDhiopTjVXm/8ZjuS4oP6YlHloGo76DA1OH1Qah5TkuqkLT7q jOi88ZmNGPez6ve35V3jCs9tHSfdOD3Ee+RTVw2ebNMH2lioPGkgCAYmXioP57Ce yyG2KLk3R6RJ13XX7RU3b5JDweLMLSFRyvtR/YiVAFQFVXdP16TiNQ4LkW75 -----END CERTIFICATE-----Generated at Mon Apr 20 18:07:59 2026 by rpki-client