$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft File: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft (raw, json) Hash identifier: CO56+yJtz23yFBliq58hWIK+jrEGJUAWC2AZKkzKL4E= Subject key identifier: 0E:ED:37:0D:1D:04:6B:F7:E6:FE:42:9A:AF:5B:91:61:50:60:B9:02 Authority key identifier: CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C Certificate issuer: /CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C Certificate serial: 7B8D92B84DF13FD7EF08C34755B6C54B94FF0346 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft Manifest number: 017A Signing time: Tue 07 Apr 2026 03:16:18 +0000 Manifest this update: Tue 07 Apr 2026 03:11:18 +0000 Manifest next update: Sun 12 Apr 2026 00:18:18 +0000 Files and hashes: 1: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl (hash: 4gTo4ihk+v4Rerp8LNxv+b8qENWJd+Qo09Cy8Hnv3nM=) 2: 3136342e3136332e3132322e302f32332d3234203d3e20323734323837.roa (hash: pzH8ChjyGM8irvisCLOMRVfFg2o+/iOBhQZU0VAmYyg=) 3: 3136342e3136332e3132302e302f32332d3234203d3e20323635383334.roa (hash: ITajnx8AoEh3NK9eg3wJYTD8jN+mIdo7dvHMiOnMIP8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 12 Apr 2026 00:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8d:92:b8:4d:f1:3f:d7:ef:08:c3:47:55:b6:c5:4b:94:ff:03:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C Validity Not Before: Apr 7 03:11:18 2026 GMT Not After : Apr 12 00:18:18 2026 GMT Subject: CN=0EED370D1D046BF7E6FE429AAF5B91615060B902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ff:17:1c:2d:cc:cd:25:b6:68:b7:ef:84:3f: 9f:ae:e4:a4:35:d2:63:42:46:db:80:3d:5f:82:83: 92:d7:12:c0:f0:06:a4:dd:ab:1b:1b:00:11:75:7c: 06:e2:74:70:69:d8:d9:04:ec:40:2d:4c:b4:9c:96: 67:c9:5e:e1:db:0c:45:09:63:c9:0e:ca:5e:ad:ca: 43:6b:bb:1b:d3:21:55:0c:f1:7b:ea:45:aa:3b:c0: cf:cc:38:c6:85:9d:b3:9a:0a:fd:22:e4:5e:c7:7c: 5e:86:cc:cb:37:63:69:c7:8b:df:af:f4:05:57:33: f6:19:f3:d8:e1:1f:45:f5:8c:c3:9b:fc:2e:a4:b3: b2:09:0e:31:88:1b:1d:99:ee:6d:29:1b:3a:5b:b5: 0d:73:aa:1c:d8:9a:f5:67:e7:ad:f5:22:90:05:4b: 60:c4:ce:7d:60:e8:53:15:c1:11:af:61:05:6b:01: 7a:cf:17:a5:97:c0:33:7a:40:cc:ff:0f:85:0c:78: 85:67:40:6f:ee:f3:16:16:9f:b5:02:26:02:5f:e7: bb:a4:da:52:8d:09:9b:16:29:ad:22:05:0a:80:5f: 8f:70:e8:bf:5d:de:2c:68:c1:a3:8c:1e:fe:d2:bd: 79:d0:ef:54:c3:ca:7f:83:1d:0c:d7:bf:d4:12:99: 37:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:ED:37:0D:1D:04:6B:F7:E6:FE:42:9A:AF:5B:91:61:50:60:B9:02 X509v3 Authority Key Identifier: keyid:CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:12:c7:9c:29:5e:6f:bd:7c:2a:67:92:44:4a:db:bd:ac:1d: 1d:50:f0:75:c0:ef:2f:3a:19:e1:a5:e4:8a:91:de:cc:f2:ec: a7:99:0a:b3:0b:d1:37:29:37:d9:0d:51:6e:74:b2:49:0c:03: b0:c2:01:6a:29:7b:90:d3:da:cb:0c:dd:82:0a:43:d1:8f:4a: a5:94:27:cd:00:ac:71:27:50:f3:d5:ba:9a:8b:db:06:1a:92: 49:9a:c4:a2:37:0b:97:4c:7c:15:55:90:b3:f7:95:1f:b1:ba: 65:63:5c:d6:75:fd:f8:e9:05:d0:9d:a3:3e:45:b8:d7:65:ee: 1d:6f:a6:28:4d:c5:46:02:98:9d:fb:aa:37:3e:f2:57:85:2a: 78:0a:4f:0e:e0:fa:ec:05:79:73:f2:eb:d8:00:36:2c:7f:f1: c3:06:8f:bc:34:bc:53:22:af:d6:88:f6:a7:f4:7a:07:14:71: 90:0a:a1:0b:ed:b7:23:1d:76:ed:b3:a8:0c:72:73:be:6b:51: 6a:a2:9b:e5:93:ec:70:a8:23:62:65:56:7c:2a:ac:d0:34:50: a1:24:51:b4:08:46:4a:2d:48:50:f6:f0:d4:69:c4:98:73:59: 29:20:71:84:69:01:f1:06:c1:3a:70:f1:db:03:70:67:ef:b4: 74:f0:cb:e9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUe42SuE3xP9fvCMNHVbbFS5T/A0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDE5OENENEM2NTZDNEFEQ0VDNzM3MEQ2OUY2MUM0 QUJFREIxQzAeFw0yNjA0MDcwMzExMThaFw0yNjA0MTIwMDE4MThaMDMxMTAvBgNV BAMTKDBFRUQzNzBEMUQwNDZCRjdFNkZFNDI5QUFGNUI5MTYxNTA2MEI5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh/xccLczNJbZot++EP5+u5KQ1 0mNCRtuAPV+Cg5LXEsDwBqTdqxsbABF1fAbidHBp2NkE7EAtTLSclmfJXuHbDEUJ Y8kOyl6tykNruxvTIVUM8XvqRao7wM/MOMaFnbOaCv0i5F7HfF6GzMs3Y2nHi9+v 9AVXM/YZ89jhH0X1jMOb/C6ks7IJDjGIGx2Z7m0pGzpbtQ1zqhzYmvVn5631IpAF S2DEzn1g6FMVwRGvYQVrAXrPF6WXwDN6QMz/D4UMeIVnQG/u8xYWn7UCJgJf57uk 2lKNCZsWKa0iBQqAX49w6L9d3ixowaOMHv7SvXnQ71TDyn+DHQzXv9QSmTfnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDu03DR0Ea/fm/kKar1uRYVBguQIwHwYDVR0j BBgwFoAUzcAZjNTGVsStzsc3DWn2HEq+2xwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80OTU5RTUyMTk1QUI3Nzk0MkQzODE4NzE4ODM4QjU2ODJC RjBDM0E4NDE4NURFQTU5M0MyNUNCMkVCNTcyM0NFLzAvQ0RDMDE5OENENEM2NTZD NEFEQ0VDNzM3MEQ2OUY2MUM0QUJFREIxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREMwMTk4Q0Q0QzY1NkM0QURD RUM3MzcwRDY5RjYxQzRBQkVEQjFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDk1OUU1MjE5NUFCNzc5NDJEMzgxODcxODgzOEI1NjgyQkYwQzNBODQx ODVERUE1OTNDMjVDQjJFQjU3MjNDRS8wL0NEQzAxOThDRDRDNjU2QzRBRENFQzcz NzBENjlGNjFDNEFCRURCMUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnEsecKV5vvXwqZ5JEStu9rB0d UPB1wO8vOhnhpeSKkd7M8uynmQqzC9E3KTfZDVFudLJJDAOwwgFqKXuQ09rLDN2C CkPRj0qllCfNAKxxJ1Dz1bqai9sGGpJJmsSiNwuXTHwVVZCz95UfsbplY1zWdf34 6QXQnaM+RbjXZe4db6YoTcVGApid+6o3PvJXhSp4Ck8O4PrsBXlz8uvYADYsf/HD Bo+8NLxTIq/WiPan9HoHFHGQCqEL7bcjHXbts6gMcnO+a1Fqopvlk+xwqCNiZVZ8 KqzQNFChJFG0CEZKLUhQ9vDUacSYc1kpIHGEaQHxBsE6cPHbA3Bn77R08Mvp -----END CERTIFICATE-----Generated at Tue Apr 7 11:09:06 2026 by rpki-client