$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json) Hash identifier: iCoQc/Nh1ugHW3RBjZ1tP1vM7yND7azAWQ4oycs4acw= Subject key identifier: A5:9D:72:42:6C:F9:1A:5A:68:E9:9E:8C:04:11:46:A9:4A:0E:18:E4 Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 637A576A46FEB672DB2DC7595CD40F7E7ED17097 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft Manifest number: 0187 Signing time: Tue 28 Apr 2026 23:12:12 +0000 Manifest this update: Tue 28 Apr 2026 23:07:12 +0000 Manifest next update: Mon 04 May 2026 20:26:12 +0000 Files and hashes: 1: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: BKwE2e3p7M5vFm9/ROKbAqg21DSPEAwHC/cUNTb1Ygk=) 2: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=) 3: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: 4YT76mg5dITWNiH2hE5kgjyBgua4a3LhZgbWUTw9x8I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 10:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:7a:57:6a:46:fe:b6:72:db:2d:c7:59:5c:d4:0f:7e:7e:d1:70:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Apr 28 23:07:12 2026 GMT Not After : May 4 20:26:12 2026 GMT Subject: CN=A59D72426CF91A5A68E99E8C041146A94A0E18E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fe:26:8f:f4:01:a1:10:aa:29:3d:bb:6a:3c: 81:cc:7e:5d:62:ab:d6:fd:72:9d:2b:10:87:aa:e1: ea:88:f3:39:9f:b7:a7:56:a3:e2:97:ee:a0:dd:26: 79:b1:da:97:f5:10:69:22:c5:ad:57:be:35:23:b2: b0:02:17:34:08:a9:2c:a1:18:5e:17:3b:25:4f:35: 9b:51:1e:f2:18:a6:ac:85:aa:44:d1:47:ff:57:a3: 03:33:a9:99:cf:07:37:fb:18:a7:85:fe:19:0e:5d: 44:45:83:42:79:f7:05:8d:97:88:46:36:e3:63:09: 31:44:61:59:6f:5d:4c:7a:ba:0e:07:3d:da:7e:9e: 49:3e:60:fe:6d:08:f3:ca:aa:96:49:b5:e1:3f:30: 63:c7:51:1c:34:80:41:96:28:9b:fc:ee:8c:0c:c8: ee:c9:15:88:c1:f7:e9:c2:b6:24:6c:00:48:30:f3: 94:d4:8f:05:8c:e4:2b:43:1b:e0:44:99:c7:02:aa: 7c:6b:f0:91:92:fc:bf:83:94:57:59:2f:17:5e:5b: 4e:9d:39:d9:49:e4:a1:5c:02:13:e9:cf:23:c8:7a: e4:b5:3c:e6:b1:23:47:57:fa:94:3d:8e:d8:eb:d8: c2:f6:96:75:e9:02:14:e2:ea:78:73:f6:14:b6:a9: 86:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9D:72:42:6C:F9:1A:5A:68:E9:9E:8C:04:11:46:A9:4A:0E:18:E4 X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:17:c6:e7:53:e6:a8:96:c0:32:18:05:a0:f7:68:c7:69:26: ac:6b:d3:c1:78:4f:a5:d6:bf:b9:86:08:b3:ba:99:07:03:d7: 13:a8:04:28:2a:5c:f3:87:27:cf:6c:a3:5a:ad:33:91:fa:68: 45:de:d6:fe:50:53:e8:47:68:ea:34:84:18:42:a9:7a:a0:9d: ea:16:46:9d:19:e8:d2:60:d3:48:03:56:e8:a2:25:d0:28:63: 4f:23:e3:ee:4c:c8:ae:1a:24:05:d6:2d:6a:8a:15:50:f1:b8: 83:79:81:9f:10:5c:b7:9c:6e:32:30:63:e2:27:50:ac:9a:6b: ca:58:be:c9:29:27:bd:25:07:b3:46:f8:32:d6:7b:74:84:48: dd:a0:d2:a7:3d:da:88:2f:53:ed:25:a9:b4:dc:44:48:c4:49: 5d:d8:86:d9:66:f8:ed:40:7d:0f:a7:f7:a0:68:e5:59:74:46: 0d:4e:89:e2:be:aa:8a:98:bd:0b:c6:cb:3a:de:8e:82:5f:6c: 94:ee:f2:a1:9d:49:67:71:1f:15:d4:74:3f:53:03:0b:40:5b: 51:02:48:1f:1c:5f:d0:99:3c:50:17:4b:d3:75:f6:2a:31:4b: 0a:ee:d7:b7:4f:be:bc:cd:03:cf:dd:50:c3:93:79:4f:16:c2: 10:3e:34:b9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUY3pXakb+tnLbLcdZXNQPfn7RcJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNjA0MjgyMzA3MTJaFw0yNjA1MDQyMDI2MTJaMDMxMTAvBgNV BAMTKEE1OUQ3MjQyNkNGOTFBNUE2OEU5OUU4QzA0MTE0NkE5NEEwRTE4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP/iaP9AGhEKopPbtqPIHMfl1i q9b9cp0rEIeq4eqI8zmft6dWo+KX7qDdJnmx2pf1EGkixa1XvjUjsrACFzQIqSyh GF4XOyVPNZtRHvIYpqyFqkTRR/9XowMzqZnPBzf7GKeF/hkOXURFg0J59wWNl4hG NuNjCTFEYVlvXUx6ug4HPdp+nkk+YP5tCPPKqpZJteE/MGPHURw0gEGWKJv87owM yO7JFYjB9+nCtiRsAEgw85TUjwWM5CtDG+BEmccCqnxr8JGS/L+DlFdZLxdeW06d OdlJ5KFcAhPpzyPIeuS1POaxI0dX+pQ9jtjr2ML2lnXpAhTi6nhz9hS2qYYTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUpZ1yQmz5Glpo6Z6MBBFGqUoOGOQwHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBF8bnU+aolsAyGAWg92jHaSas a9PBeE+l1r+5hgizupkHA9cTqAQoKlzzhyfPbKNarTOR+mhF3tb+UFPoR2jqNIQY Qql6oJ3qFkadGejSYNNIA1booiXQKGNPI+PuTMiuGiQF1i1qihVQ8biDeYGfEFy3 nG4yMGPiJ1CsmmvKWL7JKSe9JQezRvgy1nt0hEjdoNKnPdqIL1PtJam03ERIxEld 2IbZZvjtQH0Pp/egaOVZdEYNTonivqqKmL0Lxss63o6CX2yU7vKhnUlncR8V1HQ/ UwMLQFtRAkgfHF/QmTxQF0vTdfYqMUsK7te3T768zQPP3VDDk3lPFsIQPjS5 -----END CERTIFICATE-----Generated at Thu Apr 30 05:49:26 2026 by rpki-client