$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft File: 3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft (raw, json) Hash identifier: Pyn4LBldFJnOyjLuMFayZwkkPK5P+rOYJAhTO7UF2x4= Subject key identifier: B6:CB:5F:A8:72:1B:20:00:C3:12:66:21:3F:52:D1:11:57:A7:D7:E6 Authority key identifier: 34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70 Certificate issuer: /CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70 Certificate serial: 3CAD0A4F52B1326D4145D34F37534E9A6732D608 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft Manifest number: 017C Signing time: Mon 20 Apr 2026 21:39:16 +0000 Manifest this update: Mon 20 Apr 2026 21:34:16 +0000 Manifest next update: Sun 26 Apr 2026 02:28:16 +0000 Files and hashes: 1: 3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl (hash: J6V+N2i1kn8wNaGgQn3zpYItL7Dv3zK7A5/mqbmwUt4=) 2: 323830333a356439303a3a2f33322d3536203d3e20323733303030.roa (hash: Wpmr7IocRe7/H4HIQXsz1KXUukHCpgQSIa17O3RVzuE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 26 Apr 2026 02:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ad:0a:4f:52:b1:32:6d:41:45:d3:4f:37:53:4e:9a:67:32:d6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70 Validity Not Before: Apr 20 21:34:16 2026 GMT Not After : Apr 26 02:28:16 2026 GMT Subject: CN=B6CB5FA8721B2000C31266213F52D11157A7D7E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:95:4e:10:f4:a6:23:87:69:47:2f:15:00: 7a:6e:c5:cc:e4:99:70:06:d2:b7:cd:07:67:c3:ba: 0a:ac:a7:df:fc:0f:9c:60:e9:c8:15:03:76:71:52: 93:3a:9c:8e:c2:5b:f3:79:27:d1:dc:e8:93:c2:dc: 59:fb:d7:6e:57:e7:28:47:c9:68:02:99:a8:dd:cb: e8:db:f2:56:a1:9d:23:99:a6:61:83:c0:2c:ec:7a: b3:52:03:f2:aa:b3:a7:67:d4:7e:61:87:78:82:84: f2:01:d6:f5:f6:0e:2f:00:40:56:ef:92:00:1e:79: 64:9b:53:6f:6f:87:90:f2:03:f0:c4:5c:bc:5b:1a: fc:c6:e4:4d:15:f4:48:79:1e:39:fa:61:10:78:c9: 52:7c:f2:94:75:31:6c:4f:c9:f5:7c:4f:60:2c:eb: 4e:90:62:39:be:03:d2:18:2f:f0:32:94:23:e3:1e: 21:c3:b7:9f:33:7e:a0:de:6c:18:e8:d7:c8:73:30: 99:3d:46:09:b3:48:52:8e:3b:53:88:44:5c:f6:21: 13:50:5a:f6:c0:b2:85:ac:ab:47:89:4a:21:76:48: af:2d:5c:47:0d:0d:aa:50:12:33:b2:95:a7:8a:0e: 2f:32:a2:f4:f6:e1:a9:1c:57:95:f8:9d:a4:b0:ed: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CB:5F:A8:72:1B:20:00:C3:12:66:21:3F:52:D1:11:57:A7:D7:E6 X509v3 Authority Key Identifier: keyid:34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ac:89:d5:88:f6:ee:24:25:c8:c8:9e:26:4c:aa:cb:a7:62: c3:5c:88:98:4f:a4:98:4a:1d:78:20:1a:04:55:56:4a:7a:3b: 71:8f:71:75:18:51:3f:2e:33:1e:8a:af:d7:f5:09:98:72:bf: 23:9c:ba:a4:b9:8f:a3:cd:dc:de:ae:b0:1e:8e:82:3e:51:a4: 54:28:72:71:45:b6:1a:d0:a5:d9:0a:16:e2:7e:02:9b:ef:96: 00:23:6d:fe:bf:57:7c:ce:de:e0:35:06:95:98:ea:57:03:63: 91:5c:80:08:f2:a6:d7:81:45:50:9a:9e:92:10:f5:d9:03:5b: fa:48:1c:f7:23:91:a4:ef:9b:b8:a6:ec:91:3b:96:95:40:d2: f3:66:1d:4f:37:5b:58:7c:ac:1e:13:53:9e:e7:6d:34:9f:4a: d3:d7:2e:86:53:c2:81:d9:62:62:d1:4b:64:f0:dd:bb:1d:f5: bb:de:40:26:40:ed:16:fe:95:ac:29:20:7f:16:d1:6d:c5:f4: ac:2b:3e:76:f7:7b:04:69:ec:26:c5:4d:25:6b:16:f8:be:95: 49:21:a8:75:49:4f:7a:4f:31:66:a0:9b:0a:48:e4:d4:aa:ec: ea:6d:0a:56:1d:c8:95:d7:87:c9:4b:cf:c4:04:1d:6a:1e:de: 4a:a3:84:28 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPK0KT1KxMm1BRdNPN1NOmmcy1ggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQzMkM1MEZFQkI2RkI1N0Q4QUM0RUQ0QzA1REYyMEM4 OUZFNkQ3MDAeFw0yNjA0MjAyMTM0MTZaFw0yNjA0MjYwMjI4MTZaMDMxMTAvBgNV BAMTKEI2Q0I1RkE4NzIxQjIwMDBDMzEyNjYyMTNGNTJEMTExNTdBN0Q3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46ZVOEPSmI4dpRy8VAHpuxczk mXAG0rfNB2fDugqsp9/8D5xg6cgVA3ZxUpM6nI7CW/N5J9Hc6JPC3Fn7125X5yhH yWgCmajdy+jb8lahnSOZpmGDwCzserNSA/Kqs6dn1H5hh3iChPIB1vX2Di8AQFbv kgAeeWSbU29vh5DyA/DEXLxbGvzG5E0V9Eh5Hjn6YRB4yVJ88pR1MWxPyfV8T2As 606QYjm+A9IYL/AylCPjHiHDt58zfqDebBjo18hzMJk9RgmzSFKOO1OIRFz2IRNQ WvbAsoWsq0eJSiF2SK8tXEcNDapQEjOylaeKDi8yovT24akcV5X4naSw7TffAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUtstfqHIbIADDEmYhP1LREVen1+YwHwYDVR0j BBgwFoAUNDLFD+u2+1fYrE7UwF3yDIn+bXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDVCRDY2NDkyNEZBNTdENTNDNTIzMEVDRkU0N0ZENDgz RkQyMEI5QjQ4QjcxRkJCN0E3Mzk1MzFFREQ4OEZCLzAvMzQzMkM1MEZFQkI2RkI1 N0Q4QUM0RUQ0QzA1REYyMEM4OUZFNkQ3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDMyQzUwRkVCQjZGQjU3RDhB QzRFRDRDMDVERjIwQzg5RkU2RDcwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQ1QkQ2NjQ5MjRGQTU3RDUzQzUyMzBFQ0ZFNDdGRDQ4M0ZEMjBCOUI0 OEI3MUZCQjdBNzM5NTMxRUREODhGQi8wLzM0MzJDNTBGRUJCNkZCNTdEOEFDNEVE NEMwNURGMjBDODlGRTZENzAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcrInViPbuJCXIyJ4mTKrLp2LD XIiYT6SYSh14IBoEVVZKejtxj3F1GFE/LjMeiq/X9QmYcr8jnLqkuY+jzdzerrAe joI+UaRUKHJxRbYa0KXZChbifgKb75YAI23+v1d8zt7gNQaVmOpXA2ORXIAI8qbX gUVQmp6SEPXZA1v6SBz3I5Gk75u4puyRO5aVQNLzZh1PN1tYfKweE1Oe5200n0rT 1y6GU8KB2WJi0Utk8N27HfW73kAmQO0W/pWsKSB/FtFtxfSsKz5293sEaewmxU0l axb4vpVJIah1SU96TzFmoJsKSOTUquzqbQpWHciV14fJS8/EBB1qHt5Ko4Qo -----END CERTIFICATE-----Generated at Wed Apr 22 11:02:42 2026 by rpki-client