$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft File: 648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft (raw, json) Hash identifier: 1hcukDbaHwQfVCKhWdCjxx0HeRCq2g87f9GSQhhaBu4= Subject key identifier: 9C:E9:DC:65:3F:D4:BA:43:7E:27:A5:B6:5C:E1:92:87:E4:1A:8A:3C Authority key identifier: 64:8F:B5:35:ED:8D:F4:46:D0:27:D2:3B:A0:4E:6A:CF:6A:CB:FB:7C Certificate issuer: /CN=648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C Certificate serial: 3F41FAD7B4C66CE29ADF53B0EA679BD52BDF23B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft Manifest number: 4A Signing time: Sat 25 Apr 2026 20:41:28 +0000 Manifest this update: Sat 25 Apr 2026 20:36:28 +0000 Manifest next update: Thu 30 Apr 2026 12:40:28 +0000 Files and hashes: 1: 648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl (hash: ci8nXNk1hJwzrEmyrjVaUctG4kPyJ/q6+4+x5mX7/lM=) 2: 323830363a3432643a3a2f33322d3332203d3e20323732343039.roa (hash: uN6tty7mkQaQxkU5KfULDNMRU1kOAAd04903zpBkwZs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 30 Apr 2026 12:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:41:fa:d7:b4:c6:6c:e2:9a:df:53:b0:ea:67:9b:d5:2b:df:23:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C Validity Not Before: Apr 25 20:36:28 2026 GMT Not After : Apr 30 12:40:28 2026 GMT Subject: CN=9CE9DC653FD4BA437E27A5B65CE19287E41A8A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:26:53:e4:75:11:7a:73:7c:01:51:9a:94:c1: 26:5e:9d:6a:d6:03:a5:c6:86:e0:22:64:df:1c:20: e9:bc:fa:d2:67:11:6e:72:17:3a:5a:a6:46:fa:48: bf:14:1d:01:02:63:7c:7f:db:93:36:b4:6e:e1:a0: 9f:18:c9:95:8c:d8:4f:ec:03:d7:a7:18:b4:cf:72: bf:37:c0:a8:b7:d2:01:a8:6a:88:91:7a:f0:77:62: 69:b1:a9:f6:af:16:aa:d0:b7:13:7e:b4:76:c9:53: dd:2f:77:49:ac:0a:48:19:0c:ef:87:66:a8:0c:0f: 78:3a:bf:d1:c8:ed:89:3a:36:47:ab:57:4e:18:ab: 01:25:4e:07:96:2a:4d:7f:df:6f:c2:65:ff:9e:c5: 9c:65:47:b5:95:02:de:94:ce:84:bc:fb:1a:f4:df: a9:53:c6:37:d0:e2:3a:58:5f:25:63:33:28:8c:ba: cc:ce:94:67:a4:b4:a8:4e:74:db:de:55:8a:2c:bb: 08:36:3c:6b:a6:f3:c6:0f:b5:4a:42:36:56:eb:a7: de:e4:73:a7:27:c2:b6:74:c7:01:2a:15:85:5b:b1: 0d:86:43:2f:83:fd:54:cf:ee:bd:f7:51:87:1e:c2: 43:9a:f0:c3:85:8a:e9:8a:49:2a:0e:29:8c:43:99: 25:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E9:DC:65:3F:D4:BA:43:7E:27:A5:B6:5C:E1:92:87:E4:1A:8A:3C X509v3 Authority Key Identifier: keyid:64:8F:B5:35:ED:8D:F4:46:D0:27:D2:3B:A0:4E:6A:CF:6A:CB:FB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c3:07:12:6c:cb:3f:8b:30:5a:69:29:7e:df:c4:a9:09:d1: 18:76:34:2a:2f:5a:bf:51:dc:61:2b:ff:29:a7:b9:a9:16:95: b7:15:a4:23:75:a2:88:f8:1a:92:c8:1d:e5:26:30:70:ea:c8: 4f:f1:0a:03:10:8c:74:2c:23:a5:ee:8c:39:ad:a6:ac:fb:c8: 8e:06:f5:27:0c:42:1a:35:7e:12:fc:02:ac:ff:5e:aa:3c:c1: 95:a7:45:13:82:29:03:8f:83:fb:5c:84:32:22:44:cc:9a:40: c7:5b:ac:2e:66:e3:8a:25:3f:ef:e1:f7:2d:1a:cd:d8:24:32: 5e:2b:fb:46:c3:93:23:3d:f3:59:ae:23:bb:89:84:77:5b:5a: ca:0c:a5:b3:2c:6b:b2:61:6a:93:90:47:a8:5e:20:0b:ab:a7: 1f:0f:8d:18:c2:e6:5c:99:a1:91:63:7c:7e:95:87:b4:c6:19: 5f:5c:1f:ef:f3:a7:79:b5:2f:bf:00:12:e6:1c:11:c7:e7:ad: af:3c:39:be:c5:ed:15:61:25:2b:67:27:95:43:b0:56:31:10: 34:f0:e1:34:ff:0a:41:f3:af:8f:90:95:cb:86:ac:ef:99:ac: 04:48:01:ab:2d:5d:1e:40:b3:ab:cd:a6:e5:52:19:77:5a:73: 24:16:41:70 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUP0H617TGbOKa31Ow6meb1SvfI7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4RkI1MzVFRDhERjQ0NkQwMjdEMjNCQTA0RTZBQ0Y2 QUNCRkI3QzAeFw0yNjA0MjUyMDM2MjhaFw0yNjA0MzAxMjQwMjhaMDMxMTAvBgNV BAMTKDlDRTlEQzY1M0ZENEJBNDM3RTI3QTVCNjVDRTE5Mjg3RTQxQThBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUJlPkdRF6c3wBUZqUwSZenWrW A6XGhuAiZN8cIOm8+tJnEW5yFzpapkb6SL8UHQECY3x/25M2tG7hoJ8YyZWM2E/s A9enGLTPcr83wKi30gGoaoiRevB3YmmxqfavFqrQtxN+tHbJU90vd0msCkgZDO+H ZqgMD3g6v9HI7Yk6NkerV04YqwElTgeWKk1/32/CZf+exZxlR7WVAt6UzoS8+xr0 36lTxjfQ4jpYXyVjMyiMuszOlGektKhOdNveVYosuwg2PGum88YPtUpCNlbrp97k c6cnwrZ0xwEqFYVbsQ2GQy+D/VTP7r33UYcewkOa8MOFiumKSSoOKYxDmSWrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUnOncZT/UukN+J6W2XOGSh+QaijwwHwYDVR0j BBgwFoAUZI+1Ne2N9EbQJ9I7oE5qz2rL+3wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDg5RkFDRDAxODVDMDcyMTZGRjVDQkVCMzc5MTg2NzRE QTQ3OTdDQTYzRDhEOTM2MzhERTNGNEIyNUVGRURFLzAvNjQ4RkI1MzVFRDhERjQ0 NkQwMjdEMjNCQTA0RTZBQ0Y2QUNCRkI3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDhGQjUzNUVEOERGNDQ2RDAy N0QyM0JBMDRFNkFDRjZBQ0JGQjdDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQ4OUZBQ0QwMTg1QzA3MjE2RkY1Q0JFQjM3OTE4Njc0REE0Nzk3Q0E2 M0Q4RDkzNjM4REUzRjRCMjVFRkVERS8wLzY0OEZCNTM1RUQ4REY0NDZEMDI3RDIz QkEwNEU2QUNGNkFDQkZCN0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUwwcSbMs/izBaaSl+38SpCdEY djQqL1q/UdxhK/8pp7mpFpW3FaQjdaKI+BqSyB3lJjBw6shP8QoDEIx0LCOl7ow5 raas+8iOBvUnDEIaNX4S/AKs/16qPMGVp0UTgikDj4P7XIQyIkTMmkDHW6wuZuOK JT/v4fctGs3YJDJeK/tGw5MjPfNZriO7iYR3W1rKDKWzLGuyYWqTkEeoXiALq6cf D40YwuZcmaGRY3x+lYe0xhlfXB/v86d5tS+/ABLmHBHH562vPDm+xe0VYSUrZyeV Q7BWMRA08OE0/wpB86+PkJXLhqzvmawESAGrLV0eQLOrzablUhl3WnMkFkFw -----END CERTIFICATE-----Generated at Mon Apr 27 11:22:43 2026 by rpki-client