$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft File: 525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft (raw, json) Hash identifier: EA+NgXAYGWe74bnozghxuK+DI3obDyvuS14kw+vawLU= Subject key identifier: C0:FD:F9:44:0B:07:34:14:61:80:3B:3A:70:43:53:85:62:3B:E8:70 Authority key identifier: 52:5D:28:6D:D2:85:74:DE:DF:2E:1C:9E:1A:2E:E6:BC:BA:59:04:0C Certificate issuer: /CN=525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C Certificate serial: 313DA95FF9C7C5EBDC612192EA610214C9FE00CD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft Manifest number: 05 Signing time: Thu 30 Apr 2026 01:12:46 +0000 Manifest this update: Thu 30 Apr 2026 01:07:46 +0000 Manifest next update: Mon 04 May 2026 04:17:46 +0000 Files and hashes: 1: 323830333a636533303a3a2f33322d3438203d3e20323734393033.roa (hash: 9xqxvrW8nSVjy4FiJTCh+xFdQWf2ZSEBDG91qUqZ/RU=) 2: 525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.crl (hash: HCmMstiSvZz8xBRiSgbLM5WWvKo0/nNI0BDNN9nB75g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.crl rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 04:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3d:a9:5f:f9:c7:c5:eb:dc:61:21:92:ea:61:02:14:c9:fe:00:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C Validity Not Before: Apr 30 01:07:46 2026 GMT Not After : May 4 04:17:46 2026 GMT Subject: CN=C0FDF9440B07341461803B3A70435385623BE870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:67:ab:9b:75:aa:ef:e3:ac:0d:0e:3d:cb: b1:95:82:28:18:bc:6e:c1:88:ff:91:06:f2:6d:62: 7d:08:b5:2b:04:25:95:35:56:a9:83:6b:2c:4c:88: de:80:40:7c:61:8b:83:18:db:a9:e7:76:fa:d5:80: 7e:3a:1d:3f:31:1d:f2:e0:30:7b:b3:b1:97:4f:2a: 85:0b:67:02:5e:1c:f1:69:53:bf:0f:8b:5d:74:6a: 2f:b3:c0:c2:46:4a:c5:cf:af:50:2f:84:22:09:43: c2:b3:4f:68:01:31:ad:cf:dd:72:ec:88:a6:b0:7d: 6d:e9:8c:83:98:03:db:31:7a:51:51:8b:a3:bd:fe: e8:af:7b:99:a1:65:b7:be:d5:37:86:88:b3:ca:75: fa:b5:e7:4f:e4:40:4a:6a:33:c3:f6:9f:55:d4:15: 00:63:19:80:c2:f8:69:f7:5b:a9:de:34:95:b0:e3: d7:ee:76:94:15:54:95:9c:56:ba:d5:5a:4b:f1:42: 6a:c6:30:32:a5:61:93:11:4f:d1:90:88:fd:af:15: 1f:26:43:fc:a5:b0:12:be:36:a5:7d:64:b0:d3:5d: a6:94:b7:f6:b2:ba:d8:16:60:42:27:a2:8b:4a:94: 13:cf:c0:f8:c0:be:9c:b3:4e:1e:e4:b5:48:0f:ad: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FD:F9:44:0B:07:34:14:61:80:3B:3A:70:43:53:85:62:3B:E8:70 X509v3 Authority Key Identifier: keyid:52:5D:28:6D:D2:85:74:DE:DF:2E:1C:9E:1A:2E:E6:BC:BA:59:04:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:86:f0:47:b9:15:fa:46:04:b2:d6:93:1e:87:11:13:62:10: 58:ad:66:75:e8:50:30:5c:f7:9e:9f:58:35:ed:c7:44:a0:0d: c1:a5:0d:75:32:66:cc:39:2a:84:54:c2:d0:16:ca:d2:39:10: 34:bb:1f:9e:ba:c1:08:42:c8:16:fd:d7:d0:b2:3e:6c:49:6c: 30:b4:35:71:d2:49:47:80:ab:70:b7:3e:0b:b4:36:33:e2:ff: 55:37:02:eb:ad:0f:42:37:b9:74:5d:bc:21:34:84:f6:13:d0: 0d:38:11:34:a9:ff:fc:9e:e2:de:7f:97:9e:40:03:f2:c7:52: 4e:fd:55:13:ca:2c:4a:bd:af:21:35:41:d3:c2:ad:24:4b:72: 1f:65:12:5e:6a:93:77:99:b7:93:f0:02:57:93:61:8e:86:27: b8:d9:65:50:3e:f3:78:45:47:d6:6b:c0:2a:b1:76:83:39:e3: 9a:27:b9:57:78:a4:18:ef:57:3c:7b:63:55:99:09:9f:24:81: 7a:1c:69:7b:03:dc:68:a0:8a:16:28:3e:7e:ea:a5:f6:bd:ae: b3:dc:de:a9:f4:0b:4e:36:18:a3:6e:5d:23:9f:4f:32:b6:37: 6d:28:fb:81:07:f7:11:57:1a:af:05:44:b6:68:00:67:54:93: 6f:20:f9:d8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMT2pX/nHxevcYSGS6mECFMn+AM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI1RDI4NkREMjg1NzRERURGMkUxQzlFMUEyRUU2QkNC QTU5MDQwQzAeFw0yNjA0MzAwMTA3NDZaFw0yNjA1MDQwNDE3NDZaMDMxMTAvBgNV BAMTKEMwRkRGOTQ0MEIwNzM0MTQ2MTgwM0IzQTcwNDM1Mzg1NjIzQkU4NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0O2erm3Wq7+OsDQ49y7GVgigY vG7BiP+RBvJtYn0ItSsEJZU1VqmDayxMiN6AQHxhi4MY26nndvrVgH46HT8xHfLg MHuzsZdPKoULZwJeHPFpU78Pi110ai+zwMJGSsXPr1AvhCIJQ8KzT2gBMa3P3XLs iKawfW3pjIOYA9sxelFRi6O9/uive5mhZbe+1TeGiLPKdfq150/kQEpqM8P2n1XU FQBjGYDC+Gn3W6neNJWw49fudpQVVJWcVrrVWkvxQmrGMDKlYZMRT9GQiP2vFR8m Q/ylsBK+NqV9ZLDTXaaUt/ayutgWYEInootKlBPPwPjAvpyzTh7ktUgPrY85AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUwP35RAsHNBRhgDs6cENThWI76HAwHwYDVR0j BBgwFoAUUl0obdKFdN7fLhyeGi7mvLpZBAwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83NDE4N0YyOTVBQTkxMTFGMjE3RjlENzNDQTNDOEFCRTBF MjU2Q0ZCQ0ZGNzMwQTc1REVEMDY2RkU0RTVDMzFFLzAvNTI1RDI4NkREMjg1NzRE RURGMkUxQzlFMUEyRUU2QkNCQTU5MDQwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjVEMjg2REQyODU3NERFREYy RTFDOUUxQTJFRTZCQ0JBNTkwNDBDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzQxODdGMjk1QUE5MTExRjIxN0Y5RDczQ0EzQzhBQkUwRTI1NkNGQkNG RjczMEE3NURFRDA2NkZFNEU1QzMxRS8wLzUyNUQyODZERDI4NTc0REVERjJFMUM5 RTFBMkVFNkJDQkE1OTA0MEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuhvBHuRX6RgSy1pMehxETYhBY rWZ16FAwXPeen1g17cdEoA3BpQ11MmbMOSqEVMLQFsrSORA0ux+eusEIQsgW/dfQ sj5sSWwwtDVx0klHgKtwtz4LtDYz4v9VNwLrrQ9CN7l0XbwhNIT2E9ANOBE0qf/8 nuLef5eeQAPyx1JO/VUTyixKva8hNUHTwq0kS3IfZRJeapN3mbeT8AJXk2GOhie4 2WVQPvN4RUfWa8AqsXaDOeOaJ7lXeKQY71c8e2NVmQmfJIF6HGl7A9xooIoWKD5+ 6qX2va6z3N6p9AtONhijbl0jn08ytjdtKPuBB/cRVxqvBUS2aABnVJNvIPnY -----END CERTIFICATE-----Generated at Thu Apr 30 05:48:19 2026 by rpki-client