$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft File: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft (raw, json) Hash identifier: GcM/wmLHzqFDoFDp12vU6KT6irQtsP2ZGI+S+QCw3DA= Subject key identifier: A9:7D:88:EC:8A:81:88:1B:24:78:7C:8F:91:5B:49:96:A6:23:A5:03 Authority key identifier: 3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA Certificate issuer: /CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA Certificate serial: 1CAECE48DAC84E94690FBB42B387FAA874FF4F2B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft Manifest number: 018D Signing time: Tue 28 Apr 2026 00:18:04 +0000 Manifest this update: Tue 28 Apr 2026 00:13:04 +0000 Manifest next update: Sun 03 May 2026 15:15:04 +0000 Files and hashes: 1: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl (hash: th1dp+ESv+B3oVmKXlIszRzEiF+7LFq6aaG7ZLggGnw=) 2: 3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa (hash: yjzSJUZj4zGt1MHhVmbLi1zvCsq+jdBn4Xm2sgrDts0=) 3: 323830333a393663303a3a2f33322d3438203d3e20323635363534.roa (hash: +4WvnzVOt/EVUDZN9YCaDCCRLy9YYWSvnAxw1LtprVk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 May 2026 15:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ae:ce:48:da:c8:4e:94:69:0f:bb:42:b3:87:fa:a8:74:ff:4f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA Validity Not Before: Apr 28 00:13:04 2026 GMT Not After : May 3 15:15:04 2026 GMT Subject: CN=A97D88EC8A81881B24787C8F915B4996A623A503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fa:7c:1a:4c:51:33:6f:98:ca:b7:3c:cf:05: 03:df:91:bd:14:c0:ab:5a:bd:49:4f:ce:29:6e:45: a2:35:7c:78:0d:c3:d0:fd:f2:1d:69:29:77:1d:7f: 10:e7:6d:02:96:24:88:a8:65:89:00:0a:07:39:1b: 3d:b0:17:87:76:b0:11:4b:5c:86:73:84:93:96:2b: 8b:fb:4f:40:6b:20:26:36:36:75:b4:5f:32:f1:aa: 1e:ec:13:41:fa:5f:2d:0f:92:94:70:89:6e:d0:c0: 56:19:9a:96:cb:67:c6:bb:29:fc:3d:4d:dd:6c:49: c8:6d:e0:af:e7:65:cc:b6:59:39:a7:03:b3:cc:e8: ba:ac:64:77:5c:35:79:60:bf:ef:76:60:5c:08:0a: 4b:a0:aa:7f:be:c3:36:dd:b6:12:a7:65:54:02:e2: 94:b2:1d:32:13:0c:fe:72:91:f5:aa:17:7d:95:30: b7:f3:84:ed:8b:ff:8b:a4:52:80:b7:ee:80:8e:3a: 3c:2a:80:78:42:7f:2c:49:22:3b:ad:5c:82:cd:dc: 79:e4:55:f3:53:7a:5f:dc:32:22:06:ab:ce:25:05: e9:18:e5:fe:09:59:c7:bc:f6:b0:72:f0:23:56:7d: 5c:84:d8:ce:2f:76:e1:dd:47:1f:4e:a1:c8:00:e7: ac:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7D:88:EC:8A:81:88:1B:24:78:7C:8F:91:5B:49:96:A6:23:A5:03 X509v3 Authority Key Identifier: keyid:3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fa:a0:3e:68:b9:44:9e:57:9a:e4:46:23:32:87:61:63:c8: 62:1b:88:e0:8e:6c:5c:ee:d8:2a:c9:ca:c1:4a:87:6e:ac:43: fe:51:fc:a8:cc:f6:99:8e:2b:e4:47:b3:9b:cd:1c:df:ec:c5: 17:5c:20:06:74:99:51:27:0c:28:9a:80:0f:63:75:14:63:69: fa:1e:52:d0:cc:80:12:ef:d0:d9:23:5d:2f:c3:13:f9:9e:fb: 14:10:d9:a1:0e:6e:28:65:92:09:0d:72:40:38:07:aa:75:24: c1:6c:7a:d5:1b:64:ff:2c:51:9d:2c:9b:d2:51:47:20:07:17: e7:57:a3:59:41:06:ae:77:2b:4a:f0:c7:98:68:68:69:ee:52: 8a:3b:ff:cb:c6:79:13:62:95:e5:4d:56:5f:cd:a8:d0:37:6d: 15:20:6b:1e:3b:e6:cb:cf:a3:46:d2:f7:35:5c:03:59:07:94: d9:00:0e:05:cd:a5:54:46:79:2a:6b:19:a3:b3:21:bc:bc:00: e3:1f:cd:96:72:f5:18:83:c7:31:94:80:49:b1:38:41:de:9f: 5b:87:bd:71:91:2a:4e:00:60:93:0b:ee:95:8e:c9:52:b0:eb: ea:22:ed:6e:cc:c9:c5:bc:d3:59:1a:fe:67:b6:67:68:d7:7f: 2f:ff:e2:07 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHK7OSNrITpRpD7tCs4f6qHT/TyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBQUFCQjk5RjVDRjc5Q0E3QzI1RjAyMkY4NUY4NUUw RENCMkNCQTAeFw0yNjA0MjgwMDEzMDRaFw0yNjA1MDMxNTE1MDRaMDMxMTAvBgNV BAMTKEE5N0Q4OEVDOEE4MTg4MUIyNDc4N0M4RjkxNUI0OTk2QTYyM0E1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm+nwaTFEzb5jKtzzPBQPfkb0U wKtavUlPziluRaI1fHgNw9D98h1pKXcdfxDnbQKWJIioZYkACgc5Gz2wF4d2sBFL XIZzhJOWK4v7T0BrICY2NnW0XzLxqh7sE0H6Xy0PkpRwiW7QwFYZmpbLZ8a7Kfw9 Td1sScht4K/nZcy2WTmnA7PM6LqsZHdcNXlgv+92YFwICkugqn++wzbdthKnZVQC 4pSyHTITDP5ykfWqF32VMLfzhO2L/4ukUoC37oCOOjwqgHhCfyxJIjutXILN3Hnk VfNTel/cMiIGq84lBekY5f4JWce89rBy8CNWfVyE2M4vduHdRx9OocgA56w/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqX2I7IqBiBskeHyPkVtJlqYjpQMwHwYDVR0j BBgwFoAUPKqruZ9c95ynwl8CL4X4Xg3LLLowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85NjU4NzI5NzhCNDJGRTk5OTcwRUUwNEQ4QjIwNjA3NzEw ODNFMzA3NDFBNTA5QkFFQjAwREI2M0NFQ0IyM0QzLzAvM0NBQUFCQjk5RjVDRjc5 Q0E3QzI1RjAyMkY4NUY4NUUwRENCMkNCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0FBQUJCOTlGNUNGNzlDQTdD MjVGMDIyRjg1Rjg1RTBEQ0IyQ0JBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTY1ODcyOTc4QjQyRkU5OTk3MEVFMDREOEIyMDYwNzcxMDgzRTMwNzQx QTUwOUJBRUIwMERCNjNDRUNCMjNEMy8wLzNDQUFBQkI5OUY1Q0Y3OUNBN0MyNUYw MjJGODVGODVFMERDQjJDQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBz+qA+aLlEnlea5EYjModhY8hi G4jgjmxc7tgqycrBSodurEP+UfyozPaZjivkR7ObzRzf7MUXXCAGdJlRJwwomoAP Y3UUY2n6HlLQzIAS79DZI10vwxP5nvsUENmhDm4oZZIJDXJAOAeqdSTBbHrVG2T/ LFGdLJvSUUcgBxfnV6NZQQaudytK8MeYaGhp7lKKO//LxnkTYpXlTVZfzajQN20V IGseO+bLz6NG0vc1XANZB5TZAA4FzaVURnkqaxmjsyG8vADjH82WcvUYg8cxlIBJ sThB3p9bh71xkSpOAGCTC+6VjslSsOvqIu1uzMnFvNNZGv5ntmdo138v/+IH -----END CERTIFICATE-----Generated at Thu Apr 30 05:49:07 2026 by rpki-client