$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft File: D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft (raw, json) Hash identifier: JpBpmiCwT0zoI7ZqSy8NKYBGPTWmy2qNLo6rp1US/sE= Subject key identifier: 7B:4C:44:DF:8D:50:84:81:39:8C:41:A5:CC:F6:A6:E2:73:97:E9:54 Authority key identifier: D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F Certificate issuer: /CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F Certificate serial: 10C7F98941C50AA878115A675ACBF319EB7581E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft Manifest number: 013B Signing time: Thu 14 May 2026 14:04:18 +0000 Manifest this update: Thu 14 May 2026 13:59:18 +0000 Manifest next update: Wed 20 May 2026 05:01:18 +0000 Files and hashes: 1: D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl (hash: qHbB8y5dt8tkznOf2rt7goAO5SbkVbfqkTI9W992VCI=) 2: 323830333a376535303a3a2f33322d3438203d3e20323632353839.roa (hash: eCaEFSjE7aZuQizaw6/baM+QHao5Mv042kghMe+uIo0=) 3: 323830333a376535303a3a2f33322d3438203d3e20323633313935.roa (hash: oJnk7HghAfllaWlCWdC4nj4Eg5ypd+tMzoPry4NKeww=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 19 May 2026 20:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c7:f9:89:41:c5:0a:a8:78:11:5a:67:5a:cb:f3:19:eb:75:81:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F Validity Not Before: May 14 13:59:18 2026 GMT Not After : May 20 05:01:18 2026 GMT Subject: CN=7B4C44DF8D508481398C41A5CCF6A6E27397E954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:e3:c5:e4:57:12:b1:1b:2c:8f:63:62:77: 88:b0:64:bb:93:65:6c:0f:ef:90:04:38:50:29:9c: 4e:8e:5b:35:0f:a4:39:6c:05:d2:a4:57:6c:8e:12: 51:f8:ef:b5:81:64:b4:1c:f8:eb:99:0e:81:da:bc: 31:db:8a:1c:67:9f:f3:01:6f:9c:c1:a8:31:d1:c0: ea:97:56:0c:d4:d1:06:b8:b8:5a:5f:09:85:dc:6c: 77:13:be:f1:e1:8c:7f:10:d4:6a:9a:c5:5b:bc:53: c3:4d:10:4e:9f:50:7a:b6:91:98:87:bd:47:c6:53: bd:12:bb:a7:36:10:d3:d9:f0:61:3d:c5:18:19:f0: 9d:b0:5d:e6:f7:29:ed:c9:9b:29:83:2b:b5:eb:04: df:8c:30:71:80:38:e7:93:82:15:f7:0b:d1:74:eb: f9:30:3f:8d:32:3b:d1:01:6f:81:71:2d:36:5a:1d: 97:74:ed:2d:d4:49:c9:11:b5:0e:51:9b:a4:70:43: 2c:b9:dd:b9:66:c8:d7:c3:55:3f:ae:2f:20:f9:99: 76:72:36:a1:80:73:c4:cd:a6:c5:cc:6d:d5:54:32: 86:3e:15:20:35:f0:3f:6b:1a:02:8a:90:37:06:47: 43:22:a7:7b:f1:1f:89:f9:cd:8a:34:09:60:99:5b: 23:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4C:44:DF:8D:50:84:81:39:8C:41:A5:CC:F6:A6:E2:73:97:E9:54 X509v3 Authority Key Identifier: keyid:D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0e:4f:d7:f8:10:41:47:05:d0:f8:ff:7f:3c:ae:62:83:f3: cd:0c:ea:6e:6b:97:8e:ca:20:31:08:ba:a8:ab:24:37:0a:9b: cc:9e:9c:2a:fe:2d:a4:9e:da:8a:f5:8a:b1:9c:96:bc:70:3a: 97:44:ad:68:92:4d:c5:44:f4:88:d7:c3:36:e6:69:be:06:88: 0d:dc:08:d7:a3:7b:b8:78:01:67:8e:bb:fe:9f:bb:36:27:a2: 4c:d1:92:cb:f1:3a:a4:79:a0:bc:05:5a:36:38:b1:12:9a:10: 8b:74:aa:af:7d:07:63:a9:03:38:0e:66:b3:01:3e:16:08:82: 64:a1:7e:cc:2d:17:39:70:f5:b3:bb:76:85:d9:12:ea:ba:be: ec:5c:db:18:4d:09:0d:f7:43:95:13:ec:0a:a6:9f:8b:2b:8a: bc:67:a2:ee:4d:0c:56:ea:7c:84:8a:27:8e:05:08:5e:09:f7: 69:59:03:84:c6:89:2e:0f:27:73:d2:55:44:a4:ad:26:93:28: 39:6f:d1:22:bd:fb:85:cc:fa:27:c7:72:25:44:41:86:93:fe: 9f:df:45:a3:5a:ff:35:66:2b:3b:1d:2a:61:29:d1:58:1b:7d: 5f:86:de:24:a0:db:d6:6b:33:83:f4:27:24:d3:58:60:79:c6: 32:15:1e:e6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEMf5iUHFCqh4EVpnWsvzGet1gegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJDQUFCMkNEQzI5NUM4QkEyNzYxNjlEMTBEMTg3MEJC QjkyRDc0RjAeFw0yNjA1MTQxMzU5MThaFw0yNjA1MjAwNTAxMThaMDMxMTAvBgNV BAMTKDdCNEM0NERGOEQ1MDg0ODEzOThDNDFBNUNDRjZBNkUyNzM5N0U5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj4OPF5FcSsRssj2Nid4iwZLuT ZWwP75AEOFApnE6OWzUPpDlsBdKkV2yOElH477WBZLQc+OuZDoHavDHbihxnn/MB b5zBqDHRwOqXVgzU0Qa4uFpfCYXcbHcTvvHhjH8Q1GqaxVu8U8NNEE6fUHq2kZiH vUfGU70Su6c2ENPZ8GE9xRgZ8J2wXeb3Ke3JmymDK7XrBN+MMHGAOOeTghX3C9F0 6/kwP40yO9EBb4FxLTZaHZd07S3USckRtQ5Rm6RwQyy53blmyNfDVT+uLyD5mXZy NqGAc8TNpsXMbdVUMoY+FSA18D9rGgKKkDcGR0Mip3vxH4n5zYo0CWCZWyMnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUe0xE341QhIE5jEGlzPam4nOX6VQwHwYDVR0j BBgwFoAU0sqrLNwpXIuidhadENGHC7uS108wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85ODVBRUZEQ0E5QzYzM0RGODg0QkQ1RUQzRkQ5RkNCMUU3 MDY1RDdDODU5NTIzQUY4ODZFOTE4MDVFRUFCNDA2LzAvRDJDQUFCMkNEQzI5NUM4 QkEyNzYxNjlEMTBEMTg3MEJCQjkyRDc0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkNBQUIyQ0RDMjk1QzhCQTI3 NjE2OUQxMEQxODcwQkJCOTJENzRGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTg1QUVGRENBOUM2MzNERjg4NEJENUVEM0ZEOUZDQjFFNzA2NUQ3Qzg1 OTUyM0FGODg2RTkxODA1RUVBQjQwNi8wL0QyQ0FBQjJDREMyOTVDOEJBMjc2MTY5 RDEwRDE4NzBCQkI5MkQ3NEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLDk/X+BBBRwXQ+P9/PK5ig/PN DOpua5eOyiAxCLqoqyQ3CpvMnpwq/i2kntqK9YqxnJa8cDqXRK1okk3FRPSI18M2 5mm+BogN3AjXo3u4eAFnjrv+n7s2J6JM0ZLL8TqkeaC8BVo2OLESmhCLdKqvfQdj qQM4DmazAT4WCIJkoX7MLRc5cPWzu3aF2RLqur7sXNsYTQkN90OVE+wKpp+LK4q8 Z6LuTQxW6nyEiieOBQheCfdpWQOExokuDydz0lVEpK0mkyg5b9EivfuFzPonx3Il REGGk/6f30WjWv81Zis7HSphKdFYG31fht4koNvWazOD9Cck01hgecYyFR7m -----END CERTIFICATE-----Generated at Sat May 16 02:52:47 2026 by rpki-client