$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft File: 2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft (raw, json) Hash identifier: 25l9X95gBE8yMVWmD4GXf2BbtEG3cofIE82jdfzMmBQ= Subject key identifier: 35:B6:C5:6B:C2:CC:E2:BF:6B:CF:D6:F9:47:3E:29:41:72:B8:87:04 Authority key identifier: 2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B Certificate issuer: /CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B Certificate serial: 3A4CE4994AC1AF0C1A5114F1CF980886C267CB8A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft Manifest number: 0185 Signing time: Wed 15 Apr 2026 05:02:53 +0000 Manifest this update: Wed 15 Apr 2026 04:57:53 +0000 Manifest next update: Sun 19 Apr 2026 06:32:53 +0000 Files and hashes: 1: 323830313a31333a643830303a3a2f34382d3438203d3e203134303830.roa (hash: 7Hf7Z/72k0ftpWuAWkDcalztpHYmuZGHsGSX+Tk9J6U=) 2: 2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl (hash: OsUklQeEeVok/2itIC5QEeCVw3cG336sfIOReaIMt5w=) 3: 323830313a31333a643830383a3a2f34382d3438203d3e203139343239.roa (hash: ffeeqv3WcNoxodTffDesIFZELkA4gNhkaOZohA9CWSg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 02:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4c:e4:99:4a:c1:af:0c:1a:51:14:f1:cf:98:08:86:c2:67:cb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B Validity Not Before: Apr 15 04:57:53 2026 GMT Not After : Apr 19 06:32:53 2026 GMT Subject: CN=35B6C56BC2CCE2BF6BCFD6F9473E294172B88704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:87:bf:a1:9a:39:33:de:36:36:c5:74:6e:0b: a7:69:e8:d2:2c:ac:24:83:ad:5c:21:8f:82:b1:85: f3:5a:e1:cb:93:79:bd:d2:ac:ae:3f:b9:1a:39:3a: 90:32:d3:14:99:11:c7:b0:6a:17:90:b6:a0:ac:3d: d9:81:7f:d8:75:e9:c3:b8:a0:ef:0f:cc:cb:1a:30: 19:3a:3e:82:88:3e:16:77:8f:35:1c:13:97:07:6c: 25:6c:ba:71:e8:86:55:7d:32:da:b6:cf:1b:d2:c4: 67:78:9e:16:4e:23:78:1a:11:a6:e5:30:e0:33:6a: aa:1d:90:fc:24:10:e7:1f:a5:43:33:1c:ed:67:bd: 2f:2f:b7:ba:fd:78:24:30:34:96:56:8f:57:6f:68: f5:f7:29:94:a7:6d:ae:84:77:31:3e:39:0e:b9:c0: 90:bf:47:79:a3:24:07:87:be:1f:45:7d:68:40:0b: a1:9f:21:87:60:39:f1:9b:20:89:97:e2:af:da:b5: 5d:07:6f:6a:fd:11:ba:3d:cf:c3:28:c4:ec:17:97: 02:17:b0:44:7b:80:07:89:82:b7:d9:cd:a9:c1:aa: 52:5f:b3:ed:14:87:cc:90:4c:68:f5:d3:a3:92:86: 58:a7:6a:ac:04:e1:e0:b7:d0:b2:a7:f9:0b:16:bc: 8c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B6:C5:6B:C2:CC:E2:BF:6B:CF:D6:F9:47:3E:29:41:72:B8:87:04 X509v3 Authority Key Identifier: keyid:2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b8:7f:ab:b9:96:18:25:6c:55:1c:a6:a9:a8:75:97:53:38: d2:cc:93:c0:ec:8c:cc:75:8c:38:71:94:bc:78:4a:9e:3d:a2: 5c:3d:93:d0:17:55:09:1d:10:d5:57:6a:08:d1:44:bc:f0:f3: e7:81:ea:a0:e4:d7:2e:8d:74:e9:f7:3f:55:fd:45:d5:ba:21: 38:7a:ea:65:bc:65:24:2a:ba:f1:a4:b9:c0:b2:a6:0e:19:00: fa:3a:d8:38:f3:4f:cd:a5:c2:75:93:c2:98:14:89:28:95:ff: a1:e6:44:1d:45:91:38:46:74:f2:b4:03:8e:72:cc:8a:32:8a: 07:53:1c:0d:2f:10:a7:a9:64:a8:e6:c2:a0:68:77:b3:46:68: ac:ee:56:75:d0:dc:2e:22:1b:3c:e4:92:76:37:0f:cd:89:d7: 1d:52:96:29:3b:f9:8f:44:55:c5:35:23:5f:03:be:3c:cf:e7: af:45:bb:c4:eb:88:a2:db:a7:a5:56:9c:f2:5e:5c:7d:8b:19: 4f:b3:ee:51:02:66:bf:b4:20:c1:64:2f:36:c2:a6:8e:7c:50: 10:4c:39:b5:91:ff:be:95:80:59:0f:b0:b6:22:bf:f4:61:75: 02:23:d2:56:f5:9b:4a:f0:27:59:3c:5e:07:0c:4c:f2:61:55: 19:d2:5d:fb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOkzkmUrBrwwaURTxz5gIhsJny4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRENTNCRDY5RDNBMzQ3N0Y1MzcyRUYzNjg5RDNBQzZC Q0M1RDExQjAeFw0yNjA0MTUwNDU3NTNaFw0yNjA0MTkwNjMyNTNaMDMxMTAvBgNV BAMTKDM1QjZDNTZCQzJDQ0UyQkY2QkNGRDZGOTQ3M0UyOTQxNzJCODg3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrh7+hmjkz3jY2xXRuC6dp6NIs rCSDrVwhj4KxhfNa4cuTeb3SrK4/uRo5OpAy0xSZEcewaheQtqCsPdmBf9h16cO4 oO8PzMsaMBk6PoKIPhZ3jzUcE5cHbCVsunHohlV9Mtq2zxvSxGd4nhZOI3gaEabl MOAzaqodkPwkEOcfpUMzHO1nvS8vt7r9eCQwNJZWj1dvaPX3KZSnba6EdzE+OQ65 wJC/R3mjJAeHvh9FfWhAC6GfIYdgOfGbIImX4q/atV0Hb2r9Ebo9z8MoxOwXlwIX sER7gAeJgrfZzanBqlJfs+0Uh8yQTGj106OShlinaqwE4eC30LKn+QsWvIxbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNbbFa8LM4r9rz9b5Rz4pQXK4hwQwHwYDVR0j BBgwFoAULdU71p06NHf1Ny7zaJ06xrzF0RswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85REE4QzgwODA1QkNBNENGNjNEREE0RkJBRTczRTYxODUx RDcyNEI2RTc2MTkxOTY4MUEzMkZGODIxMjIzM0JFLzAvMkRENTNCRDY5RDNBMzQ3 N0Y1MzcyRUYzNjg5RDNBQzZCQ0M1RDExQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREQ1M0JENjlEM0EzNDc3RjUz NzJFRjM2ODlEM0FDNkJDQzVEMTFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOURBOEM4MDgwNUJDQTRDRjYzRERBNEZCQUU3M0U2MTg1MUQ3MjRCNkU3 NjE5MTk2ODFBMzJGRjgyMTIyMzNCRS8wLzJERDUzQkQ2OUQzQTM0NzdGNTM3MkVG MzY4OUQzQUM2QkNDNUQxMUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnuH+ruZYYJWxVHKapqHWXUzjS zJPA7IzMdYw4cZS8eEqePaJcPZPQF1UJHRDVV2oI0US88PPngeqg5NcujXTp9z9V /UXVuiE4euplvGUkKrrxpLnAsqYOGQD6Otg480/NpcJ1k8KYFIkolf+h5kQdRZE4 RnTytAOOcsyKMooHUxwNLxCnqWSo5sKgaHezRmis7lZ10NwuIhs85JJ2Nw/Nidcd UpYpO/mPRFXFNSNfA748z+evRbvE64ii26elVpzyXlx9ixlPs+5RAma/tCDBZC82 wqaOfFAQTDm1kf++lYBZD7C2Ir/0YXUCI9JW9ZtK8CdZPF4HDEzyYVUZ0l37 -----END CERTIFICATE-----Generated at Wed Apr 15 17:31:49 2026 by rpki-client