$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json) Hash identifier: y7T8oar2CZw8SAXT7BBHRrO/1QtrjjWuLOwelbbvg+s= Subject key identifier: 25:F1:F1:5A:7E:D3:6E:18:64:2D:8E:BC:8C:74:4C:2E:F8:40:B7:41 Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Certificate serial: 583F84E98B26467D6F45EE4F78E9E2796ECC623A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft Manifest number: 0190 Signing time: Mon 20 Apr 2026 09:22:19 +0000 Manifest this update: Mon 20 Apr 2026 09:17:19 +0000 Manifest next update: Sun 26 Apr 2026 03:09:19 +0000 Files and hashes: 1: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: kaKUZiOO231EtytVEuU8JocfvoJzxzevWJjzJMiFBFk=) 2: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: kgjgwHarhaMs6Iouvoz80koNaPks3R7U+aIkHqr9IWM=) 3: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: dbTjuGS3PzrURh7F2dZU8q1IyUt3ByHVC9cX7x0Huss=) 4: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: L57VWgacj/zmSjf7yEB+iUGkpSFTYzflOQWN6Q62GvI=) 5: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: XE2awn9T+5ggVHcwpgRTfWKLa6eNnQYDkphDSuamOgQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 26 Apr 2026 03:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3f:84:e9:8b:26:46:7d:6f:45:ee:4f:78:e9:e2:79:6e:cc:62:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Validity Not Before: Apr 20 09:17:19 2026 GMT Not After : Apr 26 03:09:19 2026 GMT Subject: CN=25F1F15A7ED36E18642D8EBC8C744C2EF840B741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:5c:b2:9c:7e:20:0b:7c:a0:5d:cd:0e:c3: 08:f8:9c:3e:7d:61:fa:79:36:ad:5d:b0:27:7e:0d: 06:d4:5f:3b:2d:1e:bc:26:66:e9:4b:3a:f3:e8:87: c5:de:d0:4c:48:66:74:d2:88:49:51:86:76:d3:d0: 7f:4d:7b:60:ba:16:e7:39:3f:70:35:17:e3:23:1f: 67:2a:96:60:59:2e:5e:03:42:26:9d:6c:b5:0c:45: a0:5e:4b:92:98:02:2d:c6:bc:50:8f:24:fa:eb:67: 8d:81:90:d9:3c:15:02:e4:3b:1a:e7:14:d3:2b:7d: 58:a3:15:a1:35:86:d0:bf:94:07:ee:46:63:c2:fe: bc:bb:d2:35:84:8d:ae:41:ac:fe:eb:c5:2e:bb:ab: a8:91:46:c2:bf:36:b2:56:1d:bc:43:4c:22:b8:7c: 12:76:58:2f:90:8a:76:54:e8:a0:ea:12:0b:ee:c3: be:a9:ad:46:26:d1:51:db:60:7d:39:88:25:20:de: 93:e8:df:7d:bc:e9:d0:2b:57:18:30:7b:4d:c4:67: d9:1a:65:5b:ec:aa:81:f5:9d:d3:c7:30:a1:62:7f: 97:f2:c7:d6:5a:38:ba:8a:e2:34:7e:f6:db:19:ca: 02:5e:9d:03:21:2f:a7:19:50:d8:ae:92:af:9c:1b: 99:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F1:F1:5A:7E:D3:6E:18:64:2D:8E:BC:8C:74:4C:2E:F8:40:B7:41 X509v3 Authority Key Identifier: keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:65:7c:31:24:06:1d:98:19:05:c0:94:0c:33:32:24:27:a5: 33:e7:97:27:6d:88:22:e6:70:bd:8f:cb:f9:43:20:fb:32:02: df:0e:dd:af:db:ed:6b:89:9d:a8:02:31:c8:90:43:62:9e:d0: b2:31:02:7c:eb:48:c1:ca:fc:25:27:70:25:81:14:aa:bf:ec: c1:74:58:9d:02:81:47:c6:80:01:23:a5:1e:8d:4c:1c:eb:e6: 35:a1:c4:7a:4f:de:de:6b:37:e0:46:31:90:5f:72:21:6f:a7: d7:9f:ec:9e:2b:aa:66:bf:ad:f8:b5:a4:83:f5:09:35:37:2a: ab:d5:a4:a8:34:fc:21:05:36:a6:78:9c:1d:dd:bc:62:36:1e: a1:72:95:80:4d:d2:c5:f8:61:53:e1:d7:57:84:49:ad:89:d2: 8a:ab:19:3c:5a:76:8a:fb:a4:1a:6d:ff:f1:bf:2e:ad:8b:89: 63:8d:09:7c:87:09:b7:d5:ed:bf:13:e6:08:9f:b0:53:5c:d3: ac:5b:c5:9b:4d:ed:37:d7:88:35:b8:14:c2:34:8d:b4:fa:fa: 8d:92:b9:10:2b:bf:c8:26:c2:2d:6d:a5:df:8a:d8:3c:68:4e: 0f:a0:06:92:7c:a7:75:61:8f:69:3b:80:26:7c:a6:82:8d:8f: d0:d7:c0:5d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWD+E6YsmRn1vRe5PeOnieW7MYjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JCMzBGQ0EyN0I4 RkJFOERBOTAeFw0yNjA0MjAwOTE3MTlaFw0yNjA0MjYwMzA5MTlaMDMxMTAvBgNV BAMTKDI1RjFGMTVBN0VEMzZFMTg2NDJEOEVCQzhDNzQ0QzJFRjg0MEI3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX9lyynH4gC3ygXc0Owwj4nD59 Yfp5Nq1dsCd+DQbUXzstHrwmZulLOvPoh8Xe0ExIZnTSiElRhnbT0H9Ne2C6Fuc5 P3A1F+MjH2cqlmBZLl4DQiadbLUMRaBeS5KYAi3GvFCPJPrrZ42BkNk8FQLkOxrn FNMrfVijFaE1htC/lAfuRmPC/ry70jWEja5BrP7rxS67q6iRRsK/NrJWHbxDTCK4 fBJ2WC+QinZU6KDqEgvuw76prUYm0VHbYH05iCUg3pPo33286dArVxgwe03EZ9ka ZVvsqoH1ndPHMKFif5fyx9ZaOLqK4jR+9tsZygJenQMhL6cZUNiukq+cG5kfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJfHxWn7TbhhkLY68jHRMLvhAt0EwHwYDVR0j BBgwFoAUyjJcdYvZWuIzjTe7MPyie4++jakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZF MkVCNEQxOTVCQTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFF MjMzOEQzN0JCMzBGQ0EyN0I4RkJFOERBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTMyNUM3NThCRDk1QUUyMzM4 RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzA5MjdENEUxOEY3N0VGQjYwMkFFMjFENTYxMUI4OUM2RTJFQjREMTk1 QkExODQ4REQ5OTYxRjg0QTBFRDJCMi8wL0NBMzI1Qzc1OEJEOTVBRTIzMzhEMzdC QjMwRkNBMjdCOEZCRThEQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAZXwxJAYdmBkFwJQMMzIkJ6Uz 55cnbYgi5nC9j8v5QyD7MgLfDt2v2+1riZ2oAjHIkENintCyMQJ860jByvwlJ3Al gRSqv+zBdFidAoFHxoABI6UejUwc6+Y1ocR6T97eazfgRjGQX3Ihb6fXn+yeK6pm v634taSD9Qk1Nyqr1aSoNPwhBTameJwd3bxiNh6hcpWATdLF+GFT4ddXhEmtidKK qxk8WnaK+6Qabf/xvy6ti4ljjQl8hwm31e2/E+YIn7BTXNOsW8WbTe0314g1uBTC NI20+vqNkrkQK7/IJsItbaXfitg8aE4PoAaSfKd1YY9pO4AmfKaCjY/Q18Bd -----END CERTIFICATE-----Generated at Wed Apr 22 06:14:23 2026 by rpki-client