$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft File: 965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft (raw, json) Hash identifier: kuYPc/4kc9NGpZNDFkIru7yo/kjAcgiXXWZ1QzLVNwY= Subject key identifier: 88:F9:76:AC:60:C1:39:04:36:66:FB:17:44:DF:E3:9B:71:F9:9E:59 Authority key identifier: 96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D Certificate issuer: /CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D Certificate serial: 15D6A6034864AF6C2A8A3D324FC8A5D77C39957E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft Manifest number: 0181 Signing time: Wed 29 Apr 2026 16:42:40 +0000 Manifest this update: Wed 29 Apr 2026 16:37:40 +0000 Manifest next update: Tue 05 May 2026 12:46:40 +0000 Files and hashes: 1: 3139302e372e3136302e302f32302d3230203d3e203237393038.roa (hash: s953Iau+LEUEMVS5+HKJ/tmf9MsBiJseXOeY6aldEGw=) 2: 323830333a643838303a3a2f33322d3332203d3e203237393038.roa (hash: jJpg1batYRqfpXmsbQRnx+A363T9d2FeeCzDmuaZyGs=) 3: 965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl (hash: MXI4WnV/4tlEbOrRB3PJzkGHM2QiUDyOL922kxa5nME=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 20:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d6:a6:03:48:64:af:6c:2a:8a:3d:32:4f:c8:a5:d7:7c:39:95:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D Validity Not Before: Apr 29 16:37:40 2026 GMT Not After : May 5 12:46:40 2026 GMT Subject: CN=88F976AC60C139043666FB1744DFE39B71F99E59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:4e:65:e5:8f:79:69:fc:ef:5d:53:ae:9a: df:d3:34:bf:b2:d3:c6:d7:9b:b1:db:8d:0e:5f:40: 45:24:8d:e0:85:3f:7d:c1:fb:60:4e:69:1d:03:9e: 76:17:de:3f:2b:31:2e:93:6e:54:e0:12:41:be:b2: 08:06:cd:4a:ad:f6:10:c9:8e:a4:39:15:59:18:6d: e6:b1:2a:18:1f:64:ce:70:64:44:75:32:00:5f:79: a2:79:e9:5e:18:b1:ef:17:a3:6c:63:e1:65:49:a4: 95:09:a7:41:a0:be:51:97:11:9f:92:69:53:e9:22: f3:88:5d:de:6f:1f:34:a3:3d:2a:d8:a2:45:87:eb: eb:7e:cd:53:55:54:88:5b:a4:04:2b:73:07:ba:a8: 15:1d:2d:f3:75:e6:8f:00:ad:73:02:d7:b0:7d:af: 4e:8a:4c:bc:06:dd:a7:32:9f:d9:56:ff:12:6d:cc: c4:14:a9:1a:22:fe:06:d8:a1:13:ec:26:94:51:ae: da:76:83:b9:52:c2:5d:94:9e:af:3e:9f:c8:33:bc: 99:66:c5:7c:ce:b0:a2:88:6f:a4:47:14:e8:45:4e: 8c:32:c6:e0:ff:81:ab:34:7c:12:0a:ad:d8:3b:c7: 7d:40:41:17:0a:98:b4:2e:72:de:0f:3d:68:1b:76: 19:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F9:76:AC:60:C1:39:04:36:66:FB:17:44:DF:E3:9B:71:F9:9E:59 X509v3 Authority Key Identifier: keyid:96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:15:cb:94:a9:c9:ae:2d:87:e2:82:19:7a:47:2a:6d:68:e8: 38:65:e1:c7:a4:55:36:6f:bb:ff:8d:1e:40:a4:a2:b0:b3:43: d1:92:5f:3d:63:84:0f:db:dc:49:47:3c:99:ef:6c:e9:0a:c2: 6d:8f:3e:da:91:ba:98:77:89:5c:5f:c4:07:ed:b9:85:e2:90: 73:1a:ed:5e:b7:ff:25:9a:84:fb:f7:54:99:8c:02:06:60:2d: 79:8c:79:44:07:cc:c2:2a:10:88:8d:a3:6a:2f:66:47:2c:c9: b0:e7:eb:c5:af:64:a0:64:b0:07:8d:51:6a:ea:28:6a:fc:3f: 85:6a:c2:32:65:57:33:9f:b5:17:ce:be:6d:8c:5b:f2:cc:62: 74:74:1d:b3:5d:ea:92:7d:d1:77:ad:da:90:f3:f2:c3:d9:f4: 40:da:04:1a:a9:02:67:1d:5d:9a:15:21:30:6e:4b:de:c0:82: 0f:09:fb:84:e2:4c:0c:be:2d:59:34:22:bc:ba:d1:83:45:f9: 76:cf:f5:c5:6a:1a:72:e3:b1:3f:b8:aa:9d:ab:ff:43:c6:fd: 12:30:90:af:01:63:7c:3f:23:8e:85:ec:c8:e6:00:b1:4a:7b: 17:8a:47:6f:6c:d6:bf:11:a8:c3:74:57:35:1e:d2:ae:be:52: 10:d4:71:43 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFdamA0hkr2wqij0yT8il13w5lX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY1RUZBMTlBQTRCREIzQjZEMzNCQUU1NDc0REY4QzEz QTJFRUI2RDAeFw0yNjA0MjkxNjM3NDBaFw0yNjA1MDUxMjQ2NDBaMDMxMTAvBgNV BAMTKDg4Rjk3NkFDNjBDMTM5MDQzNjY2RkIxNzQ0REZFMzlCNzFGOTlFNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAME5l5Y95afzvXVOumt/TNL+y 08bXm7HbjQ5fQEUkjeCFP33B+2BOaR0DnnYX3j8rMS6TblTgEkG+sggGzUqt9hDJ jqQ5FVkYbeaxKhgfZM5wZER1MgBfeaJ56V4Yse8Xo2xj4WVJpJUJp0GgvlGXEZ+S aVPpIvOIXd5vHzSjPSrYokWH6+t+zVNVVIhbpAQrcwe6qBUdLfN15o8ArXMC17B9 r06KTLwG3acyn9lW/xJtzMQUqRoi/gbYoRPsJpRRrtp2g7lSwl2Unq8+n8gzvJlm xXzOsKKIb6RHFOhFTowyxuD/gas0fBIKrdg7x31AQRcKmLQuct4PPWgbdhmhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiPl2rGDBOQQ2ZvsXRN/jm3H5nlkwHwYDVR0j BBgwFoAUll76GapL2zttM7rlR034wTou620wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMkQ5REY2Qjg1Nzc3QjlGNTNFODFBRkZEODk2NjE2MjdF OERGRkY4MUVFQjhENjRDNzY3ODBFRjFBMEU0MkM5LzAvOTY1RUZBMTlBQTRCREIz QjZEMzNCQUU1NDc0REY4QzEzQTJFRUI2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjVFRkExOUFBNEJEQjNCNkQz M0JBRTU0NzRERjhDMTNBMkVFQjZELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzJEOURGNkI4NTc3N0I5RjUzRTgxQUZGRDg5NjYxNjI3RThERkZGODFF RUI4RDY0Qzc2NzgwRUYxQTBFNDJDOS8wLzk2NUVGQTE5QUE0QkRCM0I2RDMzQkFF NTQ3NERGOEMxM0EyRUVCNkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7FcuUqcmuLYfighl6RyptaOg4 ZeHHpFU2b7v/jR5ApKKws0PRkl89Y4QP29xJRzyZ72zpCsJtjz7akbqYd4lcX8QH 7bmF4pBzGu1et/8lmoT791SZjAIGYC15jHlEB8zCKhCIjaNqL2ZHLMmw5+vFr2Sg ZLAHjVFq6ihq/D+FasIyZVczn7UXzr5tjFvyzGJ0dB2zXeqSfdF3rdqQ8/LD2fRA 2gQaqQJnHV2aFSEwbkvewIIPCfuE4kwMvi1ZNCK8utGDRfl2z/XFahpy47E/uKqd q/9Dxv0SMJCvAWN8PyOOhezI5gCxSnsXikdvbNa/EajDdFc1HtKuvlIQ1HFD -----END CERTIFICATE-----Generated at Fri May 1 13:15:52 2026 by rpki-client