$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft File: 2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft (raw, json) Hash identifier: 6jsS02t3fUY0MVnQ5WJeWB96SL2lMIC2X5KNn74+FDQ= Subject key identifier: C0:B5:31:D6:DA:E8:6D:41:28:46:95:86:61:07:22:06:A8:4E:26:FA Authority key identifier: 2D:6E:02:9E:FD:DB:CA:B8:D0:BD:DD:E5:27:4D:B6:82:DD:41:54:B9 Certificate issuer: /CN=2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9 Certificate serial: 5B6DC5A35273C6BDB0CE19BD0AE0981A386A768E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft Manifest number: 015C Signing time: Sun 26 Apr 2026 20:31:03 +0000 Manifest this update: Sun 26 Apr 2026 20:26:03 +0000 Manifest next update: Fri 01 May 2026 05:13:03 +0000 Files and hashes: 1: 323830333a333635303a3a2f33322d3438203d3e20323733323038.roa (hash: w7DUtVS/dEpirVcMXQdcPfC6zG74CFV1RXvfa1s7QZU=) 2: 323830333a333635303a3a2f34302d3438203d3e20323733323038.roa (hash: 28x2KfKbBKe899p6BMXZF/z53sMqTcq6P7YESU3A7C8=) 3: 2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl (hash: t1tLg5t9DX8Pe5ygFhixyXWHF2+fcyqmCasPL0UpLgE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 01 May 2026 01:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:6d:c5:a3:52:73:c6:bd:b0:ce:19:bd:0a:e0:98:1a:38:6a:76:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9 Validity Not Before: Apr 26 20:26:03 2026 GMT Not After : May 1 05:13:03 2026 GMT Subject: CN=C0B531D6DAE86D412846958661072206A84E26FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:37:95:c7:d3:8d:b2:82:0e:5f:28:fa:22: 3e:04:26:d4:cc:0d:47:76:b5:a7:d7:de:41:94:5a: 3d:e5:13:7d:9b:f7:2c:16:ba:89:a4:81:59:3f:ff: c8:07:58:dc:6b:dd:8e:6d:92:2c:cd:3e:d4:c4:4e: d7:97:4e:68:b6:88:0e:88:90:e1:8a:15:03:ef:ce: 6d:8c:99:d1:36:17:bd:60:cf:4e:8f:a1:f7:1c:82: 8e:9d:dc:6d:b6:b3:a3:77:fc:58:e8:a0:72:b5:d0: 19:ca:63:ab:f3:12:2a:fb:ac:a7:62:ed:85:48:10: 66:18:15:ad:46:8d:45:fc:19:29:77:b2:cc:f2:a1: 9f:62:73:26:cc:03:0b:3d:8e:d2:5b:7b:49:e5:41: c3:21:bd:bd:3a:0c:5f:9f:6a:f3:6b:8d:5a:18:6f: df:0d:4e:2c:b9:aa:e3:e3:e0:6b:21:fa:0e:e1:78: dd:d6:fc:85:40:6d:11:bb:ab:5e:21:11:1c:87:c9: c1:37:b3:f8:d5:a9:08:b2:e5:ee:aa:c8:1c:ad:33: 11:21:0d:f8:5e:e3:ad:9f:43:60:eb:37:40:2c:d4: f1:0e:af:fe:36:c6:51:11:3c:ba:49:a7:81:3c:0a: f3:c2:5b:d6:be:46:97:ee:26:f8:9e:35:47:76:ff: eb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B5:31:D6:DA:E8:6D:41:28:46:95:86:61:07:22:06:A8:4E:26:FA X509v3 Authority Key Identifier: keyid:2D:6E:02:9E:FD:DB:CA:B8:D0:BD:DD:E5:27:4D:B6:82:DD:41:54:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:3f:ef:77:21:a7:83:19:54:95:5f:f7:1d:8f:21:23:06:f7: cc:be:fa:b0:2f:49:0a:b0:5f:70:e7:38:4c:93:74:54:6f:78: 22:97:c0:0a:4f:d7:e6:94:fc:35:ba:34:b8:9a:cb:bb:4a:ed: 95:66:53:ae:9c:af:a2:77:bf:30:3d:37:83:86:21:bb:79:c2: 83:38:89:75:5a:6f:69:fb:8e:1c:2b:64:6e:5f:94:bb:e2:a9: ad:68:c1:f4:8e:1a:94:22:30:ce:d4:bf:00:87:1a:06:6d:56: 4d:37:29:cd:84:81:00:f0:35:b5:36:31:c5:4b:0b:1c:f8:0d: 20:7b:af:ca:63:d4:3a:3c:25:4a:bd:bf:af:43:75:c6:71:a6: 97:ca:cd:7c:6a:b5:8d:01:f2:5d:65:59:d8:a1:23:6d:ff:55: 51:2e:2e:92:ae:42:6b:3e:1b:39:6c:16:e6:db:fa:e7:82:4c: be:3e:19:bd:a7:f2:e0:db:e2:da:50:24:c5:bb:a9:7a:1a:f6: 94:30:df:05:b3:eb:93:92:aa:6a:c5:46:42:c0:e8:cb:2f:55: 4b:e8:28:9c:3c:46:cc:b8:99:9a:01:ec:89:5d:7b:29:a0:c9: c6:22:03:3f:b4:aa:4e:53:11:00:f7:11:e1:0e:66:39:fa:e3: 3e:1a:f8:5c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUW23Fo1Jzxr2wzhm9CuCYGjhqdo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RTAyOUVGRERCQ0FCOEQwQkREREU1Mjc0REI2ODJE RDQxNTRCOTAeFw0yNjA0MjYyMDI2MDNaFw0yNjA1MDEwNTEzMDNaMDMxMTAvBgNV BAMTKEMwQjUzMUQ2REFFODZENDEyODQ2OTU4NjYxMDcyMjA2QTg0RTI2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTDeVx9ONsoIOXyj6Ij4EJtTM DUd2tafX3kGUWj3lE32b9ywWuomkgVk//8gHWNxr3Y5tkizNPtTETteXTmi2iA6I kOGKFQPvzm2MmdE2F71gz06Pofccgo6d3G22s6N3/FjooHK10BnKY6vzEir7rKdi 7YVIEGYYFa1GjUX8GSl3sszyoZ9icybMAws9jtJbe0nlQcMhvb06DF+favNrjVoY b98NTiy5quPj4Gsh+g7heN3W/IVAbRG7q14hERyHycE3s/jVqQiy5e6qyBytMxEh Dfhe462fQ2DrN0As1PEOr/42xlERPLpJp4E8CvPCW9a+RpfuJvieNUd2/+t9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUwLUx1trobUEoRpWGYQciBqhOJvowHwYDVR0j BBgwFoAULW4Cnv3byrjQvd3lJ022gt1BVLkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRDlCNzA5MDNDRUFDM0RDNkI3RTVGNTY3MjZDM0U0QzFG MTE0RkMxNTNFRTUwNTJEODM2MEJDRDFBNTg3QjdFLzAvMkQ2RTAyOUVGRERCQ0FC OEQwQkREREU1Mjc0REI2ODJERDQxNTRCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDZFMDI5RUZEREJDQUI4RDBC RERERTUyNzREQjY4MkRENDE1NEI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0Q5QjcwOTAzQ0VBQzNEQzZCN0U1RjU2NzI2QzNFNEMxRjExNEZDMTUz RUU1MDUyRDgzNjBCQ0QxQTU4N0I3RS8wLzJENkUwMjlFRkREQkNBQjhEMEJERERF NTI3NERCNjgyREQ0MTU0QjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyP+93IaeDGVSVX/cdjyEjBvfM vvqwL0kKsF9w5zhMk3RUb3gil8AKT9fmlPw1ujS4msu7Su2VZlOunK+id78wPTeD hiG7ecKDOIl1Wm9p+44cK2RuX5S74qmtaMH0jhqUIjDO1L8AhxoGbVZNNynNhIEA 8DW1NjHFSwsc+A0ge6/KY9Q6PCVKvb+vQ3XGcaaXys18arWNAfJdZVnYoSNt/1VR Li6SrkJrPhs5bBbm2/rngky+Phm9p/Lg2+LaUCTFu6l6GvaUMN8Fs+uTkqpqxUZC wOjLL1VL6CicPEbMuJmaAeyJXXspoMnGIgM/tKpOUxEA9xHhDmY5+uM+Gvhc -----END CERTIFICATE-----Generated at Mon Apr 27 11:22:38 2026 by rpki-client