$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft File: 85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft (raw, json) Hash identifier: 8Ea0dqhbqgmUAXkNEmoXe6lHoyZe11uMrFfRSHOkgbA= Subject key identifier: B2:A3:76:A8:AE:34:AF:0E:4E:80:45:8A:0D:C1:9D:E8:8C:4A:AE:8E Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A Certificate issuer: /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A Certificate serial: 6C73B27585EF45D3B03C00B96C4AAC4B9016B8EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft Manifest number: 0189 Signing time: Fri 17 Apr 2026 11:25:45 +0000 Manifest this update: Fri 17 Apr 2026 11:20:45 +0000 Manifest next update: Wed 22 Apr 2026 07:37:45 +0000 Files and hashes: 1: 85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl (hash: OX5tlxlMrlyQJkh+dq/vy6qZoKANhsewmRp602a0h3k=) 2: 34352e3136312e3233362e302f32322d3234203d3e203631353132.roa (hash: SdzwWw6dcvaS4XdRSsV3w69+iMp+QDvuAVHag7agkAE=) 3: 323830333a363934303a3a2f33322d3438203d3e203631353132.roa (hash: DqMANk4vZp9DYozZY7/LK84MoeJ/wSo+DIdfnbXAnc0=) 4: 3134332e3235352e3134302e302f32322d3332203d3e20323032.roa (hash: rYZb4iJPvLD48DXR2HMXMHWJZNKHF3nVf03MhYz16WM=) 5: 3134332e3235352e3134302e302f32322d3332203d3e20323033.roa (hash: cqbVZiWp5CmZDOkbVxT/fYs85Y9wjbS/MZnP0Z6WQc0=) 6: 3134332e3235352e3134302e302f32322d3234203d3e203631353132.roa (hash: XXr/7MkPUsKcGPLwZnxpKdVYADOH8Md848BLqn18jKg=) 7: 3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa (hash: ltmWI9h4QzLb1beDrfNlEL4sNrMAbCe6RIciFmQe1II=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:73:b2:75:85:ef:45:d3:b0:3c:00:b9:6c:4a:ac:4b:90:16:b8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A Validity Not Before: Apr 17 11:20:45 2026 GMT Not After : Apr 22 07:37:45 2026 GMT Subject: CN=B2A376A8AE34AF0E4E80458A0DC19DE88C4AAE8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:6c:62:5f:1b:b5:ca:a0:9a:15:a6:df:a7: 26:0a:b9:f6:0a:ea:36:d9:a3:c1:e5:30:44:8c:18: 28:fe:2e:3b:8b:7c:ad:bf:3c:00:15:a5:b6:5a:f6: b2:f7:8b:79:18:4d:fd:8a:43:b0:70:e1:9a:5f:e6: da:68:cb:7e:91:60:bd:ff:3a:07:e6:38:8f:56:cb: 51:de:7b:5d:05:54:70:75:2e:70:12:22:ee:09:2b: ed:6f:86:5f:b0:c9:89:b0:fb:9c:b2:d7:74:09:e0: 2d:f6:33:e7:d1:f4:b5:7b:9c:4e:10:ae:c6:8c:40: 0d:c8:bf:c4:74:ed:6e:ba:08:5d:ce:06:6b:ac:a8: 02:60:de:cb:3f:ab:05:31:67:27:e4:2b:eb:a3:0b: 69:a6:1d:d2:aa:ce:16:5a:e9:4d:fc:b1:bf:86:08: 0f:b6:ed:f8:8c:25:37:f6:b4:b9:32:cf:24:1a:6f: 84:03:d4:ea:5b:92:0a:cc:37:13:14:6d:3d:c4:cd: a1:9e:c6:08:36:82:60:2c:d5:61:40:c4:af:06:62: c9:06:62:89:38:b5:dc:2e:1a:8d:bb:08:bc:f1:56: 38:54:cb:20:4f:31:ef:96:08:ef:95:a0:e6:6d:14: e0:55:a0:aa:4a:5b:66:89:b2:d5:5b:43:ab:82:fc: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A3:76:A8:AE:34:AF:0E:4E:80:45:8A:0D:C1:9D:E8:8C:4A:AE:8E X509v3 Authority Key Identifier: keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1b:8a:8d:63:15:97:ef:84:57:03:e0:b7:44:f8:7e:2c:4b: f5:a2:ed:dd:17:0e:74:a4:72:d1:19:a9:8e:a5:f3:81:f9:95: 7c:8f:9e:12:c8:78:b7:7f:81:d8:b9:38:dc:ab:f0:d5:25:de: bd:56:b7:12:1c:22:94:33:55:25:ea:fa:85:b6:01:a6:27:23: e8:bf:b9:6e:bd:d5:a0:d4:4b:56:1e:4e:ed:f7:6b:b9:5d:d9: 7f:89:64:f4:61:e0:9b:60:ff:ff:81:21:33:05:52:8d:4f:cc: 11:d1:61:52:47:f0:6a:00:fc:ca:5d:6f:ea:a7:81:6e:f6:5a: 38:d1:88:a1:a1:16:bf:96:60:2c:26:1d:58:d6:4a:92:79:19: a9:7f:b0:67:37:a8:3d:09:47:98:18:22:2c:ba:11:b9:0a:5e: 76:64:c9:2f:2c:ac:61:d8:6b:26:a7:88:f4:78:dd:92:f6:e9: c9:f5:b0:a2:e6:ef:09:57:00:17:07:79:92:01:01:c6:43:2a: 12:47:ee:55:fc:45:05:ce:fd:c0:eb:77:4d:94:f4:f6:49:95: 33:2c:e8:52:b2:57:55:44:eb:31:a8:e7:98:e6:a2:85:dd:a5: ef:f3:b3:06:3e:c3:46:3e:7f:50:a6:01:a8:c0:25:a7:05:7d: e7:3d:ba:38 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbHOydYXvRdOwPAC5bEqsS5AWuOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCRjM4RkE0MzhGNEY4NzI0NThFRDM2NDIzRDFBQTdG ODVEQjUyQTAeFw0yNjA0MTcxMTIwNDVaFw0yNjA0MjIwNzM3NDVaMDMxMTAvBgNV BAMTKEIyQTM3NkE4QUUzNEFGMEU0RTgwNDU4QTBEQzE5REU4OEM0QUFFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQGxiXxu1yqCaFabfpyYKufYK 6jbZo8HlMESMGCj+LjuLfK2/PAAVpbZa9rL3i3kYTf2KQ7Bw4Zpf5tpoy36RYL3/ OgfmOI9Wy1Hee10FVHB1LnASIu4JK+1vhl+wyYmw+5yy13QJ4C32M+fR9LV7nE4Q rsaMQA3Iv8R07W66CF3OBmusqAJg3ss/qwUxZyfkK+ujC2mmHdKqzhZa6U38sb+G CA+27fiMJTf2tLkyzyQab4QD1OpbkgrMNxMUbT3EzaGexgg2gmAs1WFAxK8GYskG Yok4tdwuGo27CLzxVjhUyyBPMe+WCO+VoOZtFOBVoKpKW2aJstVbQ6uC/KOZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUsqN2qK40rw5OgEWKDcGd6IxKro4wHwYDVR0j BBgwFoAUhb84+kOPT4ckWO02Qj0ap/hdtSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMTlGQjJCRDBDRDk3ODdBNTYzOTY1MUU4QUM0MjExNjBC NTFGMzEyRkJCNkZEMUE1QTAxRDBEQkM2MEUxOUU5LzAvODVCRjM4RkE0MzhGNEY4 NzI0NThFRDM2NDIzRDFBQTdGODVEQjUyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUJGMzhGQTQzOEY0Rjg3MjQ1 OEVEMzY0MjNEMUFBN0Y4NURCNTJBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDE5RkIyQkQwQ0Q5Nzg3QTU2Mzk2NTFFOEFDNDIxMTYwQjUxRjMxMkZC QjZGRDFBNUEwMUQwREJDNjBFMTlFOS8wLzg1QkYzOEZBNDM4RjRGODcyNDU4RUQz NjQyM0QxQUE3Rjg1REI1MkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9G4qNYxWX74RXA+C3RPh+LEv1 ou3dFw50pHLRGamOpfOB+ZV8j54SyHi3f4HYuTjcq/DVJd69VrcSHCKUM1Ul6vqF tgGmJyPov7luvdWg1EtWHk7t92u5Xdl/iWT0YeCbYP//gSEzBVKNT8wR0WFSR/Bq APzKXW/qp4Fu9lo40YihoRa/lmAsJh1Y1kqSeRmpf7BnN6g9CUeYGCIsuhG5Cl52 ZMkvLKxh2Gsmp4j0eN2S9unJ9bCi5u8JVwAXB3mSAQHGQyoSR+5V/EUFzv3A63dN lPT2SZUzLOhSsldVROsxqOeY5qKF3aXv87MGPsNGPn9QpgGowCWnBX3nPbo4 -----END CERTIFICATE-----Generated at Sat Apr 18 05:01:57 2026 by rpki-client