$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: 1oRdMOlrwFkwZT5CczSqLTJeLs2vBbYPjcEhGdM6Tps= Subject key identifier: 72:86:19:9B:1D:C2:FE:21:99:F1:9A:50:BE:50:EA:39:72:D3:52:05 Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 79A4520A280BF93E4D508B1CD1437A72D6501AC6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: 0199 Signing time: Sun 24 May 2026 11:14:09 +0000 Manifest this update: Sun 24 May 2026 11:09:09 +0000 Manifest next update: Thu 28 May 2026 11:49:09 +0000 Files and hashes: 1: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: 0OsieuEGXDe388WASWWZrCXQTf65CQJuyDi3g+JAS+c=) 2: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: lls2NOIQefkNui92Jx0iA7Lcnw+MwNLxm47JeaFpIdo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 28 May 2026 11:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a4:52:0a:28:0b:f9:3e:4d:50:8b:1c:d1:43:7a:72:d6:50:1a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: May 24 11:09:09 2026 GMT Not After : May 28 11:49:09 2026 GMT Subject: CN=7286199B1DC2FE2199F19A50BE50EA3972D35205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:85:e3:fd:f6:69:75:45:21:44:da:a5:d3: e1:b7:09:7a:da:da:3c:77:4b:13:b9:d1:c9:c1:13: 91:f1:76:37:83:41:46:68:99:1f:21:04:65:4d:28: 3b:e5:7f:19:04:0f:6e:1c:97:2a:b1:c9:66:c7:1b: 7b:e2:d8:ca:b1:b7:b3:72:54:a7:cd:20:41:b2:65: 16:93:b3:69:f6:88:ca:55:5e:1a:92:44:ad:91:21: ff:a7:a3:6f:35:2a:05:ae:7f:f2:e5:e8:1b:26:fd: 36:3e:57:93:f2:f0:be:03:26:02:75:28:d4:4a:e4: 4a:74:93:fb:58:4f:6c:bf:93:29:f1:ca:17:e1:4d: a4:67:a0:eb:70:3d:54:8e:b3:54:51:15:a6:fc:c1: 30:18:df:bc:09:92:6a:13:80:97:57:68:2e:1a:ea: 66:47:d8:11:f9:c9:7e:1e:96:80:84:33:ff:5a:9e: 2c:4e:62:b0:89:18:84:fc:72:79:6b:fb:ee:ec:30: 5d:3c:33:6e:42:4f:6c:5d:56:35:ad:fe:35:95:29: 8d:71:df:4f:a1:67:3f:01:0e:77:bc:78:df:78:21: 87:6a:e1:43:64:8d:77:cb:cf:c8:1e:f9:9a:60:17: 80:a1:43:fd:b5:34:87:26:16:1a:21:37:75:47:e3: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:86:19:9B:1D:C2:FE:21:99:F1:9A:50:BE:50:EA:39:72:D3:52:05 X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:04:4b:94:87:e5:39:49:08:d6:7e:e2:eb:0d:89:85:e3:4a: b4:15:6d:86:a6:27:78:41:f2:8b:30:fe:09:27:db:e1:97:56: fb:16:25:17:58:e8:b3:97:3f:f8:47:a8:e8:fb:1d:97:51:7e: b3:53:b9:f2:60:4c:57:b2:76:94:42:7d:75:30:49:72:02:2c: a0:bc:22:6d:7a:24:bf:80:1b:a2:d0:8a:16:a7:c3:b3:60:cd: 40:b3:4a:4d:22:3c:ff:6d:6b:a0:20:1b:32:f0:b2:e1:6d:7e: 6f:6f:ae:3c:0a:b6:5f:a4:17:45:e5:3a:a2:ad:6d:2a:39:45: 2f:01:58:3c:57:93:ee:5c:25:e5:7c:bb:0c:58:3f:f3:d7:b3: 60:0c:71:45:55:65:45:5b:a8:16:e1:fd:b3:10:b0:79:b7:43: be:84:eb:67:c6:1d:81:16:df:66:fe:fd:f6:13:bf:ad:68:fa: fd:50:98:2c:86:1d:c3:6c:7d:a4:f5:c8:5a:f7:85:3c:22:36: 78:a0:08:85:83:fb:a9:fa:16:3a:79:f9:09:52:1d:8a:50:ab: 15:a6:5e:40:f5:43:c0:96:35:0f:59:f0:27:1d:82:85:74:e0: 3e:b6:20:77:0e:80:d9:54:18:dd:fc:e8:ab:a4:2b:3d:b5:52: 96:80:55:a8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeaRSCigL+T5NUIsc0UN6ctZQGsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNjA1MjQxMTA5MDlaFw0yNjA1MjgxMTQ5MDlaMDMxMTAvBgNV BAMTKDcyODYxOTlCMURDMkZFMjE5OUYxOUE1MEJFNTBFQTM5NzJEMzUyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChr4Xj/fZpdUUhRNql0+G3CXra 2jx3SxO50cnBE5HxdjeDQUZomR8hBGVNKDvlfxkED24clyqxyWbHG3vi2Mqxt7Ny VKfNIEGyZRaTs2n2iMpVXhqSRK2RIf+no281KgWuf/Ll6Bsm/TY+V5Py8L4DJgJ1 KNRK5Ep0k/tYT2y/kynxyhfhTaRnoOtwPVSOs1RRFab8wTAY37wJkmoTgJdXaC4a 6mZH2BH5yX4eloCEM/9anixOYrCJGIT8cnlr++7sMF08M25CT2xdVjWt/jWVKY1x 30+hZz8BDne8eN94IYdq4UNkjXfLz8ge+ZpgF4ChQ/21NIcmFhohN3VH4y+ZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcoYZmx3C/iGZ8ZpQvlDqOXLTUgUwHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4BEuUh+U5SQjWfuLrDYmF40q0 FW2Gpid4QfKLMP4JJ9vhl1b7FiUXWOizlz/4R6jo+x2XUX6zU7nyYExXsnaUQn11 MElyAiygvCJteiS/gBui0IoWp8OzYM1As0pNIjz/bWugIBsy8LLhbX5vb648CrZf pBdF5TqirW0qOUUvAVg8V5PuXCXlfLsMWD/z17NgDHFFVWVFW6gW4f2zELB5t0O+ hOtnxh2BFt9m/v32E7+taPr9UJgshh3DbH2k9cha94U8IjZ4oAiFg/up+hY6efkJ Uh2KUKsVpl5A9UPAljUPWfAnHYKFdOA+tiB3DoDZVBjd/OirpCs9tVKWgFWo -----END CERTIFICATE-----Generated at Mon May 25 06:44:49 2026 by rpki-client