$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft File: FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft (raw, json) Hash identifier: tYx4mzycCf1mWacZLmtFJxq4l4GnKOdM1TLcMrOvAfU= Subject key identifier: A1:64:5F:2C:63:05:7D:4D:D3:AF:F7:91:4B:3D:BF:03:57:6F:E2:26 Authority key identifier: FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4 Certificate issuer: /CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4 Certificate serial: 1BEE47F8D2324FD84E596D0B5215E413990E66D1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft Manifest number: 019D Signing time: Mon 11 May 2026 17:02:20 +0000 Manifest this update: Mon 11 May 2026 16:57:20 +0000 Manifest next update: Sun 17 May 2026 12:49:20 +0000 Files and hashes: 1: 323830333a383132303a3a2f33322d3332203d3e20323636363533.roa (hash: 8lG813wIqojrdBKQe2O8wR9dD1tJHSzGoajktwhx118=) 2: 34352e3232372e39352e302f32342d3234203d3e20323636363533.roa (hash: IMBBg8DwdagCuUn1gPVXTdAmF9hqXGn+mLKMVO0O6HY=) 3: 34352e3232372e39322e302f32342d3234203d3e20323636363533.roa (hash: 0Ho1mWJrezyIbW+5hEl9Up9S4a9rbLXvZpxsaIIc0PU=) 4: 34352e3232372e39342e302f32342d3234203d3e20323636363533.roa (hash: I/rat6FBALUSkvUDydVRIUncBu+UgPGG5fl0Ao3HBps=) 5: 34352e3232372e39322e302f32322d3232203d3e20323636363533.roa (hash: RRHJebHf//oY86uThwvekW1HzVUXltqTFO4TqUpvn9g=) 6: FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl (hash: d8sV1Auwh2IyV4R4M1PmOgpTDChnDd6jzXqeeE0jXa4=) 7: 34352e3232372e39332e302f32342d3234203d3e20323636363533.roa (hash: C/vSwEGMuBb4CdYRNOVvHk1IxYiGRN3CwPotBa6sCUk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 17 May 2026 12:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ee:47:f8:d2:32:4f:d8:4e:59:6d:0b:52:15:e4:13:99:0e:66:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4 Validity Not Before: May 11 16:57:20 2026 GMT Not After : May 17 12:49:20 2026 GMT Subject: CN=A1645F2C63057D4DD3AFF7914B3DBF03576FE226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e2:96:df:52:06:a2:0d:40:66:93:49:52:8d: 90:96:60:d9:90:57:6a:c0:d8:91:09:a5:6e:9a:33: 4a:26:89:d4:f7:74:07:44:4d:8c:b6:9c:cf:5e:2e: 3f:ee:c2:ae:1d:1a:0c:95:2c:ed:e3:1c:76:43:14: 28:16:84:2f:31:27:5b:17:e5:a9:3a:89:0c:c0:ca: fd:6b:04:18:2a:78:12:72:0b:2e:7b:e4:ea:fa:6a: fa:33:10:6c:ea:2f:12:33:38:05:c7:6d:eb:87:fc: 75:9c:fc:c7:c0:d6:5d:65:71:5a:d6:5d:79:9e:02: f0:7f:47:7e:74:8b:bd:7a:d6:98:5e:5b:e7:56:09: 71:41:0e:e1:41:67:de:eb:54:b6:20:3f:15:1c:a4: 94:f1:5b:e3:15:3a:92:bc:f5:c4:3c:f5:ff:a9:20: 5a:e8:f4:7e:81:95:55:01:51:be:e3:41:52:47:70: 1d:2d:e0:0e:e8:4e:c8:85:ce:e2:6a:70:08:1a:d8: 76:fa:c6:60:f9:a6:3a:fb:5f:46:f3:e6:94:d0:57: 4a:5f:f3:93:45:96:ec:75:0a:d7:14:4c:ae:89:44: 51:49:17:bf:46:16:ea:43:78:4c:24:73:49:d0:5d: c3:92:91:aa:d8:76:55:96:ab:9b:80:6e:bc:84:38: cb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:64:5F:2C:63:05:7D:4D:D3:AF:F7:91:4B:3D:BF:03:57:6F:E2:26 X509v3 Authority Key Identifier: keyid:FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ab:12:27:17:f1:d8:78:2e:cc:75:77:bf:2b:64:22:59:64: 63:28:e6:cc:74:f7:7a:39:a4:19:10:a2:f5:2b:f8:83:fa:90: 75:67:56:cb:e9:04:57:c4:c4:01:28:56:b9:0c:2b:61:a1:5e: 60:50:6f:f4:6f:03:17:26:4b:14:c0:1e:6d:e4:d1:17:54:37: 9a:9b:ec:fd:2d:4e:ac:2e:76:40:57:49:0c:9e:6f:db:1c:23: b0:c0:fd:75:dd:24:c0:39:e9:a0:16:c7:f8:39:73:e9:c1:99: 26:a0:58:94:cc:12:04:26:1f:44:88:5c:80:82:72:1a:3c:fd: 27:e3:31:ff:7f:7b:45:73:8b:c9:62:e3:1c:60:fb:47:5a:c7: 1a:98:3d:96:dc:15:3c:ac:38:e0:d1:d1:6e:70:0c:78:a1:fa: f9:b9:47:ab:d7:c6:39:b9:88:b5:a9:94:3e:dd:0c:1f:f2:dc: ca:ec:df:13:91:a4:5d:51:3a:42:c2:27:94:e6:b7:43:7f:86: a6:b4:63:83:9c:20:0e:23:3f:ff:2d:f9:49:9c:ee:b1:1a:df: 7b:45:fd:0e:7f:18:7f:17:f6:c5:70:65:72:44:95:12:66:0b: b0:8c:ce:a1:46:f7:58:1a:d0:9d:8b:6d:bc:e4:65:e8:dd:ff: f7:40:ed:5b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUG+5H+NIyT9hOWW0LUhXkE5kOZtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZCQTUxMDZFNzBEOTFFMzg2MUI1Mzk1QjJEMTU2QzU2 RTk1ODlFNDAeFw0yNjA1MTExNjU3MjBaFw0yNjA1MTcxMjQ5MjBaMDMxMTAvBgNV BAMTKEExNjQ1RjJDNjMwNTdENEREM0FGRjc5MTRCM0RCRjAzNTc2RkUyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG4pbfUgaiDUBmk0lSjZCWYNmQ V2rA2JEJpW6aM0omidT3dAdETYy2nM9eLj/uwq4dGgyVLO3jHHZDFCgWhC8xJ1sX 5ak6iQzAyv1rBBgqeBJyCy575Or6avozEGzqLxIzOAXHbeuH/HWc/MfA1l1lcVrW XXmeAvB/R350i7161pheW+dWCXFBDuFBZ97rVLYgPxUcpJTxW+MVOpK89cQ89f+p IFro9H6BlVUBUb7jQVJHcB0t4A7oTsiFzuJqcAga2Hb6xmD5pjr7X0bz5pTQV0pf 85NFlux1CtcUTK6JRFFJF79GFupDeEwkc0nQXcOSkarYdlWWq5uAbryEOMu5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUoWRfLGMFfU3Tr/eRSz2/A1dv4iYwHwYDVR0j BBgwFoAU/7pRBucNkeOGG1OVstFWxW6VieQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRkZDQTc2NzYzOEE0REQzOUM2QTZEN0UyQkEzOTc3MkNE QTI5NkRFRTZCRjM2QTMzM0M3RkRDRTg5RDdGMjI1LzAvRkZCQTUxMDZFNzBEOTFF Mzg2MUI1Mzk1QjJEMTU2QzU2RTk1ODlFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkJBNTEwNkU3MEQ5MUUzODYx QjUzOTVCMkQxNTZDNTZFOTU4OUU0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEZGQ0E3Njc2MzhBNEREMzlDNkE2RDdFMkJBMzk3NzJDREEyOTZERUU2 QkYzNkEzMzNDN0ZEQ0U4OUQ3RjIyNS8wL0ZGQkE1MTA2RTcwRDkxRTM4NjFCNTM5 NUIyRDE1NkM1NkU5NTg5RTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbqxInF/HYeC7MdXe/K2QiWWRj KObMdPd6OaQZEKL1K/iD+pB1Z1bL6QRXxMQBKFa5DCthoV5gUG/0bwMXJksUwB5t 5NEXVDeam+z9LU6sLnZAV0kMnm/bHCOwwP113STAOemgFsf4OXPpwZkmoFiUzBIE Jh9EiFyAgnIaPP0n4zH/f3tFc4vJYuMcYPtHWscamD2W3BU8rDjg0dFucAx4ofr5 uUer18Y5uYi1qZQ+3Qwf8tzK7N8TkaRdUTpCwieU5rdDf4amtGODnCAOIz//LflJ nO6xGt97Rf0Ofxh/F/bFcGVyRJUSZguwjM6hRvdYGtCdi2285GXo3f/3QO1b -----END CERTIFICATE-----Generated at Wed May 13 20:53:29 2026 by rpki-client