$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft File: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft (raw, json) Hash identifier: OalfK+NacV5w5Cc0akQEEupdBYuiFYoEyKj0ITYjXtY= Subject key identifier: FF:8E:AD:64:D0:E8:59:B5:DF:52:B1:40:19:C3:CB:B2:5B:7A:EE:72 Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A Certificate issuer: /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Certificate serial: 02B2849C5DD44D997D8D53B2E427B0952A03ED36 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft Manifest number: 0187 Signing time: Mon 11 May 2026 13:20:06 +0000 Manifest this update: Mon 11 May 2026 13:15:06 +0000 Manifest next update: Sun 17 May 2026 09:48:06 +0000 Files and hashes: 1: 34352e3233362e3134382e302f32322d3234203d3e20323636383132.roa (hash: TuVSnaAy8zQaHRhySpU28Pxq0rPBVxYrvaRsQF2zS/c=) 2: 323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (hash: GRWJfDTtaNARRPhnsoXH5s1znecEwffl4EvgxQ5gNqs=) 3: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl (hash: wE+2rT1JH+BTy8RuBeesd2HO6ioOYxNr+qbRxOINGOg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 17 May 2026 09:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b2:84:9c:5d:d4:4d:99:7d:8d:53:b2:e4:27:b0:95:2a:03:ed:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Validity Not Before: May 11 13:15:06 2026 GMT Not After : May 17 09:48:06 2026 GMT Subject: CN=FF8EAD64D0E859B5DF52B14019C3CBB25B7AEE72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:53:dd:c5:27:a2:62:17:e6:2b:e8:a4:00: 0b:5d:ef:2e:68:5c:d5:e4:94:1f:15:50:19:4b:f9: 18:8d:94:76:92:8d:26:e4:e3:9f:db:bb:e5:21:4a: 72:1e:b7:6d:4c:8c:ef:3b:4e:98:dc:b4:c7:8b:4e: b0:aa:10:e7:38:bf:74:d7:8c:04:e0:d6:c1:c4:1d: f0:d4:f5:7a:b6:bf:8a:0b:a3:e9:32:5f:4f:c4:fe: 10:92:26:89:a4:55:7b:0c:4d:d1:fb:78:aa:45:14: fb:5b:2a:38:e1:c3:74:91:f4:8d:06:83:44:26:ed: 73:e1:2a:45:b5:51:c5:f5:3d:ce:38:4f:a8:72:02: dc:f4:ed:5f:30:07:63:15:20:82:ee:f5:03:57:db: de:34:e1:58:17:bb:ce:d6:10:a9:88:32:97:97:10: 67:45:b0:02:57:15:22:02:41:8a:f5:aa:b7:ea:0c: e4:c0:e0:2c:88:d4:30:e6:ca:69:cd:3f:d8:28:2d: 3b:47:f5:c5:0a:47:e0:bb:d5:67:56:64:b0:0e:c9: 0c:19:7c:e2:47:f8:7c:01:ab:09:a6:0f:1c:69:d8: 6d:02:01:af:6b:75:33:26:5a:38:3d:fe:9f:d9:42: b2:a7:eb:ad:c7:0e:df:2d:20:86:fa:61:17:a7:53: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8E:AD:64:D0:E8:59:B5:DF:52:B1:40:19:C3:CB:B2:5B:7A:EE:72 X509v3 Authority Key Identifier: keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:67:3f:02:72:03:13:58:9d:2a:63:a3:98:eb:53:6c:70:5e: 27:0c:28:71:e7:52:5a:19:59:ec:80:8d:63:f2:3d:f2:6e:5d: 23:14:d1:05:57:76:11:0c:8c:22:1b:24:98:97:7c:a9:53:95: 1a:f7:12:fd:a7:f1:7b:f8:da:ec:ad:bb:7b:27:15:f1:6c:89: 43:35:be:85:1c:76:ba:75:52:95:6d:44:92:36:c0:c2:51:51: a4:79:79:f1:1f:74:12:3c:05:3a:19:92:a0:c7:9f:02:83:6a: ff:4b:fc:af:bd:e9:ed:d9:bb:58:cd:62:90:b4:94:d4:b7:74: 5b:74:ba:82:4b:21:4b:36:d1:52:e4:7c:64:99:1e:06:aa:bc: c4:91:47:16:da:4c:62:a9:f5:65:52:3d:21:38:cb:65:a8:0e: 6f:00:c9:d3:9d:d1:fb:b5:e7:af:13:d6:ae:d7:21:75:15:fa: 91:00:57:7e:d5:fc:f3:3c:bc:9e:73:b0:1b:53:de:76:07:9c: 8c:50:26:84:d5:8a:de:81:5b:a7:4f:e3:57:44:5d:1d:6a:70: 35:9e:38:a2:5d:3f:b0:01:dd:7c:80:38:77:99:49:bd:ba:73: 3d:80:85:c3:6f:d7:9a:1f:97:bb:2c:50:2b:87:3d:7f:22:54: 99:a3:f6:75 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUArKEnF3UTZl9jVOy5CewlSoD7TYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQjk5QTUxRjZDNjk4MUE1NThDRDBCNDhBQ0Y0Q0RD QkE5NTM2QTAeFw0yNjA1MTExMzE1MDZaFw0yNjA1MTcwOTQ4MDZaMDMxMTAvBgNV BAMTKEZGOEVBRDY0RDBFODU5QjVERjUyQjE0MDE5QzNDQkIyNUI3QUVFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyI1PdxSeiYhfmK+ikAAtd7y5o XNXklB8VUBlL+RiNlHaSjSbk45/bu+UhSnIet21MjO87TpjctMeLTrCqEOc4v3TX jATg1sHEHfDU9Xq2v4oLo+kyX0/E/hCSJomkVXsMTdH7eKpFFPtbKjjhw3SR9I0G g0Qm7XPhKkW1UcX1Pc44T6hyAtz07V8wB2MVIILu9QNX29404VgXu87WEKmIMpeX EGdFsAJXFSICQYr1qrfqDOTA4CyI1DDmymnNP9goLTtH9cUKR+C71WdWZLAOyQwZ fOJH+HwBqwmmDxxp2G0CAa9rdTMmWjg9/p/ZQrKn663HDt8tIIb6YRenU041AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/46tZNDoWbXfUrFAGcPLslt67nIwHwYDVR0j BBgwFoAUKKuZpR9saYGlWM0LSKz0zcupU2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMTFEMDkyQTZEQTYzRjgyOTk3N0NGODBFQTVFQUQyMjZC Qzg3MzMyMTRFMjBBRDI0Mjg3QTU4MUZDQ0Q4MTQ2LzAvMjhBQjk5QTUxRjZDNjk4 MUE1NThDRDBCNDhBQ0Y0Q0RDQkE5NTM2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEFCOTlBNTFGNkM2OTgxQTU1 OENEMEI0OEFDRjRDRENCQTk1MzZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTExRDA5MkE2REE2M0Y4Mjk5NzdDRjgwRUE1RUFEMjI2QkM4NzMzMjE0 RTIwQUQyNDI4N0E1ODFGQ0NEODE0Ni8wLzI4QUI5OUE1MUY2QzY5ODFBNTU4Q0Qw QjQ4QUNGNENEQ0JBOTUzNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/Zz8CcgMTWJ0qY6OY61NscF4n DChx51JaGVnsgI1j8j3ybl0jFNEFV3YRDIwiGySYl3ypU5Ua9xL9p/F7+Nrsrbt7 JxXxbIlDNb6FHHa6dVKVbUSSNsDCUVGkeXnxH3QSPAU6GZKgx58Cg2r/S/yvvent 2btYzWKQtJTUt3RbdLqCSyFLNtFS5HxkmR4GqrzEkUcW2kxiqfVlUj0hOMtlqA5v AMnTndH7teevE9au1yF1FfqRAFd+1fzzPLyec7AbU952B5yMUCaE1YregVunT+NX RF0danA1njiiXT+wAd18gDh3mUm9unM9gIXDb9eaH5e7LFArhz1/IlSZo/Z1 -----END CERTIFICATE-----Generated at Wed May 13 15:05:55 2026 by rpki-client