$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.mft File: 5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.mft (raw, json) Hash identifier: qBHgXP7r+pJOFfCc8LMKtCnqz4luchcAHBSac5H0RY4= Subject key identifier: 0A:7B:06:67:F2:79:1C:81:46:DF:81:24:65:7A:A1:9A:A3:48:56:BC Authority key identifier: 5A:7F:E4:35:0D:2A:09:E9:16:46:C0:DE:6C:4A:3F:A6:7C:EB:BB:3D Certificate issuer: /CN=5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D Certificate serial: 7C9ECE9B012521BAFC3213A1A40B6C1AE2AB6771 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.mft Manifest number: 0177 Signing time: Thu 26 Mar 2026 10:22:32 +0000 Manifest this update: Thu 26 Mar 2026 10:17:32 +0000 Manifest next update: Tue 31 Mar 2026 16:39:32 +0000 Files and hashes: 1: 5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.crl (hash: 4C+gsR69dX2hNtLOEzQ1YtrTcBD7WGBaANWLaAGwBoY=) 2: 323830313a31323a3130303a3a2f34342d3434203d3e20323731383138.roa (hash: GUALYlfwr1aCYoVAT/pBDBTNbIbzAPrIIaV5aHXBgb4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.crl rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9e:ce:9b:01:25:21:ba:fc:32:13:a1:a4:0b:6c:1a:e2:ab:67:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D Validity Not Before: Mar 26 10:17:32 2026 GMT Not After : Mar 31 16:39:32 2026 GMT Subject: CN=0A7B0667F2791C8146DF8124657AA19AA34856BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c0:b5:df:d0:57:f2:b6:10:c0:9b:32:1f:71: b4:c4:82:30:98:9d:e6:d2:3a:5e:c3:89:c3:90:6e: 27:dd:df:52:12:eb:12:5d:36:d8:95:17:f3:18:4d: e5:0b:f5:23:d4:20:84:51:1c:82:e0:05:35:1f:a8: bf:9f:95:ee:e2:85:61:7c:7c:f7:71:5e:09:0b:97: 68:e0:56:3a:cf:de:56:58:cb:8d:17:92:74:4a:ac: 2f:fb:0e:cb:cf:45:c5:59:0b:64:73:89:69:da:de: a2:43:a2:2c:31:e3:c3:6c:15:82:ec:b7:12:8c:6f: d5:55:c2:29:ce:39:3c:b3:e2:1a:7d:ef:99:3f:e7: eb:48:6a:f1:c8:bb:14:6c:2d:3c:0d:07:37:03:3e: 91:40:18:eb:ad:71:f5:0b:fe:17:dc:3f:e5:4c:eb: 0a:ba:79:59:b4:3a:cb:76:6c:08:10:f3:b0:c3:10: 57:26:58:a9:a6:37:77:f6:07:dd:43:b9:af:b9:22: cf:22:15:de:8f:90:b2:4e:72:34:0b:4b:b2:ee:21: 86:8f:ae:1f:66:61:eb:3d:7b:eb:f6:a7:df:cc:73: 64:20:9c:1d:11:ab:2a:0b:d7:eb:80:76:0d:f5:22: c0:d1:08:1c:25:51:a4:2f:d5:a1:52:ca:2a:d5:8f: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7B:06:67:F2:79:1C:81:46:DF:81:24:65:7A:A1:9A:A3:48:56:BC X509v3 Authority Key Identifier: keyid:5A:7F:E4:35:0D:2A:09:E9:16:46:C0:DE:6C:4A:3F:A6:7C:EB:BB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:65:dd:e8:3b:94:94:fb:b1:ef:d5:cd:86:2b:f3:3e:03:be: fc:d5:e8:a4:16:56:a7:a1:b9:32:cc:f5:9b:fb:56:6c:d7:26: a3:b1:07:d6:17:6a:fc:3d:70:57:98:09:43:d7:3c:1f:21:22: c0:7e:c4:74:e0:28:31:08:8d:52:a5:65:48:80:4c:0a:4a:e0: c6:10:99:0d:22:12:d4:52:62:3c:8e:b2:cf:9f:13:ab:c8:ae: 2c:1f:d9:87:6c:fa:82:cd:6a:8e:3b:00:6d:2f:ab:2a:e9:64: 09:6b:48:78:13:07:e4:05:84:6b:00:e8:23:4e:28:04:42:86: 0a:a1:80:71:38:a9:0a:30:3f:ef:f8:b8:dd:15:77:8e:ca:64: 1d:5a:ba:2e:02:80:2f:f0:15:7c:9e:62:95:d4:88:a6:e2:5f: 1e:68:09:06:49:d5:19:50:b6:76:24:4b:d0:19:70:11:83:82: 69:c0:50:ff:51:58:07:9a:06:6c:4a:e1:f0:d9:94:0b:1c:67: 22:71:8a:9b:4a:d2:e0:09:50:c6:17:1a:7f:f2:85:a1:9b:97: 72:49:96:af:21:b7:57:9a:19:92:5c:43:23:d2:3a:f4:8d:f4: bf:d6:96:7f:8b:7e:69:10:74:ce:5d:cb:f3:9f:7b:8a:d2:57: 7c:ea:4c:ae -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfJ7OmwElIbr8MhOhpAtsGuKrZ3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE3RkU0MzUwRDJBMDlFOTE2NDZDMERFNkM0QTNGQTY3 Q0VCQkIzRDAeFw0yNjAzMjYxMDE3MzJaFw0yNjAzMzExNjM5MzJaMDMxMTAvBgNV BAMTKDBBN0IwNjY3RjI3OTFDODE0NkRGODEyNDY1N0FBMTlBQTM0ODU2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWwLXf0FfythDAmzIfcbTEgjCY nebSOl7DicOQbifd31IS6xJdNtiVF/MYTeUL9SPUIIRRHILgBTUfqL+fle7ihWF8 fPdxXgkLl2jgVjrP3lZYy40XknRKrC/7DsvPRcVZC2RziWna3qJDoiwx48NsFYLs txKMb9VVwinOOTyz4hp975k/5+tIavHIuxRsLTwNBzcDPpFAGOutcfUL/hfcP+VM 6wq6eVm0Ost2bAgQ87DDEFcmWKmmN3f2B91Dua+5Is8iFd6PkLJOcjQLS7LuIYaP rh9mYes9e+v2p9/Mc2QgnB0RqyoL1+uAdg31IsDRCBwlUaQv1aFSyirVj7ZXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUCnsGZ/J5HIFG34EkZXqhmqNIVrwwHwYDVR0j BBgwFoAUWn/kNQ0qCekWRsDebEo/pnzruz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wODVDMjcxNEI2NkJCQUQyNERBOEE5RUQ2RjA1MTZFQTBD QjAyNzU4MUEzNjAzMzM3QjE0MDJCM0NBOTQ4ODcwLzAvNUE3RkU0MzUwRDJBMDlF OTE2NDZDMERFNkM0QTNGQTY3Q0VCQkIzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QTdGRTQzNTBEMkEwOUU5MTY0 NkMwREU2QzRBM0ZBNjdDRUJCQjNELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDg1QzI3MTRCNjZCQkFEMjREQThBOUVENkYwNTE2RUEwQ0IwMjc1ODFB MzYwMzMzN0IxNDAyQjNDQTk0ODg3MC8wLzVBN0ZFNDM1MEQyQTA5RTkxNjQ2QzBE RTZDNEEzRkE2N0NFQkJCM0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlZd3oO5SU+7Hv1c2GK/M+A778 1eikFlanobkyzPWb+1Zs1yajsQfWF2r8PXBXmAlD1zwfISLAfsR04CgxCI1SpWVI gEwKSuDGEJkNIhLUUmI8jrLPnxOryK4sH9mHbPqCzWqOOwBtL6sq6WQJa0h4Ewfk BYRrAOgjTigEQoYKoYBxOKkKMD/v+LjdFXeOymQdWrouAoAv8BV8nmKV1Iim4l8e aAkGSdUZULZ2JEvQGXARg4JpwFD/UVgHmgZsSuHw2ZQLHGcicYqbStLgCVDGFxp/ 8oWhm5dySZavIbdXmhmSXEMj0jr0jfS/1pZ/i35pEHTOXcvzn3uK0ld86kyu -----END CERTIFICATE-----Generated at Fri Mar 27 02:37:59 2026 by rpki-client