$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft File: 2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft (raw, json) Hash identifier: p1RUMqLP85PbMMZTpWfhxbiQU8s2gqiWo+6e9MjteWY= Subject key identifier: FC:FF:96:99:5D:37:71:F4:21:36:BC:06:E2:FB:5F:22:F4:34:95:72 Authority key identifier: 29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4 Certificate issuer: /CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4 Certificate serial: 6A213012AE05CD50D1B70DD4472994948EB4D882 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft Manifest number: 017A Signing time: Thu 26 Mar 2026 08:01:12 +0000 Manifest this update: Thu 26 Mar 2026 07:56:12 +0000 Manifest next update: Mon 30 Mar 2026 20:31:12 +0000 Files and hashes: 1: 34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa (hash: KFFv25IhN9NBBE1EzJKGbgxFwcJP3A312Qd6rW2YAz0=) 2: 2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl (hash: b2pwDy65L6QuPEK9wwwYCz1AfpH9tIfsngYO3I2vWo0=) 3: 323830333a653761303a3a2f33322d3438203d3e20323637373736.roa (hash: 9i/nC70b03d/KQ2nE8twSMH0zVgK13ImKyOC6QRx84I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:21:30:12:ae:05:cd:50:d1:b7:0d:d4:47:29:94:94:8e:b4:d8:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4 Validity Not Before: Mar 26 07:56:12 2026 GMT Not After : Mar 30 20:31:12 2026 GMT Subject: CN=FCFF96995D3771F42136BC06E2FB5F22F4349572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:ea:86:4a:3e:6b:1c:79:ef:b7:ea:a9:6b: 5d:3a:8f:5c:80:0c:58:f8:d1:f5:ad:fa:49:fa:f9: 83:8e:9e:24:16:66:0e:4a:c0:7b:4f:35:ed:f9:5e: e9:6b:64:06:f8:e0:ca:77:a1:3b:fe:ff:93:bb:80: 27:8d:7a:4e:41:11:66:18:ef:58:e4:2d:6a:77:64: 60:52:b6:d0:b2:11:5c:70:1a:7d:44:35:d7:0a:46: 55:bc:d5:7d:d6:65:4f:1e:eb:7e:76:5c:1e:90:b1: b5:dd:96:fe:b5:5e:ab:8e:52:86:9c:b5:6b:68:87: 7c:ca:91:be:10:0a:72:bc:73:55:4d:a8:ef:88:a3: e6:ff:f5:9f:ff:18:d2:f9:f1:b4:0f:ad:b9:9c:9e: 31:39:01:8e:74:36:20:64:db:00:4d:a7:16:eb:c2: 81:e1:a8:1d:5b:c0:8d:e6:25:47:38:59:8e:5d:a8: 69:b4:17:d0:0d:b1:50:af:aa:1b:4f:d7:3d:5d:7c: 20:52:44:fb:e8:19:31:cd:ac:40:75:81:2d:da:c5: 9b:a8:5b:bf:bb:1f:62:ec:16:26:e5:c3:0f:4a:e9: df:a7:e9:da:db:6a:e4:18:01:88:c2:54:ab:0d:39: 85:88:a7:27:2b:95:08:e4:40:ca:c2:6f:cf:fc:28: 61:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FF:96:99:5D:37:71:F4:21:36:BC:06:E2:FB:5F:22:F4:34:95:72 X509v3 Authority Key Identifier: keyid:29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:03:db:cf:b9:d9:d4:d1:61:c9:86:33:65:13:2b:34:02:f3: eb:16:c2:c2:58:67:17:71:69:14:6b:2f:8b:fb:e7:e9:90:73: 9b:b4:fb:94:99:7f:c4:54:cf:4a:a2:0c:5c:66:4a:7d:8f:b7: 27:0c:07:5f:81:6a:b9:49:2f:1f:ef:49:09:43:32:98:60:a8: d3:0e:cf:f3:39:80:ae:ba:a0:0c:74:82:df:0f:fd:b0:60:7d: 16:f9:7f:d4:33:91:b4:ff:ec:74:fc:d4:08:c6:dc:f0:af:a2: 45:af:82:39:c2:91:9b:db:10:38:5d:37:d6:44:3e:18:a2:11: 15:0d:60:1c:7e:e8:32:2c:25:bc:70:8d:97:2d:74:9a:5a:cf: ff:75:47:98:37:00:f5:d2:71:e6:91:13:d8:0c:25:e2:b2:67: e0:12:e5:0f:65:8c:0d:a5:e3:da:81:ca:20:71:8e:b0:7b:d0: 24:0b:79:d8:35:db:e8:10:77:65:35:87:ae:12:14:36:af:42: c9:01:6c:72:ad:fc:21:7a:ba:e9:51:a5:8b:87:c8:b0:eb:64: aa:0b:1c:fb:31:c9:b8:8b:b4:62:ea:90:50:c3:37:5a:ee:61: 3f:10:1c:40:6b:ea:26:f0:a0:bb:94:11:cc:ec:42:af:3b:0f: 3a:36:27:a7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaiEwEq4FzVDRtw3URymUlI602IIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MkFDQzBDM0FFNDcwNzY5MUU1MEE2RDQ5ODg4NTFE QzU1OThENDAeFw0yNjAzMjYwNzU2MTJaFw0yNjAzMzAyMDMxMTJaMDMxMTAvBgNV BAMTKEZDRkY5Njk5NUQzNzcxRjQyMTM2QkMwNkUyRkI1RjIyRjQzNDk1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5OqGSj5rHHnvt+qpa106j1yA DFj40fWt+kn6+YOOniQWZg5KwHtPNe35XulrZAb44Mp3oTv+/5O7gCeNek5BEWYY 71jkLWp3ZGBSttCyEVxwGn1ENdcKRlW81X3WZU8e6352XB6QsbXdlv61XquOUoac tWtoh3zKkb4QCnK8c1VNqO+Io+b/9Z//GNL58bQPrbmcnjE5AY50NiBk2wBNpxbr woHhqB1bwI3mJUc4WY5dqGm0F9ANsVCvqhtP1z1dfCBSRPvoGTHNrEB1gS3axZuo W7+7H2LsFiblww9K6d+n6drbauQYAYjCVKsNOYWIpycrlQjkQMrCb8/8KGHPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/P+WmV03cfQhNrwG4vtfIvQ0lXIwHwYDVR0j BBgwFoAUKXKswMOuRwdpHlCm1JiIUdxVmNQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wODlCMDhEQjZFNjM5RDAxQzE0RkIxNzFGRjQzMzg5NDVD NjJFM0VCRDJDQTU4OEEwQzZCMDBFMzVDNjlBQUE5LzAvMjk3MkFDQzBDM0FFNDcw NzY5MUU1MEE2RDQ5ODg4NTFEQzU1OThENC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTcyQUNDMEMzQUU0NzA3Njkx RTUwQTZENDk4ODg1MURDNTU5OEQ0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDg5QjA4REI2RTYzOUQwMUMxNEZCMTcxRkY0MzM4OTQ1QzYyRTNFQkQy Q0E1ODhBMEM2QjAwRTM1QzY5QUFBOS8wLzI5NzJBQ0MwQzNBRTQ3MDc2OTFFNTBB NkQ0OTg4ODUxREM1NTk4RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAaA9vPudnU0WHJhjNlEys0AvPr FsLCWGcXcWkUay+L++fpkHObtPuUmX/EVM9KogxcZkp9j7cnDAdfgWq5SS8f70kJ QzKYYKjTDs/zOYCuuqAMdILfD/2wYH0W+X/UM5G0/+x0/NQIxtzwr6JFr4I5wpGb 2xA4XTfWRD4YohEVDWAcfugyLCW8cI2XLXSaWs//dUeYNwD10nHmkRPYDCXismfg EuUPZYwNpePagcogcY6we9AkC3nYNdvoEHdlNYeuEhQ2r0LJAWxyrfwherrpUaWL h8iw62SqCxz7Mcm4i7Ri6pBQwzda7mE/EBxAa+om8KC7lBHM7EKvOw86Nien -----END CERTIFICATE-----Generated at Thu Mar 26 21:59:29 2026 by rpki-client