$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft File: 24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft (raw, json) Hash identifier: DUOnHeqx6pjdjvNdrbwvv+Ig9rywyafUxLcwDNpeuHo= Subject key identifier: DE:D1:A2:F6:D8:66:A3:8D:98:D0:5C:9A:82:8C:8D:4A:DE:60:4F:94 Authority key identifier: 24:AB:4E:F0:CD:E5:CB:C5:2E:12:5E:63:4C:68:23:7C:46:D0:F8:CF Certificate issuer: /CN=24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF Certificate serial: 398AF31C111EAA935BA637577845FF71F7D83E52 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft Manifest number: 017D Signing time: Wed 25 Mar 2026 08:32:38 +0000 Manifest this update: Wed 25 Mar 2026 08:27:38 +0000 Manifest next update: Tue 31 Mar 2026 00:19:38 +0000 Files and hashes: 1: 323830313a31633a353830303a3a2f34382d3438203d3e203133343839.roa (hash: djJJyzcCBcN3H+eYeMQTa1l//ws9zjkXUJnxSdnJxNU=) 2: 24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.crl (hash: AEL8tqwbF3rQm8ZGQ5I1e9atMmyKRA56k4AeLBpjKvo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.crl rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8a:f3:1c:11:1e:aa:93:5b:a6:37:57:78:45:ff:71:f7:d8:3e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF Validity Not Before: Mar 25 08:27:38 2026 GMT Not After : Mar 31 00:19:38 2026 GMT Subject: CN=DED1A2F6D866A38D98D05C9A828C8D4ADE604F94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:96:ea:42:0b:cd:5c:49:7a:b8:82:f3:55: cf:8c:9b:ea:fc:20:83:8b:b1:78:e5:04:7b:45:0c: 52:3e:9b:08:0c:e4:0e:42:e6:c1:5c:22:63:43:77: d2:b0:b4:34:35:d3:8b:4f:d4:c8:8b:06:82:a3:9c: 45:e7:b1:4c:8e:a3:0c:21:8d:21:b9:84:41:4e:0d: d3:17:c2:7b:0c:de:d2:5d:af:44:cd:99:9f:58:27: 22:71:eb:07:14:f1:2b:2b:08:d4:6c:f0:fb:16:80: c0:aa:f2:93:59:3e:48:9e:75:1d:e7:48:41:b3:0f: fe:a7:f2:81:d3:e1:39:8f:79:21:54:7c:98:f2:6f: 79:f2:13:11:9a:5b:e2:0a:7c:ea:a5:6f:86:7f:1c: 91:da:e2:0d:c5:5e:f7:2f:96:b9:cd:86:bb:86:31: 9e:6d:6f:1a:0c:59:cb:26:86:77:ea:63:e1:72:75: f4:01:73:08:b3:e0:4f:30:78:1a:65:c1:c7:ba:cf: 3f:4b:e2:c3:a5:ab:79:9a:d2:78:f3:80:46:1c:ac: e4:b3:5d:13:6c:85:f5:45:35:28:fa:98:89:da:b5: fc:c7:3e:44:b2:77:f0:a7:5a:49:a6:f6:cd:74:47: b3:d3:08:d0:d8:a0:dc:66:5f:23:d1:4a:8c:67:cd: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D1:A2:F6:D8:66:A3:8D:98:D0:5C:9A:82:8C:8D:4A:DE:60:4F:94 X509v3 Authority Key Identifier: keyid:24:AB:4E:F0:CD:E5:CB:C5:2E:12:5E:63:4C:68:23:7C:46:D0:F8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d3:a3:36:3f:96:27:78:9a:92:28:0e:65:ad:8c:52:97:4f: b0:01:eb:5d:0f:59:a2:66:a3:cd:7f:c1:c9:ec:b0:96:41:35: 82:ed:1d:af:b4:c1:ef:8f:bb:02:9a:4a:c1:9e:6e:17:e0:1b: 03:13:3f:44:e3:7e:c9:d3:09:ef:44:35:57:b8:e8:8e:9d:37: f6:de:f7:6b:54:19:2e:ad:34:d4:df:88:e3:e6:9c:4c:f2:f4: 2b:8c:73:fb:f1:12:8b:ef:b6:42:55:bc:ad:29:1d:0d:3c:17: 8f:c1:e7:5d:b3:0d:3c:40:71:1f:29:e6:f0:29:1c:b8:31:99: 95:af:0e:40:2f:22:98:2c:e1:c7:1f:d4:3d:86:06:9e:ed:86: 0b:e4:d9:5c:25:a6:e1:ba:06:07:90:60:31:ec:88:06:05:40: 60:c2:ac:62:d1:6b:93:6c:61:bd:ce:95:96:04:9f:22:70:3b: 23:61:60:06:aa:80:bd:8b:eb:04:ee:e7:9d:57:dc:f3:28:8d: 6a:f8:a0:6c:f9:47:b3:9f:44:e9:05:71:14:46:d9:0c:7a:e9: 6d:04:54:28:8d:6d:1b:b7:8e:5d:a7:5e:44:d1:11:af:3f:54: aa:ec:30:4d:0c:94:3d:df:7b:f1:16:a5:69:6c:0b:b4:2f:bc: 3d:a4:ae:e3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOYrzHBEeqpNbpjdXeEX/cffYPlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBQjRFRjBDREU1Q0JDNTJFMTI1RTYzNEM2ODIzN0M0 NkQwRjhDRjAeFw0yNjAzMjUwODI3MzhaFw0yNjAzMzEwMDE5MzhaMDMxMTAvBgNV BAMTKERFRDFBMkY2RDg2NkEzOEQ5OEQwNUM5QTgyOEM4RDRBREU2MDRGOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LpbqQgvNXEl6uILzVc+Mm+r8 IIOLsXjlBHtFDFI+mwgM5A5C5sFcImNDd9KwtDQ104tP1MiLBoKjnEXnsUyOowwh jSG5hEFODdMXwnsM3tJdr0TNmZ9YJyJx6wcU8SsrCNRs8PsWgMCq8pNZPkiedR3n SEGzD/6n8oHT4TmPeSFUfJjyb3nyExGaW+IKfOqlb4Z/HJHa4g3FXvcvlrnNhruG MZ5tbxoMWcsmhnfqY+FydfQBcwiz4E8weBplwce6zz9L4sOlq3ma0njzgEYcrOSz XRNshfVFNSj6mInatfzHPkSyd/CnWkmm9s10R7PTCNDYoNxmXyPRSoxnzbmtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3tGi9thmo42Y0FyagoyNSt5gT5QwHwYDVR0j BBgwFoAUJKtO8M3ly8UuEl5jTGgjfEbQ+M8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOUI0NUEzNTI4QjhFM0JFRDlCRTdGNzlDQUI0OTVBNjFC NzMxNDU3M0RCRDlGOUNEMzNERTQ4OTc5MUVDQ0I5LzAvMjRBQjRFRjBDREU1Q0JD NTJFMTI1RTYzNEM2ODIzN0M0NkQwRjhDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEFCNEVGMENERTVDQkM1MkUx MjVFNjM0QzY4MjM3QzQ2RDBGOENGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDlCNDVBMzUyOEI4RTNCRUQ5QkU3Rjc5Q0FCNDk1QTYxQjczMTQ1NzNE QkQ5RjlDRDMzREU0ODk3OTFFQ0NCOS8wLzI0QUI0RUYwQ0RFNUNCQzUyRTEyNUU2 MzRDNjgyMzdDNDZEMEY4Q0YubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCW06M2P5YneJqSKA5lrYxSl0+w AetdD1miZqPNf8HJ7LCWQTWC7R2vtMHvj7sCmkrBnm4X4BsDEz9E437J0wnvRDVX uOiOnTf23vdrVBkurTTU34jj5pxM8vQrjHP78RKL77ZCVbytKR0NPBePweddsw08 QHEfKebwKRy4MZmVrw5ALyKYLOHHH9Q9hgae7YYL5NlcJabhugYHkGAx7IgGBUBg wqxi0WuTbGG9zpWWBJ8icDsjYWAGqoC9i+sE7uedV9zzKI1q+KBs+Uezn0TpBXEU RtkMeultBFQojW0bt45dp15E0RGvP1Sq7DBNDJQ933vxFqVpbAu0L7w9pK7j -----END CERTIFICATE-----Generated at Thu Mar 26 21:38:37 2026 by rpki-client