$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft File: 895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft (raw, json) Hash identifier: lo/szoZ0d0kwHkprH1IP5lPKJm+wirVFqXa7wqtZQ1E= Subject key identifier: D8:F4:2E:54:1C:CF:1B:A6:F4:9A:77:D3:72:24:CC:47:64:C0:88:E5 Authority key identifier: 89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45 Certificate issuer: /CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945 Certificate serial: 01238F29B05E5CFE3A1C1EFBF310437585863D43 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft Manifest number: 017C Signing time: Wed 25 Mar 2026 05:05:45 +0000 Manifest this update: Wed 25 Mar 2026 05:00:45 +0000 Manifest next update: Mon 30 Mar 2026 13:07:45 +0000 Files and hashes: 1: 895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl (hash: IJWfFVs4j9CYRa1Oy5vcPfRC9aa/p3k7M5HGrVHIqOA=) 2: 34352e352e32332e302f32342d3234203d3e20323733303434.roa (hash: LBgvLZUM95ZckPtjs2iVvy8MG/hFgsh3LKD4Wxuv5tk=) 3: 34352e352e32322e302f32342d3234203d3e20323635363835.roa (hash: 7gnikvjJqpSqBX+4NGttGNlMBHtmKrE9M4+MiDrMYM0=) 4: 323830333a313163303a3a2f33322d3438203d3e20323635363835.roa (hash: DmDBwEkgrxJI9IZ8IOL2IsoaC4UQ4Mn61KX+hV36Anw=) 5: 34352e352e32302e302f32332d3234203d3e20323635363835.roa (hash: MjfgGbctRKOZ5aqPrhc4nNV1glEFd6Ozdknii6I/XB4=) 6: 34352e352e32312e302f32342d3234203d3e20323635363835.roa (hash: fqhZB4doVTyIOPLorZXNIGd9gtgmSyj+3q0BN/ZVxzw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 13:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:23:8f:29:b0:5e:5c:fe:3a:1c:1e:fb:f3:10:43:75:85:86:3d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945 Validity Not Before: Mar 25 05:00:45 2026 GMT Not After : Mar 30 13:07:45 2026 GMT Subject: CN=D8F42E541CCF1BA6F49A77D37224CC4764C088E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:ad:24:9c:01:21:7a:d6:3e:ca:ee:c2:fd: e1:96:84:02:17:e7:79:a2:7a:58:b3:af:43:d7:29: 05:9e:a8:85:e6:4a:22:05:7c:25:be:fd:7e:6b:fa: f4:49:5a:ef:39:02:08:4e:62:26:d6:c7:01:1a:0b: f6:ca:c9:87:2b:6c:6b:59:7e:d6:dc:8c:63:a2:eb: 4d:cb:38:a1:e4:b0:b0:20:b7:ce:d2:ad:ae:3c:4f: 04:5f:be:cf:06:ed:bb:0e:1e:a2:88:95:8e:e7:4f: 8e:11:9a:80:d5:90:de:33:d2:14:85:46:2e:9e:02: 72:5a:8f:40:58:10:b0:99:53:45:7a:6a:f9:0b:fe: 32:5b:3a:c0:12:6f:2d:8a:5b:81:ab:a1:98:c4:1b: a5:c4:78:d1:bb:3d:9d:0c:90:72:bd:13:9e:c2:1d: 95:3d:cc:54:85:45:0f:75:02:61:55:f3:16:2d:9b: 26:cd:cb:d0:ed:d3:ca:9c:5f:17:e3:28:be:da:eb: 23:0c:ba:98:27:1c:4c:d6:09:13:a3:9e:88:8e:1c: 82:f3:40:cb:53:1e:e6:a6:d9:03:15:03:14:40:d0: a4:41:c3:a9:01:f8:44:c4:9b:df:c6:c9:96:30:c7: ea:63:97:6e:64:e3:35:26:71:30:3c:d4:99:46:12: e0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F4:2E:54:1C:CF:1B:A6:F4:9A:77:D3:72:24:CC:47:64:C0:88:E5 X509v3 Authority Key Identifier: keyid:89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:09:0f:b6:94:0e:c1:6b:57:92:a5:86:30:73:da:82:85:10: 16:5b:87:3d:cd:53:d8:fe:bf:e8:91:df:5c:c4:5e:c8:52:52: d2:70:a8:d6:94:8f:e8:1e:1b:27:30:d7:08:aa:41:9a:72:c3: c1:86:44:3d:73:c8:9f:d5:0a:a1:0e:74:3a:29:84:29:d7:35: 9a:fd:ce:86:b4:92:ec:05:52:91:8e:06:24:aa:b5:3e:44:76: 62:16:65:a8:a2:89:fc:4f:81:3b:7e:90:36:b5:9f:51:8a:03: 5b:cf:c7:d7:06:94:2c:23:5b:6e:4c:7c:71:ac:82:73:8d:12: 7a:8b:41:5e:00:6c:a6:3e:60:8f:7f:94:84:67:a0:60:28:2b: 2a:23:bd:48:bb:0d:67:63:1a:b5:a6:95:20:20:5e:b3:9b:20: 7c:81:74:6a:ba:ab:06:0d:10:01:6c:88:ec:0a:35:f3:15:cb: 5d:e3:21:37:6b:25:e7:d8:b4:b8:c7:de:b0:64:60:9f:ee:45: 47:da:a8:dc:55:eb:77:46:82:50:fd:eb:9b:01:62:ae:2d:49: 4a:19:2c:30:a7:73:e2:7f:33:be:e6:49:7e:97:ff:6b:08:e0: 88:55:fb:22:67:3e:e2:84:9d:94:70:ad:94:b0:77:cb:cc:49: 14:c8:8b:e5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUASOPKbBeXP46HB778xBDdYWGPUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1QjREOTI3QTYwMkY5Q0EyMjJEOEZDQUY3NTZERDRB MzhEQzk0NTAeFw0yNjAzMjUwNTAwNDVaFw0yNjAzMzAxMzA3NDVaMDMxMTAvBgNV BAMTKEQ4RjQyRTU0MUNDRjFCQTZGNDlBNzdEMzcyMjRDQzQ3NjRDMDg4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//K0knAEhetY+yu7C/eGWhAIX 53mielizr0PXKQWeqIXmSiIFfCW+/X5r+vRJWu85AghOYibWxwEaC/bKyYcrbGtZ ftbcjGOi603LOKHksLAgt87Sra48TwRfvs8G7bsOHqKIlY7nT44RmoDVkN4z0hSF Ri6eAnJaj0BYELCZU0V6avkL/jJbOsASby2KW4GroZjEG6XEeNG7PZ0MkHK9E57C HZU9zFSFRQ91AmFV8xYtmybNy9Dt08qcXxfjKL7a6yMMupgnHEzWCROjnoiOHILz QMtTHuam2QMVAxRA0KRBw6kB+ETEm9/GyZYwx+pjl25k4zUmcTA81JlGEuDBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2PQuVBzPG6b0mnfTciTMR2TAiOUwHwYDVR0j BBgwFoAUiVtNknpgL5yiItj8r3Vt1KONyUUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wQUY2MkI0MTc1OTUyREIzNjFEQ0U1NTdCRTUyMjE3OUFD NzE2QTU2QTM2QTc0M0Q4RTcyNjhBRkYxQTQzMDdCLzAvODk1QjREOTI3QTYwMkY5 Q0EyMjJEOEZDQUY3NTZERDRBMzhEQzk0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OTVCNEQ5MjdBNjAyRjlDQTIy MkQ4RkNBRjc1NkRENEEzOERDOTQ1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEFGNjJCNDE3NTk1MkRCMzYxRENFNTU3QkU1MjIxNzlBQzcxNkE1NkEz NkE3NDNEOEU3MjY4QUZGMUE0MzA3Qi8wLzg5NUI0RDkyN0E2MDJGOUNBMjIyRDhG Q0FGNzU2REQ0QTM4REM5NDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0CQ+2lA7Ba1eSpYYwc9qChRAW W4c9zVPY/r/okd9cxF7IUlLScKjWlI/oHhsnMNcIqkGacsPBhkQ9c8if1QqhDnQ6 KYQp1zWa/c6GtJLsBVKRjgYkqrU+RHZiFmWooon8T4E7fpA2tZ9RigNbz8fXBpQs I1tuTHxxrIJzjRJ6i0FeAGymPmCPf5SEZ6BgKCsqI71Iuw1nYxq1ppUgIF6zmyB8 gXRquqsGDRABbIjsCjXzFctd4yE3ayXn2LS4x96wZGCf7kVH2qjcVet3RoJQ/eub AWKuLUlKGSwwp3PifzO+5kl+l/9rCOCIVfsiZz7ihJ2UcK2UsHfLzEkUyIvl -----END CERTIFICATE-----Generated at Fri Mar 27 03:09:06 2026 by rpki-client