$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft File: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft (raw, json) Hash identifier: /1AxQeMkJdedsRNZ3GTn4zeya4KsRNYviho55x+2HbY= Subject key identifier: D2:80:44:D4:F6:F6:39:1F:9C:CC:1C:61:0B:00:0F:C6:B7:75:27:3A Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A Certificate issuer: /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Certificate serial: 6EB8744B0396234E0994982A906D4F7C3527451D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft Manifest number: 016F Signing time: Wed 25 Mar 2026 08:07:25 +0000 Manifest this update: Wed 25 Mar 2026 08:02:25 +0000 Manifest next update: Mon 30 Mar 2026 14:04:25 +0000 Files and hashes: 1: 323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (hash: GRWJfDTtaNARRPhnsoXH5s1znecEwffl4EvgxQ5gNqs=) 2: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl (hash: Pn8ix4jvSDNAZXTFje/FqAmDPbmwqka69tm9f3ceDp4=) 3: 34352e3233362e3134382e302f32322d3234203d3e20323636383132.roa (hash: TuVSnaAy8zQaHRhySpU28Pxq0rPBVxYrvaRsQF2zS/c=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 14:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b8:74:4b:03:96:23:4e:09:94:98:2a:90:6d:4f:7c:35:27:45:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A Validity Not Before: Mar 25 08:02:25 2026 GMT Not After : Mar 30 14:04:25 2026 GMT Subject: CN=D28044D4F6F6391F9CCC1C610B000FC6B775273A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:6b:f5:88:c6:c6:32:ed:a5:de:e3:3d:40: e9:9a:cb:0a:22:c9:63:5d:cb:cf:11:e6:cc:b5:6c: 13:e8:aa:b8:c4:cf:d5:5d:3e:8d:02:fb:c4:74:a6: 57:da:b4:70:42:01:3c:f5:f9:b7:da:d0:7e:dd:8b: bf:48:e8:a9:d9:65:da:6c:e0:37:a2:52:cc:b7:37: 60:01:0b:99:d8:55:1b:65:bb:4c:e9:b3:12:91:4f: ab:8a:76:55:dd:7a:92:2d:12:64:64:b0:c0:c8:af: a0:85:19:c7:cf:64:fd:e5:58:7a:f8:4e:8a:e7:4b: c5:95:53:5f:a1:95:61:82:7d:5f:ec:8b:02:3f:e7: 94:14:9a:10:ee:a0:f1:4e:2e:a0:88:87:22:73:d5: ee:85:dc:dc:f1:5f:ec:ed:08:e8:37:7b:8f:42:dd: d2:35:4c:23:8d:9e:d3:86:38:d7:ba:f2:e1:18:49: 58:5d:eb:b1:15:6c:50:1c:81:58:28:f4:10:11:47: 7d:24:79:c9:9f:ea:f7:af:db:de:06:bd:8a:2c:a9: bc:be:be:34:a7:61:58:dc:1a:4a:8b:9b:93:f5:47: 8a:de:5d:e8:04:31:7b:bc:44:76:7f:ab:df:35:5b: 8f:ed:c6:e4:47:e3:27:9e:8f:e3:39:28:36:b1:b6: 7a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:80:44:D4:F6:F6:39:1F:9C:CC:1C:61:0B:00:0F:C6:B7:75:27:3A X509v3 Authority Key Identifier: keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:20:cb:4b:ea:66:6d:52:99:31:16:26:b6:03:32:69:43:75: 50:7c:2e:ed:ba:ff:7a:6a:77:52:fe:82:4e:97:91:92:b5:e6: 20:74:60:dc:f4:f0:cc:78:87:ef:12:cb:b3:81:19:b1:9c:76: 81:e7:00:65:ee:3f:67:3b:d7:11:b4:f3:81:0a:d8:d0:e7:ac: 20:a6:0c:08:30:a2:cf:00:b2:1d:ab:01:dc:35:36:83:39:f3: 83:1a:58:7b:ba:f4:69:17:30:a8:c9:30:eb:bb:18:99:ba:3f: dd:d8:22:c3:1d:cf:c1:31:66:b6:a6:2c:46:f1:9b:cf:8e:7c: 32:cb:ca:ad:b8:61:18:61:0d:ff:c1:89:86:91:57:bd:c4:18: 7d:fc:76:b6:01:31:06:31:8c:8c:6b:64:08:69:aa:92:9d:5c: 06:ee:81:19:df:da:af:a3:fe:e5:c9:a2:be:f2:ab:fd:4c:97: 78:94:9e:d3:e0:9c:18:76:fd:ad:f2:10:e8:71:70:06:e6:51: 73:15:a2:32:21:a3:05:06:b5:48:fa:de:2e:2a:68:cf:af:ec: ff:00:be:39:6e:09:ff:2e:4a:bf:19:44:4e:a9:29:9c:f7:7b: 43:3c:d6:9c:bf:ef:a3:d3:22:23:4c:15:bb:42:d5:52:60:b4: 62:83:71:07 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbrh0SwOWI04JlJgqkG1PfDUnRR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQjk5QTUxRjZDNjk4MUE1NThDRDBCNDhBQ0Y0Q0RD QkE5NTM2QTAeFw0yNjAzMjUwODAyMjVaFw0yNjAzMzAxNDA0MjVaMDMxMTAvBgNV BAMTKEQyODA0NEQ0RjZGNjM5MUY5Q0NDMUM2MTBCMDAwRkM2Qjc3NTI3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJK2v1iMbGMu2l3uM9QOmaywoi yWNdy88R5sy1bBPoqrjEz9VdPo0C+8R0plfatHBCATz1+bfa0H7di79I6KnZZdps 4DeiUsy3N2ABC5nYVRtlu0zpsxKRT6uKdlXdepItEmRksMDIr6CFGcfPZP3lWHr4 TornS8WVU1+hlWGCfV/siwI/55QUmhDuoPFOLqCIhyJz1e6F3NzxX+ztCOg3e49C 3dI1TCONntOGONe68uEYSVhd67EVbFAcgVgo9BARR30kecmf6vev294GvYosqby+ vjSnYVjcGkqLm5P1R4reXegEMXu8RHZ/q981W4/txuRH4yeej+M5KDaxtnp3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0oBE1Pb2OR+czBxhCwAPxrd1JzowHwYDVR0j BBgwFoAUKKuZpR9saYGlWM0LSKz0zcupU2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xMTFEMDkyQTZEQTYzRjgyOTk3N0NGODBFQTVFQUQyMjZC Qzg3MzMyMTRFMjBBRDI0Mjg3QTU4MUZDQ0Q4MTQ2LzAvMjhBQjk5QTUxRjZDNjk4 MUE1NThDRDBCNDhBQ0Y0Q0RDQkE5NTM2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEFCOTlBNTFGNkM2OTgxQTU1 OENEMEI0OEFDRjRDRENCQTk1MzZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTExRDA5MkE2REE2M0Y4Mjk5NzdDRjgwRUE1RUFEMjI2QkM4NzMzMjE0 RTIwQUQyNDI4N0E1ODFGQ0NEODE0Ni8wLzI4QUI5OUE1MUY2QzY5ODFBNTU4Q0Qw QjQ4QUNGNENEQ0JBOTUzNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPIMtL6mZtUpkxFia2AzJpQ3VQ fC7tuv96andS/oJOl5GSteYgdGDc9PDMeIfvEsuzgRmxnHaB5wBl7j9nO9cRtPOB CtjQ56wgpgwIMKLPALIdqwHcNTaDOfODGlh7uvRpFzCoyTDruxiZuj/d2CLDHc/B MWa2pixG8ZvPjnwyy8qtuGEYYQ3/wYmGkVe9xBh9/Ha2ATEGMYyMa2QIaaqSnVwG 7oEZ39qvo/7lyaK+8qv9TJd4lJ7T4JwYdv2t8hDocXAG5lFzFaIyIaMFBrVI+t4u KmjPr+z/AL45bgn/Lkq/GUROqSmc93tDPNacv++j0yIjTBW7QtVSYLRig3EH -----END CERTIFICATE-----Generated at Thu Mar 26 20:14:36 2026 by rpki-client