$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft File: 9D2820894F6D41941116396B192CCF8017618F44.mft (raw, json) Hash identifier: 38wSaxFTldOQnyjpF+/XcdOs57umlvpJ/n4LpKw8qsc= Subject key identifier: 54:B6:0A:3C:00:E2:EB:C8:30:16:C4:1D:5D:27:2A:1F:89:E3:C7:02 Authority key identifier: 9D:28:20:89:4F:6D:41:94:11:16:39:6B:19:2C:CF:80:17:61:8F:44 Certificate issuer: /CN=9D2820894F6D41941116396B192CCF8017618F44 Certificate serial: 6BCF8E895B0EAA8DF01E2C0D9A06254A95CB3B9A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft Manifest number: 017D Signing time: Wed 25 Mar 2026 18:08:06 +0000 Manifest this update: Wed 25 Mar 2026 18:03:06 +0000 Manifest next update: Tue 31 Mar 2026 07:14:06 +0000 Files and hashes: 1: 9D2820894F6D41941116396B192CCF8017618F44.crl (hash: BCMlvYygKMf86auneZRbVF+u0OppKZNu69T2NkDVGc4=) 2: 3133312e3232312e36342e302f32322d3234203d3e20323635373938.roa (hash: ZZaU13CadvbaMCZbfvnGX1SmyxxCcQccy0EtXhHky0k=) 3: 323830333a636238303a3a2f33322d3438203d3e20323635373938.roa (hash: Njnquh71HEz6WTWDkKN2fR7/LOSqA3LWjva3GA54ZTg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.crl rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:cf:8e:89:5b:0e:aa:8d:f0:1e:2c:0d:9a:06:25:4a:95:cb:3b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D2820894F6D41941116396B192CCF8017618F44 Validity Not Before: Mar 25 18:03:06 2026 GMT Not After : Mar 31 07:14:06 2026 GMT Subject: CN=54B60A3C00E2EBC83016C41D5D272A1F89E3C702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:a5:09:96:c1:c6:df:3f:a0:c6:b0:db:29: 94:8a:e5:c0:83:ae:ce:88:25:fb:de:8d:ab:2f:1e: 8b:85:9b:d0:ab:ba:a0:29:b9:aa:14:90:d6:c5:ca: ec:9d:02:45:9f:fb:cd:7e:75:52:d4:30:c3:19:99: 1a:92:f2:4b:96:f3:96:37:8e:1d:bc:fa:78:a6:3a: 21:d2:1a:c9:f5:13:8d:5a:3e:d9:c3:21:bb:a5:d7: bf:c2:e8:32:5e:73:34:2b:55:4c:2d:a9:2f:c6:86: d8:9b:7a:ff:d4:04:b3:b0:30:17:9a:03:14:5b:70: dd:3b:8d:f3:e6:62:06:04:fe:39:4e:17:9c:76:50: dd:40:39:25:c5:ac:84:37:c0:84:e0:14:be:bc:9a: b8:a3:1a:76:c5:7d:c5:72:b0:6d:14:ba:97:82:69: 58:0f:5d:95:c0:5d:29:c2:63:8c:37:ba:93:ff:03: 13:80:61:28:2b:34:84:c3:a2:68:b4:49:01:32:75: 03:94:98:1e:1d:fb:b9:5f:3b:bb:5b:2d:21:01:e4: df:d3:1a:66:cf:52:86:cb:d3:f7:9c:da:18:88:52: f3:21:8a:11:f7:b4:7e:1b:08:cc:93:b7:2a:4d:51: 02:99:ba:6c:1a:02:13:bb:50:6f:e3:22:ce:2c:7e: b9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B6:0A:3C:00:E2:EB:C8:30:16:C4:1D:5D:27:2A:1F:89:E3:C7:02 X509v3 Authority Key Identifier: keyid:9D:28:20:89:4F:6D:41:94:11:16:39:6B:19:2C:CF:80:17:61:8F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:b0:a3:93:13:80:f0:28:c4:89:f5:50:be:b8:b5:93:6a:72: 6f:7c:d3:fc:63:ce:64:07:76:19:2c:70:a9:03:20:e3:d3:1e: 71:1c:6e:c1:ea:a1:6e:81:6b:c5:3d:b4:57:ce:47:16:af:29: 33:ec:3d:f1:e6:aa:f6:c2:fd:1b:99:67:62:9e:20:3c:fa:d5: 72:6c:be:35:50:8d:a0:75:20:13:23:87:54:4f:34:13:da:90: 43:af:13:7b:7e:a3:8e:0e:a3:54:d6:74:d6:49:ae:be:07:f2: 22:79:7a:7f:73:aa:19:e2:aa:87:04:fa:e3:17:8b:86:e5:00: de:19:2c:ec:9e:a9:3e:7a:bb:c1:e3:67:2b:71:15:a6:64:79: 10:0c:d3:3f:94:24:12:d5:cd:60:df:d9:72:8e:d9:84:9c:97: 7b:12:03:47:96:82:b9:de:9d:69:50:00:4a:b0:db:0e:93:a4: d7:d5:6b:d5:5e:8e:ba:87:a2:34:b3:2f:64:22:7a:70:ef:42: fe:82:94:b2:c7:3f:53:b5:75:d6:61:e6:5a:a3:55:77:5b:f0: 13:cc:28:2b:cb:4c:3e:04:c3:68:ef:c0:e2:a7:77:7f:b9:c9: 4d:12:fb:2e:28:12:c0:75:ec:84:ec:fe:2f:f8:61:61:04:31: d5:65:33:b7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUa8+OiVsOqo3wHiwNmgYlSpXLO5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyODIwODk0RjZENDE5NDExMTYzOTZCMTkyQ0NGODAx NzYxOEY0NDAeFw0yNjAzMjUxODAzMDZaFw0yNjAzMzEwNzE0MDZaMDMxMTAvBgNV BAMTKDU0QjYwQTNDMDBFMkVCQzgzMDE2QzQxRDVEMjcyQTFGODlFM0M3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24qUJlsHG3z+gxrDbKZSK5cCD rs6IJfvejasvHouFm9CruqApuaoUkNbFyuydAkWf+81+dVLUMMMZmRqS8kuW85Y3 jh28+nimOiHSGsn1E41aPtnDIbul17/C6DJeczQrVUwtqS/Ghtibev/UBLOwMBea AxRbcN07jfPmYgYE/jlOF5x2UN1AOSXFrIQ3wITgFL68mrijGnbFfcVysG0UupeC aVgPXZXAXSnCY4w3upP/AxOAYSgrNITDomi0SQEydQOUmB4d+7lfO7tbLSEB5N/T GmbPUobL0/ec2hiIUvMhihH3tH4bCMyTtypNUQKZumwaAhO7UG/jIs4sfrlFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUVLYKPADi68gwFsQdXScqH4njxwIwHwYDVR0j BBgwFoAUnSggiU9tQZQRFjlrGSzPgBdhj0QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMjBENjU1Q0UxNjA5QzI0NkU4OUJEQzEwNDJFNTFDNDY3 ODAxQTdEMENFNjdDOUZEQURDNjMwN0Q3MzI1QjYyLzAvOUQyODIwODk0RjZENDE5 NDExMTYzOTZCMTkyQ0NGODAxNzYxOEY0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDI4MjA4OTRGNkQ0MTk0MTEx NjM5NkIxOTJDQ0Y4MDE3NjE4RjQ0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjIwRDY1NUNFMTYwOUMyNDZFODlCREMxMDQyRTUxQzQ2NzgwMUE3RDBD RTY3QzlGREFEQzYzMDdENzMyNUI2Mi8wLzlEMjgyMDg5NEY2RDQxOTQxMTE2Mzk2 QjE5MkNDRjgwMTc2MThGNDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDfsKOTE4DwKMSJ9VC+uLWTanJv fNP8Y85kB3YZLHCpAyDj0x5xHG7B6qFugWvFPbRXzkcWrykz7D3x5qr2wv0bmWdi niA8+tVybL41UI2gdSATI4dUTzQT2pBDrxN7fqOODqNU1nTWSa6+B/IieXp/c6oZ 4qqHBPrjF4uG5QDeGSzsnqk+ervB42crcRWmZHkQDNM/lCQS1c1g39lyjtmEnJd7 EgNHloK53p1pUABKsNsOk6TX1WvVXo66h6I0sy9kInpw70L+gpSyxz9TtXXWYeZa o1V3W/ATzCgry0w+BMNo78Dip3d/uclNEvsuKBLAdeyE7P4v+GFhBDHVZTO3 -----END CERTIFICATE-----Generated at Thu Mar 26 20:46:31 2026 by rpki-client