$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft File: CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft (raw, json) Hash identifier: Nx+Ega1c5h3xLeGkL/JFP/OJzWUW6RgGeT/dvA7NEU0= Subject key identifier: EF:3E:31:6C:F2:C6:62:39:F6:59:70:04:87:51:39:3E:75:C3:60:6E Authority key identifier: CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8 Certificate issuer: /CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8 Certificate serial: 2B51A8EB1697173FA5A74F136EE19BAE47E6F86D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft Manifest number: 0172 Signing time: Wed 25 Mar 2026 17:17:41 +0000 Manifest this update: Wed 25 Mar 2026 17:12:41 +0000 Manifest next update: Tue 31 Mar 2026 11:43:41 +0000 Files and hashes: 1: 323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa (hash: 9qOZHa21rgwI1dnCb7B9nBYn6je4ggvy47WxfX9OHl4=) 2: 34352e3233382e3139362e302f32322d3234203d3e20323636383438.roa (hash: L0rNgPF+0ZsBDw0mhIA2qIuloQe4H/6i0JbNB6mYa4Y=) 3: CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl (hash: DVC4UyNAdeL9fwt57e1jp8BWjlKSK055ngRU4aEvH60=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:51:a8:eb:16:97:17:3f:a5:a7:4f:13:6e:e1:9b:ae:47:e6:f8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8 Validity Not Before: Mar 25 17:12:41 2026 GMT Not After : Mar 31 11:43:41 2026 GMT Subject: CN=EF3E316CF2C66239F65970048751393E75C3606E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:dc:b3:c9:01:59:94:f1:1f:a3:e6:3d:1b: 36:34:90:ac:ca:93:a6:e8:69:0c:61:b6:f7:26:78: 7e:90:c4:45:39:63:4a:da:da:21:91:8b:47:72:d4: dc:cd:20:34:c3:3e:2b:5b:26:d6:f1:a1:89:e1:de: ec:de:63:7b:2f:7c:b6:9f:e7:d8:ad:30:1a:73:88: 7a:63:8b:dc:c2:76:de:98:37:43:bb:a9:e7:78:1c: c5:ae:fe:97:84:76:2f:12:f0:52:03:cd:df:b6:ab: 0b:47:c0:9c:11:15:8d:22:7b:0c:0c:e7:70:97:c8: 24:e5:bc:9e:c7:a6:a2:79:e2:50:1e:f7:2c:e9:a0: 6f:3d:0f:aa:e8:45:ce:42:d5:ce:ae:0e:84:b6:97: c7:35:d1:80:7a:8c:46:59:0b:44:4a:a0:8d:ed:c6: 10:84:84:15:57:df:36:79:00:1f:e4:32:21:cc:d8: 1c:07:c6:60:5e:f5:6c:3a:31:ed:d1:9c:77:e5:64: 3e:8c:47:fe:df:34:ad:87:77:15:ef:6f:41:97:2e: 3f:a6:07:d0:38:f4:31:2f:7b:e6:3f:eb:32:ba:a7: 03:45:74:13:d5:1a:5a:b6:7e:94:8d:a0:c5:9a:64: 76:f2:d6:40:4c:41:d3:34:d6:e5:31:f1:a2:27:f6: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3E:31:6C:F2:C6:62:39:F6:59:70:04:87:51:39:3E:75:C3:60:6E X509v3 Authority Key Identifier: keyid:CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:17:c6:5b:cb:c9:bd:df:ae:27:44:b1:83:39:4f:62:65:1e: 35:8e:d1:76:dd:6b:d8:07:54:ba:ff:97:cb:63:5e:34:29:24: 2d:ba:e0:4b:01:c3:cc:9f:10:92:23:4c:cf:6d:01:78:a2:b6: 36:d2:f0:61:0f:79:b5:c0:84:10:1e:88:15:7e:57:1c:c8:5a: 6a:3f:30:0c:06:8f:6e:7f:ae:e4:cf:e7:b9:61:20:8f:5b:07: b0:ee:38:d7:e8:a0:ed:2f:b8:41:a7:2c:e4:b8:53:df:b8:45: eb:9e:98:f2:0f:f2:33:a0:7c:98:c3:77:21:34:0b:cc:bb:89: 77:21:8e:cb:05:eb:eb:45:ae:9f:49:21:05:46:0b:8b:9f:4c: 21:06:d4:8b:ef:46:18:94:62:44:f9:73:db:9b:63:42:02:b6: 6f:06:fa:b1:f4:ca:a5:d6:2a:39:95:0e:2f:a3:5d:f3:b7:b1: 40:a6:c6:af:f9:73:d7:17:62:56:0e:52:75:17:52:90:08:77: 0f:8f:9d:ca:4e:cf:88:da:59:f2:c5:a8:b6:01:46:0f:b5:57: 0c:30:57:24:fb:52:19:6f:b2:50:c2:49:6f:79:10:ce:48:93: 2b:5d:a4:f1:91:92:ab:53:8a:4e:b4:c8:50:87:3e:1d:87:08: 2d:08:ea:49 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUK1Go6xaXFz+lp08TbuGbrkfm+G0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNTM2RDVGMEE5MTlEREYxQUQyQTBENkRGMzc2MDhG Nzg5QTRFODAeFw0yNjAzMjUxNzEyNDFaFw0yNjAzMzExMTQzNDFaMDMxMTAvBgNV BAMTKEVGM0UzMTZDRjJDNjYyMzlGNjU5NzAwNDg3NTEzOTNFNzVDMzYwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1TtyzyQFZlPEfo+Y9GzY0kKzK k6boaQxhtvcmeH6QxEU5Y0ra2iGRi0dy1NzNIDTDPitbJtbxoYnh3uzeY3svfLaf 59itMBpziHpji9zCdt6YN0O7qed4HMWu/peEdi8S8FIDzd+2qwtHwJwRFY0iewwM 53CXyCTlvJ7HpqJ54lAe9yzpoG89D6roRc5C1c6uDoS2l8c10YB6jEZZC0RKoI3t xhCEhBVX3zZ5AB/kMiHM2BwHxmBe9Ww6Me3RnHflZD6MR/7fNK2HdxXvb0GXLj+m B9A49DEve+Y/6zK6pwNFdBPVGlq2fpSNoMWaZHby1kBMQdM01uUx8aIn9kCdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7z4xbPLGYjn2WXAEh1E5PnXDYG4wHwYDVR0j BBgwFoAUzeU21fCpGd3xrSoNbfN2CPeJpOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMzNBRDQ5RjczNTYwQzJCMzdEMjdFNDEzRjYxRTgwRjM4 RTZFQzE3QjkwNkQwM0MyMEYwREZCODkxRUU5OUJDLzAvQ0RFNTM2RDVGMEE5MTlE REYxQUQyQTBENkRGMzc2MDhGNzg5QTRFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREU1MzZENUYwQTkxOURERjFB RDJBMEQ2REYzNzYwOEY3ODlBNEU4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjMzQUQ0OUY3MzU2MEMyQjM3RDI3RTQxM0Y2MUU4MEYzOEU2RUMxN0I5 MDZEMDNDMjBGMERGQjg5MUVFOTlCQy8wL0NERTUzNkQ1RjBBOTE5RERGMUFEMkEw RDZERjM3NjA4Rjc4OUE0RTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2F8Zby8m9364nRLGDOU9iZR41 jtF23WvYB1S6/5fLY140KSQtuuBLAcPMnxCSI0zPbQF4orY20vBhD3m1wIQQHogV flccyFpqPzAMBo9uf67kz+e5YSCPWwew7jjX6KDtL7hBpyzkuFPfuEXrnpjyD/Iz oHyYw3chNAvMu4l3IY7LBevrRa6fSSEFRguLn0whBtSL70YYlGJE+XPbm2NCArZv Bvqx9Mql1io5lQ4vo13zt7FApsav+XPXF2JWDlJ1F1KQCHcPj53KTs+I2lnyxai2 AUYPtVcMMFck+1IZb7JQwklveRDOSJMrXaTxkZKrU4pOtMhQhz4dhwgtCOpJ -----END CERTIFICATE-----Generated at Thu Mar 26 23:04:32 2026 by rpki-client