$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft File: 621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft (raw, json) Hash identifier: A9AoEOGsEa9wz0cmefqgSU7AjfJvjcR4cqgd3XZs+Qc= Subject key identifier: CD:17:82:1F:E0:DD:E4:D3:A0:A4:F7:54:B4:8C:AC:31:99:BC:90:16 Authority key identifier: 62:1B:61:96:7B:5E:DE:ED:D5:BD:F8:BD:FD:1E:FE:F9:70:FC:27:47 Certificate issuer: /CN=621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747 Certificate serial: 1261F5D51C5CCD5063091BFF6621E9F02E757E95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft Manifest number: 37 Signing time: Wed 25 Mar 2026 13:25:27 +0000 Manifest this update: Wed 25 Mar 2026 13:20:27 +0000 Manifest next update: Sun 29 Mar 2026 17:50:27 +0000 Files and hashes: 1: 323830333a643835303a3a2f33322d3438203d3e20323733313138.roa (hash: Vk5dQOyxye3KHA3x3MvKS5O63/jL9KItFEHccy/7IAQ=) 2: 621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.crl (hash: UqWnjy6baazrz1d7Hi+jx6DpxPX8rN8lKwjwIevkzz4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.crl rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 17:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:61:f5:d5:1c:5c:cd:50:63:09:1b:ff:66:21:e9:f0:2e:75:7e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747 Validity Not Before: Mar 25 13:20:27 2026 GMT Not After : Mar 29 17:50:27 2026 GMT Subject: CN=CD17821FE0DDE4D3A0A4F754B48CAC3199BC9016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3b:c2:a9:fc:47:8b:58:6b:e4:cb:17:a1:90: 76:4f:53:13:ac:b5:af:b5:5f:64:84:6e:b7:73:45: 1f:06:8d:8b:55:c1:d0:a0:cb:07:07:ca:5b:cb:11: ac:ad:42:a5:48:65:32:55:05:29:5a:f5:ea:87:d8: 69:d2:4d:86:b9:c5:00:b4:01:38:f9:61:9a:95:8f: 9d:8a:17:da:3c:f9:e7:ac:26:00:de:7c:39:60:66: c7:11:28:d7:70:d5:02:9d:1f:78:28:97:5a:c8:75: b5:47:77:de:41:c2:79:f9:36:32:d4:f3:45:29:00: 61:3e:ea:d0:fa:d0:df:d4:1a:ea:1e:ae:0e:d6:a6: 7b:74:a4:b1:97:7d:f4:7d:89:cb:61:15:f1:0b:a8: 8b:2f:4a:83:2f:6e:91:f3:b0:d6:38:24:66:c9:49: a5:ae:4d:fd:f4:0f:99:62:6f:df:8e:df:7a:39:52: 91:db:25:0e:88:ed:8d:6e:8f:0e:a9:2b:48:c0:8b: f7:f4:e1:24:5f:c9:b1:fe:3c:13:4f:c9:8f:f2:8e: a2:f0:80:c9:cd:c3:76:41:b6:82:3c:95:52:65:19: 1d:fa:b6:be:5e:c3:a9:e8:27:1d:38:13:ef:1e:7e: 6c:85:c4:61:98:16:3b:e6:12:37:a8:6c:6c:5f:1f: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:17:82:1F:E0:DD:E4:D3:A0:A4:F7:54:B4:8C:AC:31:99:BC:90:16 X509v3 Authority Key Identifier: keyid:62:1B:61:96:7B:5E:DE:ED:D5:BD:F8:BD:FD:1E:FE:F9:70:FC:27:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:88:9f:13:b0:7b:9c:d6:e6:97:9d:13:25:ed:99:66:0b:84: 0b:53:c9:51:58:85:22:d7:ff:d4:7a:30:55:15:8d:78:6a:e0: 30:75:4c:0f:99:63:f7:68:2c:41:09:7f:84:b1:95:be:c6:91: 3e:d3:af:50:f4:3c:25:b2:84:e7:e0:01:bf:43:97:02:5e:67: e3:8e:ef:7b:91:45:46:f2:04:0e:f0:63:39:de:1e:2f:de:32: 32:ff:3c:19:6f:74:db:b6:ba:91:a8:52:1f:17:5c:3f:8a:7e: 29:b2:a4:af:19:97:68:e6:ce:0c:56:69:79:e1:81:32:8c:24: ed:ca:87:a6:9f:78:72:43:3c:cb:81:6d:08:de:11:b9:b5:74: de:6d:83:82:eb:24:74:c5:65:1d:2c:69:5a:78:24:bd:09:bb: e2:35:b0:86:ea:b2:a4:2a:90:3d:3a:85:63:15:19:d7:d0:84: 73:ca:81:80:a4:46:48:c3:4b:1b:2a:38:e2:ca:a4:a7:de:56: 6d:d3:fd:c7:d8:0a:ef:2c:bd:4e:c8:70:45:ba:b8:bd:7c:0a: 15:46:44:2a:13:21:f6:90:8b:ee:7a:32:0a:bf:01:38:56:11: 54:81:90:c4:7c:97:03:50:a3:2c:7c:a1:c4:91:35:2f:24:69: 66:11:c7:16 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEmH11RxczVBjCRv/ZiHp8C51fpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIxQjYxOTY3QjVFREVFREQ1QkRGOEJERkQxRUZFRjk3 MEZDMjc0NzAeFw0yNjAzMjUxMzIwMjdaFw0yNjAzMjkxNzUwMjdaMDMxMTAvBgNV BAMTKENEMTc4MjFGRTBEREU0RDNBMEE0Rjc1NEI0OENBQzMxOTlCQzkwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyO8Kp/EeLWGvkyxehkHZPUxOs ta+1X2SEbrdzRR8GjYtVwdCgywcHylvLEaytQqVIZTJVBSla9eqH2GnSTYa5xQC0 ATj5YZqVj52KF9o8+eesJgDefDlgZscRKNdw1QKdH3gol1rIdbVHd95Bwnn5NjLU 80UpAGE+6tD60N/UGuoerg7Wpnt0pLGXffR9icthFfELqIsvSoMvbpHzsNY4JGbJ SaWuTf30D5lib9+O33o5UpHbJQ6I7Y1ujw6pK0jAi/f04SRfybH+PBNPyY/yjqLw gMnNw3ZBtoI8lVJlGR36tr5ew6noJx04E+8efmyFxGGYFjvmEjeobGxfH/x1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzReCH+Dd5NOgpPdUtIysMZm8kBYwHwYDVR0j BBgwFoAUYhthlnte3u3Vvfi9/R7++XD8J0cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yNDNEMzVFRjUxQ0Y5RUE5REMwOEMyRjgyODUwMjg3REJG RDI0RUZDNDdBQTMwMzBBNEMzREQ0MDY5MzBBNjVBLzAvNjIxQjYxOTY3QjVFREVF REQ1QkRGOEJERkQxRUZFRjk3MEZDMjc0Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjFCNjE5NjdCNUVERUVERDVC REY4QkRGRDFFRkVGOTcwRkMyNzQ3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjQzRDM1RUY1MUNGOUVBOURDMDhDMkY4Mjg1MDI4N0RCRkQyNEVGQzQ3 QUEzMDMwQTRDM0RENDA2OTMwQTY1QS8wLzYyMUI2MTk2N0I1RURFRURENUJERjhC REZEMUVGRUY5NzBGQzI3NDcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3iJ8TsHuc1uaXnRMl7ZlmC4QL U8lRWIUi1//UejBVFY14auAwdUwPmWP3aCxBCX+EsZW+xpE+069Q9DwlsoTn4AG/ Q5cCXmfjju97kUVG8gQO8GM53h4v3jIy/zwZb3TbtrqRqFIfF1w/in4psqSvGZdo 5s4MVml54YEyjCTtyoemn3hyQzzLgW0I3hG5tXTebYOC6yR0xWUdLGlaeCS9Cbvi NbCG6rKkKpA9OoVjFRnX0IRzyoGApEZIw0sbKjjiyqSn3lZt0/3H2ArvLL1OyHBF uri9fAoVRkQqEyH2kIvuejIKvwE4VhFUgZDEfJcDUKMsfKHEkTUvJGlmEccW -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:25 2026 by rpki-client