$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft File: CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft (raw, json) Hash identifier: Y8mwAx9WY5QW8MVbdW6I2LYVaYU4G4BoOPxFXvsEXUM= Subject key identifier: C1:54:71:FD:B7:8F:1B:15:13:88:2D:1C:50:1F:0B:31:DD:B0:DE:29 Authority key identifier: CF:A8:D5:AE:E2:FF:D5:16:9B:86:3E:84:0F:86:3A:C0:26:91:9A:61 Certificate issuer: /CN=CFA8D5AEE2FFD5169B863E840F863AC026919A61 Certificate serial: 058BF14ED88AE7138D5E78DDB61CD1B733E473A2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft Manifest number: 0176 Signing time: Thu 26 Mar 2026 20:23:20 +0000 Manifest this update: Thu 26 Mar 2026 20:18:20 +0000 Manifest next update: Tue 31 Mar 2026 05:46:20 +0000 Files and hashes: 1: CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl (hash: VWtELne+eLWBV3o7dCQW5r2HzsDcrWR5CUwxzGTBlP8=) 2: 323830333a333363303a3a2f33322d3438203d3e20323635373231.roa (hash: ZfVZbi8sUC7b29N3T7XrcGRNuglXe60yWN/GwBSFLqw=) 3: 3132382e3230312e3131322e302f32322d3234203d3e20323635373231.roa (hash: X97EKgucsmUmgUffJYf966ZOcKML/+vxy/70FwoHros=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:8b:f1:4e:d8:8a:e7:13:8d:5e:78:dd:b6:1c:d1:b7:33:e4:73:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA8D5AEE2FFD5169B863E840F863AC026919A61 Validity Not Before: Mar 26 20:18:20 2026 GMT Not After : Mar 31 05:46:20 2026 GMT Subject: CN=C15471FDB78F1B1513882D1C501F0B31DDB0DE29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:09:df:f7:c7:77:28:0a:96:50:f2:8b:5e: 62:d0:b8:b2:bb:89:b3:8b:50:20:11:94:51:1b:35: 8f:90:78:09:55:b0:0f:48:90:2b:e4:0c:35:32:87: 99:2c:00:a7:4b:83:cb:6d:39:fc:59:51:b1:20:27: 1c:a4:24:15:ed:9c:35:ce:d3:a0:cc:c5:15:7e:49: f6:8e:56:25:84:62:c3:af:26:9a:6b:37:91:3f:8d: a9:0c:2b:ff:ad:22:93:81:13:cd:33:66:72:dc:a9: 57:9c:7b:51:28:7b:e5:f0:a2:87:6f:4a:53:9a:3b: 4e:21:f3:ce:de:c1:4b:ac:56:a0:5d:d3:c5:a9:43: 3c:f7:2d:82:40:d2:d6:ba:29:f2:9f:9d:f3:82:f9: 71:e3:ca:67:3b:11:c6:9b:2e:1b:be:80:e8:29:40: 3d:10:5c:bc:97:f6:f8:ca:2d:b5:14:b0:cc:4e:23: c6:83:8d:af:72:14:f8:d3:ed:21:3e:6e:62:07:10: c7:10:35:16:e5:08:e8:48:0a:90:df:4b:9f:fa:2b: 45:61:c8:0c:63:60:d6:32:00:31:f8:7c:1c:b1:59: 01:f4:6c:8a:3e:59:0c:c5:23:ba:e9:ee:9d:3b:6f: b7:d3:64:ae:18:d4:96:c1:dc:2b:3f:12:03:27:1e: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:54:71:FD:B7:8F:1B:15:13:88:2D:1C:50:1F:0B:31:DD:B0:DE:29 X509v3 Authority Key Identifier: keyid:CF:A8:D5:AE:E2:FF:D5:16:9B:86:3E:84:0F:86:3A:C0:26:91:9A:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:77:c0:4f:85:6b:e7:85:8c:ab:30:9d:e5:23:54:f9:f5:72: 33:80:f2:9c:bb:e1:d6:67:54:b0:92:25:4c:42:24:8e:ce:0e: 51:aa:b2:2e:86:9c:6c:85:86:dc:81:d6:0e:ed:06:22:b9:b4: 4e:e4:01:93:01:72:be:24:3d:8b:17:01:06:6f:55:46:d5:68: 7c:9e:63:08:82:cc:92:64:00:6f:71:fb:26:b4:d2:55:8b:17: 80:4f:a2:fb:4b:4e:51:7d:4a:10:19:fc:27:ef:90:c8:15:6a: 36:f3:12:9b:06:1f:e2:86:dd:76:f6:eb:35:be:62:c1:52:a4: b6:ca:1a:d2:6f:5f:d5:20:ab:c0:cb:cf:5a:e7:a8:09:37:20: 42:01:5f:b3:0b:d9:df:0d:97:12:8e:68:12:1e:c1:51:0b:de: 33:a6:bf:33:29:ee:d1:42:ce:f9:36:cd:8e:13:d2:67:ba:63: 97:7a:7c:9b:43:53:4d:f9:e3:16:77:ba:5e:cf:53:0c:8d:ca: 1e:13:a2:56:fd:e1:8f:27:76:0d:5f:14:ed:90:24:d9:2b:a2: d0:07:f9:d5:32:9f:5a:de:20:72:78:c6:a9:d4:8a:6e:7f:de: 0e:e9:c1:79:af:cb:f2:a9:d9:35:75:0d:18:d7:0f:02:d9:55: 6f:f9:51:52 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBYvxTtiK5xONXnjdthzRtzPkc6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBOEQ1QUVFMkZGRDUxNjlCODYzRTg0MEY4NjNBQzAy NjkxOUE2MTAeFw0yNjAzMjYyMDE4MjBaFw0yNjAzMzEwNTQ2MjBaMDMxMTAvBgNV BAMTKEMxNTQ3MUZEQjc4RjFCMTUxMzg4MkQxQzUwMUYwQjMxRERCMERFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jwnf98d3KAqWUPKLXmLQuLK7 ibOLUCARlFEbNY+QeAlVsA9IkCvkDDUyh5ksAKdLg8ttOfxZUbEgJxykJBXtnDXO 06DMxRV+SfaOViWEYsOvJpprN5E/jakMK/+tIpOBE80zZnLcqVece1Eoe+Xwoodv SlOaO04h887ewUusVqBd08WpQzz3LYJA0ta6KfKfnfOC+XHjymc7EcabLhu+gOgp QD0QXLyX9vjKLbUUsMxOI8aDja9yFPjT7SE+bmIHEMcQNRblCOhICpDfS5/6K0Vh yAxjYNYyADH4fByxWQH0bIo+WQzFI7rp7p07b7fTZK4Y1JbB3Cs/EgMnHtaBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUwVRx/bePGxUTiC0cUB8LMd2w3ikwHwYDVR0j BBgwFoAUz6jVruL/1Rabhj6ED4Y6wCaRmmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMDA4OTI5MTVCNEY3NjQ5NTIwN0M1NEI5QjIzQjE2MjlG NkZCQUQ4QTU2NTlFRTRGNUIwOUU5ODJCQTU0RTYzLzAvQ0ZBOEQ1QUVFMkZGRDUx NjlCODYzRTg0MEY4NjNBQzAyNjkxOUE2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRkE4RDVBRUUyRkZENTE2OUI4 NjNFODQwRjg2M0FDMDI2OTE5QTYxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzAwODkyOTE1QjRGNzY0OTUyMDdDNTRCOUIyM0IxNjI5RjZGQkFEOEE1 NjU5RUU0RjVCMDlFOTgyQkE1NEU2My8wL0NGQThENUFFRTJGRkQ1MTY5Qjg2M0U4 NDBGODYzQUMwMjY5MTlBNjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGd8BPhWvnhYyrMJ3lI1T59XIz gPKcu+HWZ1SwkiVMQiSOzg5RqrIuhpxshYbcgdYO7QYiubRO5AGTAXK+JD2LFwEG b1VG1Wh8nmMIgsySZABvcfsmtNJVixeAT6L7S05RfUoQGfwn75DIFWo28xKbBh/i ht129us1vmLBUqS2yhrSb1/VIKvAy89a56gJNyBCAV+zC9nfDZcSjmgSHsFRC94z pr8zKe7RQs75Ns2OE9JnumOXenybQ1NN+eMWd7pez1MMjcoeE6JW/eGPJ3YNXxTt kCTZK6LQB/nVMp9a3iByeMap1Ipuf94O6cF5r8vyqdk1dQ0Y1w8C2VVv+VFS -----END CERTIFICATE-----Generated at Fri Mar 27 05:43:21 2026 by rpki-client