$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft File: 2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft (raw, json) Hash identifier: 4mrMjyNyYTxv0RB8hZHK4VKxbDPM/2IsFsXtsGPPoa4= Subject key identifier: 57:2A:61:A2:22:11:11:9F:66:12:9D:B2:2F:3B:46:3F:A1:1B:C9:91 Authority key identifier: 2D:00:DE:68:56:A4:66:70:E7:4C:BC:33:80:A8:4B:75:A4:BD:98:2C Certificate issuer: /CN=2D00DE6856A46670E74CBC3380A84B75A4BD982C Certificate serial: 35D9CCEA75C81B2037E7796BFCF4A7BDA6E4F56B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft Manifest number: 0178 Signing time: Wed 25 Mar 2026 13:55:43 +0000 Manifest this update: Wed 25 Mar 2026 13:50:43 +0000 Manifest next update: Tue 31 Mar 2026 12:51:43 +0000 Files and hashes: 1: 2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl (hash: ZOlriZYqlLVTXbjcWVtQ3zF463cRBOmB0TLHyKqUZho=) 2: 323830313a303a3331303a3a2f34382d3438203d3e20323632323338.roa (hash: 3pNdSZ6rmbBeqQTCTd8NE4kNVSN3Wb65usCYtLjEJvw=) 3: 3230302e3131352e3137392e302f32342d3234203d3e20323632323338.roa (hash: fHx7zfFwxLzJoE/lhEuhV8qNamJHYDndrwXqX3ASKu4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d9:cc:ea:75:c8:1b:20:37:e7:79:6b:fc:f4:a7:bd:a6:e4:f5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D00DE6856A46670E74CBC3380A84B75A4BD982C Validity Not Before: Mar 25 13:50:43 2026 GMT Not After : Mar 31 12:51:43 2026 GMT Subject: CN=572A61A22211119F66129DB22F3B463FA11BC991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:40:bf:06:c6:32:f1:ef:01:f5:b1:c0:07: 52:20:36:1e:b5:ab:be:57:72:70:51:2f:a5:47:f5: 75:48:0c:f4:e0:82:5a:d0:37:10:d2:e3:62:28:80: f2:4f:c6:79:6d:88:7e:74:74:84:1f:09:2a:56:e2: ac:e7:cd:3f:13:4d:48:29:8e:0d:69:21:4c:69:23: 82:ef:45:2a:55:6c:13:80:69:f8:ae:ba:27:2e:1f: c8:5d:a7:ba:d8:ea:cb:a6:ed:94:b6:2e:ad:4f:95: 62:a2:85:f1:e1:40:11:8c:24:32:ea:8f:a4:cf:bd: e8:73:e0:66:53:bb:4b:4e:3d:f6:56:6e:41:ad:04: b7:57:bc:49:18:32:2a:f5:34:24:14:e2:0d:02:0d: 19:2a:3f:c9:ba:f7:4e:2b:cd:fc:1a:61:38:ca:8f: 30:95:70:ca:55:e8:97:c0:75:30:b9:dd:9d:4f:1c: ea:5f:fc:98:64:17:8a:61:b2:86:a9:19:ec:67:d6: 78:ad:16:05:ab:6a:d6:45:ae:5e:27:3d:e1:45:a5: ac:fc:0e:c9:90:73:79:eb:ea:42:ca:cf:00:a0:6b: 45:fe:bf:27:72:ec:71:b4:b9:db:5c:7d:17:c2:d4: d9:d1:e3:8f:56:1a:d2:d0:79:99:16:24:8a:f3:12: 09:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2A:61:A2:22:11:11:9F:66:12:9D:B2:2F:3B:46:3F:A1:1B:C9:91 X509v3 Authority Key Identifier: keyid:2D:00:DE:68:56:A4:66:70:E7:4C:BC:33:80:A8:4B:75:A4:BD:98:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a3:1e:b7:bf:62:b5:13:c2:07:be:7c:93:62:22:74:99:75: af:66:5e:2c:61:1a:5b:ba:ef:41:4a:6a:8d:66:78:e2:2f:66: 2c:b5:52:a0:14:33:5a:c5:66:da:5c:3a:26:07:39:9a:76:30: a7:9d:4a:06:4a:fb:a9:dd:c5:17:92:c6:53:10:6e:51:7a:3f: 43:99:f1:9a:7c:84:6a:d6:ec:e1:97:f8:c7:86:ff:83:d1:29: 41:06:d7:5f:aa:d9:50:6d:65:3f:5f:db:eb:73:b6:8b:de:09: d0:a6:61:c6:a8:b2:1f:af:c7:e4:60:ff:a3:08:b6:8f:b7:06: d6:a7:cb:63:d8:7e:38:1b:d6:32:1b:36:0e:ac:21:e3:64:2c: 23:92:3c:eb:f6:60:e8:bb:23:8a:af:e8:b8:94:68:58:d5:99: 53:f6:8b:a9:a2:70:98:4a:7e:8b:04:3c:d2:e5:f3:88:26:f9: 8c:c9:b1:ba:b1:52:24:5b:f5:56:16:94:53:aa:b8:b1:9f:8e: df:1f:05:03:f6:50:2d:ad:ad:ee:04:e6:bf:3c:de:9b:39:88: 44:98:14:90:ad:44:e2:ff:2a:c2:f0:fa:d8:93:7e:0b:7a:3b: 03:b7:2b:43:8e:71:8a:19:bc:7e:f0:dc:f2:32:ef:e9:23:f8: ca:39:ed:56 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNdnM6nXIGyA353lr/PSnvabk9WswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwMERFNjg1NkE0NjY3MEU3NENCQzMzODBBODRCNzVB NEJEOTgyQzAeFw0yNjAzMjUxMzUwNDNaFw0yNjAzMzExMjUxNDNaMDMxMTAvBgNV BAMTKDU3MkE2MUEyMjIxMTExOUY2NjEyOURCMjJGM0I0NjNGQTExQkM5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8EC/BsYy8e8B9bHAB1IgNh61 q75XcnBRL6VH9XVIDPTgglrQNxDS42IogPJPxnltiH50dIQfCSpW4qznzT8TTUgp jg1pIUxpI4LvRSpVbBOAafiuuicuH8hdp7rY6sum7ZS2Lq1PlWKihfHhQBGMJDLq j6TPvehz4GZTu0tOPfZWbkGtBLdXvEkYMir1NCQU4g0CDRkqP8m6904rzfwaYTjK jzCVcMpV6JfAdTC53Z1PHOpf/JhkF4phsoapGexn1nitFgWratZFrl4nPeFFpaz8 DsmQc3nr6kLKzwCga0X+vydy7HG0udtcfRfC1NnR449WGtLQeZkWJIrzEglzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUVyphoiIREZ9mEp2yLztGP6EbyZEwHwYDVR0j BBgwFoAULQDeaFakZnDnTLwzgKhLdaS9mCwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zM0NCRDgyM0E1RTZBNDRCMjExMDk0QTE1N0QyOThBREM0 QjlERkFGQzM5QjA1MzQzMjk3RUZENDBDNTA3NkZDLzAvMkQwMERFNjg1NkE0NjY3 MEU3NENCQzMzODBBODRCNzVBNEJEOTgyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDAwREU2ODU2QTQ2NjcwRTc0 Q0JDMzM4MEE4NEI3NUE0QkQ5ODJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzNDQkQ4MjNBNUU2QTQ0QjIxMTA5NEExNTdEMjk4QURDNEI5REZBRkMz OUIwNTM0MzI5N0VGRDQwQzUwNzZGQy8wLzJEMDBERTY4NTZBNDY2NzBFNzRDQkMz MzgwQTg0Qjc1QTRCRDk4MkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLox63v2K1E8IHvnyTYiJ0mXWv Zl4sYRpbuu9BSmqNZnjiL2YstVKgFDNaxWbaXDomBzmadjCnnUoGSvup3cUXksZT EG5Rej9DmfGafIRq1uzhl/jHhv+D0SlBBtdfqtlQbWU/X9vrc7aL3gnQpmHGqLIf r8fkYP+jCLaPtwbWp8tj2H44G9YyGzYOrCHjZCwjkjzr9mDouyOKr+i4lGhY1ZlT 9ouponCYSn6LBDzS5fOIJvmMybG6sVIkW/VWFpRTqrixn47fHwUD9lAtra3uBOa/ PN6bOYhEmBSQrUTi/yrC8PrYk34LejsDtytDjnGKGbx+8NzyMu/pI/jKOe1W -----END CERTIFICATE-----Generated at Thu Mar 26 22:57:10 2026 by rpki-client