$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft File: FF458BCF6CF40DFE3E43BC054BF5206905966427.mft (raw, json) Hash identifier: yHNXI0txq+WbzTQRnQR13it2VpAOLiI4WWaw0exRDtk= Subject key identifier: 20:A0:BF:D6:79:6F:CB:DB:A4:DA:D9:1E:58:21:33:57:46:AA:89:4D Authority key identifier: FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27 Certificate issuer: /CN=FF458BCF6CF40DFE3E43BC054BF5206905966427 Certificate serial: 7B7396D6DD01BFCB23502A52D6E32E7113558FA8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft Manifest number: 017A Signing time: Thu 26 Mar 2026 10:32:38 +0000 Manifest this update: Thu 26 Mar 2026 10:27:38 +0000 Manifest next update: Mon 30 Mar 2026 11:26:38 +0000 Files and hashes: 1: FF458BCF6CF40DFE3E43BC054BF5206905966427.crl (hash: VrJWyI7vj62m71SqI9usYmcg+s/SoWLKBPuRzvz09b0=) 2: 34352e3137362e3131362e302f32322d3234203d3e20323637383539.roa (hash: QePPwbBj+/dWXlayPqRgvGAeRN8ekof4kComWmuqQM4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 11:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:73:96:d6:dd:01:bf:cb:23:50:2a:52:d6:e3:2e:71:13:55:8f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF458BCF6CF40DFE3E43BC054BF5206905966427 Validity Not Before: Mar 26 10:27:38 2026 GMT Not After : Mar 30 11:26:38 2026 GMT Subject: CN=20A0BFD6796FCBDBA4DAD91E5821335746AA894D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a3:8d:b7:d7:42:09:c2:76:ad:0e:45:b2:5b: d6:da:a8:5a:2a:64:47:7e:92:35:b4:fa:92:e1:c8: 61:35:62:7e:99:d6:7e:5c:45:73:b6:0f:ad:83:9a: ed:30:41:ed:7a:8f:a4:d0:b4:ca:9d:f0:d5:5c:4c: e9:94:6c:07:5d:50:d0:01:f6:d2:32:77:a5:58:69: 06:42:9d:81:a9:62:6d:3e:0e:db:a9:31:c9:22:ca: e4:81:88:94:da:ef:74:63:2b:4e:5c:f8:4d:b9:27: 33:66:53:f8:fe:02:ed:ba:45:ca:30:a0:4e:e8:b4: 59:37:54:1e:bb:3c:07:92:ad:dc:28:57:62:f7:bf: 61:61:ac:c8:ab:46:47:b3:25:9f:2e:38:f1:03:05: 0c:00:11:b7:61:09:40:66:ba:33:90:59:14:a2:a2: 54:61:a9:d4:04:8e:fb:66:7b:e2:37:4d:59:33:ee: 41:36:13:0c:97:32:ac:26:95:17:2d:82:9b:03:2c: f1:8c:50:fa:1a:bf:64:0d:40:a1:9b:e3:29:0b:c9: 44:9f:b9:e7:dc:08:25:9c:0c:49:09:75:33:1b:af: 55:ab:2e:d7:e8:4f:3a:ac:44:2f:83:c9:17:c3:a5: 17:21:37:78:4f:65:54:de:7f:5a:5e:6a:bc:b1:b4: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A0:BF:D6:79:6F:CB:DB:A4:DA:D9:1E:58:21:33:57:46:AA:89:4D X509v3 Authority Key Identifier: keyid:FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:2d:ce:e2:75:e0:0c:e0:bd:b4:fc:6f:6e:3d:03:58:27:9d: 77:4f:be:9e:62:24:04:bc:39:43:2a:46:5b:26:9c:9a:da:5e: 81:e1:ad:34:fa:e8:3e:a8:93:ac:e6:73:fe:bb:78:84:33:4a: 32:65:64:34:9e:57:fc:a8:3f:b3:11:77:b6:cb:98:5b:84:3e: f1:81:4b:fa:f8:cc:3d:d0:06:e1:37:7f:36:a7:3b:00:f1:9a: 1a:37:63:35:e7:d9:22:bb:b1:35:97:b8:4a:4b:89:ce:30:8a: fe:0c:18:f6:d9:33:b3:be:ee:9e:a4:51:63:bc:20:b7:d7:75: ce:ea:eb:fc:ba:5b:59:b6:e6:bb:b4:3e:dc:9e:17:e1:16:af: 96:47:27:5a:6d:dd:cb:6b:81:a3:f8:c9:4d:7a:c6:d6:5b:6f: 50:fa:3e:1e:aa:20:c2:01:1a:ee:e5:a6:a0:b9:42:3d:e1:e3: 5c:53:d0:ce:dc:d4:8b:0e:57:54:65:51:8d:b9:7a:e9:48:d3: d9:d0:02:53:76:01:61:5a:c1:b2:1b:33:47:fd:b9:4d:0d:51: 8f:d4:18:ab:24:ef:a2:a8:fd:18:6f:d9:75:bb:13:af:c8:d9: 17:f5:66:f8:d7:44:d5:8b:da:f6:b0:38:d1:02:88:8d:59:06: 14:c5:3d:3d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUe3OW1t0Bv8sjUCpS1uMucRNVj6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NThCQ0Y2Q0Y0MERGRTNFNDNCQzA1NEJGNTIwNjkw NTk2NjQyNzAeFw0yNjAzMjYxMDI3MzhaFw0yNjAzMzAxMTI2MzhaMDMxMTAvBgNV BAMTKDIwQTBCRkQ2Nzk2RkNCREJBNERBRDkxRTU4MjEzMzU3NDZBQTg5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdo42310IJwnatDkWyW9baqFoq ZEd+kjW0+pLhyGE1Yn6Z1n5cRXO2D62Dmu0wQe16j6TQtMqd8NVcTOmUbAddUNAB 9tIyd6VYaQZCnYGpYm0+DtupMckiyuSBiJTa73RjK05c+E25JzNmU/j+Au26Rcow oE7otFk3VB67PAeSrdwoV2L3v2FhrMirRkezJZ8uOPEDBQwAEbdhCUBmujOQWRSi olRhqdQEjvtme+I3TVkz7kE2EwyXMqwmlRctgpsDLPGMUPoav2QNQKGb4ykLyUSf uefcCCWcDEkJdTMbr1WrLtfoTzqsRC+DyRfDpRchN3hPZVTef1pearyxtP+DAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIKC/1nlvy9uk2tkeWCEzV0aqiU0wHwYDVR0j BBgwFoAU/0WLz2z0Df4+Q7wFS/UgaQWWZCcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNzcxNjAzQjI2ODY5QTAwRjY2MTc1NEQxMDM3MjgzQUE4 Qjk2NTI0MUU4RkRFMjlDMUM4NTk0MkExMjNFRkE0LzAvRkY0NThCQ0Y2Q0Y0MERG RTNFNDNCQzA1NEJGNTIwNjkwNTk2NjQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjQ1OEJDRjZDRjQwREZFM0U0 M0JDMDU0QkY1MjA2OTA1OTY2NDI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzc3MTYwM0IyNjg2OUEwMEY2NjE3NTREMTAzNzI4M0FBOEI5NjUyNDFF OEZERTI5QzFDODU5NDJBMTIzRUZBNC8wL0ZGNDU4QkNGNkNGNDBERkUzRTQzQkMw NTRCRjUyMDY5MDU5NjY0MjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAALc7ideAM4L20/G9uPQNYJ513 T76eYiQEvDlDKkZbJpya2l6B4a00+ug+qJOs5nP+u3iEM0oyZWQ0nlf8qD+zEXe2 y5hbhD7xgUv6+Mw90AbhN382pzsA8ZoaN2M159kiu7E1l7hKS4nOMIr+DBj22TOz vu6epFFjvCC313XO6uv8ultZtua7tD7cnhfhFq+WRydabd3La4Gj+MlNesbWW29Q +j4eqiDCARru5aaguUI94eNcU9DO3NSLDldUZVGNuXrpSNPZ0AJTdgFhWsGyGzNH /blNDVGP1BirJO+iqP0Yb9l1uxOvyNkX9Wb410TVi9r2sDjRAoiNWQYUxT09 -----END CERTIFICATE-----Generated at Thu Mar 26 23:33:11 2026 by rpki-client