$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.mft File: A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.mft (raw, json) Hash identifier: OJgj1nVU3EQRKdMSBMrii9au5W6J4yPBYmmxBFoddE4= Subject key identifier: DB:25:6D:34:2E:08:43:3F:3C:C6:DC:6C:38:1F:3D:7C:54:C6:60:1A Authority key identifier: A2:FE:BF:4F:33:A7:2B:CC:78:25:B6:5C:7D:0E:B6:C1:30:CB:F5:27 Certificate issuer: /CN=A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527 Certificate serial: 213841427CD8780D3913C08296517338EBC8C317 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.mft Manifest number: 57 Signing time: Wed 25 Mar 2026 14:31:04 +0000 Manifest this update: Wed 25 Mar 2026 14:26:04 +0000 Manifest next update: Tue 31 Mar 2026 01:31:04 +0000 Files and hashes: 1: A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.crl (hash: 9vzmJ+xWN4rZvyR88na5ItFjC8R5OpOkK8tIolT5CS8=) 2: 323830333a353261303a3a2f33322d3438203d3e203237393833.roa (hash: jLMAUBHK5fxfHllhnjbpF7FF+S4rceKUEVnXdTKDi6g=) 3: 34352e3233392e3132342e302f32322d3234203d3e203237393833.roa (hash: KVZor6HJ6oEcWq/0dzNiDtWFaJ234VTBCRC+ANoZnyU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.crl rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:38:41:42:7c:d8:78:0d:39:13:c0:82:96:51:73:38:eb:c8:c3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527 Validity Not Before: Mar 25 14:26:04 2026 GMT Not After : Mar 31 01:31:04 2026 GMT Subject: CN=DB256D342E08433F3CC6DC6C381F3D7C54C6601A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:89:a3:44:f4:ba:1b:c3:1d:36:e9:f7:99: 12:7a:c2:1a:ed:be:32:2e:09:15:55:f4:33:56:af: e1:82:cf:c7:09:4d:51:a7:59:7f:64:d0:83:12:48: f9:e3:37:b7:46:39:12:8a:59:70:9c:92:01:f4:fb: 2b:61:4b:26:21:c1:5a:3e:d6:d8:d8:2d:36:f3:04: b9:f6:e8:c7:31:0c:53:3d:7c:1b:29:b9:09:4f:40: 8f:86:e9:90:93:25:e4:de:7a:9b:0e:c5:33:69:08: 69:2a:3d:73:1a:bd:a7:c7:17:56:ad:9d:4c:59:07: 42:b6:81:3f:a2:66:9e:5a:90:ff:c2:68:c1:42:5f: d6:ce:85:cd:2e:6b:d5:23:71:cb:4a:20:b6:4c:a9: 0b:f2:f9:a0:be:8f:55:b6:42:94:f4:59:c0:01:93: d5:73:c8:0a:7a:e6:fe:77:04:06:14:2d:9b:11:4f: eb:53:db:70:de:16:2d:02:86:1a:55:bb:c0:de:58: ec:fa:10:20:8f:c2:03:4b:79:f9:0b:14:17:b0:6f: 1a:86:c7:0b:74:ec:cc:fb:70:73:92:20:0f:ad:85: ee:11:f4:50:1f:3a:b1:d0:0a:6f:b5:ed:5b:c5:28: 26:12:58:9a:3e:1a:ae:47:04:42:2b:26:c8:5d:84: fa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:25:6D:34:2E:08:43:3F:3C:C6:DC:6C:38:1F:3D:7C:54:C6:60:1A X509v3 Authority Key Identifier: keyid:A2:FE:BF:4F:33:A7:2B:CC:78:25:B6:5C:7D:0E:B6:C1:30:CB:F5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:af:14:23:77:2e:e8:7e:5f:ae:82:43:7d:1c:84:5e:4b:df: e3:db:00:76:51:b3:05:91:d1:2c:2d:90:c6:f0:6f:13:0f:17: 20:6d:e0:75:90:6b:07:c5:fc:c7:62:a0:86:60:fb:7e:1c:5a: 6d:2d:0f:37:d3:7d:b1:cf:f3:48:b1:8c:c8:1c:f1:28:d8:02: 60:03:cb:90:26:5d:30:f6:3a:29:50:71:54:51:b3:d5:c3:c0: 34:29:2a:83:dd:5e:99:4c:44:a4:75:25:3b:8d:57:93:9a:64: 81:e4:36:49:ed:a5:6b:2d:71:b6:ef:00:37:16:03:36:8a:9d: d0:30:a6:df:23:e6:1d:cf:a3:36:f7:40:e9:06:a7:4b:c7:5a: 24:1e:75:ce:3b:73:a5:bf:6b:75:63:01:58:83:3b:ab:a2:64: 7d:1c:17:5f:f3:5d:6e:b5:bf:d1:a1:b4:11:a8:e0:37:8a:81: 6b:74:ee:33:60:67:18:76:e9:e0:f3:61:4e:41:5b:0e:8b:56: 1f:65:bb:8c:27:5c:82:ab:52:5d:c2:fe:8c:6f:31:fa:99:0e: 21:d6:9c:5f:4d:4a:9c:a7:af:87:81:34:c9:67:07:47:03:3d: 75:7b:4e:07:20:bf:13:56:13:80:66:42:12:b0:17:85:87:43: 1c:e0:1d:4e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIThBQnzYeA05E8CCllFzOOvIwxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGRUJGNEYzM0E3MkJDQzc4MjVCNjVDN0QwRUI2QzEz MENCRjUyNzAeFw0yNjAzMjUxNDI2MDRaFw0yNjAzMzEwMTMxMDRaMDMxMTAvBgNV BAMTKERCMjU2RDM0MkUwODQzM0YzQ0M2REM2QzM4MUYzRDdDNTRDNjYwMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4aImjRPS6G8MdNun3mRJ6whrt vjIuCRVV9DNWr+GCz8cJTVGnWX9k0IMSSPnjN7dGORKKWXCckgH0+ythSyYhwVo+ 1tjYLTbzBLn26McxDFM9fBspuQlPQI+G6ZCTJeTeepsOxTNpCGkqPXMavafHF1at nUxZB0K2gT+iZp5akP/CaMFCX9bOhc0ua9UjcctKILZMqQvy+aC+j1W2QpT0WcAB k9VzyAp65v53BAYULZsRT+tT23DeFi0ChhpVu8DeWOz6ECCPwgNLefkLFBewbxqG xwt07Mz7cHOSIA+the4R9FAfOrHQCm+17VvFKCYSWJo+Gq5HBEIrJshdhPqhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2yVtNC4IQz88xtxsOB89fFTGYBowHwYDVR0j BBgwFoAUov6/TzOnK8x4JbZcfQ62wTDL9ScwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zOEZCODU2MDk0QjM1RjMxNDg4M0RFODE0OEY0QzQ3ODlB Q0U4NjJDOTNDRjRGNUVBREM3RDU5QzVFQUVGMTdBLzAvQTJGRUJGNEYzM0E3MkJD Qzc4MjVCNjVDN0QwRUI2QzEzMENCRjUyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMkZFQkY0RjMzQTcyQkNDNzgy NUI2NUM3RDBFQjZDMTMwQ0JGNTI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzhGQjg1NjA5NEIzNUYzMTQ4ODNERTgxNDhGNEM0Nzg5QUNFODYyQzkz Q0Y0RjVFQURDN0Q1OUM1RUFFRjE3QS8wL0EyRkVCRjRGMzNBNzJCQ0M3ODI1QjY1 QzdEMEVCNkMxMzBDQkY1MjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4rxQjdy7ofl+ugkN9HIReS9/j 2wB2UbMFkdEsLZDG8G8TDxcgbeB1kGsHxfzHYqCGYPt+HFptLQ83032xz/NIsYzI HPEo2AJgA8uQJl0w9jopUHFUUbPVw8A0KSqD3V6ZTESkdSU7jVeTmmSB5DZJ7aVr LXG27wA3FgM2ip3QMKbfI+Ydz6M290DpBqdLx1okHnXOO3Olv2t1YwFYgzuromR9 HBdf811utb/RobQRqOA3ioFrdO4zYGcYdung82FOQVsOi1YfZbuMJ1yCq1Jdwv6M bzH6mQ4h1pxfTUqcp6+HgTTJZwdHAz11e04HIL8TVhOAZkISsBeFh0Mc4B1O -----END CERTIFICATE-----Generated at Thu Mar 26 21:03:45 2026 by rpki-client