$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft File: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft (raw, json) Hash identifier: TjPpf9hz9J6ecLfG8RZISVuQ5zMd1N7PxEcaFhB/fk8= Subject key identifier: 85:E7:DF:82:00:27:56:0F:1F:C6:54:52:87:07:9C:44:16:57:53:E3 Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6 Certificate issuer: /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6 Certificate serial: 3D0E7BFCF0E0583743A334FBA8FB5BF9A19FF969 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft Manifest number: 017F Signing time: Thu 26 Mar 2026 08:16:20 +0000 Manifest this update: Thu 26 Mar 2026 08:11:20 +0000 Manifest next update: Mon 30 Mar 2026 17:00:20 +0000 Files and hashes: 1: 3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa (hash: HA7OAjjav6xGtFtc3xm/kmZwclGIrpK5p+eZ/CT9NeI=) 2: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl (hash: OD8T/d9Z+tKGwQv1Nhim2nASDZ09eV5tbIN1p3wCJHg=) 3: 3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa (hash: KsW2J3ahyaXYo1RVyTmMoodNP/HTzrq2tB5PnE85x3o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 17:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0e:7b:fc:f0:e0:58:37:43:a3:34:fb:a8:fb:5b:f9:a1:9f:f9:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6 Validity Not Before: Mar 26 08:11:20 2026 GMT Not After : Mar 30 17:00:20 2026 GMT Subject: CN=85E7DF820027560F1FC6545287079C44165753E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:b2:56:fd:47:63:80:63:c6:e4:49:cf:0f: 10:6c:4c:66:77:5f:5d:39:1e:cd:85:25:8b:5e:e8: 4f:8b:c0:c1:2c:4a:73:5b:12:a2:d9:c7:2c:ab:5e: fb:f3:79:2e:49:8b:d4:3c:01:da:fa:2a:76:3b:b3: 1a:62:9e:61:09:b2:aa:47:95:f9:ef:0a:00:59:3d: 6a:9e:de:1c:b6:5b:8a:1c:48:95:64:30:13:43:cb: 8b:95:ce:e8:e0:55:72:70:94:e9:bf:67:94:69:14: 62:fd:cf:c3:02:90:41:43:d6:eb:1d:fe:be:a2:d5: 41:2e:c1:15:b7:bb:82:00:f9:9b:80:d2:29:f2:72: a0:3b:4e:7c:65:3b:54:44:12:24:82:33:3c:46:2f: 3a:ae:9c:01:b7:8c:7e:af:f9:aa:46:4d:2e:57:9d: b6:57:31:5f:4a:a2:f0:0c:25:d9:53:2b:b5:22:d0: d8:db:16:07:65:c3:0e:ea:6c:80:3a:88:af:ad:df: 0b:b0:d0:78:95:c5:24:af:a8:3b:95:a4:22:e8:35: 67:75:3c:5d:18:0f:0f:40:76:72:41:8c:c4:10:d1: 78:2d:c4:16:b8:67:50:1d:64:09:83:fa:6e:eb:ad: fa:9a:84:75:69:59:f4:9b:94:7c:a9:ef:ae:6e:fc: 11:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E7:DF:82:00:27:56:0F:1F:C6:54:52:87:07:9C:44:16:57:53:E3 X509v3 Authority Key Identifier: keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2f:47:ca:03:e6:74:38:e8:f4:8b:5d:7a:b0:cd:e1:5f:ee: e9:2b:ab:58:be:60:63:90:09:1a:4d:a6:a8:19:e9:f9:15:25: 13:85:0e:cb:cc:bf:94:40:53:4a:88:52:cf:de:25:be:30:39: e9:be:09:61:15:24:22:22:3b:9d:55:ea:28:2d:73:8c:76:1f: 8d:43:d5:37:45:26:ff:96:31:f5:4f:10:06:c9:05:e1:15:c6: 47:fe:57:4d:86:ab:53:13:e6:16:3c:10:59:a0:e3:cf:12:6d: f0:10:2c:f2:7e:41:be:f3:d5:9d:ba:35:f4:f5:31:c2:b6:3a: 67:9f:a0:1f:df:ad:f4:0d:b6:49:26:a2:71:46:a9:14:74:48: e5:8c:3f:9d:b1:99:63:98:ea:38:63:36:56:e7:87:44:c8:ef: 0c:fe:41:87:a7:27:ef:09:bc:1c:29:14:6a:9b:17:41:7c:63: b4:49:cd:b7:70:ba:e8:17:b1:00:3f:c9:22:e7:aa:9a:fc:57: c2:15:fd:45:55:fb:fb:8f:a2:e0:70:85:47:dd:68:ba:d4:43: f5:ab:c2:22:16:bf:58:05:eb:93:e1:08:99:1b:50:79:67:db: ac:36:69:6c:71:fd:1f:ec:30:e4:6a:e6:17:f8:0f:24:87:f8: 83:99:22:e9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPQ57/PDgWDdDozT7qPtb+aGf+WkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4RjBCQjE2NkQxNEU3REQyNUZBNzhDNzg2QjkxN0Qy NjQyQThFNjAeFw0yNjAzMjYwODExMjBaFw0yNjAzMzAxNzAwMjBaMDMxMTAvBgNV BAMTKDg1RTdERjgyMDAyNzU2MEYxRkM2NTQ1Mjg3MDc5QzQ0MTY1NzUzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJRLJW/UdjgGPG5EnPDxBsTGZ3 X105Hs2FJYte6E+LwMEsSnNbEqLZxyyrXvvzeS5Ji9Q8Adr6KnY7sxpinmEJsqpH lfnvCgBZPWqe3hy2W4ocSJVkMBNDy4uVzujgVXJwlOm/Z5RpFGL9z8MCkEFD1usd /r6i1UEuwRW3u4IA+ZuA0inycqA7TnxlO1REEiSCMzxGLzqunAG3jH6v+apGTS5X nbZXMV9KovAMJdlTK7Ui0NjbFgdlww7qbIA6iK+t3wuw0HiVxSSvqDuVpCLoNWd1 PF0YDw9AdnJBjMQQ0XgtxBa4Z1AdZAmD+m7rrfqahHVpWfSblHyp765u/BEBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUheffggAnVg8fxlRShwecRBZXU+MwHwYDVR0j BBgwFoAUaI8LsWbRTn3SX6eMeGuRfSZCqOYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQTdFNjlGNzk2MTY5RTY5QzA2NDU4RDAyMzk4MjY1QUND NkEzMjRCMDNBMTkwQ0ZCRTJDN0NCNzJCRDAyNjA5LzAvNjg4RjBCQjE2NkQxNEU3 REQyNUZBNzhDNzg2QjkxN0QyNjQyQThFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82ODhGMEJCMTY2RDE0RTdERDI1 RkE3OEM3ODZCOTE3RDI2NDJBOEU2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0E3RTY5Rjc5NjE2OUU2OUMwNjQ1OEQwMjM5ODI2NUFDQzZBMzI0QjAz QTE5MENGQkUyQzdDQjcyQkQwMjYwOS8wLzY4OEYwQkIxNjZEMTRFN0REMjVGQTc4 Qzc4NkI5MTdEMjY0MkE4RTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwL0fKA+Z0OOj0i116sM3hX+7p K6tYvmBjkAkaTaaoGen5FSUThQ7LzL+UQFNKiFLP3iW+MDnpvglhFSQiIjudVeoo LXOMdh+NQ9U3RSb/ljH1TxAGyQXhFcZH/ldNhqtTE+YWPBBZoOPPEm3wECzyfkG+ 89WdujX09THCtjpnn6Af3630DbZJJqJxRqkUdEjljD+dsZljmOo4YzZW54dEyO8M /kGHpyfvCbwcKRRqmxdBfGO0Sc23cLroF7EAP8ki56qa/FfCFf1FVfv7j6LgcIVH 3Wi61EP1q8IiFr9YBeuT4QiZG1B5Z9usNmlscf0f7DDkauYX+A8kh/iDmSLp -----END CERTIFICATE-----Generated at Fri Mar 27 08:26:48 2026 by rpki-client