$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft File: 3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft (raw, json) Hash identifier: c8ib5c53FZ0Lu+//CQ3DMyXuMlaitYCrTVnKV0gj0XQ= Subject key identifier: 45:AE:97:97:B2:E7:D1:62:FF:74:35:9D:AD:BE:5C:D9:6F:21:65:D2 Authority key identifier: 3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27 Certificate issuer: /CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27 Certificate serial: 237D718AE705094AFF8ABBCCEDBE112775F4CCD8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft Manifest number: 0142 Signing time: Wed 25 Mar 2026 05:15:49 +0000 Manifest this update: Wed 25 Mar 2026 05:10:49 +0000 Manifest next update: Mon 30 Mar 2026 19:45:49 +0000 Files and hashes: 1: 3138372e3130322e3232392e302f32342d3234203d3e20323733323830.roa (hash: UjH8uRWjG8Ut49YxqXvAmJPaNA3fGdCfKDBGUGrCSiI=) 2: 3138372e3130322e3233302e302f32342d3234203d3e20323730313630.roa (hash: a0k+CwYndo/yJVuwlwMwgfTqpZBa1L3iIsbKzuB2Ssk=) 3: 3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl (hash: +ffOXoqhI/cD8gKyPuPSvczaFjZ+x35GAEE10AqaMb4=) 4: 3138372e3130322e3232382e302f32332d3234203d3e20323730313135.roa (hash: T5qcA5Hg+4yxfH7EqrPAjjz2OExW8ImItq8qjroLAnQ=) 5: 323830363a3362373a3a2f33322d3332203d3e20323730313135.roa (hash: ApUEMcIFcj7OmyMwoOymjdorssjQseVK3/CqqZnrHys=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7d:71:8a:e7:05:09:4a:ff:8a:bb:cc:ed:be:11:27:75:f4:cc:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27 Validity Not Before: Mar 25 05:10:49 2026 GMT Not After : Mar 30 19:45:49 2026 GMT Subject: CN=45AE9797B2E7D162FF74359DADBE5CD96F2165D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:a7:e3:63:88:60:30:a7:89:5e:47:cf:b5: 7c:68:5b:08:4b:75:83:e0:23:85:89:21:4a:f8:12: bf:36:ba:75:47:c4:48:3a:11:da:a2:27:85:d2:5c: 4a:bb:4c:6f:e2:80:29:39:19:8e:6b:f4:ca:6d:68: c4:29:f4:5a:07:64:c9:c5:83:c3:52:94:7c:13:d7: 2b:d3:f3:6b:0e:2d:97:2b:00:7f:78:fe:ec:e1:07: 6e:58:df:66:45:5e:4d:e7:7b:13:83:bf:64:19:b8: db:6e:0f:58:9e:ca:76:09:aa:2a:85:ef:6c:95:f3: b5:e8:53:2c:87:9a:82:ae:2c:6f:07:d6:8b:95:46: 27:75:16:dd:2d:6a:2a:24:92:f6:0e:6d:36:05:fe: 7a:26:6d:bb:c8:97:0d:85:0e:c3:ac:26:e5:3d:f1: 20:57:3a:df:dc:8d:45:4c:82:cb:5b:a1:63:15:a3: 4b:86:e8:07:61:f6:e3:34:76:62:07:a2:48:6c:c4: f7:44:0a:f9:86:2f:8d:b2:c7:1e:64:5f:5b:4e:ed: 08:12:e6:88:3d:ba:83:22:c2:f0:8d:5f:69:64:45: d3:3e:cc:b9:c4:66:af:44:c6:a7:e2:9a:cf:3d:9c: a9:3e:28:f5:b2:c6:57:5e:31:fb:55:cf:ca:0f:9d: 00:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AE:97:97:B2:E7:D1:62:FF:74:35:9D:AD:BE:5C:D9:6F:21:65:D2 X509v3 Authority Key Identifier: keyid:3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5d:79:b5:02:82:35:41:e2:dd:b2:62:52:ed:3e:97:58:52: 4d:7a:47:fb:d5:a1:bb:e2:90:92:62:59:8d:0e:43:f5:7e:39: 93:9b:0a:63:40:92:a3:a7:44:4f:b0:71:8d:41:55:c6:9e:04: a7:a9:c3:a9:41:53:a0:29:47:e2:87:7a:45:ef:1c:05:02:98: 70:28:df:ef:3a:09:5d:3d:ad:91:c5:34:33:12:1b:04:35:bb: 2b:44:c1:65:0d:8c:d7:72:8a:19:eb:6e:62:4d:4e:c5:ce:8d: 8b:05:53:98:ec:72:3e:96:b6:8f:d0:0d:a1:2a:0f:82:0c:2e: 94:70:4a:47:07:b3:72:b1:18:a8:bb:a4:a8:0c:3c:7f:aa:03: 03:9d:77:56:50:60:17:db:08:5f:5d:9d:42:9f:4b:53:d9:c6: 51:7b:96:7a:3c:b0:71:f9:99:cd:c2:6a:1b:b5:b6:65:95:14: f5:c4:d3:5f:36:23:44:20:a3:f5:e7:91:0f:a1:1c:8b:05:b8: 8e:44:7b:6f:09:a6:e3:b9:33:71:4f:8f:b5:b9:eb:df:e8:2c: 30:39:62:37:b9:d6:30:e3:18:b9:69:23:29:a0:1d:89:0d:52: 5f:e5:41:ba:8e:3d:06:1e:5b:a9:1b:a9:79:e9:e4:e3:24:ca: d0:0b:2e:eb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUI31xiucFCUr/irvM7b4RJ3X0zNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E0QTI5REVCRDU5QzdBMDRFNjE5M0E0MkE1RUZDM0My NDRCMkQyNzAeFw0yNjAzMjUwNTEwNDlaFw0yNjAzMzAxOTQ1NDlaMDMxMTAvBgNV BAMTKDQ1QUU5Nzk3QjJFN0QxNjJGRjc0MzU5REFEQkU1Q0Q5NkYyMTY1RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2afjY4hgMKeJXkfPtXxoWwhL dYPgI4WJIUr4Er82unVHxEg6EdqiJ4XSXEq7TG/igCk5GY5r9MptaMQp9FoHZMnF g8NSlHwT1yvT82sOLZcrAH94/uzhB25Y32ZFXk3nexODv2QZuNtuD1ieynYJqiqF 72yV87XoUyyHmoKuLG8H1ouVRid1Ft0taiokkvYObTYF/nombbvIlw2FDsOsJuU9 8SBXOt/cjUVMgstboWMVo0uG6Adh9uM0dmIHokhsxPdECvmGL42yxx5kX1tO7QgS 5og9uoMiwvCNX2lkRdM+zLnEZq9Exqfims89nKk+KPWyxldeMftVz8oPnQC3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQURa6Xl7Ln0WL/dDWdrb5c2W8hZdIwHwYDVR0j BBgwFoAUOkop3r1Zx6BOYZOkKl78PCRLLScwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQ0FBQ0RCQzIyMkQ2NEQ0OUU1QzJFQkJCN0YyN0Y4NjEw ODU4OTBFMjY1QjhDNjUxQ0FGNTlDNzI1QUE3RDFFLzAvM0E0QTI5REVCRDU5QzdB MDRFNjE5M0E0MkE1RUZDM0MyNDRCMkQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTRBMjlERUJENTlDN0EwNEU2 MTkzQTQyQTVFRkMzQzI0NEIyRDI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0NBQUNEQkMyMjJENjRENDlFNUMyRUJCQjdGMjdGODYxMDg1ODkwRTI2 NUI4QzY1MUNBRjU5QzcyNUFBN0QxRS8wLzNBNEEyOURFQkQ1OUM3QTA0RTYxOTNB NDJBNUVGQzNDMjQ0QjJEMjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7XXm1AoI1QeLdsmJS7T6XWFJN ekf71aG74pCSYlmNDkP1fjmTmwpjQJKjp0RPsHGNQVXGngSnqcOpQVOgKUfih3pF 7xwFAphwKN/vOgldPa2RxTQzEhsENbsrRMFlDYzXcooZ625iTU7Fzo2LBVOY7HI+ lraP0A2hKg+CDC6UcEpHB7NysRiou6SoDDx/qgMDnXdWUGAX2whfXZ1Cn0tT2cZR e5Z6PLBx+ZnNwmobtbZllRT1xNNfNiNEIKP155EPoRyLBbiORHtvCabjuTNxT4+1 uevf6CwwOWI3udYw4xi5aSMpoB2JDVJf5UG6jj0GHlupG6l56eTjJMrQCy7r -----END CERTIFICATE-----Generated at Thu Mar 26 21:42:33 2026 by rpki-client