$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft File: 11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft (raw, json) Hash identifier: eDsde4ajJHfHsXK1gXBa6WVrysnnW+QkTBK86JIIw1w= Subject key identifier: 91:AE:86:F5:83:B0:1B:C1:73:D0:3B:BA:CF:57:9B:BD:49:84:ED:FC Authority key identifier: 11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2 Certificate issuer: /CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2 Certificate serial: 1929E4FB0D03D90C8937FC2DB6EEB3B2C6B7E6B2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft Manifest number: 0131 Signing time: Thu 26 Mar 2026 19:52:56 +0000 Manifest this update: Thu 26 Mar 2026 19:47:56 +0000 Manifest next update: Tue 31 Mar 2026 15:10:56 +0000 Files and hashes: 1: 323830333a623634303a3a2f33322d3332203d3e20323634363435.roa (hash: Uvuhc9GuflpxT0ULJMwsdStz2CoaBu58yB6F1ZLgR4I=) 2: 3139302e3130342e39362e302f32312d3231203d3e20323634363435.roa (hash: ZImx+kH/QZNptaNJp2uHO7KYtNf11p/HnwGG529wLWk=) 3: 3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa (hash: ndw82tgGhD0cbKt8WwbQC3xb6HH1aYiaoyiR62r2kGM=) 4: 3139302e3130342e3130342e302f32312d3234203d3e203237363630.roa (hash: QpgIA+qR6DnHvHoRgWPKdNBL/H1Gete16vwsABBkANE=) 5: 11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl (hash: ttz+JwJBHXy7P55WfX1b9nnPUtPOHQzhQTHaLACtYDs=) 6: 3133382e3235352e3235342e302f32332d3234203d3e20323634363435.roa (hash: WyvT6BKjOffyK/VR/uNd7FhK13KUj1Kut091yP2l0nk=) 7: 3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa (hash: GKbXOAbHGidO1Yag/LWzAQX+aCAoGKtBmuviPdb8ed0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:29:e4:fb:0d:03:d9:0c:89:37:fc:2d:b6:ee:b3:b2:c6:b7:e6:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2 Validity Not Before: Mar 26 19:47:56 2026 GMT Not After : Mar 31 15:10:56 2026 GMT Subject: CN=91AE86F583B01BC173D03BBACF579BBD4984EDFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:db:fb:9a:c6:fb:ff:51:d7:58:8b:d7:a4: 9e:1d:a5:2b:8e:ab:a8:8b:a3:c2:05:d4:c4:81:e5: d8:b2:70:b7:3d:c8:c8:af:19:d8:99:ad:97:fd:9f: 0e:03:15:d2:b9:d1:7a:1a:62:9d:38:1e:76:e0:8f: 40:31:d3:57:f2:1e:3d:e1:22:5c:a4:f2:89:03:41: ed:47:14:0f:61:bc:55:7f:f9:73:cd:79:aa:ac:2d: fb:32:3c:3b:bc:0f:69:bd:f3:be:e7:29:86:ac:9c: a0:13:2c:38:4a:19:72:e3:b8:07:22:ea:66:c0:24: d5:94:20:3c:5a:50:9c:0c:23:86:24:48:c3:2b:98: ce:1e:3a:24:4f:2a:1a:ef:8d:6d:dd:12:2e:29:fd: 18:38:32:2e:d5:be:47:4a:ee:75:9f:7b:47:b7:13: 58:e5:64:0e:81:d1:fb:04:96:f8:06:74:80:f6:fa: 24:1b:f6:60:4e:09:9b:f8:4e:f5:48:8c:ea:28:ed: c8:94:51:a8:a0:97:0b:74:52:a7:20:83:13:7c:df: 8f:96:05:3f:cc:2f:59:b1:90:34:46:ef:08:69:4e: 5c:07:24:13:57:a7:db:15:66:19:5e:d9:22:e5:29: 50:6a:a8:bb:14:5b:33:97:43:0b:11:0e:7c:3d:06: 0c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AE:86:F5:83:B0:1B:C1:73:D0:3B:BA:CF:57:9B:BD:49:84:ED:FC X509v3 Authority Key Identifier: keyid:11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fe:d3:32:3d:65:87:5c:ed:c0:43:be:74:82:99:a3:98:d2: b0:aa:7d:41:14:e0:71:31:0c:84:80:c5:71:3d:1f:63:0b:08: bb:02:20:38:dd:1e:fc:ce:d0:9c:68:9b:aa:0b:66:d4:22:1f: e4:39:b8:c1:5e:c4:d3:dd:1e:bf:37:63:9c:13:bd:e9:6a:8b: db:27:c9:1c:68:48:77:f3:a1:af:94:48:b2:b3:44:09:98:f4: 27:e9:82:6c:c2:68:60:dc:a5:a9:63:7f:ca:85:57:1c:6d:85: 03:57:ad:56:a3:23:3d:52:5a:1c:ca:f9:f0:b8:e4:ca:d2:33: 26:03:35:35:77:2f:a8:94:4c:f2:0c:7d:c8:d9:27:5d:07:d0: 6b:4b:38:2a:18:1e:9c:17:27:5f:12:ab:ec:06:b0:7a:b6:85: a1:3a:2c:7e:49:d3:a4:f4:e4:50:66:01:c0:8f:30:d4:c1:c5: dc:26:43:41:61:81:ab:2b:b5:18:aa:c6:eb:81:cd:3a:8b:06: 06:b2:b5:2a:d9:a8:62:7f:ca:e6:95:68:6d:33:ff:b5:02:79: 85:a7:73:dc:14:1d:ed:d8:69:3f:5b:18:14:2c:d6:74:f8:60: bf:bd:0f:28:5c:74:60:c7:14:b6:c6:a5:56:74:44:a3:2a:b4: 76:56:9d:d3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGSnk+w0D2QyJN/wttu6zssa35rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE3MzFENkE4ODFGOTEwMDhDQUZFRDNCQTBFNkFFQzYx RTYyNUNGMjAeFw0yNjAzMjYxOTQ3NTZaFw0yNjAzMzExNTEwNTZaMDMxMTAvBgNV BAMTKDkxQUU4NkY1ODNCMDFCQzE3M0QwM0JCQUNGNTc5QkJENDk4NEVERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RNv7msb7/1HXWIvXpJ4dpSuO q6iLo8IF1MSB5diycLc9yMivGdiZrZf9nw4DFdK50XoaYp04Hnbgj0Ax01fyHj3h Ilyk8okDQe1HFA9hvFV/+XPNeaqsLfsyPDu8D2m9877nKYasnKATLDhKGXLjuAci 6mbAJNWUIDxaUJwMI4YkSMMrmM4eOiRPKhrvjW3dEi4p/Rg4Mi7VvkdK7nWfe0e3 E1jlZA6B0fsElvgGdID2+iQb9mBOCZv4TvVIjOoo7ciUUaiglwt0UqcggxN834+W BT/ML1mxkDRG7whpTlwHJBNXp9sVZhle2SLlKVBqqLsUWzOXQwsRDnw9BgzrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUka6G9YOwG8Fz0Du6z1ebvUmE7fwwHwYDVR0j BBgwFoAUEXMdaogfkQCMr+07oOauxh5iXPIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zREFDNjE0MTZFNUMxOTU1RjIyQUZBNjk5REQ4NTUxODRG NjA5ODRCODI1QTJDMENBMzBDOEU5QUNDRUZFRUUxLzAvMTE3MzFENkE4ODFGOTEw MDhDQUZFRDNCQTBFNkFFQzYxRTYyNUNGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMTczMUQ2QTg4MUY5MTAwOENB RkVEM0JBMEU2QUVDNjFFNjI1Q0YyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0RBQzYxNDE2RTVDMTk1NUYyMkFGQTY5OUREODU1MTg0RjYwOTg0Qjgy NUEyQzBDQTMwQzhFOUFDQ0VGRUVFMS8wLzExNzMxRDZBODgxRjkxMDA4Q0FGRUQz QkEwRTZBRUM2MUU2MjVDRjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAG/tMyPWWHXO3AQ750gpmjmNKw qn1BFOBxMQyEgMVxPR9jCwi7AiA43R78ztCcaJuqC2bUIh/kObjBXsTT3R6/N2Oc E73paovbJ8kcaEh386GvlEiys0QJmPQn6YJswmhg3KWpY3/KhVccbYUDV61WoyM9 UlocyvnwuOTK0jMmAzU1dy+olEzyDH3I2SddB9BrSzgqGB6cFydfEqvsBrB6toWh Oix+SdOk9ORQZgHAjzDUwcXcJkNBYYGrK7UYqsbrgc06iwYGsrUq2ahif8rmlWht M/+1AnmFp3PcFB3t2Gk/WxgULNZ0+GC/vQ8oXHRgxxS2xqVWdESjKrR2Vp3T -----END CERTIFICATE-----Generated at Thu Mar 26 23:23:01 2026 by rpki-client