$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.mft File: A5869529D5045BE846944304A74862560C583B82.mft (raw, json) Hash identifier: r6VC56e5rmC9T1NhueWYrs0jV1i/rKM6ckqRFR4q/9w= Subject key identifier: 22:A2:CB:12:EE:4A:90:95:E0:46:E5:CD:83:20:B1:47:3C:A4:0A:6C Authority key identifier: A5:86:95:29:D5:04:5B:E8:46:94:43:04:A7:48:62:56:0C:58:3B:82 Certificate issuer: /CN=A5869529D5045BE846944304A74862560C583B82 Certificate serial: 36F2A77C712480E2E9E6AA0959363B03EC7190CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.mft Manifest number: 017E Signing time: Fri 27 Mar 2026 03:02:19 +0000 Manifest this update: Fri 27 Mar 2026 02:57:19 +0000 Manifest next update: Tue 31 Mar 2026 06:03:19 +0000 Files and hashes: 1: A5869529D5045BE846944304A74862560C583B82.crl (hash: SEKlLhe7wIBzQrbCw4lIzEkGQX8kydjGixDF0N3Vb8s=) 2: 323830333a656234303a3a2f33322d3332203d3e20323634373132.roa (hash: uXsSAk5HXSeElsA0MzaOV3TOI3MLOnCqM6KIAWRojLQ=) 3: 3137302e3135302e382e302f32322d3234203d3e20323634373132.roa (hash: NZvuErqr3VYeQz6YWVWV9SlQgJiDeMj89tcBl2+Qkjc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.crl rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f2:a7:7c:71:24:80:e2:e9:e6:aa:09:59:36:3b:03:ec:71:90:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5869529D5045BE846944304A74862560C583B82 Validity Not Before: Mar 27 02:57:19 2026 GMT Not After : Mar 31 06:03:19 2026 GMT Subject: CN=22A2CB12EE4A9095E046E5CD8320B1473CA40A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:6f:b9:25:d6:4b:04:cd:0e:a6:a2:a1:65: 78:85:b1:83:d7:0a:eb:40:e9:1a:e8:71:0b:ff:2e: df:19:de:e3:8e:dd:cd:00:30:bf:12:e1:54:7f:23: 74:3a:5f:42:6d:2d:74:1c:78:90:33:45:56:47:af: 7d:64:31:3d:b0:59:cb:78:8c:d5:e0:7d:40:b2:d4: 01:27:23:20:55:f0:f3:87:f7:77:8d:47:ee:ac:94: ff:94:8b:bd:d2:fb:10:00:f3:dd:1e:1e:7f:67:c4: 4d:8a:90:4d:90:88:26:14:25:62:53:41:31:b7:15: 97:4f:fb:61:27:d9:0d:4f:9a:1d:6f:2d:63:b4:9e: 25:69:77:e4:af:59:57:c2:5a:a9:fe:0b:09:58:c3: b8:96:77:f6:ce:b0:1b:fa:7e:c9:43:bd:ba:b4:83: a3:24:90:7e:22:8e:1f:77:52:8b:5e:f6:5f:5a:05: 33:ee:3b:60:62:29:b6:67:19:19:15:f4:8b:dc:80: 33:0f:cc:02:3a:d5:97:8c:34:06:fb:59:8e:17:df: f6:1b:11:f6:89:91:4a:55:b5:cc:e2:4a:a9:33:52: 2c:10:2a:89:e0:2d:88:32:6a:a5:d8:c6:99:ea:67: a9:c0:15:12:1e:dd:ae:78:6c:f0:54:1c:32:27:20: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A2:CB:12:EE:4A:90:95:E0:46:E5:CD:83:20:B1:47:3C:A4:0A:6C X509v3 Authority Key Identifier: keyid:A5:86:95:29:D5:04:5B:E8:46:94:43:04:A7:48:62:56:0C:58:3B:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:39:d9:25:48:a8:35:fd:53:f0:8b:3c:30:bd:e0:65:72:aa: ac:4a:89:ed:2c:b4:f0:58:b0:36:b9:22:f7:7f:78:48:14:db: d8:50:51:6c:08:54:32:ae:33:39:3b:c6:27:3d:91:20:d0:62: 67:97:b0:ce:65:2e:dd:9d:8b:61:1f:89:a7:eb:48:b8:43:e4: 09:37:44:61:67:69:f9:33:e6:56:5f:e8:38:f4:5f:4f:60:2b: 63:76:b4:62:81:e3:fb:0e:33:e5:21:48:5e:90:5a:da:eb:32: df:f3:2f:04:07:15:17:d4:4d:2e:4e:1e:65:74:7b:2b:3d:df: 0a:89:82:17:7c:46:2c:5a:da:68:25:32:45:f9:6b:e7:a3:f7: d2:c8:cb:9b:83:47:7e:35:d8:bd:40:b8:7f:07:34:81:4d:64: 7d:84:3c:f6:0a:ec:4d:03:94:c6:12:53:74:7e:63:e6:7b:7d: da:3e:74:3a:d2:60:74:26:9a:c0:54:0b:1a:4e:09:6e:1e:83: 95:fc:4a:2f:6b:67:31:fc:80:44:db:64:de:40:23:7c:48:97: 0c:24:3e:e8:42:5c:d9:99:e2:5d:c3:9a:45:6d:22:40:a7:3a: da:fe:11:3c:df:9d:1a:e7:4b:da:86:2d:db:eb:3d:76:75:e7: 79:a6:06:44 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNvKnfHEkgOLp5qoJWTY7A+xxkMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4Njk1MjlENTA0NUJFODQ2OTQ0MzA0QTc0ODYyNTYw QzU4M0I4MjAeFw0yNjAzMjcwMjU3MTlaFw0yNjAzMzEwNjAzMTlaMDMxMTAvBgNV BAMTKDIyQTJDQjEyRUU0QTkwOTVFMDQ2RTVDRDgzMjBCMTQ3M0NBNDBBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr72+5JdZLBM0OpqKhZXiFsYPX CutA6RrocQv/Lt8Z3uOO3c0AML8S4VR/I3Q6X0JtLXQceJAzRVZHr31kMT2wWct4 jNXgfUCy1AEnIyBV8POH93eNR+6slP+Ui73S+xAA890eHn9nxE2KkE2QiCYUJWJT QTG3FZdP+2En2Q1Pmh1vLWO0niVpd+SvWVfCWqn+CwlYw7iWd/bOsBv6fslDvbq0 g6MkkH4ijh93Uote9l9aBTPuO2BiKbZnGRkV9IvcgDMPzAI61ZeMNAb7WY4X3/Yb EfaJkUpVtcziSqkzUiwQKongLYgyaqXYxpnqZ6nAFRIe3a54bPBUHDInILUTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIqLLEu5KkJXgRuXNgyCxRzykCmwwHwYDVR0j BBgwFoAUpYaVKdUEW+hGlEMEp0hiVgxYO4IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MDhCQUREMjM5RkE3QjkyN0M0MDYyMDhGRThFOTRBRDhD MTM3RUFDQ0E0NDdFNkQ3ODk2QkY3NEZGMDMyM0RDLzAvQTU4Njk1MjlENTA0NUJF ODQ2OTQ0MzA0QTc0ODYyNTYwQzU4M0I4Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTg2OTUyOUQ1MDQ1QkU4NDY5 NDQzMDRBNzQ4NjI1NjBDNTgzQjgyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDA4QkFERDIzOUZBN0I5MjdDNDA2MjA4RkU4RTk0QUQ4QzEzN0VBQ0NB NDQ3RTZENzg5NkJGNzRGRjAzMjNEQy8wL0E1ODY5NTI5RDUwNDVCRTg0Njk0NDMw NEE3NDg2MjU2MEM1ODNCODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIOdklSKg1/VPwizwwveBlcqqs SontLLTwWLA2uSL3f3hIFNvYUFFsCFQyrjM5O8YnPZEg0GJnl7DOZS7dnYthH4mn 60i4Q+QJN0RhZ2n5M+ZWX+g49F9PYCtjdrRigeP7DjPlIUhekFra6zLf8y8EBxUX 1E0uTh5ldHsrPd8KiYIXfEYsWtpoJTJF+Wvno/fSyMubg0d+Ndi9QLh/BzSBTWR9 hDz2CuxNA5TGElN0fmPme33aPnQ60mB0JprAVAsaTgluHoOV/Eova2cx/IBE22Te QCN8SJcMJD7oQlzZmeJdw5pFbSJApzra/hE8350a50vahi3b6z12ded5pgZE -----END CERTIFICATE-----Generated at Fri Mar 27 06:55:08 2026 by rpki-client