$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.mft File: 64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.mft (raw, json) Hash identifier: h71LEKs3P4fZwvLjLiGqmbdinPM9J/6tI1YICj4nFLY= Subject key identifier: 21:5C:27:1A:DC:2C:44:01:41:9F:2C:F5:29:08:72:00:21:32:E8:23 Authority key identifier: 64:AD:17:CB:5B:C0:70:8C:93:6D:4B:99:5E:E5:8F:7D:E3:9D:1F:5C Certificate issuer: /CN=64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C Certificate serial: 32C5FD86C79486921F64484C8A2244F93A04EF66 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.mft Manifest number: 017D Signing time: Tue 24 Mar 2026 17:33:38 +0000 Manifest this update: Tue 24 Mar 2026 17:28:38 +0000 Manifest next update: Mon 30 Mar 2026 09:31:38 +0000 Files and hashes: 1: 34352e3136342e31362e302f32322d3234203d3e20323637363935.roa (hash: oz+2CK+n13iHwXi2FRGxW3J+B4aS4DR4hvKzBhJx8Po=) 2: 64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.crl (hash: rW8OMrGuGDVtcX1Fa9yFzISj1mRFoxKMcECsQiudCKk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.crl rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 09:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c5:fd:86:c7:94:86:92:1f:64:48:4c:8a:22:44:f9:3a:04:ef:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C Validity Not Before: Mar 24 17:28:38 2026 GMT Not After : Mar 30 09:31:38 2026 GMT Subject: CN=215C271ADC2C4401419F2CF5290872002132E823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:69:32:03:69:f9:4d:62:c8:df:4d:32:29: 9e:36:6f:c0:8f:77:6b:34:62:66:1d:50:ea:39:44: fc:d4:2d:bd:41:c8:d5:7b:d3:4e:bd:cd:b7:7d:39: 08:d4:f6:65:86:39:ca:c0:0e:6c:e8:2a:4a:c9:11: 02:b7:5f:b8:bd:d8:63:f9:f6:2c:38:28:bf:bc:e3: 21:11:1a:5c:6b:ee:ec:08:d4:f8:47:d6:e5:65:16: f5:e2:62:d4:ee:c2:6c:4f:b4:37:21:fe:cf:6e:4f: ba:b7:26:d0:46:a7:92:39:63:3b:13:69:52:01:d7: c3:fc:cb:70:87:dd:e0:2c:cb:2b:53:12:00:bd:73: 26:4c:88:01:31:d2:37:92:73:0e:6c:28:af:7a:96: 87:02:8b:83:d5:6c:72:5b:fb:83:93:4b:61:87:25: e7:4d:cc:3a:a0:0f:66:e5:c0:8f:9c:ba:c7:e8:5f: 80:bd:82:37:e1:fb:47:59:67:cb:e6:97:38:9a:bf: 6a:f8:b9:75:04:a0:ab:c4:42:42:35:1b:3b:84:cd: 4b:d5:1a:03:84:b8:d6:09:21:08:3e:f3:db:42:cc: 79:11:03:a1:c5:59:71:00:9b:83:b8:f7:5a:42:e5: 5d:e7:92:32:f9:db:7f:08:ad:cc:ba:57:ee:b0:2c: df:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5C:27:1A:DC:2C:44:01:41:9F:2C:F5:29:08:72:00:21:32:E8:23 X509v3 Authority Key Identifier: keyid:64:AD:17:CB:5B:C0:70:8C:93:6D:4B:99:5E:E5:8F:7D:E3:9D:1F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:61:0b:29:da:e1:dd:e1:d3:dd:66:52:b6:5c:83:63:82:68: 8b:4c:1a:74:4d:03:33:42:c8:6e:e2:10:71:14:e3:a9:d1:2d: 65:59:db:76:db:d8:39:db:04:5d:9d:8c:35:db:53:1d:fc:e7: 51:0d:d4:fb:aa:e1:e6:0a:a6:d9:6e:a2:9f:34:0c:b9:1c:f8: 2c:8b:71:ad:63:c4:d6:6c:ba:f8:5d:4c:d5:55:ff:b9:75:08: c1:a1:d2:53:e3:5f:60:04:41:23:b0:1a:c6:e6:a8:e1:ef:00: e6:46:be:c9:2b:5c:c1:16:56:52:c0:57:7d:26:79:fa:09:83: 75:24:61:2b:91:87:4b:27:c1:09:87:47:44:51:88:c0:10:2c: eb:77:f3:3b:3b:1e:3f:21:43:c2:1b:e7:2d:1e:d6:97:bb:2d: 67:92:cf:a5:4f:88:5f:08:9e:b7:24:4f:b1:70:59:e8:ef:86: a0:a2:fc:14:a3:86:7d:9d:ff:91:4e:ae:b6:56:6e:fc:ed:a1: 9c:ae:9e:dc:13:47:98:85:f3:8e:93:c4:04:09:42:b2:af:82: 1f:94:25:2b:7f:a5:19:3a:11:a5:68:3c:6b:f3:3a:43:77:81: 6d:3d:bd:71:0a:93:90:e5:77:cb:f6:eb:23:ec:8f:98:f2:b8: 3b:4c:85:5d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMsX9hseUhpIfZEhMiiJE+ToE72YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRBRDE3Q0I1QkMwNzA4QzkzNkQ0Qjk5NUVFNThGN0RF MzlEMUY1QzAeFw0yNjAzMjQxNzI4MzhaFw0yNjAzMzAwOTMxMzhaMDMxMTAvBgNV BAMTKDIxNUMyNzFBREMyQzQ0MDE0MTlGMkNGNTI5MDg3MjAwMjEzMkU4MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCni2kyA2n5TWLI300yKZ42b8CP d2s0YmYdUOo5RPzULb1ByNV70069zbd9OQjU9mWGOcrADmzoKkrJEQK3X7i92GP5 9iw4KL+84yERGlxr7uwI1PhH1uVlFvXiYtTuwmxPtDch/s9uT7q3JtBGp5I5YzsT aVIB18P8y3CH3eAsyytTEgC9cyZMiAEx0jeScw5sKK96locCi4PVbHJb+4OTS2GH JedNzDqgD2blwI+cusfoX4C9gjfh+0dZZ8vmlziav2r4uXUEoKvEQkI1GzuEzUvV GgOEuNYJIQg+89tCzHkRA6HFWXEAm4O491pC5V3nkjL5238Ircy6V+6wLN8tAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIVwnGtwsRAFBnyz1KQhyACEy6CMwHwYDVR0j BBgwFoAUZK0Xy1vAcIyTbUuZXuWPfeOdH1wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MTczRjcwODg4RDA4RjU4QUM0MjQ3OTg4ODc2NTk4QUJB RTFCRjJGOTBFNjVFRkI0RTYyNjhBNTgwRDI3M0MxLzAvNjRBRDE3Q0I1QkMwNzA4 QzkzNkQ0Qjk5NUVFNThGN0RFMzlEMUY1Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NEFEMTdDQjVCQzA3MDhDOTM2 RDRCOTk1RUU1OEY3REUzOUQxRjVDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDE3M0Y3MDg4OEQwOEY1OEFDNDI0Nzk4ODg3NjU5OEFCQUUxQkYyRjkw RTY1RUZCNEU2MjY4QTU4MEQyNzNDMS8wLzY0QUQxN0NCNUJDMDcwOEM5MzZENEI5 OTVFRTU4RjdERTM5RDFGNUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATYQsp2uHd4dPdZlK2XINjgmiL TBp0TQMzQshu4hBxFOOp0S1lWdt229g52wRdnYw121Md/OdRDdT7quHmCqbZbqKf NAy5HPgsi3GtY8TWbLr4XUzVVf+5dQjBodJT419gBEEjsBrG5qjh7wDmRr7JK1zB FlZSwFd9Jnn6CYN1JGErkYdLJ8EJh0dEUYjAECzrd/M7Ox4/IUPCG+ctHtaXuy1n ks+lT4hfCJ63JE+xcFno74agovwUo4Z9nf+RTq62Vm787aGcrp7cE0eYhfOOk8QE CUKyr4IflCUrf6UZOhGlaDxr8zpDd4FtPb1xCpOQ5XfL9usj7I+Y8rg7TIVd -----END CERTIFICATE-----Generated at Thu Mar 26 22:00:30 2026 by rpki-client