$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft File: 2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft (raw, json) Hash identifier: 1zAxX+dVFperKf2EEYDBakGrBBulrIfjPkZFTQfMcN0= Subject key identifier: B8:30:A3:56:8F:1B:34:64:14:1F:76:D2:55:81:5A:5B:C9:FF:70:49 Authority key identifier: 2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78 Certificate issuer: /CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078 Certificate serial: 37EBE1BE9A53E6674ABF69475327AE8D89FA789E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft Manifest number: 017D Signing time: Thu 26 Mar 2026 17:21:29 +0000 Manifest this update: Thu 26 Mar 2026 17:16:29 +0000 Manifest next update: Tue 31 Mar 2026 20:30:29 +0000 Files and hashes: 1: 2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl (hash: jk/VmvlcyM7Uj9r9tZ2IW5mu2/KJf2Zr/kgAmO22NrE=) 2: 323830333a393439303a3a2f33322d3438203d3e20323732383233.roa (hash: xr7qdp5RlAAtSHMfn+keb0e1GcHY4lZiz2YQT2CjRdQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:eb:e1:be:9a:53:e6:67:4a:bf:69:47:53:27:ae:8d:89:fa:78:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078 Validity Not Before: Mar 26 17:16:29 2026 GMT Not After : Mar 31 20:30:29 2026 GMT Subject: CN=B830A3568F1B3464141F76D255815A5BC9FF7049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:fc:51:54:2d:3b:e5:5b:17:48:50:35:b2: ce:ed:c2:d8:7c:69:b8:bf:2b:27:5f:49:28:20:70: b4:70:a5:0f:7a:23:c8:4e:df:91:22:73:f9:fa:c7: d4:b3:5f:32:62:88:a8:e2:63:48:d5:89:3d:52:2b: 47:5a:68:9f:4d:9b:19:2d:b2:1f:8d:25:a7:82:67: a0:36:1a:26:57:16:03:db:4b:7c:03:77:a3:e3:3c: b2:25:1a:04:71:72:de:04:f0:08:ad:9d:37:81:3b: e9:ae:77:0f:f2:4c:16:18:3f:22:69:f5:71:2f:c4: 8f:49:80:e1:0e:1c:b6:5f:b2:b6:c1:0b:da:ee:6c: 75:4d:ec:08:d7:a4:81:88:48:f7:0c:f8:98:ce:82: cd:ce:b0:a0:f7:1d:20:7d:33:64:9e:7e:36:41:4a: fe:20:57:da:74:f0:0b:fd:a0:93:46:1b:2a:7a:91: 53:b5:55:cb:1d:2f:80:7a:95:0f:d7:dd:0b:0f:10: ab:6b:c1:4d:3e:a1:45:ae:7c:be:01:2a:21:07:4e: 10:bf:4b:f7:be:63:b8:fd:3d:fe:82:c8:7d:57:a2: 14:ff:af:80:c0:6b:8e:8e:70:a8:e0:e4:d4:6c:ef: aa:c4:f9:2a:b4:cf:0b:ae:5b:82:f9:3b:da:32:5f: da:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:30:A3:56:8F:1B:34:64:14:1F:76:D2:55:81:5A:5B:C9:FF:70:49 X509v3 Authority Key Identifier: keyid:2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e4:c1:ed:74:69:0f:3a:0f:b6:eb:23:0a:23:1e:7b:5b:f5: 4c:58:b0:08:46:4a:69:d6:e6:90:99:4e:6f:1f:cc:00:a1:fa: 41:29:3f:51:73:40:60:65:be:d1:be:dd:94:ac:dc:e1:80:6d: ed:43:d3:11:23:fe:05:a7:1b:43:86:57:89:a5:f6:65:b8:86: 2e:cc:fb:32:80:bd:ad:d6:19:6e:13:76:17:2e:d4:9a:98:96: 70:22:d0:0d:22:8d:bf:ed:5a:eb:7b:a2:a8:83:ae:6e:d7:6c: db:a1:6d:fd:ce:52:ec:92:b4:03:25:a1:3b:5f:7e:0f:05:69: 1f:40:97:0f:6c:11:ae:54:01:dc:4b:a5:cd:85:35:0b:02:cd: 1a:47:b9:87:33:17:65:1a:38:41:6f:78:be:d3:c7:36:a4:19: 5e:43:e3:b4:92:b6:bc:9b:d4:18:7f:1f:ce:88:af:3d:57:fd: 67:59:b4:ed:42:68:d2:f9:9f:fc:3c:c3:ec:80:dd:ac:5c:71: 62:47:9a:8b:52:25:ab:dc:31:de:bf:61:24:42:4c:1a:f2:72: d1:4c:bd:e7:76:94:5a:06:27:8b:67:dc:b6:f9:54:bc:6b:9d: b0:ba:35:67:58:90:2a:64:96:13:b4:fe:62:20:d1:ad:ae:5f: 3d:2c:c0:88 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUN+vhvppT5mdKv2lHUyeujYn6eJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGRjE0MkFFNzhBN0Q5NjVGOEUyMjdERkFBNjU5RTJG RUJERTA3ODAeFw0yNjAzMjYxNzE2MjlaFw0yNjAzMzEyMDMwMjlaMDMxMTAvBgNV BAMTKEI4MzBBMzU2OEYxQjM0NjQxNDFGNzZEMjU1ODE1QTVCQzlGRjcwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHvxRVC075VsXSFA1ss7twth8 abi/KydfSSggcLRwpQ96I8hO35Eic/n6x9SzXzJiiKjiY0jViT1SK0daaJ9Nmxkt sh+NJaeCZ6A2GiZXFgPbS3wDd6PjPLIlGgRxct4E8AitnTeBO+mudw/yTBYYPyJp 9XEvxI9JgOEOHLZfsrbBC9rubHVN7AjXpIGISPcM+JjOgs3OsKD3HSB9M2SefjZB Sv4gV9p08Av9oJNGGyp6kVO1VcsdL4B6lQ/X3QsPEKtrwU0+oUWufL4BKiEHThC/ S/e+Y7j9Pf6CyH1XohT/r4DAa46OcKjg5NRs76rE+Sq0zwuuW4L5O9oyX9rTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuDCjVo8bNGQUH3bSVYFaW8n/cEkwHwYDVR0j BBgwFoAUKv8UKueKfZZfjiJ9+qZZ4v694HgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MjQ0RjY4MzVFMjJCQTI2OTk5MjgyMDNCRkI4M0FEQjVE MjQ0QTA5OUY1MzUyOEI1Rjc4RDIyOEQ2OTU5MzczLzAvMkFGRjE0MkFFNzhBN0Q5 NjVGOEUyMjdERkFBNjU5RTJGRUJERTA3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUZGMTQyQUU3OEE3RDk2NUY4 RTIyN0RGQUE2NTlFMkZFQkRFMDc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDI0NEY2ODM1RTIyQkEyNjk5OTI4MjAzQkZCODNBREI1RDI0NEEwOTlG NTM1MjhCNUY3OEQyMjhENjk1OTM3My8wLzJBRkYxNDJBRTc4QTdEOTY1RjhFMjI3 REZBQTY1OUUyRkVCREUwNzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB15MHtdGkPOg+26yMKIx57W/VM WLAIRkpp1uaQmU5vH8wAofpBKT9Rc0BgZb7Rvt2UrNzhgG3tQ9MRI/4FpxtDhleJ pfZluIYuzPsygL2t1hluE3YXLtSamJZwItANIo2/7Vrre6Kog65u12zboW39zlLs krQDJaE7X34PBWkfQJcPbBGuVAHcS6XNhTULAs0aR7mHMxdlGjhBb3i+08c2pBle Q+O0kra8m9QYfx/OiK89V/1nWbTtQmjS+Z/8PMPsgN2sXHFiR5qLUiWr3DHev2Ek Qkwa8nLRTL3ndpRaBieLZ9y2+VS8a52wujVnWJAqZJYTtP5iINGtrl89LMCI -----END CERTIFICATE-----Generated at Thu Mar 26 23:07:27 2026 by rpki-client