$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft File: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json) Hash identifier: I/+jeibbuGhSdGTNos7Wp7vpKMKZOj6t4hLY2xO9B6A= Subject key identifier: D9:D4:B5:63:A2:0A:49:DF:E5:28:8F:F8:07:AB:54:EC:81:39:61:21 Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 Certificate issuer: /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Certificate serial: 21E51DE9B19E59478C385A12914842A96F96D1D4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft Manifest number: 0174 Signing time: Thu 26 Mar 2026 11:18:07 +0000 Manifest this update: Thu 26 Mar 2026 11:13:07 +0000 Manifest next update: Tue 31 Mar 2026 07:29:07 +0000 Files and hashes: 1: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: Um86cEkZc1cblKMuUA3/7tQwstJEkeehuPwQs3wj8OI=) 2: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: 4LFf4uRlMxMf2oudTQtCgNr/ddYwiQolDdMBxGwEJcg=) 3: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: yLR9gInvOJScV020+NQSpqJzOO/DVsTopc8HkYrAWvo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 13:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e5:1d:e9:b1:9e:59:47:8c:38:5a:12:91:48:42:a9:6f:96:d1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Validity Not Before: Mar 26 11:13:07 2026 GMT Not After : Mar 31 07:29:07 2026 GMT Subject: CN=D9D4B563A20A49DFE5288FF807AB54EC81396121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:b6:6f:a1:4b:89:3b:8f:43:fe:87:7f:a7: 55:31:99:e8:4e:ba:c3:14:32:5b:bb:d3:9a:cc:aa: 03:32:a8:d6:7d:17:b4:70:25:09:27:9d:30:05:ce: d0:b5:07:ac:6a:dc:bd:1d:2e:02:75:3f:30:d9:de: f6:1c:60:fe:f5:a5:56:8d:b9:c0:ef:36:ae:c3:00: 56:08:1d:da:8d:f1:0c:e2:64:fe:86:4d:b0:e3:60: 35:8d:a4:f6:1d:1e:db:37:bf:0c:31:fc:8f:e8:cf: 3d:06:37:20:45:11:dd:71:0a:25:93:0d:9c:6e:df: 5b:b3:4c:07:20:82:6c:13:b6:ce:fd:00:9a:ba:91: b7:8b:23:7a:27:52:49:50:53:77:84:6f:e8:4b:b7: 44:41:b3:bf:48:83:94:92:80:dc:90:29:3e:81:f8: 6d:d3:aa:e7:79:bd:fa:f4:a7:ab:0d:64:94:c4:2f: 67:41:b0:1e:2f:c6:c2:8d:4e:68:ce:c6:c7:3c:7c: f1:74:1a:39:cf:63:0d:af:0f:c5:63:29:94:f0:9c: 95:33:d2:f3:56:62:45:44:21:af:43:46:ea:34:53: 9b:be:68:9b:1d:af:89:e0:c9:ea:b3:63:4b:3d:94: ab:de:0a:98:8d:f0:1e:d2:94:39:94:f1:0e:7a:d5: 0e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D4:B5:63:A2:0A:49:DF:E5:28:8F:F8:07:AB:54:EC:81:39:61:21 X509v3 Authority Key Identifier: keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:21:bf:47:a2:3f:39:03:f8:3b:9f:96:74:08:1a:c1:12:47: 00:4f:2b:69:c9:30:f3:15:f3:42:83:65:36:9f:bc:f6:4f:c6: f6:5f:7c:cf:0d:a1:d0:34:13:7b:dd:54:2b:72:87:d0:6b:b9: 4b:d8:7d:2f:e0:7c:aa:b4:af:61:bd:11:bd:2c:b2:c1:a4:c0: 34:66:a8:06:77:d2:84:aa:4b:f5:ad:0e:14:22:9a:78:23:81: 92:d5:02:38:be:a0:d1:a1:bb:f7:b2:b6:3e:d1:d2:fd:7e:8d: c5:ee:85:9d:56:93:f8:5e:19:d1:69:7c:78:63:98:c3:db:b0: 4e:c2:f0:34:e1:93:7a:c0:9f:7c:a5:22:12:87:f9:0f:12:ce: 34:e4:d3:6d:ee:82:42:a7:a5:2e:d4:6e:49:7b:70:ce:68:6c: 4c:e5:b7:c6:36:f0:49:42:5f:45:39:67:48:0f:b9:65:4c:a3: 16:da:8f:23:a4:69:c9:e9:d2:0a:ac:84:60:1b:73:61:26:d9: ac:61:8b:8a:fa:e2:71:2f:26:a1:3a:d2:f2:f2:60:9d:d4:8e: 6e:36:e0:a2:e1:3d:e6:a2:6e:3e:e9:5e:bf:b0:b4:aa:25:42: 79:71:7c:e9:10:9e:51:3d:f0:c0:4c:df:d0:e4:4f:7e:4f:3b: 74:70:5d:ec -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIeUd6bGeWUeMOFoSkUhCqW+W0dQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG MzU5RkFEOTAeFw0yNjAzMjYxMTEzMDdaFw0yNjAzMzEwNzI5MDdaMDMxMTAvBgNV BAMTKEQ5RDRCNTYzQTIwQTQ5REZFNTI4OEZGODA3QUI1NEVDODEzOTYxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6rZvoUuJO49D/od/p1UxmehO usMUMlu705rMqgMyqNZ9F7RwJQknnTAFztC1B6xq3L0dLgJ1PzDZ3vYcYP71pVaN ucDvNq7DAFYIHdqN8QziZP6GTbDjYDWNpPYdHts3vwwx/I/ozz0GNyBFEd1xCiWT DZxu31uzTAcggmwTts79AJq6kbeLI3onUklQU3eEb+hLt0RBs79Ig5SSgNyQKT6B +G3Tqud5vfr0p6sNZJTEL2dBsB4vxsKNTmjOxsc8fPF0GjnPYw2vD8VjKZTwnJUz 0vNWYkVEIa9DRuo0U5u+aJsdr4ngyeqzY0s9lKveCpiN8B7SlDmU8Q561Q67AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2dS1Y6IKSd/lKI/4B6tU7IE5YSEwHwYDVR0j BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1 MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0 MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wL0Q4NkYwQzBCREZEQTcxQUZCNEY3NTc0 N0Y3NkE5QUY3RjM1OUZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnIb9Hoj85A/g7n5Z0CBrBEkcA TytpyTDzFfNCg2U2n7z2T8b2X3zPDaHQNBN73VQrcofQa7lL2H0v4HyqtK9hvRG9 LLLBpMA0ZqgGd9KEqkv1rQ4UIpp4I4GS1QI4vqDRobv3srY+0dL9fo3F7oWdVpP4 XhnRaXx4Y5jD27BOwvA04ZN6wJ98pSISh/kPEs405NNt7oJCp6Uu1G5Je3DOaGxM 5bfGNvBJQl9FOWdID7llTKMW2o8jpGnJ6dIKrIRgG3NhJtmsYYuK+uJxLyahOtLy 8mCd1I5uNuCi4T3mom4+6V6/sLSqJUJ5cXzpEJ5RPfDATN/Q5E9+Tzt0cF3s -----END CERTIFICATE-----Generated at Thu Mar 26 15:24:13 2026 by rpki-client