$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft File: 2AC489AA343746243A2A3A97A473CEE27756EAA1.mft (raw, json) Hash identifier: ZM5o7EfrKbUQzxMrjcK88wVT9dEqaT2NrJ4j0dq8CfA= Subject key identifier: A1:02:D3:63:49:5F:4D:98:FE:07:CD:61:FA:C1:FF:39:59:A2:8F:63 Authority key identifier: 2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1 Certificate issuer: /CN=2AC489AA343746243A2A3A97A473CEE27756EAA1 Certificate serial: 4CBC76678DFDCAFDDF5EC5ADC2824299A327E9EA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft Manifest number: 0180 Signing time: Tue 24 Mar 2026 22:26:28 +0000 Manifest this update: Tue 24 Mar 2026 22:21:28 +0000 Manifest next update: Mon 30 Mar 2026 10:46:28 +0000 Files and hashes: 1: 2AC489AA343746243A2A3A97A473CEE27756EAA1.crl (hash: cTjExTjvpvLzuFdOMl3G0nJW8mpJ7H0IRyJN6kFXmM0=) 2: 323830313a31393a313830303a3a2f34382d3438203d3e203134303830.roa (hash: qfafKCnP1ch87GPssFfC15yfXMW3naKDRsJseUvTbBg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 10:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bc:76:67:8d:fd:ca:fd:df:5e:c5:ad:c2:82:42:99:a3:27:e9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AC489AA343746243A2A3A97A473CEE27756EAA1 Validity Not Before: Mar 24 22:21:28 2026 GMT Not After : Mar 30 10:46:28 2026 GMT Subject: CN=A102D363495F4D98FE07CD61FAC1FF3959A28F63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:95:6c:5a:ff:d6:20:a0:d0:95:78:fb:7a:be: 83:7e:76:cc:82:fe:69:fc:a7:0f:45:73:e6:1d:ab: 48:ed:80:ca:f4:5e:ef:70:b7:09:e9:b2:28:26:ac: 74:e8:01:97:d1:01:e5:04:74:c9:b3:45:d4:67:8e: 1c:bc:23:af:ea:47:2a:f5:a5:08:f8:20:1c:2e:02: b7:4c:2b:74:bc:8b:f9:36:3e:e5:4e:2d:6d:77:88: 91:0b:ef:c1:f2:3e:49:93:c5:2b:21:dd:be:dc:e7: 5a:81:2d:a8:39:c8:8c:38:d3:7f:2d:bb:7a:f6:6c: a4:f5:d6:dc:f0:5d:80:5b:bc:96:7a:4c:95:6f:fd: e6:02:eb:57:00:e0:43:02:30:a4:c8:bc:61:bd:ee: b9:92:5b:fd:8b:b9:1f:ed:cf:4d:0f:32:20:b7:cc: 17:e2:77:d6:cb:95:7b:8f:34:4a:f9:f2:21:01:38: dc:ed:5b:ab:92:67:db:6d:86:9b:6f:5b:88:84:6f: c3:63:1d:1f:a1:e4:ce:78:c1:ff:fb:e4:4d:c4:35: f3:76:61:46:60:58:d2:db:68:ba:55:29:45:4f:60: b3:84:1a:32:a4:1d:f8:c2:64:85:98:d2:48:fd:61: 6c:ae:5f:c9:57:77:db:93:50:53:7c:f5:7c:98:87: 79:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:02:D3:63:49:5F:4D:98:FE:07:CD:61:FA:C1:FF:39:59:A2:8F:63 X509v3 Authority Key Identifier: keyid:2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:33:81:7b:98:30:4f:3e:44:1c:dc:ec:63:5b:af:89:98:d5: b4:47:a6:e5:ee:d9:ab:2a:e8:3a:db:60:cb:83:98:95:1e:0e: ea:6b:72:9d:e4:0f:4c:39:88:e7:4f:74:e4:7b:63:a5:e1:65: a5:20:71:30:8c:28:d0:8f:00:01:c0:a5:d5:03:c9:54:58:e1: 00:98:e1:ec:78:2a:40:17:25:97:08:32:58:b0:9f:bc:13:00: 54:f0:f2:cb:1b:6f:5d:83:1a:a3:37:d5:af:94:bf:ab:b2:63: 32:6d:5e:d0:c8:b9:f7:27:34:29:b0:6b:5e:cd:e9:74:fa:eb: 5e:98:f7:1a:19:19:c0:e6:b8:97:d2:ad:45:b6:fa:a9:5c:5b: 8b:cd:0b:1c:73:7d:07:e5:b1:8a:fa:99:bf:69:6b:c6:05:e9: b1:fc:bd:76:08:d3:98:59:fb:2e:17:d8:62:80:7e:63:c5:85: 39:4b:5b:2c:4c:db:04:d3:a0:18:22:d7:e3:68:5d:e4:98:0b: 01:a9:10:a8:e7:4a:2c:45:29:d6:8f:15:b8:ba:3b:f0:b5:1f: fc:52:79:e5:21:b8:69:79:40:48:e2:05:ad:d0:d0:a9:95:0e: e0:7c:86:78:c8:4a:dc:f0:d6:df:5c:7b:5b:84:5b:67:4a:0a: a8:36:62:93 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTLx2Z439yv3fXsWtwoJCmaMn6eowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFDNDg5QUEzNDM3NDYyNDNBMkEzQTk3QTQ3M0NFRTI3 NzU2RUFBMTAeFw0yNjAzMjQyMjIxMjhaFw0yNjAzMzAxMDQ2MjhaMDMxMTAvBgNV BAMTKEExMDJEMzYzNDk1RjREOThGRTA3Q0Q2MUZBQzFGRjM5NTlBMjhGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblWxa/9YgoNCVePt6voN+dsyC /mn8pw9Fc+Ydq0jtgMr0Xu9wtwnpsigmrHToAZfRAeUEdMmzRdRnjhy8I6/qRyr1 pQj4IBwuArdMK3S8i/k2PuVOLW13iJEL78HyPkmTxSsh3b7c51qBLag5yIw4038t u3r2bKT11tzwXYBbvJZ6TJVv/eYC61cA4EMCMKTIvGG97rmSW/2LuR/tz00PMiC3 zBfid9bLlXuPNEr58iEBONztW6uSZ9tthptvW4iEb8NjHR+h5M54wf/75E3ENfN2 YUZgWNLbaLpVKUVPYLOEGjKkHfjCZIWY0kj9YWyuX8lXd9uTUFN89XyYh3mtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUoQLTY0lfTZj+B81h+sH/OVmij2MwHwYDVR0j BBgwFoAUKsSJqjQ3RiQ6KjqXpHPO4ndW6qEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NzU2MDI3QzAyMUQyRDY1RDkyNzNBNDAzOEVBNDIzRDc2 MDhDMDUyMTFFMzY0ODE0NjBCOEQyNzYyQkM3MEY3LzAvMkFDNDg5QUEzNDM3NDYy NDNBMkEzQTk3QTQ3M0NFRTI3NzU2RUFBMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUM0ODlBQTM0Mzc0NjI0M0Ey QTNBOTdBNDczQ0VFMjc3NTZFQUExLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDc1NjAyN0MwMjFEMkQ2NUQ5MjczQTQwMzhFQTQyM0Q3NjA4QzA1MjEx RTM2NDgxNDYwQjhEMjc2MkJDNzBGNy8wLzJBQzQ4OUFBMzQzNzQ2MjQzQTJBM0E5 N0E0NzNDRUUyNzc1NkVBQTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCaM4F7mDBPPkQc3OxjW6+JmNW0 R6bl7tmrKug622DLg5iVHg7qa3Kd5A9MOYjnT3Tke2Ol4WWlIHEwjCjQjwABwKXV A8lUWOEAmOHseCpAFyWXCDJYsJ+8EwBU8PLLG29dgxqjN9WvlL+rsmMybV7QyLn3 JzQpsGtezel0+utemPcaGRnA5riX0q1FtvqpXFuLzQscc30H5bGK+pm/aWvGBemx /L12CNOYWfsuF9higH5jxYU5S1ssTNsE06AYItfjaF3kmAsBqRCo50osRSnWjxW4 ujvwtR/8UnnlIbhpeUBI4gWt0NCplQ7gfIZ4yErc8NbfXHtbhFtnSgqoNmKT -----END CERTIFICATE-----Generated at Thu Mar 26 22:06:19 2026 by rpki-client