$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft File: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft (raw, json) Hash identifier: rskAbYnJk95U3NwkoOxWFSdBcd2wuzf0LuBihy87XnI= Subject key identifier: 43:34:90:88:AE:12:C6:32:BB:72:7B:5E:68:D3:EC:75:D4:60:53:62 Authority key identifier: CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C Certificate issuer: /CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C Certificate serial: 4D22EA5BAD5DADEDA40BF932C7604668C551B466 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft Manifest number: 0172 Signing time: Wed 25 Mar 2026 10:18:45 +0000 Manifest this update: Wed 25 Mar 2026 10:13:45 +0000 Manifest next update: Mon 30 Mar 2026 18:16:45 +0000 Files and hashes: 1: 3136342e3136332e3132322e302f32332d3234203d3e20323734323837.roa (hash: pzH8ChjyGM8irvisCLOMRVfFg2o+/iOBhQZU0VAmYyg=) 2: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl (hash: DVNgC6bdwlyp4MUG/vtL+Bs05GeqSM+YBPr8k2Rvlt8=) 3: 3136342e3136332e3132302e302f32332d3234203d3e20323635383334.roa (hash: ITajnx8AoEh3NK9eg3wJYTD8jN+mIdo7dvHMiOnMIP8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 18:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:22:ea:5b:ad:5d:ad:ed:a4:0b:f9:32:c7:60:46:68:c5:51:b4:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C Validity Not Before: Mar 25 10:13:45 2026 GMT Not After : Mar 30 18:16:45 2026 GMT Subject: CN=43349088AE12C632BB727B5E68D3EC75D4605362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:a3:94:93:db:c0:57:94:65:1f:32:9d:a0: f9:30:6c:d8:f6:a5:83:4a:f4:2f:e9:d5:96:a3:cc: a8:d9:a5:52:86:15:56:99:c0:16:8a:51:a9:09:65: 13:e4:3c:09:22:0f:55:af:0a:ba:d7:71:e4:83:d2: 4e:77:f5:05:4a:17:5c:40:7b:91:6c:dd:94:12:3c: f4:f0:b6:78:5c:38:64:48:ee:57:3c:46:b1:8c:ed: 3d:de:2b:66:ae:22:02:0e:d1:84:3e:b6:9d:d4:31: 7f:15:72:0b:f6:34:21:02:39:11:0d:7d:7c:1f:10: 08:8f:d7:a2:55:05:12:4d:40:52:42:fe:89:a9:05: 12:3d:f8:82:fc:62:9d:8e:ea:94:49:38:0b:f1:09: 8d:87:23:fe:0b:b0:dc:4b:5d:6d:e0:96:14:3c:40: b3:46:df:f4:bf:ef:d0:fd:1c:2e:63:7d:0b:e3:68: ea:f2:69:68:d2:2a:71:68:22:7f:bd:96:e3:be:8a: 53:1b:09:08:ea:de:e3:ad:6c:04:b6:71:08:3d:c0: d6:dc:0c:04:1b:10:ff:6a:23:ee:8a:7f:6e:df:7d: 19:b9:ef:21:a1:3c:7a:b8:f1:34:17:fb:0f:92:9e: 79:8b:fb:6f:e9:61:30:09:99:97:f2:76:85:95:56: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:34:90:88:AE:12:C6:32:BB:72:7B:5E:68:D3:EC:75:D4:60:53:62 X509v3 Authority Key Identifier: keyid:CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:60:de:43:7e:c4:72:c1:1f:24:61:ca:92:9a:16:0a:65:bc: de:01:c6:fb:75:63:02:b4:e6:60:1e:3b:d1:c8:0d:16:24:c7: 5a:ff:e2:16:33:f6:bc:05:64:d6:e9:e5:d0:5b:11:fa:20:f4: 9c:77:de:01:9f:e5:82:f1:37:74:2d:4e:c3:f8:25:c0:fe:79: 4d:8a:c4:de:01:bd:8a:ae:34:e9:38:19:7e:32:64:ee:41:cc: d4:ec:a6:21:14:66:b7:20:bb:e3:ba:9b:61:47:15:eb:64:f4: bc:93:ea:fe:0e:97:9c:c8:52:c5:10:67:8a:ce:46:f2:f8:86: 8e:8e:f2:5a:12:17:43:89:23:b2:69:b9:43:a5:ac:d0:7d:cc: eb:99:71:a0:2c:db:12:9f:dd:7b:a0:ba:87:80:ec:40:ac:44: 7f:02:09:e4:73:f7:e4:24:34:c8:e9:32:71:af:bb:b1:cc:21: 2d:47:7d:a7:24:c6:60:a6:55:4e:b3:ca:8c:48:73:fe:3b:71: 4a:82:81:c0:43:cc:66:cd:08:0d:51:9d:c4:e6:a0:3d:7c:74: 30:be:5b:50:fc:69:6d:b8:bb:da:4c:05:eb:8f:53:dc:46:70: da:d4:fb:cb:73:a5:86:de:77:57:6d:1c:c0:a4:aa:7e:fe:7a: 49:58:99:05 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTSLqW61dre2kC/kyx2BGaMVRtGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDE5OENENEM2NTZDNEFEQ0VDNzM3MEQ2OUY2MUM0 QUJFREIxQzAeFw0yNjAzMjUxMDEzNDVaFw0yNjAzMzAxODE2NDVaMDMxMTAvBgNV BAMTKDQzMzQ5MDg4QUUxMkM2MzJCQjcyN0I1RTY4RDNFQzc1RDQ2MDUzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73aOUk9vAV5RlHzKdoPkwbNj2 pYNK9C/p1ZajzKjZpVKGFVaZwBaKUakJZRPkPAkiD1WvCrrXceSD0k539QVKF1xA e5Fs3ZQSPPTwtnhcOGRI7lc8RrGM7T3eK2auIgIO0YQ+tp3UMX8Vcgv2NCECOREN fXwfEAiP16JVBRJNQFJC/ompBRI9+IL8Yp2O6pRJOAvxCY2HI/4LsNxLXW3glhQ8 QLNG3/S/79D9HC5jfQvjaOryaWjSKnFoIn+9luO+ilMbCQjq3uOtbAS2cQg9wNbc DAQbEP9qI+6Kf27ffRm57yGhPHq48TQX+w+SnnmL+2/pYTAJmZfydoWVVrPtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQzSQiK4SxjK7cnteaNPsddRgU2IwHwYDVR0j BBgwFoAUzcAZjNTGVsStzsc3DWn2HEq+2xwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80OTU5RTUyMTk1QUI3Nzk0MkQzODE4NzE4ODM4QjU2ODJC RjBDM0E4NDE4NURFQTU5M0MyNUNCMkVCNTcyM0NFLzAvQ0RDMDE5OENENEM2NTZD NEFEQ0VDNzM3MEQ2OUY2MUM0QUJFREIxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREMwMTk4Q0Q0QzY1NkM0QURD RUM3MzcwRDY5RjYxQzRBQkVEQjFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDk1OUU1MjE5NUFCNzc5NDJEMzgxODcxODgzOEI1NjgyQkYwQzNBODQx ODVERUE1OTNDMjVDQjJFQjU3MjNDRS8wL0NEQzAxOThDRDRDNjU2QzRBRENFQzcz NzBENjlGNjFDNEFCRURCMUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKYN5DfsRywR8kYcqSmhYKZbze Acb7dWMCtOZgHjvRyA0WJMda/+IWM/a8BWTW6eXQWxH6IPScd94Bn+WC8Td0LU7D +CXA/nlNisTeAb2KrjTpOBl+MmTuQczU7KYhFGa3ILvjupthRxXrZPS8k+r+Dpec yFLFEGeKzkby+IaOjvJaEhdDiSOyablDpazQfczrmXGgLNsSn917oLqHgOxArER/ Agnkc/fkJDTI6TJxr7uxzCEtR32nJMZgplVOs8qMSHP+O3FKgoHAQ8xmzQgNUZ3E 5qA9fHQwvltQ/GltuLvaTAXrj1PcRnDa1PvLc6WG3ndXbRzApKp+/npJWJkF -----END CERTIFICATE-----Generated at Thu Mar 26 19:59:13 2026 by rpki-client