$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json) Hash identifier: nBKMpZmu3zzt7hSt0GtIkl5FzhjN7A/fIZr5IxNWKAM= Subject key identifier: BE:A3:39:2C:8E:8B:C9:9C:36:77:B0:B5:FB:1C:ED:75:7A:02:A6:4B Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 75AED93477FE5192872868DFDE40D500645CFA41 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft Manifest number: 0175 Signing time: Wed 25 Mar 2026 04:15:14 +0000 Manifest this update: Wed 25 Mar 2026 04:10:14 +0000 Manifest next update: Sun 29 Mar 2026 16:11:14 +0000 Files and hashes: 1: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: 4YT76mg5dITWNiH2hE5kgjyBgua4a3LhZgbWUTw9x8I=) 2: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: Wat28nT3uFtrqfNd7Py1yARetGZAjX/WKvDJ5z8WW+I=) 3: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 16:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ae:d9:34:77:fe:51:92:87:28:68:df:de:40:d5:00:64:5c:fa:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Mar 25 04:10:14 2026 GMT Not After : Mar 29 16:11:14 2026 GMT Subject: CN=BEA3392C8E8BC99C3677B0B5FB1CED757A02A64B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:8e:83:f7:af:0f:1f:53:26:6d:9d:5c:47: 63:3b:32:20:99:ec:c7:56:b8:0c:b8:e4:5d:99:b0: 14:8d:ef:71:24:c5:3f:66:ec:72:c0:ab:6c:70:7c: d4:f3:57:ee:37:1d:02:47:5b:b8:2c:b2:2f:61:87: d7:d5:f3:a4:7f:89:54:eb:7d:11:d3:ef:c8:29:bf: 96:1a:2b:f4:a8:10:2d:2a:47:09:24:77:7a:4d:b3: 2e:b6:c6:eb:ff:7c:6a:e4:d8:88:12:c4:42:9c:40: c6:f0:4f:f2:06:67:49:80:ab:ef:2d:84:78:2c:b1: 4d:98:c0:6f:b9:60:50:b7:f0:59:f9:6c:ca:2d:8a: 1c:5e:08:d5:27:1f:17:f5:be:6a:40:0d:cf:e8:63: d4:b9:69:b6:30:96:1d:e9:1f:9e:6d:e3:a2:26:df: e2:bb:60:98:78:48:bb:e0:82:85:26:d5:dd:df:fc: 55:47:87:a3:ed:80:97:46:57:c9:7d:a7:07:5f:3f: 52:68:64:40:a5:d6:6e:fe:42:a5:92:8b:c1:e0:4c: d6:86:9e:8e:40:12:e7:80:ef:cc:ea:8e:2a:25:3b: 0c:06:e6:27:9f:52:3a:d0:04:c7:ed:32:c9:db:82: 20:53:c9:bb:d0:a2:21:a0:f5:52:94:fa:19:05:92: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A3:39:2C:8E:8B:C9:9C:36:77:B0:B5:FB:1C:ED:75:7A:02:A6:4B X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:45:13:11:db:35:c4:a3:0a:dd:6c:20:64:9b:75:e6:28:7a: b6:3d:46:75:2e:a3:2c:33:a8:51:ea:fc:12:aa:30:52:d9:41: b8:50:5a:42:12:86:da:e0:db:f4:ce:c3:bc:00:fe:2f:6a:e5: a6:28:bd:5c:41:56:11:64:cd:b7:28:37:9c:75:47:75:68:71: 33:6d:ab:83:16:44:f7:0c:10:83:23:fb:e2:a9:e6:db:03:da: e4:03:74:89:46:1f:83:ea:d3:84:58:24:2a:e5:ca:c0:0d:59: 4a:b1:eb:1f:c3:b6:2e:69:3a:10:b7:c4:41:eb:06:94:47:09: d4:ef:eb:6a:8b:7e:99:19:e8:57:7a:87:0e:9f:17:84:e4:b9: bc:44:10:35:8a:87:0d:79:85:21:45:60:0b:f1:c3:ec:26:78: 1e:f3:ef:77:38:90:02:76:f5:ae:32:00:18:66:7f:87:ea:f4: d9:af:40:9f:73:07:3f:9e:13:eb:50:2c:17:f4:dd:56:02:8a: b1:ba:62:7d:71:af:71:4d:60:ae:dd:dc:f3:67:eb:31:c2:7d: ab:ca:29:34:eb:0d:ef:a7:e4:01:d4:67:71:4f:dc:25:74:4a: a9:a2:6f:ee:0d:d7:1e:f3:53:d6:ad:5f:18:4b:58:e8:b0:f6: 31:82:56:db -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUda7ZNHf+UZKHKGjf3kDVAGRc+kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNjAzMjUwNDEwMTRaFw0yNjAzMjkxNjExMTRaMDMxMTAvBgNV BAMTKEJFQTMzOTJDOEU4QkM5OUMzNjc3QjBCNUZCMUNFRDc1N0EwMkE2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkY46D968PH1MmbZ1cR2M7MiCZ 7MdWuAy45F2ZsBSN73EkxT9m7HLAq2xwfNTzV+43HQJHW7gssi9hh9fV86R/iVTr fRHT78gpv5YaK/SoEC0qRwkkd3pNsy62xuv/fGrk2IgSxEKcQMbwT/IGZ0mAq+8t hHgssU2YwG+5YFC38Fn5bMotihxeCNUnHxf1vmpADc/oY9S5abYwlh3pH55t46Im 3+K7YJh4SLvggoUm1d3f/FVHh6PtgJdGV8l9pwdfP1JoZECl1m7+QqWSi8HgTNaG no5AEueA78zqjiolOwwG5iefUjrQBMftMsnbgiBTybvQoiGg9VKU+hkFksenAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvqM5LI6LyZw2d7C1+xztdXoCpkswHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjRRMR2zXEowrdbCBkm3XmKHq2 PUZ1LqMsM6hR6vwSqjBS2UG4UFpCEoba4Nv0zsO8AP4vauWmKL1cQVYRZM23KDec dUd1aHEzbauDFkT3DBCDI/viqebbA9rkA3SJRh+D6tOEWCQq5crADVlKsesfw7Yu aToQt8RB6waURwnU7+tqi36ZGehXeocOnxeE5Lm8RBA1iocNeYUhRWAL8cPsJnge 8+93OJACdvWuMgAYZn+H6vTZr0Cfcwc/nhPrUCwX9N1WAoqxumJ9ca9xTWCu3dzz Z+sxwn2ryik06w3vp+QB1GdxT9wldEqpom/uDdce81PWrV8YS1josPYxglbb -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:58 2026 by rpki-client