$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft File: 5021716DB872AFEA302E881734C3D03B1DCE1384.mft (raw, json) Hash identifier: /AtHxguITZZiTUSImTjOvu3jnWhScFd4mitAMhVdVpE= Subject key identifier: 43:7A:3A:76:7E:9E:7B:E0:96:2E:21:E3:AE:B4:91:FE:48:70:1C:73 Authority key identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84 Certificate issuer: /CN=5021716DB872AFEA302E881734C3D03B1DCE1384 Certificate serial: 417F04E74FFC6EF115F80F6B53F120846CC98334 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft Manifest number: 017B Signing time: Wed 25 Mar 2026 04:40:29 +0000 Manifest this update: Wed 25 Mar 2026 04:35:29 +0000 Manifest next update: Mon 30 Mar 2026 13:17:29 +0000 Files and hashes: 1: 323830333a613339303a3a2f33322d3438203d3e20323733303135.roa (hash: Fu/SZhrr6Jw7DbYo5CUKcfKCtKHHVYuJggcFFClGvTs=) 2: 5021716DB872AFEA302E881734C3D03B1DCE1384.crl (hash: UGy9cPTJFDMT8DSoWUitK9OwCwocmCVXSXpLDaGI3Fk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 13:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7f:04:e7:4f:fc:6e:f1:15:f8:0f:6b:53:f1:20:84:6c:c9:83:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5021716DB872AFEA302E881734C3D03B1DCE1384 Validity Not Before: Mar 25 04:35:29 2026 GMT Not After : Mar 30 13:17:29 2026 GMT Subject: CN=437A3A767E9E7BE0962E21E3AEB491FE48701C73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:bb:31:1d:bd:30:33:ad:34:0e:c6:a9:59: 21:81:fb:26:f3:45:99:a5:3b:98:84:00:50:20:71: 70:6a:46:69:18:d0:fc:07:85:6d:c7:64:c6:e6:e3: 7f:0d:03:e3:0e:84:56:23:d1:40:d7:7e:87:ca:a9: b7:d6:fc:40:2e:e6:52:e4:ca:4f:7c:39:21:c4:8d: 53:1c:5b:ae:ef:a0:29:b6:fc:5f:be:0d:27:d0:da: a0:7d:68:37:94:5b:d8:8b:ea:8a:b9:c4:8e:1f:36: c7:77:54:e5:c2:43:43:72:4c:48:89:53:49:99:f3: 07:7e:dd:a8:7c:80:73:47:32:bf:a9:c2:4c:3c:db: 9e:ae:59:00:08:78:d1:f4:66:d1:8f:76:71:2f:8f: 24:8f:41:0e:97:00:0f:20:74:df:e7:6b:90:a9:16: 81:0c:28:9a:6e:ce:62:90:c2:2f:a1:4c:e3:50:a5: c6:9d:9f:52:09:f2:68:2d:40:2a:b4:80:7d:7e:b4: 3e:4e:f6:d3:35:15:65:fb:42:ac:d3:60:ec:a6:9f: 98:c7:5e:64:be:d4:41:ea:fb:b5:65:4e:03:88:e2: f1:88:6c:fc:b1:ff:75:98:7e:57:8d:b1:77:0f:a5: 3a:20:df:88:e7:6d:43:53:ce:f5:dc:58:15:09:a4: bc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7A:3A:76:7E:9E:7B:E0:96:2E:21:E3:AE:B4:91:FE:48:70:1C:73 X509v3 Authority Key Identifier: keyid:50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f3:67:14:a8:9e:3c:4c:48:f7:5d:e6:08:e3:7c:51:6e:6e: d5:31:d6:f3:4a:06:e0:3b:ee:fd:fb:00:a5:8e:29:11:49:de: 46:8c:e6:e7:4b:5a:57:db:cd:0f:f3:00:11:fa:59:ee:ad:e5: 44:6d:1e:75:80:9b:c7:7f:df:2f:d1:6f:29:da:85:d3:87:66: 61:b7:8d:c7:85:a1:be:6d:b9:99:9d:a4:f4:6d:e0:9e:dd:3b: db:c4:ae:aa:55:23:1c:b0:51:28:f9:6e:6b:aa:d1:93:85:38: bc:80:ad:50:ec:68:d4:d8:dc:a3:c2:9d:c3:f6:25:6a:ca:bb: 86:db:20:65:d9:96:63:78:c2:22:f0:43:a5:5c:b4:8c:27:6f: dc:a0:ce:81:25:f7:4a:60:e2:b7:b4:43:b5:35:f7:bd:43:46: a4:46:6d:95:7c:97:61:ce:25:08:f7:b4:e6:ec:14:28:cf:6b: c3:da:8e:19:1e:72:9a:0c:9c:58:bb:e4:ee:f7:a0:e8:d2:33: 2e:e9:1b:d8:4e:41:41:ea:6e:9f:76:d8:30:34:6b:85:80:36: 87:c9:42:7c:0c:8e:1e:e7:c1:e1:08:90:f5:a8:ab:69:b2:9e: f5:dd:59:51:93:d1:e1:d0:26:4a:6a:bd:2e:66:40:10:59:b9: e1:f0:0f:52 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQX8E50/8bvEV+A9rU/EghGzJgzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAyMTcxNkRCODcyQUZFQTMwMkU4ODE3MzRDM0QwM0Ix RENFMTM4NDAeFw0yNjAzMjUwNDM1MjlaFw0yNjAzMzAxMzE3MjlaMDMxMTAvBgNV BAMTKDQzN0EzQTc2N0U5RTdCRTA5NjJFMjFFM0FFQjQ5MUZFNDg3MDFDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdbsxHb0wM600DsapWSGB+ybz RZmlO5iEAFAgcXBqRmkY0PwHhW3HZMbm438NA+MOhFYj0UDXfofKqbfW/EAu5lLk yk98OSHEjVMcW67voCm2/F++DSfQ2qB9aDeUW9iL6oq5xI4fNsd3VOXCQ0NyTEiJ U0mZ8wd+3ah8gHNHMr+pwkw8256uWQAIeNH0ZtGPdnEvjySPQQ6XAA8gdN/na5Cp FoEMKJpuzmKQwi+hTONQpcadn1IJ8mgtQCq0gH1+tD5O9tM1FWX7QqzTYOymn5jH XmS+1EHq+7VlTgOI4vGIbPyx/3WYfleNsXcPpTog34jnbUNTzvXcWBUJpLz/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQ3o6dn6ee+CWLiHjrrSR/khwHHMwHwYDVR0j BBgwFoAUUCFxbbhyr+owLogXNMPQOx3OE4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81Mjk3QjcwNzhGQjFCNTIxMDA2RDc1MUEzMkEyQUMzNUY2 MTQ2MTc1MjI0ODRGODg3RTVFNzdBMkNGQzc1MjU3LzAvNTAyMTcxNkRCODcyQUZF QTMwMkU4ODE3MzRDM0QwM0IxRENFMTM4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MDIxNzE2REI4NzJBRkVBMzAy RTg4MTczNEMzRDAzQjFEQ0UxMzg0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTI5N0I3MDc4RkIxQjUyMTAwNkQ3NTFBMzJBMkFDMzVGNjE0NjE3NTIy NDg0Rjg4N0U1RTc3QTJDRkM3NTI1Ny8wLzUwMjE3MTZEQjg3MkFGRUEzMDJFODgx NzM0QzNEMDNCMURDRTEzODQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ82cUqJ48TEj3XeYI43xRbm7V MdbzSgbgO+79+wCljikRSd5GjObnS1pX280P8wAR+lnureVEbR51gJvHf98v0W8p 2oXTh2Zht43HhaG+bbmZnaT0beCe3TvbxK6qVSMcsFEo+W5rqtGThTi8gK1Q7GjU 2Nyjwp3D9iVqyruG2yBl2ZZjeMIi8EOlXLSMJ2/coM6BJfdKYOK3tEO1Nfe9Q0ak Rm2VfJdhziUI97Tm7BQoz2vD2o4ZHnKaDJxYu+Tu96Do0jMu6RvYTkFB6m6fdtgw NGuFgDaHyUJ8DI4e58HhCJD1qKtpsp713VlRk9Hh0CZKar0uZkAQWbnh8A9S -----END CERTIFICATE-----Generated at Thu Mar 26 23:12:07 2026 by rpki-client