$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.mft File: 32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.mft (raw, json) Hash identifier: 33FUl0e3eI4u+VRW+cGfKO+eRqKNEQOoy0RcUC6R0HQ= Subject key identifier: 11:D8:06:BA:CE:65:93:57:19:BB:32:ED:46:2F:C6:0C:B5:01:C7:83 Authority key identifier: 32:B1:BA:9D:C6:9C:59:C3:5C:63:C3:53:4A:A4:00:DD:B8:4A:32:EB Certificate issuer: /CN=32B1BA9DC69C59C35C63C3534AA400DDB84A32EB Certificate serial: 5AB6AD2BB8F16908588F9EF18D0CF64BDE3987B6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.mft Manifest number: 0173 Signing time: Tue 24 Mar 2026 16:12:53 +0000 Manifest this update: Tue 24 Mar 2026 16:07:53 +0000 Manifest next update: Mon 30 Mar 2026 00:35:53 +0000 Files and hashes: 1: 32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.crl (hash: pRUDIVrin5ThCnh7sJerb5l051+J9lF8gnRH4LlQ8co=) 2: 323830313a31393a393830303a3a2f34382d3438203d3e203134303830.roa (hash: O5YK2A0cKSmCH0FcntXPBIOjEaMHz9NiH04E+x7WxT8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.crl rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 00:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b6:ad:2b:b8:f1:69:08:58:8f:9e:f1:8d:0c:f6:4b:de:39:87:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32B1BA9DC69C59C35C63C3534AA400DDB84A32EB Validity Not Before: Mar 24 16:07:53 2026 GMT Not After : Mar 30 00:35:53 2026 GMT Subject: CN=11D806BACE65935719BB32ED462FC60CB501C783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ef:bd:48:62:b9:0b:bf:14:e1:31:a2:dc:ff: d4:f0:36:71:d6:df:aa:2e:5d:1b:d7:1d:1d:d8:d8: 01:79:cd:97:db:be:a3:85:c6:f0:c6:f9:03:90:b7: 57:67:eb:0e:ee:c3:14:32:c1:29:90:ca:34:29:a7: 65:21:bc:c8:ff:64:43:ed:31:6b:2f:b6:c7:4c:a2: 1c:cf:a5:ae:60:c5:61:85:91:48:42:08:5f:e1:a7: c8:e1:f1:ce:f1:ea:ee:dc:bb:29:7d:34:32:0c:cf: 7a:b1:8b:54:db:28:c3:f5:8c:73:88:2d:42:f7:4f: 50:f2:6d:ee:0b:eb:ed:4a:73:2d:03:01:95:19:97: 61:5b:80:72:77:e1:7d:62:cf:ca:8c:2e:9c:31:9f: 33:49:49:af:9b:44:f0:3d:7c:4a:9f:5d:20:8b:84: 8b:6c:c1:b6:c6:16:b5:d7:7d:0f:2b:a4:af:30:a0: 14:b0:b7:93:84:48:80:97:5a:f7:3b:28:ba:f0:a4: c3:da:23:be:76:8e:c3:b9:d0:34:79:b0:1b:06:4b: 9e:b7:85:e2:28:59:56:41:b7:c1:a4:68:24:cf:11: ca:5a:d6:a7:bd:ba:27:29:82:6f:fa:39:13:5f:47: 2f:6d:66:d8:ff:28:38:2c:64:7a:f7:b8:45:06:cd: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D8:06:BA:CE:65:93:57:19:BB:32:ED:46:2F:C6:0C:B5:01:C7:83 X509v3 Authority Key Identifier: keyid:32:B1:BA:9D:C6:9C:59:C3:5C:63:C3:53:4A:A4:00:DD:B8:4A:32:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:1e:ca:e7:4d:5f:1e:52:c8:20:34:9d:aa:7b:fd:18:d1:eb: d6:8a:0f:a1:e7:c2:a2:7f:15:9f:2c:f5:91:82:c4:ab:7d:0d: e7:49:9e:f0:54:26:b8:03:5a:f9:2c:97:fd:1c:7f:1e:9c:e4: cc:78:35:21:02:d9:d8:98:ee:be:26:6a:41:16:1d:86:2d:fc: 98:f1:4f:28:82:06:98:4b:84:28:29:db:5f:b9:9f:11:3d:ed: 62:9c:71:84:91:c7:7a:ed:6e:8c:ae:b5:6a:8d:23:e9:f2:0f: 0e:87:56:11:88:96:e0:23:aa:69:26:4b:bb:ed:13:bc:27:71: 6f:c8:4f:98:15:7b:15:b2:fa:d4:6e:a3:86:00:ae:77:4f:9b: d6:11:6b:4b:08:25:2b:1e:3f:a1:0c:f3:9e:46:79:d3:ba:b5: b5:6f:2f:ce:98:a8:e9:79:d2:5f:38:9b:d6:df:1a:5e:bf:ec: e3:98:a0:8b:de:8f:d5:49:19:dc:f3:05:3c:24:1d:2b:04:ea: 3d:fe:6d:f7:ad:ab:b1:82:e5:91:43:90:36:09:3b:f8:a4:ac: 34:1e:01:e4:0d:89:4f:56:d1:18:90:85:87:10:72:71:51:53: 6f:81:14:45:c6:4b:c8:9a:4e:d1:83:71:f4:3f:79:31:fa:1a: 6f:b7:0e:72 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWratK7jxaQhYj57xjQz2S945h7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCMUJBOURDNjlDNTlDMzVDNjNDMzUzNEFBNDAwRERC ODRBMzJFQjAeFw0yNjAzMjQxNjA3NTNaFw0yNjAzMzAwMDM1NTNaMDMxMTAvBgNV BAMTKDExRDgwNkJBQ0U2NTkzNTcxOUJCMzJFRDQ2MkZDNjBDQjUwMUM3ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT771IYrkLvxThMaLc/9TwNnHW 36ouXRvXHR3Y2AF5zZfbvqOFxvDG+QOQt1dn6w7uwxQywSmQyjQpp2UhvMj/ZEPt MWsvtsdMohzPpa5gxWGFkUhCCF/hp8jh8c7x6u7cuyl9NDIMz3qxi1TbKMP1jHOI LUL3T1Dybe4L6+1Kcy0DAZUZl2FbgHJ34X1iz8qMLpwxnzNJSa+bRPA9fEqfXSCL hItswbbGFrXXfQ8rpK8woBSwt5OESICXWvc7KLrwpMPaI752jsO50DR5sBsGS563 heIoWVZBt8GkaCTPEcpa1qe9uicpgm/6ORNfRy9tZtj/KDgsZHr3uEUGzT7nAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUEdgGus5lk1cZuzLtRi/GDLUBx4MwHwYDVR0j BBgwFoAUMrG6ncacWcNcY8NTSqQA3bhKMuswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NjU1Q0U5OTNFREE0ODVDNEJGQzRDRjExMEIwMTU2NEZD MEMxQzMxNEYzNkRCMEM3NTlBNTI1QjkwOTZFRUNELzAvMzJCMUJBOURDNjlDNTlD MzVDNjNDMzUzNEFBNDAwRERCODRBMzJFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMkIxQkE5REM2OUM1OUMzNUM2 M0MzNTM0QUE0MDBEREI4NEEzMkVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTY1NUNFOTkzRURBNDg1QzRCRkM0Q0YxMTBCMDE1NjRGQzBDMUMzMTRG MzZEQjBDNzU5QTUyNUI5MDk2RUVDRC8wLzMyQjFCQTlEQzY5QzU5QzM1QzYzQzM1 MzRBQTQwMEREQjg0QTMyRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALHsrnTV8eUsggNJ2qe/0Y0evW ig+h58KifxWfLPWRgsSrfQ3nSZ7wVCa4A1r5LJf9HH8enOTMeDUhAtnYmO6+JmpB Fh2GLfyY8U8oggaYS4QoKdtfuZ8RPe1inHGEkcd67W6MrrVqjSPp8g8Oh1YRiJbg I6ppJku77RO8J3FvyE+YFXsVsvrUbqOGAK53T5vWEWtLCCUrHj+hDPOeRnnTurW1 by/OmKjpedJfOJvW3xpev+zjmKCL3o/VSRnc8wU8JB0rBOo9/m33rauxguWRQ5A2 CTv4pKw0HgHkDYlPVtEYkIWHEHJxUVNvgRRFxkvImk7Rg3H0P3kx+hpvtw5y -----END CERTIFICATE-----Generated at Fri Mar 27 00:55:01 2026 by rpki-client