$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.mft File: 0DE8977243535CE0F3EC273478A6A417B2521028.mft (raw, json) Hash identifier: EPytbMQaNhPEfdqf0P15+sc6qXNOmv4pwwS1gFyq2DA= Subject key identifier: 4F:90:69:44:84:B4:B2:74:51:20:30:AC:FC:0B:4D:48:E1:0C:06:64 Authority key identifier: 0D:E8:97:72:43:53:5C:E0:F3:EC:27:34:78:A6:A4:17:B2:52:10:28 Certificate issuer: /CN=0DE8977243535CE0F3EC273478A6A417B2521028 Certificate serial: 2B92FCAA084E62831ABBDA47BF3CD549F2AF014F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DE8977243535CE0F3EC273478A6A417B2521028.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.mft Manifest number: 0170 Signing time: Wed 25 Mar 2026 07:06:54 +0000 Manifest this update: Wed 25 Mar 2026 07:01:54 +0000 Manifest next update: Tue 31 Mar 2026 05:38:54 +0000 Files and hashes: 1: 34352e3233352e39362e302f32332d3234203d3e20323636373735.roa (hash: LsxUtCdmFI4aIFY+sjB4k/8QktUmNSGY/c7dfY3Zgzc=) 2: 0DE8977243535CE0F3EC273478A6A417B2521028.crl (hash: K2hFxVBBrFiKu8GCLDiKcAq2SGowy6FZiakMqmFs+Eo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.crl rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DE8977243535CE0F3EC273478A6A417B2521028.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:92:fc:aa:08:4e:62:83:1a:bb:da:47:bf:3c:d5:49:f2:af:01:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DE8977243535CE0F3EC273478A6A417B2521028 Validity Not Before: Mar 25 07:01:54 2026 GMT Not After : Mar 31 05:38:54 2026 GMT Subject: CN=4F90694484B4B274512030ACFC0B4D48E10C0664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:15:76:4c:b8:9f:03:8d:8b:19:26:9e:28:5d: 32:26:97:de:e8:9f:af:af:4e:03:ca:1e:75:bf:01: 6f:4b:ce:42:df:2a:ff:95:69:7c:52:b7:75:23:42: d1:85:d7:37:e8:09:3d:a1:82:65:85:41:8b:f7:e7: b1:2f:35:3f:18:15:63:a2:8a:48:d5:32:e5:d3:f3: e0:3c:e8:cf:52:fb:18:cf:04:1b:b0:e2:40:82:32: 90:77:19:19:53:b2:f3:ec:c6:1e:c6:86:04:66:c6: 55:53:c4:d9:1d:2c:93:cd:6a:d3:87:51:b9:70:69: d7:e2:fa:3a:50:fc:69:d5:9e:4b:14:bc:08:7c:9f: ac:be:7a:78:6a:68:66:6e:5e:d7:76:c4:de:71:0e: bb:b5:d0:f3:60:6f:d6:81:06:83:e1:d3:ae:61:87: 90:ec:d5:64:df:99:33:d6:a7:e2:98:cb:95:53:54: fc:25:36:3c:1d:9e:de:2e:75:63:e1:cf:d0:a9:07: bf:39:6b:8c:20:b1:40:c3:1d:7e:1a:37:d7:d3:0e: a5:d4:9e:dc:d0:4e:a4:e5:96:79:69:4f:9c:1d:be: 65:bb:75:04:c5:f4:21:91:be:23:9b:e2:35:e7:1c: dd:d7:28:1e:19:eb:91:d8:59:ee:16:74:67:de:54: df:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:90:69:44:84:B4:B2:74:51:20:30:AC:FC:0B:4D:48:E1:0C:06:64 X509v3 Authority Key Identifier: keyid:0D:E8:97:72:43:53:5C:E0:F3:EC:27:34:78:A6:A4:17:B2:52:10:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DE8977243535CE0F3EC273478A6A417B2521028.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:73:c6:33:89:c4:b0:f1:27:18:b0:36:b1:e1:82:b3:c4:90: 3e:0e:31:e8:61:c6:4e:b2:54:df:e2:5d:f5:e7:be:16:35:79: 10:31:10:51:4e:49:f5:84:e9:cf:29:10:06:84:74:dd:a5:a2: d0:6d:03:6e:c5:25:d6:da:21:fa:3d:d9:a9:8b:b9:46:a8:27: 9a:4f:04:71:16:fb:34:35:25:59:f6:32:49:2a:d6:51:f0:d6: 51:7d:09:c0:51:a0:40:a5:10:21:84:46:9e:ba:f2:e9:b3:76: bd:97:cb:f0:27:1c:82:57:54:60:df:ad:2f:34:c0:21:99:c2: 89:59:9c:e5:a2:92:ac:ca:6b:0b:11:62:c6:f4:78:50:42:5d: f6:c3:a0:7f:2b:cf:ec:13:7f:50:38:95:bc:e5:87:1d:30:1e: fc:bb:44:24:ce:99:5b:60:74:6a:4d:b5:a4:8d:c1:92:9f:5c: 0c:6c:4f:e9:14:53:70:d3:40:8c:2e:2a:d8:c3:2a:e8:b1:2b: aa:21:72:c2:6b:05:60:37:da:c0:c7:d4:7a:16:ba:f0:09:d8: e1:5b:ff:c0:85:5d:a9:8d:a6:a9:93:62:a1:1c:31:15:cd:a4: 11:6a:2f:91:1f:5c:ab:ee:72:7a:a4:2f:56:98:4c:ef:bc:e3: 8f:9d:96:53 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUK5L8qghOYoMau9pHvzzVSfKvAU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERFODk3NzI0MzUzNUNFMEYzRUMyNzM0NzhBNkE0MTdC MjUyMTAyODAeFw0yNjAzMjUwNzAxNTRaFw0yNjAzMzEwNTM4NTRaMDMxMTAvBgNV BAMTKDRGOTA2OTQ0ODRCNEIyNzQ1MTIwMzBBQ0ZDMEI0RDQ4RTEwQzA2NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFXZMuJ8DjYsZJp4oXTIml97o n6+vTgPKHnW/AW9LzkLfKv+VaXxSt3UjQtGF1zfoCT2hgmWFQYv357EvNT8YFWOi ikjVMuXT8+A86M9S+xjPBBuw4kCCMpB3GRlTsvPsxh7GhgRmxlVTxNkdLJPNatOH Ublwadfi+jpQ/GnVnksUvAh8n6y+enhqaGZuXtd2xN5xDru10PNgb9aBBoPh065h h5Ds1WTfmTPWp+KYy5VTVPwlNjwdnt4udWPhz9CpB785a4wgsUDDHX4aN9fTDqXU ntzQTqTllnlpT5wdvmW7dQTF9CGRviOb4jXnHN3XKB4Z65HYWe4WdGfeVN/rAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUT5BpRIS0snRRIDCs/AtNSOEMBmQwHwYDVR0j BBgwFoAUDeiXckNTXODz7Cc0eKakF7JSECgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81OUQ1RTc2M0M5RTM5MjkxMTgzNERENTM2Q0I3OTZBQzdC MUEyODIwMTU4NEI5RTcwMUYyN0ZCQ0Q0MDI5OTdGLzAvMERFODk3NzI0MzUzNUNF MEYzRUMyNzM0NzhBNkE0MTdCMjUyMTAyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wREU4OTc3MjQzNTM1Q0UwRjNF QzI3MzQ3OEE2QTQxN0IyNTIxMDI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTlENUU3NjNDOUUzOTI5MTE4MzRERDUzNkNCNzk2QUM3QjFBMjgyMDE1 ODRCOUU3MDFGMjdGQkNENDAyOTk3Ri8wLzBERTg5NzcyNDM1MzVDRTBGM0VDMjcz NDc4QTZBNDE3QjI1MjEwMjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4c8YzicSw8ScYsDax4YKzxJA+ DjHoYcZOslTf4l31574WNXkQMRBRTkn1hOnPKRAGhHTdpaLQbQNuxSXW2iH6Pdmp i7lGqCeaTwRxFvs0NSVZ9jJJKtZR8NZRfQnAUaBApRAhhEaeuvLps3a9l8vwJxyC V1Rg360vNMAhmcKJWZzlopKsymsLEWLG9HhQQl32w6B/K8/sE39QOJW85YcdMB78 u0QkzplbYHRqTbWkjcGSn1wMbE/pFFNw00CMLirYwyrosSuqIXLCawVgN9rAx9R6 FrrwCdjhW//AhV2pjaapk2KhHDEVzaQRai+RH1yr7nJ6pC9WmEzvvOOPnZZT -----END CERTIFICATE-----Generated at Thu Mar 26 21:23:52 2026 by rpki-client