$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.mft File: 0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.mft (raw, json) Hash identifier: LpXoM2mI2wEMwv7wrLnjtKFco9vFqZiLoZNOBH3Gp4Q= Subject key identifier: 41:97:E8:9A:DE:7E:50:04:6A:A3:E9:B8:BA:ED:EC:79:E5:6C:9A:AC Authority key identifier: 0F:FB:8C:67:99:F6:5C:48:77:26:44:EC:CE:80:00:CD:E4:E1:A1:B1 Certificate issuer: /CN=0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1 Certificate serial: 531EBCF4FA5DC4FF5F3604E7B8CA18D6F5C18D3C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.mft Manifest number: 59 Signing time: Wed 25 Mar 2026 15:26:32 +0000 Manifest this update: Wed 25 Mar 2026 15:21:32 +0000 Manifest next update: Mon 30 Mar 2026 19:20:32 +0000 Files and hashes: 1: 3138312e3233322e3134382e302f32322d3234203d3e20323731393937.roa (hash: Ptt8Q+1ct900Z9LOHQgZeg239Q+jbA4Rn+q8WijezIM=) 2: 0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.crl (hash: ocW9aKkp22BMknAnY/wbHuUBeK9pgypVm/DFCgaPQRI=) 3: 3136382e3139362e322e302f32342d3234203d3e20323731393937.roa (hash: eViKMYzFbWwcU4GJlxhAgTzLF7e6JgX3P46RBwAHkPk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.crl rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1e:bc:f4:fa:5d:c4:ff:5f:36:04:e7:b8:ca:18:d6:f5:c1:8d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1 Validity Not Before: Mar 25 15:21:32 2026 GMT Not After : Mar 30 19:20:32 2026 GMT Subject: CN=4197E89ADE7E50046AA3E9B8BAEDEC79E56C9AAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:b2:b9:ec:53:3f:26:53:fd:8b:ac:59:f0: e5:82:99:a9:ee:0c:b8:33:91:62:53:71:92:fb:a6: ab:59:25:16:4e:46:b6:ae:88:34:80:11:43:42:77: 26:2e:88:cb:1c:bb:25:7f:b1:31:1e:3c:ac:b0:a0: 91:92:13:d2:4f:40:56:83:0b:5a:0f:57:75:9f:0a: ef:a1:db:78:4c:3d:bc:4c:47:f9:9e:8e:9b:c3:94: 40:be:b5:09:0a:a1:cc:b8:7d:a7:57:bd:e0:90:db: ac:40:4a:17:5d:89:40:e0:6b:de:78:c4:cf:5d:45: be:5a:0b:74:f0:75:42:78:50:2c:22:85:3c:22:0f: 03:e2:85:d0:04:98:49:7b:eb:d3:19:96:e6:4a:d2: 96:ee:8a:7a:29:a1:46:01:b8:9b:69:f6:d3:56:5c: b9:8b:11:46:29:b9:4e:aa:d4:0b:1d:52:9e:ef:f2: b6:84:86:5a:f5:44:43:ed:c7:56:9e:9b:2c:80:5d: 48:2f:98:dd:77:47:4c:cf:3c:b2:12:b3:b6:dc:a5: e3:7f:cd:87:52:9d:04:a2:75:00:97:43:45:1f:c5: 7b:02:9a:41:83:83:96:6a:c5:82:62:8f:63:46:87: f8:22:23:e1:0a:77:87:7a:49:e7:6d:67:7a:76:76: 41:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:97:E8:9A:DE:7E:50:04:6A:A3:E9:B8:BA:ED:EC:79:E5:6C:9A:AC X509v3 Authority Key Identifier: keyid:0F:FB:8C:67:99:F6:5C:48:77:26:44:EC:CE:80:00:CD:E4:E1:A1:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8b:fd:c4:3d:2c:1d:54:4b:88:44:8f:00:fe:f7:de:d6:72: 32:37:0b:0e:b5:f5:24:5a:53:d4:0c:14:a8:99:20:df:41:6b: ca:20:05:af:3a:23:e6:67:4b:12:4f:1f:11:cf:eb:a9:f7:71: 51:c8:d3:9c:d1:a1:10:b5:cf:20:74:0c:c3:eb:e9:88:e3:d6: f4:c5:33:30:af:87:50:bc:8c:cb:28:ae:61:22:f3:5a:71:b7: d3:f5:3a:5f:d0:83:89:87:d0:e0:4b:ef:33:d9:f8:36:52:e7: 54:7a:c9:ab:6e:2f:00:56:65:e9:6d:13:3e:d5:74:a1:38:80: 9a:5c:97:bc:b4:ca:d3:ac:85:bb:02:24:45:a7:11:ab:e1:14: 5c:59:d4:32:8d:bf:98:c8:51:cb:d4:82:a8:2b:c2:de:b4:b5: 37:67:39:90:69:b1:d5:c1:d1:79:4d:a4:87:9d:f8:cf:44:9d: 14:eb:e3:8b:28:bf:6e:58:37:03:01:64:d0:d2:fa:25:64:81: 8e:de:bc:99:3c:b4:d0:30:71:0c:13:6f:34:20:fe:8f:bf:05: 63:82:0a:11:df:62:56:a1:41:9c:fe:c3:50:ea:c9:ce:23:a7: 23:7e:00:6c:58:8e:63:9f:be:d6:09:b2:7c:e5:b2:b2:43:f4: 64:53:8f:f6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUx689PpdxP9fNgTnuMoY1vXBjTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGQjhDNjc5OUY2NUM0ODc3MjY0NEVDQ0U4MDAwQ0RF NEUxQTFCMTAeFw0yNjAzMjUxNTIxMzJaFw0yNjAzMzAxOTIwMzJaMDMxMTAvBgNV BAMTKDQxOTdFODlBREU3RTUwMDQ2QUEzRTlCOEJBRURFQzc5RTU2QzlBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQrK57FM/JlP9i6xZ8OWCmanu DLgzkWJTcZL7pqtZJRZORrauiDSAEUNCdyYuiMscuyV/sTEePKywoJGSE9JPQFaD C1oPV3WfCu+h23hMPbxMR/mejpvDlEC+tQkKocy4fadXveCQ26xAShddiUDga954 xM9dRb5aC3TwdUJ4UCwihTwiDwPihdAEmEl769MZluZK0pbuinopoUYBuJtp9tNW XLmLEUYpuU6q1AsdUp7v8raEhlr1REPtx1aemyyAXUgvmN13R0zPPLISs7bcpeN/ zYdSnQSidQCXQ0UfxXsCmkGDg5ZqxYJij2NGh/giI+EKd4d6SedtZ3p2dkH/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQZfomt5+UARqo+m4uu3seeVsmqwwHwYDVR0j BBgwFoAUD/uMZ5n2XEh3JkTszoAAzeThobEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81QkM4N0U2NkE5RDMxNDFGOUUwQjkzNUE3NzU3NDU0Q0I3 RENEMzE2NzFCOTY3Njg2QTJENzJFNzhENkUxM0Q0LzAvMEZGQjhDNjc5OUY2NUM0 ODc3MjY0NEVDQ0U4MDAwQ0RFNEUxQTFCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRkZCOEM2Nzk5RjY1QzQ4Nzcy NjQ0RUNDRTgwMDBDREU0RTFBMUIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUJDODdFNjZBOUQzMTQxRjlFMEI5MzVBNzc1NzQ1NENCN0RDRDMxNjcx Qjk2NzY4NkEyRDcyRTc4RDZFMTNENC8wLzBGRkI4QzY3OTlGNjVDNDg3NzI2NDRF Q0NFODAwMENERTRFMUExQjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1i/3EPSwdVEuIRI8A/vfe1nIy NwsOtfUkWlPUDBSomSDfQWvKIAWvOiPmZ0sSTx8Rz+up93FRyNOc0aEQtc8gdAzD 6+mI49b0xTMwr4dQvIzLKK5hIvNacbfT9Tpf0IOJh9DgS+8z2fg2UudUesmrbi8A VmXpbRM+1XShOICaXJe8tMrTrIW7AiRFpxGr4RRcWdQyjb+YyFHL1IKoK8LetLU3 ZzmQabHVwdF5TaSHnfjPRJ0U6+OLKL9uWDcDAWTQ0volZIGO3ryZPLTQMHEME280 IP6PvwVjggoR32JWoUGc/sNQ6snOI6cjfgBsWI5jn77WCbJ85bKyQ/RkU4/2 -----END CERTIFICATE-----Generated at Fri Mar 27 02:37:30 2026 by rpki-client