$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft File: 420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft (raw, json) Hash identifier: Dc6SFCBz5ShDLIqbUe4OyZCq9wPEpppI6ANCZCjG9x0= Subject key identifier: B5:B8:28:C4:93:B2:DE:41:D2:ED:8D:70:C4:45:B7:CC:DC:57:44:5F Authority key identifier: 42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09 Certificate issuer: /CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09 Certificate serial: 7763384BD551DA755386855ED6DFE2FED97D6920 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft Manifest number: 0171 Signing time: Thu 26 Mar 2026 23:40:21 +0000 Manifest this update: Thu 26 Mar 2026 23:35:21 +0000 Manifest next update: Tue 31 Mar 2026 21:10:21 +0000 Files and hashes: 1: 420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl (hash: lIby/6pti2e/OEXlOawkRADCHfy3jun1VaKwOLlnRdU=) 2: 323830313a31333a623030303a3a2f34382d3438203d3e203634313039.roa (hash: qxcrjZxBllpFWBiv7au4lxYMzojTdIFke/oTd1/mJ6o=) 3: 34352e3233302e33342e302f32332d3234203d3e203634313039.roa (hash: 5GK9uhqlf/yat0D0gaWncsUyBX1uVtywnjRnF6mg/+I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:63:38:4b:d5:51:da:75:53:86:85:5e:d6:df:e2:fe:d9:7d:69:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09 Validity Not Before: Mar 26 23:35:21 2026 GMT Not After : Mar 31 21:10:21 2026 GMT Subject: CN=B5B828C493B2DE41D2ED8D70C445B7CCDC57445F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:38:1e:e7:fc:7d:97:51:21:15:9b:3a:ef: 11:ee:72:33:e6:57:74:68:c4:0c:13:f2:cf:96:53: 93:cc:28:6f:cd:30:a3:07:f1:8f:a0:2c:17:a8:97: c5:3a:6e:d0:13:57:9b:a7:1a:84:66:7e:f8:32:26: 1d:8f:e2:f4:ff:7c:54:6d:78:48:56:fe:7e:a1:27: b0:38:b4:8d:d5:05:95:9a:5f:03:95:a7:42:37:ac: 17:a5:b3:0d:a5:f9:ac:1d:e5:d3:2b:92:e8:ca:b8: bd:99:2d:3a:8b:9b:42:5a:c8:3b:30:bc:e2:41:a7: 85:ba:e6:8a:fc:86:74:9f:f1:3b:5b:47:31:b1:ed: 1e:43:be:ea:83:af:01:b2:50:47:e0:80:28:4a:4c: e6:c2:0a:3f:d6:79:87:8d:95:6a:2c:06:9f:d9:a3: 20:7d:41:d5:c0:55:b8:2e:4a:58:55:00:c7:ef:45: 36:1c:00:b3:36:62:3b:3a:b5:12:05:29:00:a2:0e: 31:62:0a:35:f6:db:3b:71:99:b8:0d:bc:ef:f9:7b: 71:58:14:25:b0:4e:56:56:06:2e:47:8d:e5:48:66: 09:85:5c:74:89:4f:44:c9:6a:02:57:f6:1c:48:07: 6d:39:3c:4f:55:ca:25:88:16:5b:d8:4e:70:96:ad: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B8:28:C4:93:B2:DE:41:D2:ED:8D:70:C4:45:B7:CC:DC:57:44:5F X509v3 Authority Key Identifier: keyid:42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e7:a5:5c:30:85:d3:b2:57:e4:e3:c9:80:3b:f4:f9:f4:01: fe:a6:70:ac:0c:aa:00:22:d6:b0:74:ef:f7:7f:4b:d1:04:d9: e7:cb:7f:8e:8c:87:93:8f:02:7b:08:ab:9e:d4:10:e1:c2:07: 01:d9:f7:30:d5:7e:c6:51:30:56:09:59:fe:e1:b2:04:26:c6: bb:95:96:02:93:a2:50:1f:8f:e8:4d:af:c5:4f:75:ba:81:c4: 32:1c:93:06:92:28:3a:bd:c0:80:68:c2:9d:e7:f4:35:ac:1d: 09:4c:af:4c:25:77:d2:10:41:48:7a:8d:c5:47:26:37:96:07: fa:c7:5d:33:95:71:78:17:e7:3f:bf:e9:66:66:fa:ad:46:84: 52:4e:ff:54:2c:fd:1b:59:61:6f:cb:83:7e:cb:85:56:67:27: 58:19:c0:fe:cb:f2:8a:19:13:0a:73:ad:dc:4a:9d:11:dd:dd: 77:d2:f8:39:f7:c5:3c:e6:60:4f:a0:85:f7:d6:3a:ef:a9:07: 01:70:a7:0e:d3:e6:9b:4a:75:d8:6a:27:dc:a7:07:bb:df:79: ea:b1:95:aa:17:39:76:c8:e6:63:e1:a5:17:0c:f7:e8:69:e5: d6:1d:60:63:4c:12:d5:01:f6:5f:36:bb:d6:f0:b2:b5:4d:dc: e7:cd:05:9c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUd2M4S9VR2nVThoVe1t/i/tl9aSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwQUJDRUY4QjI0OUIzRkQ2MzI3NEMwQjM4MkQ2RjVC RUExMUEwOTAeFw0yNjAzMjYyMzM1MjFaFw0yNjAzMzEyMTEwMjFaMDMxMTAvBgNV BAMTKEI1QjgyOEM0OTNCMkRFNDFEMkVEOEQ3MEM0NDVCN0NDREM1NzQ0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+Dge5/x9l1EhFZs67xHucjPm V3RoxAwT8s+WU5PMKG/NMKMH8Y+gLBeol8U6btATV5unGoRmfvgyJh2P4vT/fFRt eEhW/n6hJ7A4tI3VBZWaXwOVp0I3rBelsw2l+awd5dMrkujKuL2ZLTqLm0JayDsw vOJBp4W65or8hnSf8TtbRzGx7R5DvuqDrwGyUEfggChKTObCCj/WeYeNlWosBp/Z oyB9QdXAVbguSlhVAMfvRTYcALM2Yjs6tRIFKQCiDjFiCjX22ztxmbgNvO/5e3FY FCWwTlZWBi5HjeVIZgmFXHSJT0TJagJX9hxIB205PE9VyiWIFlvYTnCWrZeHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUtbgoxJOy3kHS7Y1wxEW3zNxXRF8wHwYDVR0j BBgwFoAUQgq874skmz/WMnTAs4LW9b6hGgkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81QzY2NzhFQzBDRERCQ0Q1NkQ4MUZBODhDMjBGMzE5Nzcw QzNDNjE5OUE0N0MxNzgwNThCRjk2NEYzRTM3NTg4LzAvNDIwQUJDRUY4QjI0OUIz RkQ2MzI3NEMwQjM4MkQ2RjVCRUExMUEwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjBBQkNFRjhCMjQ5QjNGRDYz Mjc0QzBCMzgyRDZGNUJFQTExQTA5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUM2Njc4RUMwQ0REQkNENTZEODFGQTg4QzIwRjMxOTc3MEMzQzYxOTlB NDdDMTc4MDU4QkY5NjRGM0UzNzU4OC8wLzQyMEFCQ0VGOEIyNDlCM0ZENjMyNzRD MEIzODJENkY1QkVBMTFBMDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBA56VcMIXTslfk48mAO/T59AH+ pnCsDKoAItawdO/3f0vRBNnny3+OjIeTjwJ7CKue1BDhwgcB2fcw1X7GUTBWCVn+ 4bIEJsa7lZYCk6JQH4/oTa/FT3W6gcQyHJMGkig6vcCAaMKd5/Q1rB0JTK9MJXfS EEFIeo3FRyY3lgf6x10zlXF4F+c/v+lmZvqtRoRSTv9ULP0bWWFvy4N+y4VWZydY GcD+y/KKGRMKc63cSp0R3d130vg598U85mBPoIX31jrvqQcBcKcO0+abSnXYaifc pwe733nqsZWqFzl2yOZj4aUXDPfoaeXWHWBjTBLVAfZfNrvW8LK1TdznzQWc -----END CERTIFICATE-----Generated at Fri Mar 27 07:10:26 2026 by rpki-client