$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.mft File: B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.mft (raw, json) Hash identifier: KaC6KPUpwP2feBc4p0YUlou5d+Dv3fP/7T+9Oepw4P8= Subject key identifier: D4:3F:DF:BC:7E:87:5B:89:0E:F5:88:2A:13:9C:99:26:2B:9A:53:4A Authority key identifier: B9:E5:BD:CE:9B:3D:2E:DD:3F:BB:3D:C3:7F:49:B8:1D:DE:5A:6C:86 Certificate issuer: /CN=B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86 Certificate serial: 5324E59E19C7CCB40174CA26ADA437A9DC8A51B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.mft Manifest number: 90 Signing time: Wed 25 Mar 2026 10:43:58 +0000 Manifest this update: Wed 25 Mar 2026 10:38:58 +0000 Manifest next update: Tue 31 Mar 2026 10:18:58 +0000 Files and hashes: 1: B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.crl (hash: s9frjYLF3i614Zyzngm/wxfZWC3KzeO2ruFq0hxejb8=) 2: 323830333a393635303a3a2f33322d3438203d3e20323733303339.roa (hash: BJzy2HMBDYe+UuV6FnPUlHSGAO97wpAlUcwqU1FOk5k=) 3: 323830333a393635303a3a2f33322d3438203d3e20323733323035.roa (hash: Ui+oKYXAjQVAPlwuVQ7Mx3yalQ4MkA6sfGi1DWFfSlw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.crl rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:24:e5:9e:19:c7:cc:b4:01:74:ca:26:ad:a4:37:a9:dc:8a:51:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86 Validity Not Before: Mar 25 10:38:58 2026 GMT Not After : Mar 31 10:18:58 2026 GMT Subject: CN=D43FDFBC7E875B890EF5882A139C99262B9A534A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:b6:99:8b:da:3f:eb:b4:d3:3e:a8:a0:1c: b1:48:bb:5a:bb:cb:7d:a7:b5:ca:97:47:3b:4e:29: 75:71:e2:1e:72:5b:0a:14:1f:6c:21:c9:17:a3:77: ed:16:2a:1a:51:a9:50:a9:85:32:84:b5:18:b6:8e: e9:b5:bd:4f:f5:b3:59:c3:ac:bf:61:b7:d8:0c:c2: 8d:2d:a5:ef:34:7a:dc:6b:cf:10:9a:9c:04:63:d4: 84:c7:a0:18:57:cd:2f:3a:91:05:12:02:80:f1:b9: a0:00:40:82:fc:74:94:41:b6:62:83:9e:8c:4a:3d: ea:38:18:15:87:aa:65:0a:2b:08:0c:1f:1d:f1:27: da:5f:a2:83:b3:2f:cc:30:9a:52:92:49:4d:fb:25: 62:74:80:26:87:e5:03:8e:f1:aa:bb:f7:1a:ec:4c: ef:98:3d:a4:04:4a:d4:cb:b7:03:3e:ed:4c:77:31: 07:69:00:38:3e:72:17:85:61:7e:47:c6:91:64:e2: cd:04:8c:12:1b:24:19:3a:71:9c:79:96:f2:0c:08: cc:40:b5:83:67:07:1c:ea:c1:ad:e4:92:3b:5e:52: 4c:c5:8f:ed:fe:33:6e:a0:8f:b3:d2:a6:93:86:0c: da:b6:c6:6b:c8:4e:1c:91:2a:9c:d8:76:07:a4:68: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3F:DF:BC:7E:87:5B:89:0E:F5:88:2A:13:9C:99:26:2B:9A:53:4A X509v3 Authority Key Identifier: keyid:B9:E5:BD:CE:9B:3D:2E:DD:3F:BB:3D:C3:7F:49:B8:1D:DE:5A:6C:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:07:f0:c2:49:b3:74:61:85:98:72:80:8e:58:24:52:36:d1: ec:24:01:48:b5:d4:dd:d0:8f:ed:1a:90:5a:be:da:84:ee:2c: 84:b1:b4:fa:9e:e3:a1:c6:d7:b1:a8:17:dd:8d:c0:ef:e4:1b: 56:f2:45:e1:06:9a:05:30:01:b1:15:eb:a7:0d:18:60:02:fb: 8a:9e:04:1c:9c:fc:7c:49:98:c0:ee:88:a3:55:fb:cb:b6:e1: c2:3a:9b:2c:39:cf:73:1e:28:94:1d:ae:f6:02:fe:69:d6:b3: 1d:ea:18:fd:e6:cd:fb:e0:55:93:58:27:ca:46:76:21:ce:e4: 5c:0b:a0:d7:a6:e6:4f:57:62:8b:80:54:0b:9f:92:67:0e:90: b8:ed:9c:ff:79:67:9b:3d:fb:ce:17:fd:eb:45:a7:a4:ec:cd: 38:af:30:aa:68:c6:a5:a5:76:e4:73:25:95:27:dc:31:29:0f: 97:e1:cc:93:ea:b4:73:26:d0:7f:08:71:53:8c:5f:5d:6d:92: 36:ce:6d:fe:e7:1d:46:22:41:64:e2:67:11:51:89:16:d1:87: 20:8d:5f:e2:a5:d1:0a:9b:a2:5c:99:22:f5:be:3e:5b:67:54: 4a:c3:1f:fb:c9:d7:38:e3:13:ca:9c:77:cc:d5:a6:09:4a:7f: 92:fa:f5:91 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUyTlnhnHzLQBdMomraQ3qdyKUbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFNUJEQ0U5QjNEMkVERDNGQkIzREMzN0Y0OUI4MURE RTVBNkM4NjAeFw0yNjAzMjUxMDM4NThaFw0yNjAzMzExMDE4NThaMDMxMTAvBgNV BAMTKEQ0M0ZERkJDN0U4NzVCODkwRUY1ODgyQTEzOUM5OTI2MkI5QTUzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKraZi9o/67TTPqigHLFIu1q7 y32ntcqXRztOKXVx4h5yWwoUH2whyRejd+0WKhpRqVCphTKEtRi2jum1vU/1s1nD rL9ht9gMwo0tpe80etxrzxCanARj1ITHoBhXzS86kQUSAoDxuaAAQIL8dJRBtmKD noxKPeo4GBWHqmUKKwgMHx3xJ9pfooOzL8wwmlKSSU37JWJ0gCaH5QOO8aq79xrs TO+YPaQEStTLtwM+7Ux3MQdpADg+cheFYX5HxpFk4s0EjBIbJBk6cZx5lvIMCMxA tYNnBxzqwa3kkjteUkzFj+3+M26gj7PSppOGDNq2xmvIThyRKpzYdgekaMBtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1D/fvH6HW4kO9YgqE5yZJiuaU0owHwYDVR0j BBgwFoAUueW9zps9Lt0/uz3Df0m4Hd5abIYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MTUyMEE3RDQxQUVFQ0U0QTNDNjcyNDRFREZBNUVGRjVG Mzg0M0JBRTE4MTM2Q0YzNzBBREVCRTI0OTA4MDBDLzAvQjlFNUJEQ0U5QjNEMkVE RDNGQkIzREMzN0Y0OUI4MURERTVBNkM4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COUU1QkRDRTlCM0QyRUREM0ZC QjNEQzM3RjQ5QjgxRERFNUE2Qzg2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjE1MjBBN0Q0MUFFRUNFNEEzQzY3MjQ0RURGQTVFRkY1RjM4NDNCQUUx ODEzNkNGMzcwQURFQkUyNDkwODAwQy8wL0I5RTVCRENFOUIzRDJFREQzRkJCM0RD MzdGNDlCODFEREU1QTZDODYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASB/DCSbN0YYWYcoCOWCRSNtHs JAFItdTd0I/tGpBavtqE7iyEsbT6nuOhxtexqBfdjcDv5BtW8kXhBpoFMAGxFeun DRhgAvuKngQcnPx8SZjA7oijVfvLtuHCOpssOc9zHiiUHa72Av5p1rMd6hj95s37 4FWTWCfKRnYhzuRcC6DXpuZPV2KLgFQLn5JnDpC47Zz/eWebPfvOF/3rRaek7M04 rzCqaMalpXbkcyWVJ9wxKQ+X4cyT6rRzJtB/CHFTjF9dbZI2zm3+5x1GIkFk4mcR UYkW0YcgjV/ipdEKm6JcmSL1vj5bZ1RKwx/7ydc44xPKnHfM1aYJSn+S+vWR -----END CERTIFICATE-----Generated at Thu Mar 26 21:55:14 2026 by rpki-client