$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft File: 68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft (raw, json) Hash identifier: zNGRZXMQdtD4DuUwVThhZe6cZPOZZUtgw+7flzbXm6s= Subject key identifier: 33:E4:2C:8A:15:EA:A7:E2:14:88:12:7D:34:4D:D6:0D:24:E9:E7:0E Authority key identifier: 68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37 Certificate issuer: /CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937 Certificate serial: 2275054B6A0EB0798B0BA573824D26A1F0E81A69 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft Manifest number: 0172 Signing time: Tue 24 Mar 2026 12:15:30 +0000 Manifest this update: Tue 24 Mar 2026 12:10:30 +0000 Manifest next update: Mon 30 Mar 2026 02:24:30 +0000 Files and hashes: 1: 3230302e32352e3232342e302f31392d3234203d3e203237373633.roa (hash: rXZiZD+t9ffOixxz16BqfBn2TraObCCKBxGonyOg7PU=) 2: 323830333a373339303a3a2f34382d3438203d3e203237373633.roa (hash: Asn3d+h0b5q+J2xmL0wae4RdPWtRJqB3UePLg69lzcM=) 3: 68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl (hash: qnJ9/WGnBsJ8K0JUBBf14x8OCa6VMNAYZcCGhJH7fQg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 02:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:75:05:4b:6a:0e:b0:79:8b:0b:a5:73:82:4d:26:a1:f0:e8:1a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937 Validity Not Before: Mar 24 12:10:30 2026 GMT Not After : Mar 30 02:24:30 2026 GMT Subject: CN=33E42C8A15EAA7E21488127D344DD60D24E9E70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:9d:92:0d:24:81:06:ee:44:6c:7d:52:b5: 5e:1c:60:1c:38:1c:b0:c3:82:a4:6d:8a:97:0c:82: 04:ed:a5:64:0d:6c:71:7e:40:6a:f1:5e:39:5e:96: 17:ba:9a:4b:a3:2e:93:b3:ce:b0:cf:e8:64:60:7f: d8:eb:56:a0:69:7d:de:67:a2:ac:8a:55:f0:b1:19: eb:4e:f6:7d:0a:47:6a:ce:6e:ec:d0:55:b9:41:03: fd:f5:01:f6:3d:91:1d:d4:3d:cf:83:7f:f8:36:2a: 94:eb:da:3a:77:80:9b:7f:b2:5c:a0:9a:e5:d5:3e: 1e:68:81:2f:73:5d:57:a3:0d:47:eb:e3:a8:d7:ab: c8:f7:67:55:1f:14:c5:ed:62:f1:fa:8c:57:97:bd: ae:2b:59:52:7a:05:c7:4b:c6:19:e9:3f:0c:c5:7b: 17:91:b5:1b:2c:11:96:13:33:00:32:2e:6a:4a:cd: df:5d:b2:e1:f9:a5:72:f4:c9:8e:0c:7c:4b:34:aa: 62:1b:84:d6:3a:fd:17:9a:87:96:65:60:9d:6c:00: 69:ab:9b:a6:ab:72:a1:1c:64:30:d0:e4:0b:94:32: 89:2e:3d:14:c3:2d:f7:67:e1:2f:6d:0a:08:cf:35: 77:f2:5c:79:ef:31:ce:8f:58:8a:68:d6:de:c9:f4: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E4:2C:8A:15:EA:A7:E2:14:88:12:7D:34:4D:D6:0D:24:E9:E7:0E X509v3 Authority Key Identifier: keyid:68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c7:fa:21:48:11:ed:20:35:7d:98:50:5b:c2:a7:e9:6f:a5: 4c:a7:c5:ca:3b:f0:42:6a:3b:09:c6:28:95:e7:ef:6f:49:28: 04:0d:9c:2b:30:18:ef:f5:17:16:13:22:cf:f8:16:06:5c:d6: ed:c0:af:8c:0f:17:e0:21:4d:2c:3c:99:ae:ea:dd:89:e7:c9: e9:b1:05:9e:ba:8d:dc:48:80:21:8c:23:73:b3:ec:e0:bf:52: 8e:d3:10:f0:7a:d0:02:32:37:4d:94:33:42:36:4a:0c:10:ea: a7:34:a6:2b:0e:04:5c:1c:39:ef:96:8d:24:bc:78:21:41:ca: a9:8a:3a:82:b9:40:29:2c:df:cf:82:af:d6:8b:b1:9b:57:89: d5:ea:d2:e7:96:8e:a1:cc:1f:67:2a:cc:c8:f4:1d:72:ae:d3: 2d:24:b1:11:af:83:42:d4:20:a1:ca:ea:07:d0:2c:c2:d7:7e: 39:b0:a5:ae:d4:bd:6e:d3:9f:39:1a:8e:11:e3:e9:15:bb:93: 56:01:de:1e:06:df:3a:39:ec:e8:55:0f:09:ff:97:04:50:e1: 29:a2:9d:01:87:96:f6:e7:bf:77:d5:7d:7a:14:40:12:d6:07: 80:8f:02:8a:36:78:8a:36:26:45:8c:a5:60:d5:46:e2:c8:16: 4a:81:ca:64 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUInUFS2oOsHmLC6Vzgk0mofDoGmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQTUzQ0M2QTQyRDlEM0ZCM0QxREYyNjE4NDY5QzFG MzJENjkzNzAeFw0yNjAzMjQxMjEwMzBaFw0yNjAzMzAwMjI0MzBaMDMxMTAvBgNV BAMTKDMzRTQyQzhBMTVFQUE3RTIxNDg4MTI3RDM0NERENjBEMjRFOUU3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrZ2SDSSBBu5EbH1StV4cYBw4 HLDDgqRtipcMggTtpWQNbHF+QGrxXjlelhe6mkujLpOzzrDP6GRgf9jrVqBpfd5n oqyKVfCxGetO9n0KR2rObuzQVblBA/31AfY9kR3UPc+Df/g2KpTr2jp3gJt/slyg muXVPh5ogS9zXVejDUfr46jXq8j3Z1UfFMXtYvH6jFeXva4rWVJ6BcdLxhnpPwzF exeRtRssEZYTMwAyLmpKzd9dsuH5pXL0yY4MfEs0qmIbhNY6/Reah5ZlYJ1sAGmr m6arcqEcZDDQ5AuUMokuPRTDLfdn4S9tCgjPNXfyXHnvMc6PWIpo1t7J9HhJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUM+QsihXqp+IUiBJ9NE3WDSTp5w4wHwYDVR0j BBgwFoAUaOpTzGpC2dP7PR3yYYRpwfMtaTcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82N0QwNTdGQjExRDNDRDk4MzQzQkYzMEZGNTA1QkU4MEVD QUUzRjBGRDUwODI2ODUzOTU3QkI0RDRBODJGOURBLzAvNjhFQTUzQ0M2QTQyRDlE M0ZCM0QxREYyNjE4NDY5QzFGMzJENjkzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OEVBNTNDQzZBNDJEOUQzRkIz RDFERjI2MTg0NjlDMUYzMkQ2OTM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjdEMDU3RkIxMUQzQ0Q5ODM0M0JGMzBGRjUwNUJFODBFQ0FFM0YwRkQ1 MDgyNjg1Mzk1N0JCNEQ0QTgyRjlEQS8wLzY4RUE1M0NDNkE0MkQ5RDNGQjNEMURG MjYxODQ2OUMxRjMyRDY5MzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7x/ohSBHtIDV9mFBbwqfpb6VM p8XKO/BCajsJxiiV5+9vSSgEDZwrMBjv9RcWEyLP+BYGXNbtwK+MDxfgIU0sPJmu 6t2J58npsQWeuo3cSIAhjCNzs+zgv1KO0xDwetACMjdNlDNCNkoMEOqnNKYrDgRc HDnvlo0kvHghQcqpijqCuUApLN/Pgq/Wi7GbV4nV6tLnlo6hzB9nKszI9B1yrtMt JLERr4NC1CChyuoH0CzC1345sKWu1L1u0585Go4R4+kVu5NWAd4eBt86OezoVQ8J /5cEUOEpop0Bh5b257931X16FEAS1geAjwKKNniKNiZFjKVg1UbiyBZKgcpk -----END CERTIFICATE-----Generated at Thu Mar 26 21:11:36 2026 by rpki-client