$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json) Hash identifier: XPpcz0KL5w0IPnG+4acHt8bwTi5RIHRCLjN6ckDAgMo= Subject key identifier: A1:AF:50:4E:DB:5E:1E:99:B2:D9:F6:56:2D:07:BC:C8:08:4A:B5:05 Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Certificate serial: 671FF90BD3BBD94383A5269548BC93DBC3BB81F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft Manifest number: 0173 Signing time: Wed 25 Mar 2026 04:10:04 +0000 Manifest this update: Wed 25 Mar 2026 04:05:04 +0000 Manifest next update: Tue 31 Mar 2026 03:54:04 +0000 Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: RJWKCtcb0QGuHY5Gw6N2Gh/MDb+QMK63ndDyMj3r9fI=) 2: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: 5s7v2ZksDktXvekcaINYLCeJ8h6xBCALWi6yZoVHglY=) 3: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: JqSzzKtH7WTqeSjtgfTKgdgz8dn8rZiduEYkUeIrIvo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 17:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1f:f9:0b:d3:bb:d9:43:83:a5:26:95:48:bc:93:db:c3:bb:81:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Validity Not Before: Mar 25 04:05:04 2026 GMT Not After : Mar 31 03:54:04 2026 GMT Subject: CN=A1AF504EDB5E1E99B2D9F6562D07BCC8084AB505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c1:fc:28:25:18:3e:db:5b:43:c1:16:b6:e9: ba:f5:fb:90:d4:ed:04:e2:49:d8:0c:45:c8:bf:ff: 17:c2:ef:07:b0:79:0a:6b:5a:8a:d8:aa:b2:41:7c: 92:0c:52:b5:86:2e:91:0e:37:5f:d3:43:e4:24:7c: 00:9f:e5:8b:d0:54:ad:8d:35:45:cd:fc:d2:5e:73: 2b:fa:c6:30:88:86:90:dd:0d:17:ee:4e:e1:49:45: 61:d2:df:f6:2d:b9:94:71:a6:2e:33:41:62:65:69: 18:03:7c:db:6d:ef:26:49:08:16:57:17:3b:c4:90: ae:53:3b:8d:24:98:47:0c:63:7e:25:c8:f4:af:69: 86:83:69:51:17:c1:0d:2c:c5:7d:3a:17:23:b2:91: 31:55:9d:e2:85:1c:b5:76:57:d5:eb:05:e0:5f:8b: af:60:94:a5:e4:a1:22:c2:91:e5:72:e7:ec:a6:fe: 0d:78:a1:bc:5f:02:a9:a6:32:a0:e7:a4:f9:a0:c9: 5e:f0:10:e6:b9:f3:df:b0:88:f5:49:25:dd:81:6b: 66:6d:08:11:75:30:23:bb:9c:55:1b:88:f5:c9:de: b9:eb:6a:84:63:41:7a:2c:e1:98:14:5e:96:2a:15: 3e:58:fe:08:ad:cb:89:59:4c:d0:a0:8f:cb:a7:10: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AF:50:4E:DB:5E:1E:99:B2:D9:F6:56:2D:07:BC:C8:08:4A:B5:05 X509v3 Authority Key Identifier: keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:c5:54:62:10:e1:ed:60:90:29:19:dd:fa:89:ac:7f:9d:63: f1:90:4f:83:dc:51:d4:ad:5f:37:53:59:42:8d:a0:e9:03:44: d2:ee:3f:d6:9c:78:0c:ce:ce:55:45:66:22:c5:47:ae:d7:3d: 90:10:57:c5:70:2a:81:d6:4a:3b:9c:1b:a4:82:5b:72:47:49: 28:9a:36:05:0d:cf:8c:ec:61:0b:80:08:49:da:16:1f:67:05: 43:94:f2:d0:ad:b1:1d:79:81:47:17:d6:1e:8f:34:05:d4:6b: f2:f2:30:c3:c9:9b:ce:1f:5a:a3:9a:15:4a:93:42:bf:b3:94: a9:7a:21:c3:06:b6:bb:a8:d4:e1:d3:1f:ef:b4:78:ef:20:ea: 24:42:35:00:4e:54:65:c0:e1:64:87:9e:82:3b:12:fe:67:50: 76:68:f8:de:e9:17:67:e3:ce:1d:78:a4:2f:b4:d6:c6:55:7f: 77:ba:fa:09:3f:5a:2d:e9:79:45:f1:9c:ab:b8:d2:2a:9d:ed: 46:b8:9a:3a:b4:31:84:12:19:58:71:2a:e2:f6:08:8b:f5:37: 27:cd:9f:2e:38:fb:49:1e:bc:e0:aa:cb:a8:15:09:1b:2c:0d: f8:3d:d0:dc:44:da:21:1a:8c:21:63:c9:4c:e0:ad:d6:34:04: 34:a2:31:db -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZx/5C9O72UODpSaVSLyT28O7gfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG OEE3NzdBQTAeFw0yNjAzMjUwNDA1MDRaFw0yNjAzMzEwMzU0MDRaMDMxMTAvBgNV BAMTKEExQUY1MDRFREI1RTFFOTlCMkQ5RjY1NjJEMDdCQ0M4MDg0QUI1MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlwfwoJRg+21tDwRa26br1+5DU 7QTiSdgMRci//xfC7weweQprWorYqrJBfJIMUrWGLpEON1/TQ+QkfACf5YvQVK2N NUXN/NJecyv6xjCIhpDdDRfuTuFJRWHS3/YtuZRxpi4zQWJlaRgDfNtt7yZJCBZX FzvEkK5TO40kmEcMY34lyPSvaYaDaVEXwQ0sxX06FyOykTFVneKFHLV2V9XrBeBf i69glKXkoSLCkeVy5+ym/g14obxfAqmmMqDnpPmgyV7wEOa589+wiPVJJd2Ba2Zt CBF1MCO7nFUbiPXJ3rnraoRjQXos4ZgUXpYqFT5Y/gity4lZTNCgj8unEEoLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUoa9QTtteHpmy2fZWLQe8yAhKtQUwHwYDVR0j BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3 NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wL0REQUY4OUQ0ODA3QzRGQkQyOTc0Q0FD Mjc2QzM3Qzk1RjhBNzc3QUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/xVRiEOHtYJApGd36iax/nWPx kE+D3FHUrV83U1lCjaDpA0TS7j/WnHgMzs5VRWYixUeu1z2QEFfFcCqB1ko7nBuk gltyR0komjYFDc+M7GELgAhJ2hYfZwVDlPLQrbEdeYFHF9YejzQF1Gvy8jDDyZvO H1qjmhVKk0K/s5SpeiHDBra7qNTh0x/vtHjvIOokQjUATlRlwOFkh56COxL+Z1B2 aPje6Rdn484deKQvtNbGVX93uvoJP1ot6XlF8ZyruNIqne1GuJo6tDGEEhlYcSri 9giL9TcnzZ8uOPtJHrzgqsuoFQkbLA34PdDcRNohGowhY8lM4K3WNAQ0ojHb -----END CERTIFICATE-----Generated at Thu Mar 26 17:39:22 2026 by rpki-client