$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.mft File: BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.mft (raw, json) Hash identifier: cbDvLYzz5h7RKAPQGRxZa4ftTjPN2icEWnZBBWuIImM= Subject key identifier: F3:E9:54:2B:5B:ED:51:CC:A0:94:3C:C8:51:55:2F:CA:15:7D:CA:50 Authority key identifier: BF:28:4D:70:A6:F9:C8:8D:A8:EA:14:5D:79:F3:08:EF:8A:10:AF:EA Certificate issuer: /CN=BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA Certificate serial: 1E8D832939F4A318C8DC7C9A9D211BA1CABEE534 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.mft Manifest number: 017F Signing time: Wed 25 Mar 2026 12:50:04 +0000 Manifest this update: Wed 25 Mar 2026 12:45:04 +0000 Manifest next update: Tue 31 Mar 2026 01:50:04 +0000 Files and hashes: 1: 3139302e3138352e38302e302f32302d3234203d3e20323632313831.roa (hash: jsNVoo+guNLYSu4XrZv1IjqXoB0479I6+f0z24WMFgo=) 2: 3139302e3138352e36342e302f32302d3234203d3e20323632313831.roa (hash: PnmGCbzxGZCZPKXsjzl0NFFJNU1RmBttMMjwG48gNnc=) 3: BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.crl (hash: 237/VuBWuRM5I19QGPqDBXLY3qXMUXdRsuoBxsLclaA=) 4: 323830333a353163303a3a2f33322d3332203d3e20323632313831.roa (hash: rlHaBYe/DiIeYxcNTG+PcVVFl3/tRpMJNH8XUuY9Dks=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.crl rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8d:83:29:39:f4:a3:18:c8:dc:7c:9a:9d:21:1b:a1:ca:be:e5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA Validity Not Before: Mar 25 12:45:04 2026 GMT Not After : Mar 31 01:50:04 2026 GMT Subject: CN=F3E9542B5BED51CCA0943CC851552FCA157DCA50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:42:d5:84:33:4f:9f:a3:d6:94:f0:5f:44: 60:2c:1a:80:85:9b:ae:d6:1d:5b:b6:70:9a:85:cc: 7a:2c:a5:e5:6e:66:41:ad:c1:d8:dc:e3:50:f6:d7: 49:d5:fc:dd:da:f1:1d:f4:62:d1:56:99:f4:cb:84: b7:a4:84:1f:be:51:be:f7:83:c4:2a:cb:3c:f9:2c: 59:30:3a:ba:e9:e6:f5:f3:bd:28:3f:31:68:8c:77: 61:03:a9:be:ba:a2:d5:fc:94:35:2a:57:3d:50:eb: 0f:11:a3:c4:3f:10:01:36:5d:5d:be:fd:85:5a:84: d2:a5:62:e7:af:cf:c0:81:36:54:d4:b5:d7:9b:11: 88:df:ef:49:97:5c:cb:50:dd:10:e8:8c:9f:07:a9: 86:bf:15:03:e4:5b:54:2c:34:26:f5:1d:09:9c:a4: 51:05:5e:a0:d9:71:76:03:ea:b5:02:92:e8:c3:4e: 8a:de:8a:eb:4f:fe:b7:f6:73:70:e9:03:7e:38:d1: 67:f3:fb:a7:9d:fc:fe:cb:9c:20:bf:31:c0:92:9e: cf:9a:1c:07:07:32:d4:70:e7:1b:1e:cd:6b:1f:58: 88:43:5f:ee:cd:18:b9:66:21:2d:b6:43:dd:e0:f2: 3b:46:2f:1e:2c:bb:e7:5e:e3:3a:a7:aa:30:b3:e2: 42:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E9:54:2B:5B:ED:51:CC:A0:94:3C:C8:51:55:2F:CA:15:7D:CA:50 X509v3 Authority Key Identifier: keyid:BF:28:4D:70:A6:F9:C8:8D:A8:EA:14:5D:79:F3:08:EF:8A:10:AF:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9f:12:1c:c0:92:0a:ea:a6:00:06:f5:38:1b:93:78:2d:44: 10:b2:63:2a:d8:2a:4a:63:84:d4:f9:73:3a:cf:9b:26:e0:cc: c7:76:d6:85:e6:56:28:15:7f:c2:dc:55:a7:6f:12:ee:b8:94: 73:eb:ef:51:3d:1f:8d:5a:76:73:24:47:97:18:cf:3b:6e:e1: 5a:68:b3:92:8d:e4:1f:0f:3c:4f:0a:cc:3b:60:cc:0f:8b:8b: a3:3d:c0:30:42:cd:8d:f4:08:e7:f0:69:4a:57:15:1a:2f:a8: 96:f6:50:c1:75:31:d3:d6:2b:3b:06:de:e5:4c:87:3b:a5:7a: 28:b1:6b:45:80:01:42:ae:ab:eb:18:cc:c8:97:7c:b2:9a:9a: 7c:fa:71:6a:ab:ba:23:0a:68:30:82:c0:3b:07:f2:cc:a0:e3: dd:d9:a2:e7:56:6b:f7:ee:9c:a6:aa:c7:07:40:14:59:cc:a1: 1b:3b:9d:ab:c6:cc:7e:76:d3:82:46:4a:3a:76:58:a4:4f:e2: 8d:27:61:02:ad:7b:b6:0a:0f:40:4f:70:08:5e:ae:d2:17:b4: 89:fb:ab:61:7f:71:0e:ee:cb:e4:e0:f5:0b:a0:fc:be:b9:7f: 57:84:86:e9:f2:de:fa:58:2f:26:83:4b:7a:5d:9c:97:83:12: 36:d2:88:31 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHo2DKTn0oxjI3HyanSEbocq+5TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyODRENzBBNkY5Qzg4REE4RUExNDVENzlGMzA4RUY4 QTEwQUZFQTAeFw0yNjAzMjUxMjQ1MDRaFw0yNjAzMzEwMTUwMDRaMDMxMTAvBgNV BAMTKEYzRTk1NDJCNUJFRDUxQ0NBMDk0M0NDODUxNTUyRkNBMTU3RENBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fULVhDNPn6PWlPBfRGAsGoCF m67WHVu2cJqFzHospeVuZkGtwdjc41D210nV/N3a8R30YtFWmfTLhLekhB++Ub73 g8Qqyzz5LFkwOrrp5vXzvSg/MWiMd2EDqb66otX8lDUqVz1Q6w8Ro8Q/EAE2XV2+ /YVahNKlYuevz8CBNlTUtdebEYjf70mXXMtQ3RDojJ8HqYa/FQPkW1QsNCb1HQmc pFEFXqDZcXYD6rUCkujDToreiutP/rf2c3DpA3440Wfz+6ed/P7LnCC/McCSns+a HAcHMtRw5xsezWsfWIhDX+7NGLlmIS22Q93g8jtGLx4su+de4zqnqjCz4kL7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8+lUK1vtUcyglDzIUVUvyhV9ylAwHwYDVR0j BBgwFoAUvyhNcKb5yI2o6hRdefMI74oQr+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83M0VENDczQUY5QkJEODdDM0VENTVDOTA0OEFDRDY1OTE2 RUZGODAxMUFEMEI1ODQwRDkxNjBERTMxM0Y4M0Y4LzAvQkYyODRENzBBNkY5Qzg4 REE4RUExNDVENzlGMzA4RUY4QTEwQUZFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjI4NEQ3MEE2RjlDODhEQThF QTE0NUQ3OUYzMDhFRjhBMTBBRkVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzNFRDQ3M0FGOUJCRDg3QzNFRDU1QzkwNDhBQ0Q2NTkxNkVGRjgwMTFB RDBCNTg0MEQ5MTYwREUzMTNGODNGOC8wL0JGMjg0RDcwQTZGOUM4OERBOEVBMTQ1 RDc5RjMwOEVGOEExMEFGRUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjnxIcwJIK6qYABvU4G5N4LUQQ smMq2CpKY4TU+XM6z5sm4MzHdtaF5lYoFX/C3FWnbxLuuJRz6+9RPR+NWnZzJEeX GM87buFaaLOSjeQfDzxPCsw7YMwPi4ujPcAwQs2N9Ajn8GlKVxUaL6iW9lDBdTHT 1is7Bt7lTIc7pXoosWtFgAFCrqvrGMzIl3yympp8+nFqq7ojCmgwgsA7B/LMoOPd 2aLnVmv37pymqscHQBRZzKEbO52rxsx+dtOCRko6dlikT+KNJ2ECrXu2Cg9AT3AI Xq7SF7SJ+6thf3EO7svk4PULoPy+uX9XhIbp8t76WC8mg0t6XZyXgxI20ogx -----END CERTIFICATE-----Generated at Thu Mar 26 22:15:20 2026 by rpki-client