$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft File: 1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft (raw, json) Hash identifier: A0n+raeZDxCa1137lM7Bv175g+nxruyVgawa2dWhHCI= Subject key identifier: 0B:4A:26:FE:47:68:BE:BE:1D:33:BD:C0:0E:6D:5D:EC:92:95:2A:26 Authority key identifier: 18:21:D3:EA:A1:F9:6B:68:44:A8:8C:CD:90:D1:BC:32:7F:45:4A:72 Certificate issuer: /CN=1821D3EAA1F96B6844A88CCD90D1BC327F454A72 Certificate serial: 3366C08A53D0E6A250F4A8E1A16FFFE64E34367B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft Manifest number: 0176 Signing time: Wed 25 Mar 2026 13:50:42 +0000 Manifest this update: Wed 25 Mar 2026 13:45:42 +0000 Manifest next update: Tue 31 Mar 2026 05:31:42 +0000 Files and hashes: 1: 323830333a613539303a3a2f33322d3332203d3e20323732393730.roa (hash: VebMPByJPDjaofzAGQ/3jla1NI4swar/dOub0rfczTg=) 2: 1821D3EAA1F96B6844A88CCD90D1BC327F454A72.crl (hash: k1l36dv1O2wD4P4+laM7Az4T6wYybS+8rmJTmVelNLk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.crl rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:66:c0:8a:53:d0:e6:a2:50:f4:a8:e1:a1:6f:ff:e6:4e:34:36:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1821D3EAA1F96B6844A88CCD90D1BC327F454A72 Validity Not Before: Mar 25 13:45:42 2026 GMT Not After : Mar 31 05:31:42 2026 GMT Subject: CN=0B4A26FE4768BEBE1D33BDC00E6D5DEC92952A26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:45:80:67:02:e5:2e:14:b9:40:5c:1e:51: 05:d9:77:0f:3a:91:95:6a:30:66:2d:de:d3:d2:9c: 48:aa:ef:6a:0b:fa:24:ee:4f:5a:95:c7:25:2b:0e: 78:b3:26:88:92:ca:9c:c3:62:d6:c6:6d:77:f6:6d: 54:85:c8:be:a7:ef:3b:22:7a:e6:ed:ab:9b:08:ad: 00:e1:38:26:ac:e5:19:a7:91:f9:05:74:b6:8e:97: 2c:bb:ce:50:46:1c:62:dc:e7:07:9a:fb:64:b6:7d: 49:2b:f4:78:14:a1:4c:bf:34:4a:6d:89:b1:5e:00: ac:1e:cd:71:10:68:2d:0e:46:0e:04:a8:87:76:5c: 4c:59:2e:b7:e1:b2:eb:7c:b7:27:19:9d:aa:0a:f3: 1b:70:c0:ac:60:6c:43:57:99:31:2b:c3:ec:02:12: 0b:7a:34:7e:93:90:0c:ef:c2:8f:e3:91:2b:16:4b: 26:53:33:9c:80:cd:bf:2e:7b:9a:85:96:bb:5c:a0: a4:a2:1d:54:8a:02:93:ff:2b:96:5e:6b:80:ee:eb: 4f:1d:c7:0e:b5:3c:3d:2a:57:ad:73:ea:a1:bb:83: 6b:ec:b9:28:37:3d:43:6c:c4:dd:b8:0a:56:ac:72: 83:b2:40:e2:d2:37:09:52:af:07:8b:8a:54:ab:5d: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4A:26:FE:47:68:BE:BE:1D:33:BD:C0:0E:6D:5D:EC:92:95:2A:26 X509v3 Authority Key Identifier: keyid:18:21:D3:EA:A1:F9:6B:68:44:A8:8C:CD:90:D1:BC:32:7F:45:4A:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8d:1c:4f:10:96:c7:e7:6e:e4:cb:f1:20:e0:21:96:2d:03: e8:ab:9e:0b:86:af:22:0c:ee:6b:d0:2b:27:1a:1d:d8:69:77: 20:9b:c8:ab:5d:e4:bb:c0:c5:5b:f4:67:1d:6d:c9:d4:e2:d8: ab:68:e5:83:df:29:e9:8a:eb:fa:64:4f:bc:b2:1c:54:c6:b2: b9:af:55:13:fa:db:66:2e:a4:4c:02:c4:3b:94:a2:0e:6c:84: cf:d4:ac:6f:5b:43:51:c2:02:c9:9d:14:33:7d:92:8d:f9:fb: 12:44:0b:0c:09:9e:67:df:65:83:d1:e2:68:01:74:f2:50:0c: 63:fe:f9:2d:12:97:31:79:4f:04:3f:df:23:84:93:75:af:62: a0:00:ea:37:ca:f8:a5:2b:d0:df:44:fd:fc:63:1f:88:11:0f: a2:92:03:45:bb:01:5f:8f:c1:22:3d:55:1a:9b:e0:d7:9e:94: c1:d0:49:a7:2d:9c:4c:fc:f1:bd:95:61:bd:b8:d0:f2:1b:28: 45:d9:66:7e:4f:86:37:e8:8f:b9:06:f5:bd:0c:73:03:ed:08: 5e:1c:c1:38:a7:1d:32:04:2e:d3:59:aa:1f:f8:74:45:13:6e: cc:c6:40:21:28:4c:67:5a:5f:19:c0:91:7d:c9:79:6a:5a:0d: ae:4d:a8:71 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUM2bAilPQ5qJQ9KjhoW//5k40NnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgyMUQzRUFBMUY5NkI2ODQ0QTg4Q0NEOTBEMUJDMzI3 RjQ1NEE3MjAeFw0yNjAzMjUxMzQ1NDJaFw0yNjAzMzEwNTMxNDJaMDMxMTAvBgNV BAMTKDBCNEEyNkZFNDc2OEJFQkUxRDMzQkRDMDBFNkQ1REVDOTI5NTJBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+0WAZwLlLhS5QFweUQXZdw86 kZVqMGYt3tPSnEiq72oL+iTuT1qVxyUrDnizJoiSypzDYtbGbXf2bVSFyL6n7zsi eubtq5sIrQDhOCas5RmnkfkFdLaOlyy7zlBGHGLc5wea+2S2fUkr9HgUoUy/NEpt ibFeAKwezXEQaC0ORg4EqId2XExZLrfhsut8tycZnaoK8xtwwKxgbENXmTErw+wC Egt6NH6TkAzvwo/jkSsWSyZTM5yAzb8ue5qFlrtcoKSiHVSKApP/K5Zea4Du608d xw61PD0qV61z6qG7g2vsuSg3PUNsxN24ClascoOyQOLSNwlSrweLilSrXRQvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUC0om/kdovr4dM73ADm1d7JKVKiYwHwYDVR0j BBgwFoAUGCHT6qH5a2hEqIzNkNG8Mn9FSnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QTdEMzJBQzBBNkUyOUMzOENDQzlENTM3NEVDNjQ0N0ZB OThGREMwQkZGRURGNzY3MzY3MUEwQkY2Q0FBMjI2LzAvMTgyMUQzRUFBMUY5NkI2 ODQ0QTg4Q0NEOTBEMUJDMzI3RjQ1NEE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xODIxRDNFQUExRjk2QjY4NDRB ODhDQ0Q5MEQxQkMzMjdGNDU0QTcyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEE3RDMyQUMwQTZFMjlDMzhDQ0M5RDUzNzRFQzY0NDdGQTk4RkRDMEJG RkVERjc2NzM2NzFBMEJGNkNBQTIyNi8wLzE4MjFEM0VBQTFGOTZCNjg0NEE4OEND RDkwRDFCQzMyN0Y0NTRBNzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXjRxPEJbH527ky/Eg4CGWLQPo q54Lhq8iDO5r0CsnGh3YaXcgm8irXeS7wMVb9GcdbcnU4tiraOWD3ynpiuv6ZE+8 shxUxrK5r1UT+ttmLqRMAsQ7lKIObITP1KxvW0NRwgLJnRQzfZKN+fsSRAsMCZ5n 32WD0eJoAXTyUAxj/vktEpcxeU8EP98jhJN1r2KgAOo3yvilK9DfRP38Yx+IEQ+i kgNFuwFfj8EiPVUam+DXnpTB0EmnLZxM/PG9lWG9uNDyGyhF2WZ+T4Y36I+5BvW9 DHMD7QheHME4px0yBC7TWaof+HRFE27MxkAhKExnWl8ZwJF9yXlqWg2uTahx -----END CERTIFICATE-----Generated at Thu Mar 26 21:23:30 2026 by rpki-client