$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.mft File: 42FB55A41791F87502D72CC216E456680D5D80C0.mft (raw, json) Hash identifier: ddAvvjrFa+82YaAPZ+TGiB/nkfPx8pnKEFFnV/AOxa4= Subject key identifier: DD:1D:04:9B:BA:91:CA:D9:15:4D:D4:F2:94:0B:7F:A3:D9:75:31:FE Authority key identifier: 42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0 Certificate issuer: /CN=42FB55A41791F87502D72CC216E456680D5D80C0 Certificate serial: 291B0E275333103F71011E1CF628C96760BB6453 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.mft Manifest number: 8A Signing time: Thu 26 Mar 2026 15:35:31 +0000 Manifest this update: Thu 26 Mar 2026 15:30:31 +0000 Manifest next update: Tue 31 Mar 2026 09:49:31 +0000 Files and hashes: 1: 323830363a3238633a633030303a3a2f33342d3334203d3e20323635353239.roa (hash: 80oK9JJQHxKf0OPJTOFwk4oe8EnBLhlrsjQdLAvQ44c=) 2: 323830363a3238633a383030303a3a2f33342d3334203d3e20323635353239.roa (hash: I513ryVqp1HZ57rQKQOjdgV7RWygk3loKg93g6rMqWE=) 3: 3137302e3234372e3139312e302f32342d3234203d3e20323635353239.roa (hash: PoYok5aw/c/4huZ+AzTRDGjGevnrw11DVL34+JARQsA=) 4: 3137302e3234372e3138392e302f32342d3234203d3e20323635353239.roa (hash: QbEN+4NVb+YK5j0p91uOdOLYtJk5q18JnqJT0AYt0tA=) 5: 3137302e3234372e3139302e302f32342d3234203d3e20323635353239.roa (hash: PykSxib8g48Gul+UqdNPwJWKEGAA0D5uPFxacZXy7Z4=) 6: 42FB55A41791F87502D72CC216E456680D5D80C0.crl (hash: 7KtYKbe/RTB5OuvWhH28uZIRKA8BVyW6WLVtZftirK8=) 7: 323830363a3238633a3a2f33342d3334203d3e20323635353239.roa (hash: 3GwJ6btDivbZgNu5XLVipc8u34TXRk8Vkp/KPlngy+s=) 8: 3137302e3234372e3138382e302f32342d3234203d3e20323635353239.roa (hash: vbpu1ISRkJtU/hQQDflnhYksBS1E27r3/6mKckekfzM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1b:0e:27:53:33:10:3f:71:01:1e:1c:f6:28:c9:67:60:bb:64:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42FB55A41791F87502D72CC216E456680D5D80C0 Validity Not Before: Mar 26 15:30:31 2026 GMT Not After : Mar 31 09:49:31 2026 GMT Subject: CN=DD1D049BBA91CAD9154DD4F2940B7FA3D97531FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:da:4d:09:a3:91:ae:a6:e6:48:1a:39:e5:7a: ca:ed:d2:dd:9c:6d:6b:7d:c3:3e:f1:5c:c2:14:7e: 89:f5:61:fe:07:2e:9a:62:3b:99:d4:07:ae:4b:9e: 57:f7:bc:46:29:5c:ce:e8:cb:4d:2c:64:bb:8c:a7: 64:e2:11:2f:fb:1f:e7:46:1d:44:e7:36:ba:80:9f: c3:eb:3f:69:21:88:de:38:02:83:6a:1b:12:d7:eb: f7:77:cf:28:00:8b:c7:8f:b0:25:6e:27:a7:43:5b: 27:04:62:d9:5e:57:f2:ca:bc:47:87:4f:2c:08:77: 8d:75:a3:cc:00:c9:1b:59:6a:b9:6f:e9:a8:12:bd: 08:a8:1d:6e:f7:d1:61:79:1b:91:d8:a3:5a:04:a8: 9b:b7:3c:2e:ee:cf:15:ba:ca:8c:d7:c6:bd:35:71: 38:79:c3:7b:57:1b:78:51:a6:1a:74:31:10:e1:86: 56:61:ba:2e:11:51:98:45:ed:cf:a8:97:f5:fb:bc: 40:ad:43:57:bb:d2:78:65:6f:45:df:29:f3:9e:4d: b4:00:ef:cc:14:e5:2b:eb:e1:02:31:40:2f:5c:c0: 31:9e:71:77:39:d2:c1:ba:ae:1b:4b:ed:7a:f2:a2: 85:54:3c:86:ce:90:01:ca:1b:23:14:b4:bb:91:29: 7f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1D:04:9B:BA:91:CA:D9:15:4D:D4:F2:94:0B:7F:A3:D9:75:31:FE X509v3 Authority Key Identifier: keyid:42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7e:48:9b:35:c2:56:10:e3:6e:44:b8:28:c2:06:a2:2b:f5: 41:cd:b7:35:cc:a0:f5:c9:00:5a:1e:ca:77:57:46:d6:59:14: 03:e2:3e:0b:03:81:58:1d:7b:e7:8d:2c:bd:5d:38:be:b5:a4: 3e:cf:35:df:d8:55:ef:12:de:00:a1:e9:8c:48:cf:3c:c4:e5: 93:bc:ae:43:65:13:c0:d4:81:41:6b:00:cc:ed:ca:f1:91:37: d0:97:e5:40:c1:3d:42:46:2d:22:4e:e8:55:88:40:16:5a:d6: 90:02:2f:ab:83:23:6d:7c:8c:ab:ab:e5:57:86:5d:32:35:31: c5:9a:3d:28:02:71:5b:d0:27:c8:6f:3b:10:99:6b:89:05:ae: 9b:4c:a0:a6:ab:13:65:42:c6:94:c4:ba:13:28:88:98:40:f7: cf:f8:da:b9:7f:25:e0:d4:8e:3e:7d:01:0a:2e:b1:51:4c:84: 10:98:d0:81:96:04:95:10:32:53:10:9f:21:df:4c:c4:a4:3a: 6e:a6:1e:8b:ac:f9:a8:aa:f7:a8:36:87:a2:49:93:54:3f:c1: 5c:cc:de:62:2e:4b:a2:06:ba:ac:7b:23:4f:1a:b0:b0:2a:74: 1e:b6:d6:49:a4:d7:9d:67:3e:62:26:4c:91:38:fc:91:0a:54: 79:4b:c9:1a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKRsOJ1MzED9xAR4c9ijJZ2C7ZFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJGQjU1QTQxNzkxRjg3NTAyRDcyQ0MyMTZFNDU2Njgw RDVEODBDMDAeFw0yNjAzMjYxNTMwMzFaFw0yNjAzMzEwOTQ5MzFaMDMxMTAvBgNV BAMTKEREMUQwNDlCQkE5MUNBRDkxNTRERDRGMjk0MEI3RkEzRDk3NTMxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2k0Jo5GupuZIGjnlesrt0t2c bWt9wz7xXMIUfon1Yf4HLppiO5nUB65Lnlf3vEYpXM7oy00sZLuMp2TiES/7H+dG HUTnNrqAn8PrP2khiN44AoNqGxLX6/d3zygAi8ePsCVuJ6dDWycEYtleV/LKvEeH TywId411o8wAyRtZarlv6agSvQioHW730WF5G5HYo1oEqJu3PC7uzxW6yozXxr01 cTh5w3tXG3hRphp0MRDhhlZhui4RUZhF7c+ol/X7vECtQ1e70nhlb0XfKfOeTbQA 78wU5Svr4QIxQC9cwDGecXc50sG6rhtL7XryooVUPIbOkAHKGyMUtLuRKX8zAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3R0Em7qRytkVTdTylAt/o9l1Mf4wHwYDVR0j BBgwFoAUQvtVpBeR+HUC1yzCFuRWaA1dgMAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84Q0YxRTE3RUI2RDlBNzA4MERCNkIwRjUwQTI1QTQ2QUMy MUIwNDVEM0MxQzM5QkUwMjJEMjEzQkY0MUNEN0IxLzAvNDJGQjU1QTQxNzkxRjg3 NTAyRDcyQ0MyMTZFNDU2NjgwRDVEODBDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkZCNTVBNDE3OTFGODc1MDJE NzJDQzIxNkU0NTY2ODBENUQ4MEMwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOENGMUUxN0VCNkQ5QTcwODBEQjZCMEY1MEEyNUE0NkFDMjFCMDQ1RDND MUMzOUJFMDIyRDIxM0JGNDFDRDdCMS8wLzQyRkI1NUE0MTc5MUY4NzUwMkQ3MkND MjE2RTQ1NjY4MEQ1RDgwQzAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJfkibNcJWEONuRLgowgaiK/VB zbc1zKD1yQBaHsp3V0bWWRQD4j4LA4FYHXvnjSy9XTi+taQ+zzXf2FXvEt4AoemM SM88xOWTvK5DZRPA1IFBawDM7crxkTfQl+VAwT1CRi0iTuhViEAWWtaQAi+rgyNt fIyrq+VXhl0yNTHFmj0oAnFb0CfIbzsQmWuJBa6bTKCmqxNlQsaUxLoTKIiYQPfP +Nq5fyXg1I4+fQEKLrFRTIQQmNCBlgSVEDJTEJ8h30zEpDpuph6LrPmoqveoNoei SZNUP8FczN5iLkuiBrqseyNPGrCwKnQettZJpNedZz5iJkyROPyRClR5S8ka -----END CERTIFICATE-----Generated at Thu Mar 26 19:56:01 2026 by rpki-client