$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft File: C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft (raw, json) Hash identifier: oLSFaOg/eLGGT9aP56oWx0ZN0gfdgmCCy+lUeAKphUM= Subject key identifier: 4E:B0:15:D0:86:E8:6C:CD:86:76:40:AA:B7:71:C6:A1:BC:1D:44:BD Authority key identifier: C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1 Certificate issuer: /CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1 Certificate serial: 32876D878BA2F84F2A3498D05431968F7B460A94 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft Manifest number: 017B Signing time: Wed 25 Mar 2026 01:33:17 +0000 Manifest this update: Wed 25 Mar 2026 01:28:17 +0000 Manifest next update: Mon 30 Mar 2026 06:48:17 +0000 Files and hashes: 1: 3139302e31312e3234302e302f32302d3234203d3e203237373430.roa (hash: rhLI3LA5adSX1HeGpICns0/W21GIpV8+vsbzYmp6WIY=) 2: 323830303a6233303a3a2f33312d3334203d3e203237373430.roa (hash: EPzo4dwRybjjaClr7w200hhs3T+QwIQcif8uZJzkRmE=) 3: C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl (hash: rHDBWgl3FKf51FnnfNrGqjPNA0OpyR9LMZ6rLZsbehI=) 4: 3139302e3130382e36342e302f32312d3234203d3e203237373430.roa (hash: OIw9Cylyuh6QeY+GZNnA4bbAWSmK5j8UYxkezWhGNJs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 17:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:87:6d:87:8b:a2:f8:4f:2a:34:98:d0:54:31:96:8f:7b:46:0a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1 Validity Not Before: Mar 25 01:28:17 2026 GMT Not After : Mar 30 06:48:17 2026 GMT Subject: CN=4EB015D086E86CCD867640AAB771C6A1BC1D44BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:06:fd:ff:e5:5c:2e:89:a8:b3:43:f0:8f: aa:0e:bb:03:ac:53:f0:a3:aa:3d:30:64:39:71:0d: a7:06:e7:76:db:c8:3e:62:79:9f:35:c5:70:b8:eb: 32:9e:4d:fe:ec:2c:8f:30:4c:b8:c5:1a:53:d1:89: b6:34:a0:d9:4b:fd:50:42:2b:22:c4:8f:79:78:bc: 90:d2:50:64:10:69:bd:29:4b:7c:ba:d0:a8:8f:15: b9:01:79:fc:76:7c:4e:17:8c:38:c0:b8:ce:18:86: f4:24:1a:4f:7b:75:22:44:5d:ad:f2:7e:b9:bd:6f: b7:6c:ba:26:7c:d1:5c:16:99:b2:1d:d4:4c:3d:20: f3:19:f9:42:91:d4:8c:59:ac:e8:46:70:04:dc:14: 7f:49:ce:c8:a3:d7:68:cb:71:e8:f8:3f:e6:23:d9: 34:9a:21:6b:ae:0a:4a:e7:32:7d:8d:f6:6f:15:3b: 56:55:75:ca:f5:63:03:23:ec:39:e7:b2:e2:aa:3b: e0:37:be:1c:e7:47:57:95:58:87:66:37:60:28:0d: 9b:af:4a:f6:42:39:e5:98:9b:d8:fe:50:9a:84:39: 3b:73:87:70:2c:32:34:20:36:01:3f:10:48:d1:1d: 44:73:3c:fd:a0:65:ef:a6:bd:4c:8d:51:d1:1c:41: 2b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B0:15:D0:86:E8:6C:CD:86:76:40:AA:B7:71:C6:A1:BC:1D:44:BD X509v3 Authority Key Identifier: keyid:C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ad:c4:b7:93:c1:34:fe:43:93:b4:23:f3:19:c7:72:27:42: e1:6f:55:31:07:00:ff:a9:4f:c8:76:18:14:ac:91:60:40:fc: 85:ce:3f:dc:ee:df:fb:af:eb:ac:9f:ad:33:9a:5d:b5:04:ba: bc:3f:dc:b9:78:d9:e9:47:08:62:3a:d7:84:79:11:fa:d1:34: fa:ac:77:71:bc:5b:1b:45:6a:cd:00:9f:38:21:af:bf:f2:d8: 46:a6:8f:f7:3d:c7:de:64:75:66:1a:44:46:a1:c6:d3:af:9c: 1d:56:85:bf:06:d0:3e:91:bc:f1:c1:9f:42:51:5c:a6:b6:c0: 73:5e:98:d1:11:86:2e:ad:4a:7e:ef:94:91:6b:a8:42:f6:0b: 29:8a:07:29:be:8c:92:35:67:04:6b:50:e5:e0:5d:93:4f:85: 53:1a:82:41:88:03:d0:d7:73:ac:41:5b:fb:73:66:e2:a0:cd: 29:ba:df:18:93:fe:ba:08:87:fd:bb:62:bf:31:1c:22:6d:67: 68:e2:4a:f4:ad:5c:28:b5:11:9a:93:85:1f:76:f2:98:b5:ef: e9:dc:f1:f5:46:43:2f:67:00:c2:9b:17:84:8c:f0:9d:6c:ca: 25:14:7d:dd:17:50:7d:1a:61:00:b6:b1:1b:c0:0e:39:54:62: e8:67:41:f5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUModth4ui+E8qNJjQVDGWj3tGCpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwQjFDRTQ2RDI0RjlCNEI0MUFBNkNEREQ5RUI5NkU4 QjIzQzJCMTAeFw0yNjAzMjUwMTI4MTdaFw0yNjAzMzAwNjQ4MTdaMDMxMTAvBgNV BAMTKDRFQjAxNUQwODZFODZDQ0Q4Njc2NDBBQUI3NzFDNkExQkMxRDQ0QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACgb9/+VcLomos0Pwj6oOuwOs U/Cjqj0wZDlxDacG53bbyD5ieZ81xXC46zKeTf7sLI8wTLjFGlPRibY0oNlL/VBC KyLEj3l4vJDSUGQQab0pS3y60KiPFbkBefx2fE4XjDjAuM4YhvQkGk97dSJEXa3y frm9b7dsuiZ80VwWmbId1Ew9IPMZ+UKR1IxZrOhGcATcFH9Jzsij12jLcej4P+Yj 2TSaIWuuCkrnMn2N9m8VO1ZVdcr1YwMj7DnnsuKqO+A3vhznR1eVWIdmN2AoDZuv SvZCOeWYm9j+UJqEOTtzh3AsMjQgNgE/EEjRHURzPP2gZe+mvUyNUdEcQSuBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTrAV0IbobM2GdkCqt3HGobwdRL0wHwYDVR0j BBgwFoAUwgsc5G0k+bS0GqbN3Z65bosjwrEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RkMwQjU4OUY4NTBFNjg0Mzc4QkE2MDE0RDAwQ0UxRjFE NzM5NjQ3NTNFQ0MwMkFDQzNGQjg5OUNFMzY0NUEzLzAvQzIwQjFDRTQ2RDI0RjlC NEI0MUFBNkNEREQ5RUI5NkU4QjIzQzJCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjBCMUNFNDZEMjRGOUI0QjQx QUE2Q0RERDlFQjk2RThCMjNDMkIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEZDMEI1ODlGODUwRTY4NDM3OEJBNjAxNEQwMENFMUYxRDczOTY0NzUz RUNDMDJBQ0MzRkI4OTlDRTM2NDVBMy8wL0MyMEIxQ0U0NkQyNEY5QjRCNDFBQTZD REREOUVCOTZFOEIyM0MyQjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBorcS3k8E0/kOTtCPzGcdyJ0Lh b1UxBwD/qU/IdhgUrJFgQPyFzj/c7t/7r+usn60zml21BLq8P9y5eNnpRwhiOteE eRH60TT6rHdxvFsbRWrNAJ84Ia+/8thGpo/3PcfeZHVmGkRGocbTr5wdVoW/BtA+ kbzxwZ9CUVymtsBzXpjREYYurUp+75SRa6hC9gspigcpvoySNWcEa1Dl4F2TT4VT GoJBiAPQ13OsQVv7c2bioM0put8Yk/66CIf9u2K/MRwibWdo4kr0rVwotRGak4Uf dvKYte/p3PH1RkMvZwDCmxeEjPCdbMolFH3dF1B9GmEAtrEbwA45VGLoZ0H1 -----END CERTIFICATE-----Generated at Thu Mar 26 18:36:21 2026 by rpki-client