$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft File: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft (raw, json) Hash identifier: 0DtFwSaJ+HHip754R72swguICsAJhAfwewdiB+YTPps= Subject key identifier: A8:13:C8:0E:8F:8A:39:C7:35:BC:DF:22:7E:58:5F:CF:C9:FB:74:5E Authority key identifier: 3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA Certificate issuer: /CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA Certificate serial: 05B91F98D9A68B95A7422886B763BCCD55183354 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft Manifest number: 017C Signing time: Thu 26 Mar 2026 10:17:27 +0000 Manifest this update: Thu 26 Mar 2026 10:12:27 +0000 Manifest next update: Tue 31 Mar 2026 00:30:27 +0000 Files and hashes: 1: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl (hash: 9seHbcZA3UeQJygd/7uF5VytX7lL+TgZhK9JncwtvLo=) 2: 323830333a393663303a3a2f33322d3438203d3e20323635363534.roa (hash: +4WvnzVOt/EVUDZN9YCaDCCRLy9YYWSvnAxw1LtprVk=) 3: 3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa (hash: yjzSJUZj4zGt1MHhVmbLi1zvCsq+jdBn4Xm2sgrDts0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b9:1f:98:d9:a6:8b:95:a7:42:28:86:b7:63:bc:cd:55:18:33:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA Validity Not Before: Mar 26 10:12:27 2026 GMT Not After : Mar 31 00:30:27 2026 GMT Subject: CN=A813C80E8F8A39C735BCDF227E585FCFC9FB745E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:38:ad:2b:dd:c5:ea:ff:09:9b:e1:80:15:ae: be:9d:8d:e3:09:1d:db:99:6e:80:8f:05:1a:1f:3e: 04:b2:4e:e5:dd:30:b7:1d:58:51:65:f2:98:23:32: b3:89:b3:d5:e5:83:1b:30:6e:16:e7:a2:21:45:97: 83:2e:43:9e:19:1f:a4:95:22:86:4a:83:00:72:a5: 54:52:b5:af:89:73:00:d6:10:f5:e2:d0:c3:ee:ab: 30:b5:b1:52:ce:7d:ea:75:a5:be:a5:3e:98:c8:a1: e1:a9:df:49:65:5d:28:ef:03:c6:e9:a3:fc:08:ef: 3f:7e:5f:0e:70:b8:58:60:b1:fc:74:20:86:98:7b: 02:cd:43:ba:b6:c4:72:b8:8f:50:09:dc:8d:bc:15: 71:d1:c6:af:a1:bc:c3:ba:0a:ba:0f:24:d0:42:b7: 2e:c2:4b:05:1a:e1:d7:ec:31:dd:19:89:55:e0:64: 04:ec:8d:64:fd:91:5d:ac:5a:be:f0:ce:82:07:29: c7:0d:aa:53:b1:4e:7f:68:f9:47:53:5a:b0:7b:8b: 10:80:eb:cb:06:10:4c:aa:9f:52:f9:ee:d9:c0:48: 38:e1:35:12:05:1c:b3:85:d9:f4:20:45:a3:f1:c2: a8:2b:c1:46:9c:54:ed:33:37:79:ec:be:c1:7b:c1: 42:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:13:C8:0E:8F:8A:39:C7:35:BC:DF:22:7E:58:5F:CF:C9:FB:74:5E X509v3 Authority Key Identifier: keyid:3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:2f:60:dc:88:83:b1:ab:54:d0:c1:38:f2:55:9a:a5:ae:06: 78:b2:78:5c:9a:e8:fa:e3:34:67:8c:c3:81:0b:4e:84:8b:be: 34:ac:b7:8a:da:d1:fa:12:59:e5:6e:de:ce:b8:e5:f9:63:da: 61:dd:9a:03:bd:1d:b0:85:2b:84:5f:29:80:19:2c:29:61:7f: 7c:b8:d3:6d:9e:c5:29:f6:f7:38:a4:d8:c4:73:ce:f0:24:85: 80:af:53:24:2d:e9:08:57:3e:34:ee:19:22:db:41:ca:e8:70: b4:94:74:29:be:ca:98:fc:d0:2c:15:d2:ec:66:a8:01:30:0f: 99:fc:bf:4e:d6:8d:a0:cc:11:43:a4:d7:4b:cc:89:ed:14:d3: f1:4a:a6:74:7b:2f:e5:08:d2:59:8a:17:6c:3c:0b:1e:66:76: 83:9d:48:0a:fa:d2:e0:b2:ef:d2:ed:87:e0:59:ad:03:dc:95: 1f:20:b2:41:6c:be:18:18:76:df:a4:94:c7:b5:ce:07:4d:cf: 8e:3c:6f:a8:99:c2:11:0d:d5:49:d0:23:73:9f:25:e8:a7:8e: cd:38:bb:ef:75:a5:ce:31:b0:df:75:22:b6:62:1b:a4:9a:59: 60:a2:a6:53:7e:e2:20:4b:84:94:53:d1:84:b6:78:2d:9d:89: f8:34:78:0f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBbkfmNmmi5WnQiiGt2O8zVUYM1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBQUFCQjk5RjVDRjc5Q0E3QzI1RjAyMkY4NUY4NUUw RENCMkNCQTAeFw0yNjAzMjYxMDEyMjdaFw0yNjAzMzEwMDMwMjdaMDMxMTAvBgNV BAMTKEE4MTNDODBFOEY4QTM5QzczNUJDREYyMjdFNTg1RkNGQzlGQjc0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLOK0r3cXq/wmb4YAVrr6djeMJ HduZboCPBRofPgSyTuXdMLcdWFFl8pgjMrOJs9XlgxswbhbnoiFFl4MuQ54ZH6SV IoZKgwBypVRSta+JcwDWEPXi0MPuqzC1sVLOfep1pb6lPpjIoeGp30llXSjvA8bp o/wI7z9+Xw5wuFhgsfx0IIaYewLNQ7q2xHK4j1AJ3I28FXHRxq+hvMO6CroPJNBC ty7CSwUa4dfsMd0ZiVXgZATsjWT9kV2sWr7wzoIHKccNqlOxTn9o+UdTWrB7ixCA 68sGEEyqn1L57tnASDjhNRIFHLOF2fQgRaPxwqgrwUacVO0zN3nsvsF7wULDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqBPIDo+KOcc1vN8iflhfz8n7dF4wHwYDVR0j BBgwFoAUPKqruZ9c95ynwl8CL4X4Xg3LLLowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85NjU4NzI5NzhCNDJGRTk5OTcwRUUwNEQ4QjIwNjA3NzEw ODNFMzA3NDFBNTA5QkFFQjAwREI2M0NFQ0IyM0QzLzAvM0NBQUFCQjk5RjVDRjc5 Q0E3QzI1RjAyMkY4NUY4NUUwRENCMkNCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0FBQUJCOTlGNUNGNzlDQTdD MjVGMDIyRjg1Rjg1RTBEQ0IyQ0JBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTY1ODcyOTc4QjQyRkU5OTk3MEVFMDREOEIyMDYwNzcxMDgzRTMwNzQx QTUwOUJBRUIwMERCNjNDRUNCMjNEMy8wLzNDQUFBQkI5OUY1Q0Y3OUNBN0MyNUYw MjJGODVGODVFMERDQjJDQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZL2DciIOxq1TQwTjyVZqlrgZ4 snhcmuj64zRnjMOBC06Ei740rLeK2tH6Elnlbt7OuOX5Y9ph3ZoDvR2whSuEXymA GSwpYX98uNNtnsUp9vc4pNjEc87wJIWAr1MkLekIVz407hki20HK6HC0lHQpvsqY /NAsFdLsZqgBMA+Z/L9O1o2gzBFDpNdLzIntFNPxSqZ0ey/lCNJZihdsPAseZnaD nUgK+tLgsu/S7YfgWa0D3JUfILJBbL4YGHbfpJTHtc4HTc+OPG+omcIRDdVJ0CNz nyXop47NOLvvdaXOMbDfdSK2YhukmllgoqZTfuIgS4SUU9GEtngtnYn4NHgP -----END CERTIFICATE-----Generated at Thu Mar 26 22:31:50 2026 by rpki-client