$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/37D87FD980A584F704F25736ED716C9DEDE52987.mft File: 37D87FD980A584F704F25736ED716C9DEDE52987.mft (raw, json) Hash identifier: ao/h1VMT9gzJRZBFSjaYwZZuabvOlZ+zcSbnvCovk+c= Subject key identifier: 36:D8:62:10:89:38:74:D3:FD:9A:11:34:04:3D:E5:6C:98:D6:BD:AB Authority key identifier: 37:D8:7F:D9:80:A5:84:F7:04:F2:57:36:ED:71:6C:9D:ED:E5:29:87 Certificate issuer: /CN=37D87FD980A584F704F25736ED716C9DEDE52987 Certificate serial: 392D74A150AE5F5D74CA5C888C93538EC7037320 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D87FD980A584F704F25736ED716C9DEDE52987.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/37D87FD980A584F704F25736ED716C9DEDE52987.mft Manifest number: CA Signing time: Wed 25 Mar 2026 15:31:38 +0000 Manifest this update: Wed 25 Mar 2026 15:26:38 +0000 Manifest next update: Mon 30 Mar 2026 06:45:38 +0000 Files and hashes: 1: 37D87FD980A584F704F25736ED716C9DEDE52987.crl (hash: no4vV2LEcWtNCslOkpW6ctUFGXwmkEvPDOTOWxf/vsc=) 2: 323830313a3161653a3a2f34342d3434203d3e203237393531.roa (hash: Hjy+PrwQdhOQh3TGIg9vrWJOZePp3XIx+h2N/eayDao=) 3: 323830313a3161653a3a2f34342d3434203d3e20323731383539.roa (hash: b736I3YoPJEhiSGQnJS962EaUOR7M6Wjrj3azHiOLso=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/37D87FD980A584F704F25736ED716C9DEDE52987.crl rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/37D87FD980A584F704F25736ED716C9DEDE52987.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D87FD980A584F704F25736ED716C9DEDE52987.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 06:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2d:74:a1:50:ae:5f:5d:74:ca:5c:88:8c:93:53:8e:c7:03:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37D87FD980A584F704F25736ED716C9DEDE52987 Validity Not Before: Mar 25 15:26:38 2026 GMT Not After : Mar 30 06:45:38 2026 GMT Subject: CN=36D86210893874D3FD9A1134043DE56C98D6BDAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9c:9b:48:75:0d:ce:62:a6:37:25:81:1c:2c: 71:73:65:c8:2a:5c:93:1d:dc:e1:70:73:1d:bc:dc: b9:2f:f1:c0:a9:ec:77:6c:81:16:76:af:6d:d7:e9: 6d:fc:7a:f3:eb:6c:6d:45:e5:9f:02:87:76:0d:ca: f2:0f:6b:8a:d0:55:fc:d9:9f:4c:d0:39:11:17:8c: 3f:60:72:c6:0b:f4:b8:c7:1b:ed:cf:d8:8b:82:d0: 07:b2:90:28:3b:82:c2:12:d2:08:5b:ca:7b:21:81: 10:a7:19:26:fd:fb:ba:77:47:ee:ce:cf:e2:76:e3: 94:6e:df:d3:1e:9d:61:19:c2:25:1b:39:3c:f7:bf: 80:30:02:84:d6:88:3f:b2:56:59:6b:a8:34:4f:9f: a3:26:d8:3c:da:db:e6:03:4f:ca:d9:06:2b:bd:e7: dc:59:b2:25:d6:b9:92:fe:39:0d:a0:f3:95:b6:11: 1e:d7:9a:95:00:1a:86:da:0b:70:4b:b3:d1:f2:69: 4d:a9:0e:34:bc:0e:31:fb:0d:b1:19:a7:3c:c7:d1: a3:7c:ea:ab:24:e0:98:0b:f7:10:89:36:3a:61:7c: 95:c1:d3:33:eb:64:cf:c5:e9:1e:17:25:1a:6f:18: fc:d4:13:d2:4d:e5:09:3a:e7:82:f5:6c:19:c9:4a: 60:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D8:62:10:89:38:74:D3:FD:9A:11:34:04:3D:E5:6C:98:D6:BD:AB X509v3 Authority Key Identifier: keyid:37:D8:7F:D9:80:A5:84:F7:04:F2:57:36:ED:71:6C:9D:ED:E5:29:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/37D87FD980A584F704F25736ED716C9DEDE52987.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D87FD980A584F704F25736ED716C9DEDE52987.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/37D87FD980A584F704F25736ED716C9DEDE52987.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8a:2d:1b:da:5d:df:a4:22:38:db:33:e8:51:c7:e4:84:2a: a4:66:73:1c:84:9f:a3:0a:e6:e7:e9:df:9e:06:0e:58:64:64: a2:4c:69:48:f0:e6:0e:ce:1c:58:d7:a5:a3:15:ab:fc:1d:d8: 28:0a:4d:e1:1b:55:63:3d:44:74:0f:4a:e9:11:cd:db:04:1f: a6:2e:71:4a:37:22:f4:f9:5c:bd:ae:63:4a:6f:a3:92:30:7d: fb:7a:92:01:2e:2b:e3:2c:31:fd:30:f3:dd:79:2b:8e:c5:99: 31:ea:d4:10:57:3b:ad:5c:bf:4e:25:98:e1:51:c0:3c:ae:d4: 75:62:63:5a:32:7c:f0:ff:e9:4a:ba:bc:30:e3:91:d8:cb:46: c7:51:8c:86:c0:2b:58:96:09:21:04:0e:e4:de:9b:5f:75:85: 12:e2:b6:98:fc:86:a6:fa:8c:67:e0:73:13:af:c0:39:e1:17: 04:05:e0:5a:2b:b9:ee:9e:fc:2f:e8:24:32:b9:ed:b5:b1:b5: cb:01:a6:0d:93:0c:b5:89:6f:b2:e4:75:ff:8c:24:f5:3e:62: ca:8f:d7:bd:49:7c:5b:c1:1c:87:c9:40:f4:d5:e8:98:b1:2f: 2d:95:a2:04:d0:41:ac:e7:36:d2:93:47:7d:ed:e3:5b:eb:f0: 85:8f:3a:00 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOS10oVCuX110ylyIjJNTjscDcyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdEODdGRDk4MEE1ODRGNzA0RjI1NzM2RUQ3MTZDOURF REU1Mjk4NzAeFw0yNjAzMjUxNTI2MzhaFw0yNjAzMzAwNjQ1MzhaMDMxMTAvBgNV BAMTKDM2RDg2MjEwODkzODc0RDNGRDlBMTEzNDA0M0RFNTZDOThENkJEQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCanJtIdQ3OYqY3JYEcLHFzZcgq XJMd3OFwcx283Lkv8cCp7HdsgRZ2r23X6W38evPrbG1F5Z8Ch3YNyvIPa4rQVfzZ n0zQOREXjD9gcsYL9LjHG+3P2IuC0AeykCg7gsIS0ghbynshgRCnGSb9+7p3R+7O z+J245Ru39MenWEZwiUbOTz3v4AwAoTWiD+yVllrqDRPn6Mm2Dza2+YDT8rZBiu9 59xZsiXWuZL+OQ2g85W2ER7XmpUAGobaC3BLs9HyaU2pDjS8DjH7DbEZpzzH0aN8 6qsk4JgL9xCJNjphfJXB0zPrZM/F6R4XJRpvGPzUE9JN5Qk654L1bBnJSmC9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNthiEIk4dNP9mhE0BD3lbJjWvaswHwYDVR0j BBgwFoAUN9h/2YClhPcE8lc27XFsne3lKYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85ODMwRUNERENCMjEyNjVDRTVCMkU0OEZBODM0QUU1RUMw OTAxNDE3RjlBQTUyMEZGOTA4NDgxMDM0NTkyNTBCLzAvMzdEODdGRDk4MEE1ODRG NzA0RjI1NzM2RUQ3MTZDOURFREU1Mjk4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zN0Q4N0ZEOTgwQTU4NEY3MDRG MjU3MzZFRDcxNkM5REVERTUyOTg3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTgzMEVDRERDQjIxMjY1Q0U1QjJFNDhGQTgzNEFFNUVDMDkwMTQxN0Y5 QUE1MjBGRjkwODQ4MTAzNDU5MjUwQi8wLzM3RDg3RkQ5ODBBNTg0RjcwNEYyNTcz NkVENzE2QzlERURFNTI5ODcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVii0b2l3fpCI42zPoUcfkhCqk ZnMchJ+jCubn6d+eBg5YZGSiTGlI8OYOzhxY16WjFav8HdgoCk3hG1VjPUR0D0rp Ec3bBB+mLnFKNyL0+Vy9rmNKb6OSMH37epIBLivjLDH9MPPdeSuOxZkx6tQQVzut XL9OJZjhUcA8rtR1YmNaMnzw/+lKurww45HYy0bHUYyGwCtYlgkhBA7k3ptfdYUS 4raY/Iam+oxn4HMTr8A54RcEBeBaK7nunvwv6CQyue21sbXLAaYNkwy1iW+y5HX/ jCT1PmLKj9e9SXxbwRyHyUD01eiYsS8tlaIE0EGs5zbSk0d97eNb6/CFjzoA -----END CERTIFICATE-----Generated at Thu Mar 26 23:06:34 2026 by rpki-client