$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft File: D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft (raw, json) Hash identifier: vhaQAGZsT2IFxXApVfO5m4hnaFvMVTYShFtNqamWytA= Subject key identifier: 12:99:A4:96:3A:96:EE:32:54:C1:C9:C2:BA:35:63:12:C5:76:A0:93 Authority key identifier: D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F Certificate issuer: /CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F Certificate serial: 6168FF46E09FEA7E6F9205F4CFB65AD000AA85D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft Manifest number: 0123 Signing time: Wed 25 Mar 2026 17:22:41 +0000 Manifest this update: Wed 25 Mar 2026 17:17:41 +0000 Manifest next update: Sun 29 Mar 2026 19:56:41 +0000 Files and hashes: 1: D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl (hash: TAYJkLtYEWn39yG5xqU/kqhyL6WDfYBWvEBguMGxzPU=) 2: 323830333a376535303a3a2f33322d3438203d3e20323633313935.roa (hash: oJnk7HghAfllaWlCWdC4nj4Eg5ypd+tMzoPry4NKeww=) 3: 323830333a376535303a3a2f33322d3438203d3e20323632353839.roa (hash: eCaEFSjE7aZuQizaw6/baM+QHao5Mv042kghMe+uIo0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 19:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:68:ff:46:e0:9f:ea:7e:6f:92:05:f4:cf:b6:5a:d0:00:aa:85:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F Validity Not Before: Mar 25 17:17:41 2026 GMT Not After : Mar 29 19:56:41 2026 GMT Subject: CN=1299A4963A96EE3254C1C9C2BA356312C576A093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d5:a8:e7:de:c7:d7:7d:e0:a8:01:57:dd:b5: 7a:25:09:10:55:99:3b:cb:7a:1e:38:14:aa:93:f7: 73:90:1d:65:27:ad:1c:e9:7c:77:1b:76:95:db:72: 97:27:b2:e7:42:c7:ef:b8:c7:a0:71:ac:10:c2:15: 55:de:98:30:0a:aa:90:f9:e8:d2:19:78:ce:99:5a: 40:fe:04:b0:a9:46:32:78:77:68:f7:55:3e:00:39: 25:e5:48:f9:ef:71:7d:84:e4:70:62:a4:a0:5e:53: 4a:c9:94:0f:52:51:27:36:87:42:c3:86:81:e1:bb: 15:89:80:a6:32:34:63:9d:5f:0c:f5:a5:09:80:3f: 07:bc:1e:1d:a9:3a:0b:a9:d8:79:1f:6d:8f:01:ac: e1:3d:68:dc:ff:34:da:fe:94:a5:a4:9d:76:3c:f7: af:76:2e:69:26:f3:76:05:de:21:b7:02:d2:d1:4b: 35:7b:42:7b:fc:38:10:b8:8d:81:32:da:50:e2:d6: eb:6c:32:bd:73:dc:8e:eb:4e:bf:46:bc:d4:96:c7: 37:b9:ed:7f:3c:17:3a:7a:f8:bf:32:21:99:1f:75: d8:17:0c:d4:07:e8:8b:fc:ba:1c:73:53:7e:0e:cf: c1:3d:ce:6b:48:b0:d8:80:6b:cc:3b:42:bc:24:f6: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:99:A4:96:3A:96:EE:32:54:C1:C9:C2:BA:35:63:12:C5:76:A0:93 X509v3 Authority Key Identifier: keyid:D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f2:5a:54:1d:b1:98:f4:3d:20:d7:31:8b:d8:7e:d8:ff:b6: d8:43:c1:59:16:d3:0d:e2:dd:c3:da:18:3f:88:f2:3d:ef:f4: 2d:a0:20:ad:43:6a:a9:94:08:08:52:a8:6d:b5:f0:17:88:b0: 67:68:1a:e7:f2:4a:b9:af:51:70:5e:e6:00:7a:cc:b7:e7:8f: ba:74:58:75:fb:09:b1:68:2d:61:1d:24:70:45:f1:6c:b8:5d: d0:da:53:8f:71:5e:42:9e:b4:87:1d:45:a8:61:c5:bd:de:88: c9:1c:b9:a7:d3:04:0e:01:be:87:b9:06:86:cb:e3:a6:ea:f1: 35:48:10:9b:65:9e:45:74:23:93:6a:6f:4b:a4:f7:98:02:32: 99:6e:1a:3f:ca:db:6c:10:a4:d0:a2:fa:fc:7c:62:86:96:e3: 07:c1:59:19:0e:60:77:c8:30:f0:76:e4:c3:2d:40:cc:05:67: 11:8a:03:75:5c:49:85:db:31:7f:7d:5b:11:62:ee:4c:26:eb: 5e:d8:df:f0:ec:42:e6:04:b5:e6:b9:a2:4c:49:d5:0e:b0:b2: 48:91:f5:9d:5d:7a:af:75:6a:ac:28:78:c8:48:40:f8:d1:aa: bb:55:3b:37:2e:d9:5f:23:45:96:e9:94:aa:5c:e6:d7:fa:d0: 2f:de:9f:b4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYWj/RuCf6n5vkgX0z7Za0ACqhdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJDQUFCMkNEQzI5NUM4QkEyNzYxNjlEMTBEMTg3MEJC QjkyRDc0RjAeFw0yNjAzMjUxNzE3NDFaFw0yNjAzMjkxOTU2NDFaMDMxMTAvBgNV BAMTKDEyOTlBNDk2M0E5NkVFMzI1NEMxQzlDMkJBMzU2MzEyQzU3NkEwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd1ajn3sfXfeCoAVfdtXolCRBV mTvLeh44FKqT93OQHWUnrRzpfHcbdpXbcpcnsudCx++4x6BxrBDCFVXemDAKqpD5 6NIZeM6ZWkD+BLCpRjJ4d2j3VT4AOSXlSPnvcX2E5HBipKBeU0rJlA9SUSc2h0LD hoHhuxWJgKYyNGOdXwz1pQmAPwe8Hh2pOgup2HkfbY8BrOE9aNz/NNr+lKWknXY8 9692Lmkm83YF3iG3AtLRSzV7Qnv8OBC4jYEy2lDi1utsMr1z3I7rTr9GvNSWxze5 7X88Fzp6+L8yIZkfddgXDNQH6Iv8uhxzU34Oz8E9zmtIsNiAa8w7Qrwk9gN9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUEpmkljqW7jJUwcnCujVjEsV2oJMwHwYDVR0j BBgwFoAU0sqrLNwpXIuidhadENGHC7uS108wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85ODVBRUZEQ0E5QzYzM0RGODg0QkQ1RUQzRkQ5RkNCMUU3 MDY1RDdDODU5NTIzQUY4ODZFOTE4MDVFRUFCNDA2LzAvRDJDQUFCMkNEQzI5NUM4 QkEyNzYxNjlEMTBEMTg3MEJCQjkyRDc0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkNBQUIyQ0RDMjk1QzhCQTI3 NjE2OUQxMEQxODcwQkJCOTJENzRGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTg1QUVGRENBOUM2MzNERjg4NEJENUVEM0ZEOUZDQjFFNzA2NUQ3Qzg1 OTUyM0FGODg2RTkxODA1RUVBQjQwNi8wL0QyQ0FBQjJDREMyOTVDOEJBMjc2MTY5 RDEwRDE4NzBCQkI5MkQ3NEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAs8lpUHbGY9D0g1zGL2H7Y/7bY Q8FZFtMN4t3D2hg/iPI97/QtoCCtQ2qplAgIUqhttfAXiLBnaBrn8kq5r1FwXuYA esy354+6dFh1+wmxaC1hHSRwRfFsuF3Q2lOPcV5CnrSHHUWoYcW93ojJHLmn0wQO Ab6HuQaGy+Om6vE1SBCbZZ5FdCOTam9LpPeYAjKZbho/yttsEKTQovr8fGKGluMH wVkZDmB3yDDwduTDLUDMBWcRigN1XEmF2zF/fVsRYu5MJute2N/w7ELmBLXmuaJM SdUOsLJIkfWdXXqvdWqsKHjISED40aq7VTs3LtlfI0WW6ZSqXObX+tAv3p+0 -----END CERTIFICATE-----Generated at Thu Mar 26 22:11:35 2026 by rpki-client