$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft File: BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft (raw, json) Hash identifier: hfK49OqxDinsH5YLRQ8QXdtWJ01V1baa75Jrk1+iIPc= Subject key identifier: DE:C9:1F:43:03:EA:35:B8:14:C3:43:2D:70:1E:80:1F:82:88:AF:65 Authority key identifier: BD:46:A9:8D:09:6A:D8:AE:77:F8:6D:CA:2F:11:E0:BD:0A:B0:F2:E7 Certificate issuer: /CN=BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7 Certificate serial: 645BDA30355786AAE765AC2F52BE3D62BC927705 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft Manifest number: 0179 Signing time: Tue 24 Mar 2026 22:26:26 +0000 Manifest this update: Tue 24 Mar 2026 22:21:26 +0000 Manifest next update: Mon 30 Mar 2026 21:12:26 +0000 Files and hashes: 1: BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.crl (hash: sVozSIzMUZsqzJS0wJsHd9NEIUmBBDQVshmDQeghlf0=) 2: 34352e3137322e3137382e302f32342d3234203d3e20323637383130.roa (hash: B+Khz6l75nlEK7CTZFugnCeT6hHOmKb8TPHftnh7bx0=) 3: 34352e3137322e3231382e302f32342d3234203d3e20323637383130.roa (hash: iN5uNpCFtWaU7+lfR/StOGuKRdwRDndjDhN9xL5d1uA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.crl rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5b:da:30:35:57:86:aa:e7:65:ac:2f:52:be:3d:62:bc:92:77:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7 Validity Not Before: Mar 24 22:21:26 2026 GMT Not After : Mar 30 21:12:26 2026 GMT Subject: CN=DEC91F4303EA35B814C3432D701E801F8288AF65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:27:a9:4e:2d:f4:41:3d:88:2d:35:4e:2d:a5: 46:a7:64:ce:83:1a:ef:91:29:0a:4f:ee:d0:0a:85: 41:2b:61:36:18:8d:ad:86:00:31:a4:09:ed:e9:c7: a3:db:f8:ca:b0:d2:b9:ea:a7:85:9e:09:1c:dd:4c: 40:19:c2:c8:e1:e6:a9:18:f9:15:57:c8:53:f7:7c: 97:8d:77:5d:e5:3f:89:c9:bd:00:d7:f4:29:39:d4: 17:f8:d2:56:ef:83:8f:89:b3:ab:61:78:c8:54:aa: 58:01:e6:3d:b6:8f:40:1a:c4:6d:a5:fb:90:6a:6a: 02:c8:d7:ff:69:3f:e1:31:2f:c6:42:b9:cf:32:70: 25:64:eb:10:da:1f:93:66:19:08:50:5f:b1:02:11: c6:96:42:00:66:c4:03:73:37:98:c1:91:bd:1b:4c: 44:d1:6a:0d:99:87:40:15:4e:b1:fc:06:02:f7:57: 34:d4:03:77:eb:57:d9:06:d5:5a:7c:a6:d2:27:a1: c8:26:c0:35:61:d2:72:9d:e3:da:07:6e:b9:3e:0a: 4f:ec:07:57:38:57:4c:c2:4a:87:a5:ec:5f:19:d2: e2:0c:2a:89:ad:9e:ad:2c:05:b5:bb:a1:d3:3d:6c: 0c:59:ff:5d:37:9e:c1:d6:e0:0f:62:0f:92:08:70: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C9:1F:43:03:EA:35:B8:14:C3:43:2D:70:1E:80:1F:82:88:AF:65 X509v3 Authority Key Identifier: keyid:BD:46:A9:8D:09:6A:D8:AE:77:F8:6D:CA:2F:11:E0:BD:0A:B0:F2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:5c:21:9a:6a:e3:02:ee:95:ca:82:1e:12:a8:fc:a2:cd:c0: d7:e8:85:62:c9:e0:81:1c:51:0d:cd:51:9f:67:5c:3f:44:ea: 8d:d8:d7:74:a2:dd:49:73:93:ce:3b:ad:74:ae:2d:f2:94:17: 41:f2:01:2e:51:9d:cd:68:52:59:35:1e:4a:2e:e8:ae:60:6a: ff:b9:94:d8:bb:0c:e1:31:c0:1c:b3:62:27:90:fd:1a:1e:c6: 70:cf:bc:f3:44:61:fa:1a:ad:1a:cb:d6:09:e0:c5:3a:3d:f9: ab:f9:ec:31:bb:39:d5:22:eb:f9:e0:48:34:59:d5:94:dd:4d: 5d:d3:1b:4a:26:49:07:b3:76:54:b3:ce:cd:bd:82:99:ca:32: fa:e6:9f:1b:2b:28:16:bb:68:c4:ea:7f:96:85:29:58:f1:2f: 32:51:79:d2:79:eb:b3:f7:99:1e:4c:70:6d:45:7a:75:36:ec: a3:9a:23:e5:16:9a:b6:f0:9e:fe:e7:6a:20:b4:62:fa:8c:37: 7c:0b:dd:5e:0f:93:02:8d:67:23:e6:42:ef:ee:5b:8a:aa:4b: 52:02:cc:02:29:b3:41:9d:7a:f4:1b:fc:21:b5:09:13:37:fd: 6f:33:40:4c:ce:41:71:94:79:45:b3:28:1a:0c:ea:18:ea:af: 8d:c9:4b:d2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZFvaMDVXhqrnZawvUr49YrySdwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ0NkE5OEQwOTZBRDhBRTc3Rjg2RENBMkYxMUUwQkQw QUIwRjJFNzAeFw0yNjAzMjQyMjIxMjZaFw0yNjAzMzAyMTEyMjZaMDMxMTAvBgNV BAMTKERFQzkxRjQzMDNFQTM1QjgxNEMzNDMyRDcwMUU4MDFGODI4OEFGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJ6lOLfRBPYgtNU4tpUanZM6D Gu+RKQpP7tAKhUErYTYYja2GADGkCe3px6Pb+Mqw0rnqp4WeCRzdTEAZwsjh5qkY +RVXyFP3fJeNd13lP4nJvQDX9Ck51Bf40lbvg4+Js6theMhUqlgB5j22j0AaxG2l +5BqagLI1/9pP+ExL8ZCuc8ycCVk6xDaH5NmGQhQX7ECEcaWQgBmxANzN5jBkb0b TETRag2Zh0AVTrH8BgL3VzTUA3frV9kG1Vp8ptInocgmwDVh0nKd49oHbrk+Ck/s B1c4V0zCSoel7F8Z0uIMKomtnq0sBbW7odM9bAxZ/103nsHW4A9iD5IIcBpHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3skfQwPqNbgUw0MtcB6AH4KIr2UwHwYDVR0j BBgwFoAUvUapjQlq2K53+G3KLxHgvQqw8ucwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85RDYxODYwQzA2MDRCQTEzOUJFQjNENjUyOTAyRDAxOEU2 RUQzNEZGQjQwMDJCNEIzNEVCQkYyMTdCMUY3Nzc2LzAvQkQ0NkE5OEQwOTZBRDhB RTc3Rjg2RENBMkYxMUUwQkQwQUIwRjJFNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDQ2QTk4RDA5NkFEOEFFNzdG ODZEQ0EyRjExRTBCRDBBQjBGMkU3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUQ2MTg2MEMwNjA0QkExMzlCRUIzRDY1MjkwMkQwMThFNkVEMzRGRkI0 MDAyQjRCMzRFQkJGMjE3QjFGNzc3Ni8wL0JENDZBOThEMDk2QUQ4QUU3N0Y4NkRD QTJGMTFFMEJEMEFCMEYyRTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnXCGaauMC7pXKgh4SqPyizcDX 6IViyeCBHFENzVGfZ1w/ROqN2Nd0ot1Jc5POO610ri3ylBdB8gEuUZ3NaFJZNR5K LuiuYGr/uZTYuwzhMcAcs2InkP0aHsZwz7zzRGH6Gq0ay9YJ4MU6Pfmr+ewxuznV Iuv54Eg0WdWU3U1d0xtKJkkHs3ZUs87NvYKZyjL65p8bKygWu2jE6n+WhSlY8S8y UXnSeeuz95keTHBtRXp1NuyjmiPlFpq28J7+52ogtGL6jDd8C91eD5MCjWcj5kLv 7luKqktSAswCKbNBnXr0G/whtQkTN/1vM0BMzkFxlHlFsygaDOoY6q+NyUvS -----END CERTIFICATE-----Generated at Thu Mar 26 23:10:16 2026 by rpki-client