$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft File: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft (raw, json) Hash identifier: rpEhUICYiUjFKWIY8/DF5puRDGtjQK35MjXZyhpClI0= Subject key identifier: 35:52:B7:39:AE:BB:38:2E:4D:4D:FC:9A:BF:51:08:55:02:A9:D6:8E Authority key identifier: 88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72 Certificate issuer: /CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72 Certificate serial: 2DC326114E9CA2AC644D86BC043812D92FAD00F5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft Manifest number: A9 Signing time: Thu 26 Mar 2026 05:55:02 +0000 Manifest this update: Thu 26 Mar 2026 05:50:02 +0000 Manifest next update: Wed 01 Apr 2026 00:57:02 +0000 Files and hashes: 1: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl (hash: 5UO1htICDB4KW85IX61qO8uLv2pMUBia6AZcnG6i2xo=) 2: 323830333a6164303a3a2f33322d3332203d3e20323734303634.roa (hash: DHa6ditwZtXxLeFd36RN4E+BZavo/NTHMbYI6UBbsnM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c3:26:11:4e:9c:a2:ac:64:4d:86:bc:04:38:12:d9:2f:ad:00:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72 Validity Not Before: Mar 26 05:50:02 2026 GMT Not After : Apr 1 00:57:02 2026 GMT Subject: CN=3552B739AEBB382E4D4DFC9ABF51085502A9D68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:b6:a3:5a:99:e2:a6:61:56:c7:59:36:75: ad:4c:dc:b7:be:a7:c9:19:9f:cb:97:36:69:fa:56: 09:9d:de:39:c2:41:d1:b7:fa:ed:58:84:4f:39:a0: 06:38:36:68:4d:0b:a0:71:8d:f4:92:9e:88:bd:23: 4f:4c:1b:bd:e5:f3:66:98:37:a1:fc:0a:51:3e:68: 0c:aa:be:47:1f:df:84:70:f4:1a:ef:9f:93:ba:e3: ca:bd:94:61:d5:b1:e4:f1:bb:95:fa:85:90:0f:39: 0f:67:40:29:75:a5:96:b6:bb:69:56:ee:87:71:1e: 8e:c7:47:df:a5:f9:19:88:84:50:88:65:9f:06:89: d7:ce:a1:2c:7f:8d:a0:50:18:50:a5:00:d6:48:f5: 6e:d5:4f:9c:ff:ac:83:52:31:2a:8b:17:51:12:68: 4f:f4:d6:d0:2e:ec:5b:5d:9a:fc:73:6e:1e:6f:7c: a1:8f:d1:20:57:44:22:1c:1c:6b:70:6d:9f:14:d4: ea:6f:fe:74:dc:1f:be:78:57:86:c6:18:9e:cb:00: 69:40:14:33:f6:b1:92:2b:9b:33:6a:1c:07:1e:39: ee:c4:d7:65:66:76:6c:34:af:06:50:5e:7b:04:41: 63:b4:f4:4e:c6:cd:1b:23:c9:39:e4:7e:1f:23:32: 26:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:52:B7:39:AE:BB:38:2E:4D:4D:FC:9A:BF:51:08:55:02:A9:D6:8E X509v3 Authority Key Identifier: keyid:88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3a:7c:b0:36:a4:01:ab:9f:ba:36:c8:08:f7:91:0d:c6:4c: 8b:a9:ed:86:eb:5b:7d:1c:0d:99:52:0d:a7:01:d3:1d:71:ac: db:0f:0e:82:04:d4:24:7c:45:3a:b5:cf:13:bb:b1:71:dc:38: c8:ed:53:4e:16:4d:4a:b8:a8:99:56:15:91:d5:af:9e:44:6e: 99:d0:3d:d8:c4:4e:f1:df:0a:9f:52:22:a5:96:77:0d:10:39: 4e:fb:ed:0f:3d:3b:eb:3b:34:76:9c:70:79:10:7b:39:50:ab: d1:e8:bc:3f:d2:51:78:46:e2:f4:68:2a:c3:db:e4:ad:2d:00: a1:75:d1:81:e1:5e:ed:4c:cd:f6:9a:b1:8a:a6:f9:18:0f:85: a2:1c:22:88:46:0e:69:7a:7f:db:34:f1:5f:76:85:2a:c8:4d: a4:e5:41:68:1a:e3:de:04:a0:74:1f:c6:04:8a:f7:64:f8:74: a0:ab:f0:6c:9a:43:34:70:3f:80:26:d9:ee:a3:af:19:fa:28: e7:02:58:66:26:72:55:56:ef:59:3c:6c:6b:19:2f:02:60:8d: fc:9c:97:1c:4d:22:d1:25:f9:e9:1e:86:a5:a7:c5:4c:8d:e7: d0:9a:0e:f7:cd:4f:91:b3:90:8f:99:db:01:fd:8f:30:8c:87: bc:02:9d:31 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULcMmEU6coqxkTYa8BDgS2S+tAPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0MkJCRUVGQTg1RkUzNzFCREVCQzREQkIxNzA5RUI2 NzFCMEE3MjAeFw0yNjAzMjYwNTUwMDJaFw0yNjA0MDEwMDU3MDJaMDMxMTAvBgNV BAMTKDM1NTJCNzM5QUVCQjM4MkU0RDRERkM5QUJGNTEwODU1MDJBOUQ2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5LajWpnipmFWx1k2da1M3Le+ p8kZn8uXNmn6Vgmd3jnCQdG3+u1YhE85oAY4NmhNC6BxjfSSnoi9I09MG73l82aY N6H8ClE+aAyqvkcf34Rw9Brvn5O648q9lGHVseTxu5X6hZAPOQ9nQCl1pZa2u2lW 7odxHo7HR9+l+RmIhFCIZZ8GidfOoSx/jaBQGFClANZI9W7VT5z/rINSMSqLF1ES aE/01tAu7Ftdmvxzbh5vfKGP0SBXRCIcHGtwbZ8U1Opv/nTcH754V4bGGJ7LAGlA FDP2sZIrmzNqHAceOe7E12Vmdmw0rwZQXnsEQWO09E7GzRsjyTnkfh8jMiY1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNVK3Oa67OC5NTfyav1EIVQKp1o4wHwYDVR0j BBgwFoAUiEK77vqF/jcb3rxNuxcJ62cbCnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNjY5OTRCMjA3OTkwQjFCRDM3MUNFRjExNDRFRjc3NEFF RTM0MDdBOEEyOTM2QzVGREU5NDkyQTZCRUU1RDMyLzAvODg0MkJCRUVGQTg1RkUz NzFCREVCQzREQkIxNzA5RUI2NzFCMEE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODQyQkJFRUZBODVGRTM3MUJE RUJDNERCQjE3MDlFQjY3MUIwQTcyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTY2OTk0QjIwNzk5MEIxQkQzNzFDRUYxMTQ0RUY3NzRBRUUzNDA3QThB MjkzNkM1RkRFOTQ5MkE2QkVFNUQzMi8wLzg4NDJCQkVFRkE4NUZFMzcxQkRFQkM0 REJCMTcwOUVCNjcxQjBBNzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyOnywNqQBq5+6NsgI95ENxkyL qe2G61t9HA2ZUg2nAdMdcazbDw6CBNQkfEU6tc8Tu7Fx3DjI7VNOFk1KuKiZVhWR 1a+eRG6Z0D3YxE7x3wqfUiKllncNEDlO++0PPTvrOzR2nHB5EHs5UKvR6Lw/0lF4 RuL0aCrD2+StLQChddGB4V7tTM32mrGKpvkYD4WiHCKIRg5pen/bNPFfdoUqyE2k 5UFoGuPeBKB0H8YEivdk+HSgq/BsmkM0cD+AJtnuo68Z+ijnAlhmJnJVVu9ZPGxr GS8CYI38nJccTSLRJfnpHoalp8VMjefQmg73zU+Rs5CPmdsB/Y8wjIe8Ap0x -----END CERTIFICATE-----Generated at Thu Mar 26 22:00:20 2026 by rpki-client