$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft File: 38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft (raw, json) Hash identifier: VjGG7TyTWi/0Njyml4T4pQ58lciaYfMQ8+b9OERxDPk= Subject key identifier: 72:FE:DD:F4:0E:60:02:D2:AE:F6:FA:AC:F6:AA:70:A7:AC:C1:24:E2 Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD Certificate issuer: /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD Certificate serial: 6698DF1E19CF35C82185765F73FBF1E06E2D30B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft Manifest number: 017E Signing time: Wed 25 Mar 2026 17:37:49 +0000 Manifest this update: Wed 25 Mar 2026 17:32:49 +0000 Manifest next update: Tue 31 Mar 2026 12:16:49 +0000 Files and hashes: 1: 38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl (hash: enYanwfD6SUDGs1c4wEaqscfQVai7RGcMB3wFFfGueo=) 2: 323830333a383639303a3a2f33322d3438203d3e20323732383839.roa (hash: C81tdhYwqkDUYOPZK4nYwNjKr0HdbT9/b8CNGFHV4eQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:98:df:1e:19:cf:35:c8:21:85:76:5f:73:fb:f1:e0:6e:2d:30:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD Validity Not Before: Mar 25 17:32:49 2026 GMT Not After : Mar 31 12:16:49 2026 GMT Subject: CN=72FEDDF40E6002D2AEF6FAACF6AA70A7ACC124E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:f5:39:19:1e:69:b3:ed:24:71:61:6f:16: e7:a5:bd:48:3c:82:eb:3e:9d:cb:95:09:47:ac:c6: fe:1b:aa:eb:a8:89:85:c0:73:ba:5b:51:25:8f:4c: b4:f2:19:e1:4e:f6:65:66:51:d8:94:e7:40:7c:71: 25:2c:3f:56:64:7f:0c:2e:51:29:7e:94:01:eb:12: 00:23:42:47:17:bc:d0:b7:1e:af:eb:53:7c:8e:99: aa:56:ba:27:c2:e2:12:42:19:ec:d8:5f:df:fa:7a: 32:98:b7:d3:9c:95:a8:b6:b0:99:ae:63:31:42:4b: 34:7b:84:51:90:b5:2c:6d:76:79:fb:53:91:be:86: 5c:76:09:ff:1b:e9:b3:26:ed:89:5c:db:30:bc:6f: 5f:00:98:32:0a:a2:3a:f3:38:d2:8f:bf:40:3d:b5: 89:53:da:82:a3:1a:75:99:7a:d4:5d:07:60:92:e6: 97:11:5b:07:b1:d6:05:8b:12:1c:1e:f4:1b:a0:52: 17:cd:ab:98:8a:4d:36:2b:fc:36:96:26:9a:18:07: d9:a6:f5:0d:88:16:68:4d:48:4f:94:58:0e:3d:83: cb:54:42:62:e4:05:75:2c:28:cd:a1:8c:a8:0a:45: 05:d5:46:8a:6c:3a:47:a9:0f:61:cf:a0:68:ad:2f: d1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FE:DD:F4:0E:60:02:D2:AE:F6:FA:AC:F6:AA:70:A7:AC:C1:24:E2 X509v3 Authority Key Identifier: keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:83:b4:77:8f:17:58:44:1b:49:e0:00:7c:43:85:5a:36:ee: 75:54:05:fd:36:76:95:12:2e:90:5f:b7:ce:d2:22:55:63:09: 81:67:a8:f2:3e:f7:3d:22:12:a5:db:2d:50:a5:2b:1f:3e:e8: 12:2c:a4:c7:e2:6c:79:44:bf:be:8e:62:6a:d6:db:f4:92:bb: 04:0a:a2:2d:86:ae:41:9f:9e:ca:d7:d7:f4:07:3b:8b:27:45: 20:d0:e0:1e:0f:e3:1d:c0:fb:c7:99:65:83:5d:04:ae:20:2f: 8a:7f:f6:b3:00:d6:1f:09:99:e7:b1:31:76:06:f1:5f:86:9e: 20:34:80:65:53:7b:e7:2d:df:36:ac:0d:0b:4f:28:c6:ab:fc: 54:26:e3:fe:a7:e2:d6:08:c3:ea:34:ee:ba:ee:cf:34:4b:63: c6:92:78:12:6d:5e:2f:2f:3d:7a:69:ba:d5:c9:63:eb:80:f0: de:72:53:0a:ab:5b:de:f5:f8:db:99:3c:8c:ad:ed:79:0b:83: 24:1f:ad:96:f1:93:c4:4e:e1:e7:98:11:9d:ca:6c:ad:f5:0a: b5:ad:6f:b1:a3:a8:f8:7e:df:de:27:5f:ab:54:d0:21:5c:a1: 70:9b:34:c1:17:4f:e2:30:3e:d6:5c:ff:1d:de:c0:85:fd:c7: 0d:7f:a1:96 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZpjfHhnPNcghhXZfc/vx4G4tMLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxMTIzOTVBNjMxREU5QThENTIzM0ZFMTcxMTQ1RDNF NUY2RkNGRDAeFw0yNjAzMjUxNzMyNDlaFw0yNjAzMzExMjE2NDlaMDMxMTAvBgNV BAMTKDcyRkVEREY0MEU2MDAyRDJBRUY2RkFBQ0Y2QUE3MEE3QUNDMTI0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyH/U5GR5ps+0kcWFvFuelvUg8 gus+ncuVCUesxv4bquuoiYXAc7pbUSWPTLTyGeFO9mVmUdiU50B8cSUsP1Zkfwwu USl+lAHrEgAjQkcXvNC3Hq/rU3yOmapWuifC4hJCGezYX9/6ejKYt9Oclai2sJmu YzFCSzR7hFGQtSxtdnn7U5G+hlx2Cf8b6bMm7Ylc2zC8b18AmDIKojrzONKPv0A9 tYlT2oKjGnWZetRdB2CS5pcRWwex1gWLEhwe9BugUhfNq5iKTTYr/DaWJpoYB9mm 9Q2IFmhNSE+UWA49g8tUQmLkBXUsKM2hjKgKRQXVRopsOkepD2HPoGitL9EnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcv7d9A5gAtKu9vqs9qpwp6zBJOIwHwYDVR0j BBgwFoAUOBEjlaYx3pqNUjP+FxFF0+X2/P0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTFCRjZBQjA2MjE1RDg4NzY5RDgyMjkyMDUxNEQzN0Yx NEMwQ0Q4RDQ0MTE3RTY0RjBGNTQyMjk1QTFBQTI5LzAvMzgxMTIzOTVBNjMxREU5 QThENTIzM0ZFMTcxMTQ1RDNFNUY2RkNGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODExMjM5NUE2MzFERTlBOEQ1 MjMzRkUxNzExNDVEM0U1RjZGQ0ZELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUExQkY2QUIwNjIxNUQ4ODc2OUQ4MjI5MjA1MTREMzdGMTRDMENEOEQ0 NDExN0U2NEYwRjU0MjI5NUExQUEyOS8wLzM4MTEyMzk1QTYzMURFOUE4RDUyMzNG RTE3MTE0NUQzRTVGNkZDRkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvg7R3jxdYRBtJ4AB8Q4VaNu51 VAX9NnaVEi6QX7fO0iJVYwmBZ6jyPvc9IhKl2y1QpSsfPugSLKTH4mx5RL++jmJq 1tv0krsECqIthq5Bn57K19f0BzuLJ0Ug0OAeD+MdwPvHmWWDXQSuIC+Kf/azANYf CZnnsTF2BvFfhp4gNIBlU3vnLd82rA0LTyjGq/xUJuP+p+LWCMPqNO667s80S2PG kngSbV4vLz16abrVyWPrgPDeclMKq1ve9fjbmTyMre15C4MkH62W8ZPETuHnmBGd ymyt9Qq1rW+xo6j4ft/eJ1+rVNAhXKFwmzTBF0/iMD7WXP8d3sCF/ccNf6GW -----END CERTIFICATE-----Generated at Thu Mar 26 23:27:40 2026 by rpki-client