$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: Ae3QJ2WntjlSKQOmI8NJW9sOOArlQ+MNHLDGqUO4KEs= Subject key identifier: 04:CB:2B:04:8F:11:17:D6:92:C6:4B:49:FF:0F:10:C0:6C:59:00:45 Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 4A12F9445C29037DA7EF989BBF9CCCB9207A8F7E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: 0185 Signing time: Thu 26 Mar 2026 01:06:59 +0000 Manifest this update: Thu 26 Mar 2026 01:01:59 +0000 Manifest next update: Mon 30 Mar 2026 08:42:59 +0000 Files and hashes: 1: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=) 2: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: 2ROMy1hMNtl4LlD4eAmab5XkXJI77b/wCGmKJrMFckU=) 3: 34352e3136342e32322e302f32342d3234203d3e203238343233.roa (hash: jnDQ7QTvt7MtCmcH9i+dr1cBZcskNKDgGPqDpsYzawE=) 4: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: pROQMKsiDV21pFjsta+9j86ncqU60mdI9hZdoI3SRKo=) 5: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: 9o4n4knoMmZKmbFG24TzPMjOLkhRN1K0/b8fnrwrbn8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 08:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:12:f9:44:5c:29:03:7d:a7:ef:98:9b:bf:9c:cc:b9:20:7a:8f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Mar 26 01:01:59 2026 GMT Not After : Mar 30 08:42:59 2026 GMT Subject: CN=04CB2B048F1117D692C64B49FF0F10C06C590045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e6:8d:a6:de:f2:2a:34:14:17:8b:53:ce:cb: dd:9c:03:70:36:15:33:90:12:f9:4d:f5:d2:28:f8: 1c:7d:59:ef:b3:2c:5a:cd:1a:6d:16:16:9f:4f:fc: a2:d2:5c:89:41:25:e7:21:7a:43:df:aa:97:03:bc: ff:2c:3e:c9:3d:03:67:cc:08:41:6f:99:6d:f7:a3: fe:bf:8b:f2:59:2d:29:c7:8b:7c:a9:4b:b5:3b:fe: da:f6:93:d3:d2:17:eb:b7:dd:c4:71:47:aa:d4:f0: b7:98:32:55:ce:9f:b1:02:f2:4a:8a:95:fa:cb:2f: da:b2:bd:45:bb:6d:cb:09:53:a5:47:75:d2:bf:b4: 0c:36:70:70:7a:b9:e1:14:0d:dd:d5:55:bb:9e:57: 05:db:58:b2:72:a7:e6:5e:4c:d9:82:b7:0c:23:7e: 93:8b:cb:8a:85:0a:20:2b:09:36:41:e7:68:b4:a0: 13:26:20:5a:7c:6c:d1:80:7b:d0:c2:22:12:3e:07: 57:88:5c:a6:3b:50:f0:72:f9:5d:04:1e:fa:2d:ea: dd:78:c3:13:7a:71:d2:1c:65:3b:c6:c2:f8:4a:13: 97:24:24:54:04:8a:44:6f:6f:78:e0:52:14:f3:4e: a1:1d:08:31:a5:6d:e3:87:fd:06:ac:2f:c1:8b:3c: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CB:2B:04:8F:11:17:D6:92:C6:4B:49:FF:0F:10:C0:6C:59:00:45 X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:80:45:00:39:b2:2b:ef:fe:9b:45:12:2a:4e:7e:29:95:d0: 2b:89:f9:e2:23:f9:4b:04:50:b9:a0:69:4e:b6:c4:cb:48:fb: 20:35:ed:e3:38:cf:32:c7:86:32:9d:ad:4d:97:c5:33:54:6d: 40:40:72:7e:34:9a:c9:fd:ea:ca:76:cf:67:a5:7f:9b:d2:56: 75:67:18:4d:09:d1:86:8a:3c:1e:3c:de:4a:ce:73:6c:eb:ea: eb:c7:a9:c2:84:6a:df:7f:52:9c:26:ff:15:db:37:b6:85:10: a7:a9:3b:08:45:d1:36:a0:3f:25:8c:9b:f3:cb:9f:1a:09:cb: 7c:b9:72:60:b4:68:70:9e:05:71:19:4e:81:83:9b:ad:08:31: f1:26:eb:db:c0:03:85:57:91:6a:be:a8:f5:f0:88:7e:9a:13: 83:58:9d:40:69:d7:2c:db:c8:9d:d6:74:01:84:0f:02:7f:48: 39:96:ea:54:d7:fb:b2:eb:67:60:88:09:43:1b:1f:93:e8:3d: a0:ec:7f:06:c8:b0:f5:75:d5:66:a6:0f:b9:54:cf:74:9a:a9: 13:b7:9a:25:4d:a8:4d:31:14:29:53:7f:24:9a:de:74:e5:e8: cf:dc:54:7e:4f:31:e3:38:a1:1c:a7:d4:e9:2b:94:ad:73:53: 6e:d1:f6:2f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUShL5RFwpA32n75ibv5zMuSB6j34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNjAzMjYwMTAxNTlaFw0yNjAzMzAwODQyNTlaMDMxMTAvBgNV BAMTKDA0Q0IyQjA0OEYxMTE3RDY5MkM2NEI0OUZGMEYxMEMwNkM1OTAwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX5o2m3vIqNBQXi1POy92cA3A2 FTOQEvlN9dIo+Bx9We+zLFrNGm0WFp9P/KLSXIlBJechekPfqpcDvP8sPsk9A2fM CEFvmW33o/6/i/JZLSnHi3ypS7U7/tr2k9PSF+u33cRxR6rU8LeYMlXOn7EC8kqK lfrLL9qyvUW7bcsJU6VHddK/tAw2cHB6ueEUDd3VVbueVwXbWLJyp+ZeTNmCtwwj fpOLy4qFCiArCTZB52i0oBMmIFp8bNGAe9DCIhI+B1eIXKY7UPBy+V0EHvot6t14 wxN6cdIcZTvGwvhKE5ckJFQEikRvb3jgUhTzTqEdCDGlbeOH/QasL8GLPPRdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUBMsrBI8RF9aSxktJ/w8QwGxZAEUwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzgEUAObIr7/6bRRIqTn4pldAr ifniI/lLBFC5oGlOtsTLSPsgNe3jOM8yx4Yyna1Nl8UzVG1AQHJ+NJrJ/erKds9n pX+b0lZ1ZxhNCdGGijwePN5KznNs6+rrx6nChGrff1KcJv8V2ze2hRCnqTsIRdE2 oD8ljJvzy58aCct8uXJgtGhwngVxGU6Bg5utCDHxJuvbwAOFV5Fqvqj18Ih+mhOD WJ1Aadcs28id1nQBhA8Cf0g5lupU1/uy62dgiAlDGx+T6D2g7H8GyLD1ddVmpg+5 VM90mqkTt5olTahNMRQpU38kmt505ejP3FR+TzHjOKEcp9TpK5Stc1Nu0fYv -----END CERTIFICATE-----Generated at Thu Mar 26 20:45:38 2026 by rpki-client