$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft File: E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft (raw, json) Hash identifier: zAJ6d6eycfVsKV+SjGXuSIZTrdF6js9y12Tnr+ocGOI= Subject key identifier: 65:2D:BD:F6:A2:6E:B5:A1:BC:46:45:34:37:AC:22:4E:28:FA:F7:6F Authority key identifier: E8:A8:EC:36:5B:A4:70:C9:FD:93:13:63:3F:D8:9A:A1:C7:DD:16:E2 Certificate issuer: /CN=E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2 Certificate serial: 430798158C25F464F76018A9795CF5D1BADCE732 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft Manifest number: A8 Signing time: Tue 24 Mar 2026 22:35:53 +0000 Manifest this update: Tue 24 Mar 2026 22:30:53 +0000 Manifest next update: Mon 30 Mar 2026 18:20:53 +0000 Files and hashes: 1: 323830333a646635303a3a2f33322d3438203d3e20323634383237.roa (hash: EERe07/O8lZmmgHtNTHCUF3uGP6BXHVvexID5xQV97s=) 2: 323830333a646635303a3a2f33322d3438203d3e20323733393533.roa (hash: X8VlExOwpve0LMhImGUIcT1+srlljGs2IFMMx5CKmKM=) 3: E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl (hash: wXILS36m8ducfuaKL88NjQUTFUfZlEcRqL0E6ktC2tE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 18:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:07:98:15:8c:25:f4:64:f7:60:18:a9:79:5c:f5:d1:ba:dc:e7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2 Validity Not Before: Mar 24 22:30:53 2026 GMT Not After : Mar 30 18:20:53 2026 GMT Subject: CN=652DBDF6A26EB5A1BC46453437AC224E28FAF76F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:73:52:0d:04:fa:b3:a6:e4:3d:72:44:ba: f0:9a:2f:88:25:a0:ad:f6:eb:50:a3:6d:93:c4:2a: 44:1e:6b:88:86:ce:e0:89:d0:8e:3d:30:f1:76:c5: eb:80:30:3b:7f:6f:ee:13:80:30:58:b1:f0:55:28: 7e:d5:7c:eb:09:f8:0b:48:bd:af:01:4c:4c:2d:d4: 80:9f:01:0a:13:2f:b4:06:c0:d8:e4:56:87:c4:1d: a0:82:94:61:d9:da:f0:28:9c:be:3c:03:ac:45:37: 7c:3c:f9:3f:2c:2f:3f:af:68:5a:bc:96:3d:7d:9b: ee:bb:3f:4f:53:ae:60:0c:3d:91:73:3b:d7:7d:99: 26:95:bb:75:f0:91:5e:9e:6c:f5:a6:04:fa:7b:71: d5:9c:3d:7f:bf:30:ed:2c:75:4b:da:05:7c:2f:a1: 3e:71:7f:f1:e2:45:63:3c:ac:16:9f:e5:5a:3a:3e: 5c:0d:8c:ac:cc:36:69:c7:7d:76:33:88:73:01:db: e6:6d:c9:26:54:99:6a:46:eb:3c:70:65:9e:67:31: cb:7c:ca:8d:70:71:9e:92:44:3a:24:3e:a9:47:30: cf:3c:c5:99:04:c2:60:a8:b2:36:4d:6e:83:c4:ea: ec:5f:f7:a7:32:20:03:62:56:0f:e8:32:49:b7:66: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2D:BD:F6:A2:6E:B5:A1:BC:46:45:34:37:AC:22:4E:28:FA:F7:6F X509v3 Authority Key Identifier: keyid:E8:A8:EC:36:5B:A4:70:C9:FD:93:13:63:3F:D8:9A:A1:C7:DD:16:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:08:c3:5d:06:25:11:ba:d5:73:8e:43:a6:18:09:7e:90:32: 29:77:33:79:94:54:e5:fe:96:30:d0:91:f5:5a:af:d1:96:b8: 31:0f:08:e6:1a:f7:59:45:0e:90:9d:58:8e:47:c9:7e:2a:da: f4:c9:df:4e:0f:b9:d1:1f:e5:01:6a:a1:b3:13:4e:47:13:9f: f8:e1:ea:8c:c2:a2:f8:e8:48:6a:66:70:bb:1b:3a:da:b8:01: 4b:08:57:c7:e9:55:37:c9:2e:97:95:ab:20:a0:53:a2:43:85: 7f:8a:d7:79:64:49:c1:ab:4b:c3:79:21:af:f4:88:f5:09:77: 41:34:1d:36:47:78:fa:ba:61:02:52:da:88:37:44:c9:21:e2: 97:c6:a5:8f:87:06:d2:9c:38:44:c9:f0:a9:f5:65:8a:c3:b9: 14:43:69:40:2f:9e:7e:a1:d1:4c:f4:85:12:50:9f:48:34:03: 47:e1:30:e2:c5:10:a3:03:47:e2:3c:fd:e1:f5:0b:74:7a:06: 2c:4d:f5:2b:95:90:4f:19:35:53:1a:70:44:80:2a:be:41:3f: 6b:3d:6c:29:05:be:1a:6f:d7:f4:d9:73:02:08:64:c4:08:f9: 96:74:af:8c:f0:4d:22:86:3b:7c:af:c2:23:79:f3:ea:74:63: ff:8b:8f:1a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQweYFYwl9GT3YBipeVz10brc5zIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThBOEVDMzY1QkE0NzBDOUZEOTMxMzYzM0ZEODlBQTFD N0REMTZFMjAeFw0yNjAzMjQyMjMwNTNaFw0yNjAzMzAxODIwNTNaMDMxMTAvBgNV BAMTKDY1MkRCREY2QTI2RUI1QTFCQzQ2NDUzNDM3QUMyMjRFMjhGQUY3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChH3NSDQT6s6bkPXJEuvCaL4gl oK3261CjbZPEKkQea4iGzuCJ0I49MPF2xeuAMDt/b+4TgDBYsfBVKH7VfOsJ+AtI va8BTEwt1ICfAQoTL7QGwNjkVofEHaCClGHZ2vAonL48A6xFN3w8+T8sLz+vaFq8 lj19m+67P09TrmAMPZFzO9d9mSaVu3XwkV6ebPWmBPp7cdWcPX+/MO0sdUvaBXwv oT5xf/HiRWM8rBaf5Vo6PlwNjKzMNmnHfXYziHMB2+ZtySZUmWpG6zxwZZ5nMct8 yo1wcZ6SRDokPqlHMM88xZkEwmCosjZNboPE6uxf96cyIANiVg/oMkm3Zu11AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZS299qJutaG8RkU0N6wiTij6928wHwYDVR0j BBgwFoAU6KjsNlukcMn9kxNjP9iaocfdFuIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRkE3REI5MTU2QTQ3MTlCNDZGOUYzMjM1MEM2RTNDNTlC MDA4M0YzRkMyMDUzRDU4REU5OUVDRjM0MDA2NDE3LzAvRThBOEVDMzY1QkE0NzBD OUZEOTMxMzYzM0ZEODlBQTFDN0REMTZFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOEE4RUMzNjVCQTQ3MEM5RkQ5 MzEzNjMzRkQ4OUFBMUM3REQxNkUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUZBN0RCOTE1NkE0NzE5QjQ2RjlGMzIzNTBDNkUzQzU5QjAwODNGM0ZD MjA1M0Q1OERFOTlFQ0YzNDAwNjQxNy8wL0U4QThFQzM2NUJBNDcwQzlGRDkzMTM2 MzNGRDg5QUExQzdERDE2RTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDCMNdBiURutVzjkOmGAl+kDIp dzN5lFTl/pYw0JH1Wq/RlrgxDwjmGvdZRQ6QnViOR8l+Ktr0yd9OD7nRH+UBaqGz E05HE5/44eqMwqL46EhqZnC7GzrauAFLCFfH6VU3yS6XlasgoFOiQ4V/itd5ZEnB q0vDeSGv9Ij1CXdBNB02R3j6umECUtqIN0TJIeKXxqWPhwbSnDhEyfCp9WWKw7kU Q2lAL55+odFM9IUSUJ9INANH4TDixRCjA0fiPP3h9Qt0egYsTfUrlZBPGTVTGnBE gCq+QT9rPWwpBb4ab9f02XMCCGTECPmWdK+M8E0ihjt8r8IjefPqdGP/i48a -----END CERTIFICATE-----Generated at Thu Mar 26 20:14:38 2026 by rpki-client