$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft File: 325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft (raw, json) Hash identifier: ZA1SEaqygxhjQNvuLgDyehqqehYAPn1+4/ajp2axFE0= Subject key identifier: 95:D4:0A:49:47:3E:70:DB:B3:B7:A0:38:4D:46:C4:59:9A:3A:C7:DC Authority key identifier: 32:5C:30:A6:2A:28:F1:CC:67:6D:EC:2E:F9:7A:F6:60:C7:A2:99:85 Certificate issuer: /CN=325C30A62A28F1CC676DEC2EF97AF660C7A29985 Certificate serial: 3DA085E314DBCC6D2B39C8BAC40AB06D5D593177 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft Manifest number: 0177 Signing time: Thu 26 Mar 2026 09:57:14 +0000 Manifest this update: Thu 26 Mar 2026 09:52:14 +0000 Manifest next update: Mon 30 Mar 2026 18:38:14 +0000 Files and hashes: 1: 3133312e3130382e32302e302f32322d3232203d3e20323632323438.roa (hash: VFIEHma75tY63lxcFTJJOidAJSPYQWRhw1i0G6jI70A=) 2: 3136382e3132312e3132382e302f32322d3232203d3e203238303035.roa (hash: c+hvBq769sPADm4+1m+EVnH3LljNXin+++6aC9x05JU=) 3: 325C30A62A28F1CC676DEC2EF97AF660C7A29985.crl (hash: sKEHbwxnSWz+2CMS2Lp1KtdCiSEGuDMb6B1n/3kGS4w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.crl rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 17:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a0:85:e3:14:db:cc:6d:2b:39:c8:ba:c4:0a:b0:6d:5d:59:31:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325C30A62A28F1CC676DEC2EF97AF660C7A29985 Validity Not Before: Mar 26 09:52:14 2026 GMT Not After : Mar 30 18:38:14 2026 GMT Subject: CN=95D40A49473E70DBB3B7A0384D46C4599A3AC7DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:45:e8:d2:c4:89:57:96:15:b1:78:cf:50: bf:bb:d5:05:f8:cd:48:3e:35:72:3a:61:29:b1:af: d1:c1:af:2e:b9:41:9f:a8:9b:2d:a8:75:85:ff:9a: c6:fd:18:f6:60:4a:04:24:d4:2a:61:8f:84:c8:64: 8c:d5:13:b9:80:1f:d8:a9:0a:d0:2c:28:a2:8b:ce: 22:05:3c:f8:93:34:01:bf:db:3d:a7:05:77:a4:11: b2:9f:74:ac:a1:19:dd:8d:5c:73:cd:35:31:5d:88: 9d:23:13:58:9e:57:f4:85:cf:73:b7:b2:c7:74:da: a6:db:d5:6b:c6:f3:ea:4b:e9:97:7a:45:cf:3b:9e: 77:67:9d:28:cc:b7:d8:35:33:82:6d:18:e1:97:cc: e1:b6:72:4b:d1:a3:cb:55:f8:4a:2c:9e:a8:4c:14: 34:b5:e1:c8:7c:81:f8:c0:0d:b7:ad:05:9b:fa:08: 2b:5d:9f:de:33:a1:0f:d7:0a:a3:21:04:2f:98:aa: e9:bd:00:c0:eb:10:25:0d:0c:00:35:26:0f:4c:58: fd:07:55:d7:f7:0b:ca:5c:22:0a:cf:4d:c0:f3:72: da:af:31:45:c5:c2:fe:7a:b2:fd:37:26:b1:94:4b: b1:0d:8b:04:c4:db:b3:96:95:e9:f8:ff:2a:da:da: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D4:0A:49:47:3E:70:DB:B3:B7:A0:38:4D:46:C4:59:9A:3A:C7:DC X509v3 Authority Key Identifier: keyid:32:5C:30:A6:2A:28:F1:CC:67:6D:EC:2E:F9:7A:F6:60:C7:A2:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:bf:ef:e9:13:c6:ad:2e:30:2e:e6:ba:65:be:71:c4:6d:01: d5:c4:4b:be:2e:7b:27:70:ca:2b:ac:e4:08:a3:87:85:57:4e: 98:80:da:91:af:6d:49:bf:ae:d7:75:03:22:c7:ea:90:c1:d1: e8:67:2d:1b:e2:82:d9:33:32:87:ba:d4:ab:57:11:6c:e6:7a: 09:2a:d5:85:b8:2c:91:ec:92:bc:28:ae:98:87:df:57:27:48: a3:70:93:0f:cd:d3:80:6f:fc:42:f1:4d:09:8d:87:c0:1e:fa: 24:32:8d:e2:5e:4e:c9:73:3f:48:ea:e6:43:4d:50:b2:9a:e3: c1:5e:c2:eb:90:2c:19:e1:1d:c4:03:5a:94:cc:b3:f2:92:94: fe:e0:d3:21:e3:55:bb:97:f1:8b:be:5d:7a:36:e6:3c:b1:16: cf:cd:45:38:cc:82:84:74:ee:28:43:57:ee:ae:96:b5:99:65: 6c:c9:48:d8:e3:b0:d8:14:5e:eb:61:63:40:89:59:e4:14:19: cc:cc:c4:24:e5:c4:b0:95:fc:56:3d:91:b9:f2:77:1d:7c:41: fe:64:03:cc:4f:4c:e9:6d:1a:a7:bd:90:28:94:cf:12:ba:81: 8b:7f:0d:b8:30:c0:c6:66:ef:76:b7:68:ab:1d:cd:4e:c8:7d: ea:63:8a:8b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPaCF4xTbzG0rOci6xAqwbV1ZMXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI1QzMwQTYyQTI4RjFDQzY3NkRFQzJFRjk3QUY2NjBD N0EyOTk4NTAeFw0yNjAzMjYwOTUyMTRaFw0yNjAzMzAxODM4MTRaMDMxMTAvBgNV BAMTKDk1RDQwQTQ5NDczRTcwREJCM0I3QTAzODRENDZDNDU5OUEzQUM3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLyEXo0sSJV5YVsXjPUL+71QX4 zUg+NXI6YSmxr9HBry65QZ+omy2odYX/msb9GPZgSgQk1Cphj4TIZIzVE7mAH9ip CtAsKKKLziIFPPiTNAG/2z2nBXekEbKfdKyhGd2NXHPNNTFdiJ0jE1ieV/SFz3O3 ssd02qbb1WvG8+pL6Zd6Rc87nndnnSjMt9g1M4JtGOGXzOG2ckvRo8tV+EosnqhM FDS14ch8gfjADbetBZv6CCtdn94zoQ/XCqMhBC+Yqum9AMDrECUNDAA1Jg9MWP0H Vdf3C8pcIgrPTcDzctqvMUXFwv56sv03JrGUS7ENiwTE27OWlen4/yra2ikvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUldQKSUc+cNuzt6A4TUbEWZo6x9wwHwYDVR0j BBgwFoAUMlwwpioo8cxnbewu+Xr2YMeimYUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMzM0MDcyMDRFMUE5QUU3Rjk1QTFFN0IxOTQ4OTFFN0FC QUY2Q0M1Q0VBNzc2NTBERkI5NkIwREU2REM3QjhGLzAvMzI1QzMwQTYyQTI4RjFD QzY3NkRFQzJFRjk3QUY2NjBDN0EyOTk4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjVDMzBBNjJBMjhGMUNDNjc2 REVDMkVGOTdBRjY2MEM3QTI5OTg1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjMzNDA3MjA0RTFBOUFFN0Y5NUExRTdCMTk0ODkxRTdBQkFGNkNDNUNF QTc3NjUwREZCOTZCMERFNkRDN0I4Ri8wLzMyNUMzMEE2MkEyOEYxQ0M2NzZERUMy RUY5N0FGNjYwQzdBMjk5ODUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYv+/pE8atLjAu5rplvnHEbQHV xEu+LnsncMorrOQIo4eFV06YgNqRr21Jv67XdQMix+qQwdHoZy0b4oLZMzKHutSr VxFs5noJKtWFuCyR7JK8KK6Yh99XJ0ijcJMPzdOAb/xC8U0JjYfAHvokMo3iXk7J cz9I6uZDTVCymuPBXsLrkCwZ4R3EA1qUzLPykpT+4NMh41W7l/GLvl16NuY8sRbP zUU4zIKEdO4oQ1furpa1mWVsyUjY47DYFF7rYWNAiVnkFBnMzMQk5cSwlfxWPZG5 8ncdfEH+ZAPMT0zpbRqnvZAolM8SuoGLfw24MMDGZu92t2irHc1OyH3qY4qL -----END CERTIFICATE-----Generated at Thu Mar 26 18:10:02 2026 by rpki-client