$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft File: D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft (raw, json) Hash identifier: 9IN8ftdHu5gCmrblmqkd25DwuEbSfA29AqCHnWzd0A8= Subject key identifier: 77:18:D5:12:16:85:CB:CE:8F:FF:85:21:5C:45:63:77:96:3C:BF:C7 Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03 Certificate issuer: /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703 Certificate serial: 6543FCB793617567608C5CD3437CEBA9F4F68240 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft Manifest number: 017F Signing time: Wed 25 Mar 2026 18:33:21 +0000 Manifest this update: Wed 25 Mar 2026 18:28:21 +0000 Manifest next update: Tue 31 Mar 2026 14:27:21 +0000 Files and hashes: 1: 3135392e31362e342e302f32342d3234203d3e20323730313439.roa (hash: LvbpS+dayCqWocdlPgTLx2hD4Dr9gc/evY8uYiGWLZQ=) 2: D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl (hash: c3N7xlaIeQd0Ngs/iRbFKtuG0rjh2WS6yQ/4Ku9Kd9U=) 3: 3135392e31362e342e302f32342d3234203d3e20323732333233.roa (hash: MDeJlQE/QYUt0IOXHP5qWTWuvb4cThq/54ZgjGe5N3Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:43:fc:b7:93:61:75:67:60:8c:5c:d3:43:7c:eb:a9:f4:f6:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703 Validity Not Before: Mar 25 18:28:21 2026 GMT Not After : Mar 31 14:27:21 2026 GMT Subject: CN=7718D5121685CBCE8FFF85215C456377963CBFC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:5e:f4:58:46:56:e4:74:00:ee:6b:88:35: 49:42:de:cb:7a:c0:55:a7:44:0d:b9:cf:8b:0a:ec: dd:f7:de:98:9f:95:bf:66:e6:25:7e:ac:e9:6c:84: f6:a8:ce:f4:d9:f1:b2:8c:c3:17:7a:e8:c1:bd:e6: 60:8f:5f:55:ac:19:5a:83:28:f4:7b:02:4d:c7:1a: 66:2d:fe:a3:d9:fa:63:5e:69:83:8d:67:b0:ef:22: 54:41:15:e0:f6:b7:dd:ec:be:2a:13:77:77:eb:a8: 22:bc:a7:3c:d7:c6:05:48:46:35:ff:d2:23:15:fc: 4e:eb:34:dd:fa:56:a4:da:d5:5b:80:34:f4:d5:c3: e4:98:cd:de:d9:30:74:29:43:be:75:37:6d:0a:bd: 63:4e:29:37:d4:bb:85:a6:d0:09:51:2d:8a:a9:80: b9:a8:67:11:e0:dc:09:87:6f:f0:0b:74:e1:c1:8e: 2c:bc:44:68:dd:31:0b:97:fa:71:57:a0:1c:c2:ac: 0b:7b:d2:98:35:f7:95:b9:7e:d7:80:a3:28:fc:04: 8b:91:c2:87:59:b7:a4:4e:8e:0c:81:1c:65:b0:e1: 06:d1:be:69:85:95:48:8c:d5:e6:1d:81:80:17:81: 71:8c:de:db:5d:12:e4:7f:ee:07:54:1d:f2:52:c8: cf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:18:D5:12:16:85:CB:CE:8F:FF:85:21:5C:45:63:77:96:3C:BF:C7 X509v3 Authority Key Identifier: keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:49:c3:58:fd:c4:ce:86:12:ba:f8:c4:92:7e:04:01:e3:1c: 48:e4:95:0e:ea:13:57:db:27:30:bb:78:07:46:47:dd:56:51: 44:09:31:ab:ca:58:08:12:58:20:f8:58:b5:10:e5:68:ac:a5: 8b:b8:d6:fd:76:ce:94:d9:9f:5a:74:86:75:8d:d1:97:42:c6: e2:4c:0b:32:02:a1:c1:9b:a5:06:eb:d0:c0:eb:bc:13:47:f6: b4:fa:af:26:4f:3f:61:f2:d9:80:d1:2c:98:cb:29:72:f2:da: f2:ca:2e:4a:7d:45:63:d9:27:c6:2c:1a:04:4b:3e:61:95:77: 4c:4f:50:32:60:16:59:f3:7e:92:91:f3:27:11:9d:98:25:c0: 55:cf:4b:97:b5:b9:5a:f2:b3:94:40:0c:2e:ed:be:f1:41:20: dd:9a:28:02:36:df:16:b4:6d:59:fa:32:14:8f:56:d0:12:73: 03:f1:5b:3e:9b:48:fa:2d:aa:f1:e3:8b:89:ec:05:d4:cc:4f: 7f:b5:63:86:64:6b:a4:dd:6e:b0:b7:f2:37:a4:6c:f7:a9:a0: d0:dc:4c:79:12:6a:d4:bf:95:e5:97:14:74:38:ed:54:db:64: 13:fb:1f:b5:63:b6:b7:f9:ef:b8:a5:20:9b:1d:c1:08:83:2e: 3f:10:d8:42 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZUP8t5NhdWdgjFzTQ3zrqfT2gkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFQ0E5RTMyOEJBRDY3OEEzQUQyOEM5QzUzNTE4RUY5 RUQwNjcwMzAeFw0yNjAzMjUxODI4MjFaFw0yNjAzMzExNDI3MjFaMDMxMTAvBgNV BAMTKDc3MThENTEyMTY4NUNCQ0U4RkZGODUyMTVDNDU2Mzc3OTYzQ0JGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupV70WEZW5HQA7muINUlC3st6 wFWnRA25z4sK7N333piflb9m5iV+rOlshPaozvTZ8bKMwxd66MG95mCPX1WsGVqD KPR7Ak3HGmYt/qPZ+mNeaYONZ7DvIlRBFeD2t93svioTd3frqCK8pzzXxgVIRjX/ 0iMV/E7rNN36VqTa1VuANPTVw+SYzd7ZMHQpQ751N20KvWNOKTfUu4Wm0AlRLYqp gLmoZxHg3AmHb/ALdOHBjiy8RGjdMQuX+nFXoBzCrAt70pg195W5fteAoyj8BIuR wodZt6ROjgyBHGWw4QbRvmmFlUiM1eYdgYAXgXGM3ttdEuR/7gdUHfJSyM/hAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUdxjVEhaFy86P/4UhXEVjd5Y8v8cwHwYDVR0j BBgwFoAU0+yp4yi61nijrSjJxTUY757QZwMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNEI5QUE3NzQwQUVBQUMxOTQyQzZENDlCRDBDNzU5RUVD QkMwQTZGMzFCRTM4Mjg5NThBOUE5QTc2M0FCQjExLzAvRDNFQ0E5RTMyOEJBRDY3 OEEzQUQyOEM5QzUzNTE4RUY5RUQwNjcwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0VDQTlFMzI4QkFENjc4QTNB RDI4QzlDNTM1MThFRjlFRDA2NzAzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjRCOUFBNzc0MEFFQUFDMTk0MkM2RDQ5QkQwQzc1OUVFQ0JDMEE2RjMx QkUzODI4OTU4QTlBOUE3NjNBQkIxMS8wL0QzRUNBOUUzMjhCQUQ2NzhBM0FEMjhD OUM1MzUxOEVGOUVEMDY3MDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlScNY/cTOhhK6+MSSfgQB4xxI 5JUO6hNX2ycwu3gHRkfdVlFECTGrylgIElgg+Fi1EOVorKWLuNb9ds6U2Z9adIZ1 jdGXQsbiTAsyAqHBm6UG69DA67wTR/a0+q8mTz9h8tmA0SyYyyly8tryyi5KfUVj 2SfGLBoESz5hlXdMT1AyYBZZ836SkfMnEZ2YJcBVz0uXtbla8rOUQAwu7b7xQSDd migCNt8WtG1Z+jIUj1bQEnMD8Vs+m0j6Larx44uJ7AXUzE9/tWOGZGuk3W6wt/I3 pGz3qaDQ3Ex5EmrUv5XllxR0OO1U22QT+x+1Y7a3+e+4pSCbHcEIgy4/ENhC -----END CERTIFICATE-----Generated at Thu Mar 26 22:00:29 2026 by rpki-client