$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft File: D2C96715842E19445AE9268C979CE3C8F576D88D.mft (raw, json) Hash identifier: 7F9hsNXS/5w8BaZqxSBj6ynNjk/10rJtisntIdNQfA4= Subject key identifier: 94:84:69:4E:49:AA:FB:D0:84:35:44:E4:6D:B4:0F:A3:DB:A5:24:39 Authority key identifier: D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D Certificate issuer: /CN=D2C96715842E19445AE9268C979CE3C8F576D88D Certificate serial: 1940DAB8E4B873B604F8CD9FE74A83B455CE9D85 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft Manifest number: 017B Signing time: Wed 25 Mar 2026 14:51:15 +0000 Manifest this update: Wed 25 Mar 2026 14:46:15 +0000 Manifest next update: Tue 31 Mar 2026 11:19:15 +0000 Files and hashes: 1: 34352e3137352e3134382e302f32322d3232203d3e20323637383738.roa (hash: jizZo4zt3dS76meNSixLurZ/ag+LUdSdDvT7g3d0sZM=) 2: 34352e3137352e3134392e302f32342d3234203d3e20323637383738.roa (hash: PL8G7VYCxn53upKnlpvOiPkVRBennNJ0X39kKhpYgzE=) 3: D2C96715842E19445AE9268C979CE3C8F576D88D.crl (hash: ID1mrv9A7nzDENJCt+MivbM8C9Tn5AJxIlR8jrFSqjg=) 4: 323830333a6136303a3a2f33322d3332203d3e20323637383738.roa (hash: ZIozX63aTQXdv6d2Ok0KXhPaCWW5mhOFXrAAZff0bZo=) 5: 34352e3137352e3134382e302f32342d3234203d3e20323637383738.roa (hash: JFhzHGnHjrRRCkIxN+bfZwHAICWU4C1iDK8DoQeILzY=) 6: 34352e3137352e3135312e302f32342d3234203d3e20323637383738.roa (hash: Q0Aaqgbu4f0tZMY3QPyjmcja/OSLs6ZuDe+4WZ5y3kQ=) 7: 34352e3137352e3135302e302f32342d3234203d3e20323637383738.roa (hash: GJbdYk8J4DlbpXRLUDYNrgHk/C+nSGhPoQPaN+V2TWs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 17:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:40:da:b8:e4:b8:73:b6:04:f8:cd:9f:e7:4a:83:b4:55:ce:9d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2C96715842E19445AE9268C979CE3C8F576D88D Validity Not Before: Mar 25 14:46:15 2026 GMT Not After : Mar 31 11:19:15 2026 GMT Subject: CN=9484694E49AAFBD0843544E46DB40FA3DBA52439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:47:d2:34:fa:3b:d1:91:26:7b:9b:78:fc: 70:2d:aa:37:59:33:c4:93:85:2a:2b:bb:a3:c7:47: 8c:1d:a5:14:fe:cf:20:f7:36:b5:44:21:9f:72:22: ec:ea:b4:89:3f:d2:7f:9d:ca:65:b2:f4:2f:44:9f: c1:fb:a0:1e:50:49:a1:c6:1b:87:c2:e7:12:f0:17: a9:95:b5:78:31:32:ae:96:42:30:d3:ff:c0:3a:63: 5d:3c:33:2c:65:43:0f:01:8b:19:3f:7e:24:de:5b: 19:24:8e:fa:4c:20:55:bd:63:52:c6:4b:91:8c:69: fc:59:25:4b:e0:be:9a:47:2d:6c:a0:c5:78:13:22: 81:8e:1f:9f:ba:c1:ea:d7:ae:b4:ad:9a:0d:73:80: 98:b5:f3:32:e2:ca:d7:32:d5:de:b6:65:3e:67:71: 5d:bc:17:88:42:8b:46:46:40:f3:61:24:74:bb:22: 2c:4d:19:13:91:52:91:b7:94:93:c8:af:a6:e9:11: 99:55:ee:04:1b:d0:2a:6f:30:d8:ae:de:eb:49:51: 97:5f:53:94:77:41:fb:0d:b4:6a:76:53:1c:b6:91: fc:9b:12:88:fd:cb:7a:09:b0:54:2b:0d:84:79:a4: 3a:0c:7d:4c:d9:4c:83:62:18:f9:32:b1:53:35:07: ad:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:84:69:4E:49:AA:FB:D0:84:35:44:E4:6D:B4:0F:A3:DB:A5:24:39 X509v3 Authority Key Identifier: keyid:D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ba:49:ee:a4:d3:0a:8b:e9:c0:54:5c:40:02:c6:93:28:20: 87:54:7c:7d:5f:d6:93:2d:6f:fc:dc:20:f3:c1:49:64:17:34: 2e:17:3a:81:36:4b:b7:0e:9c:74:fe:39:58:45:d9:ba:c6:d6: 6f:ff:6b:fd:8c:f3:ff:b2:f6:b3:4a:1b:9b:24:e6:04:d2:51: af:84:ac:54:c0:7a:e9:b5:f7:75:6b:e5:0c:7f:7b:ad:8b:30: bb:86:19:09:18:a3:b4:90:2d:e0:fc:8f:29:d0:3b:16:95:e8: 36:8e:b4:93:28:95:8f:ff:26:80:22:ba:6c:e7:28:f9:84:a2: e3:0b:f4:26:89:e6:e4:33:c6:de:49:74:1a:53:a6:25:e8:31: fb:ad:59:5e:fb:65:00:15:1f:1a:b5:09:9c:c4:b0:88:ea:97: e4:76:2f:2c:95:fb:b9:26:9a:e8:06:d1:6d:4a:8a:47:ab:69: 95:6b:4a:70:da:6a:2f:cb:ed:f2:cb:08:78:d6:da:f0:d9:e8: f2:c8:4f:b4:62:45:11:17:27:40:f2:96:1b:92:71:d9:7b:88: 50:d3:7e:f7:26:25:2b:e6:a6:f7:c0:47:8a:63:da:c9:0c:f4: 89:64:e9:3e:46:6e:21:d8:b1:59:e2:ec:1d:2b:d0:79:98:20: 9e:6c:85:f1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGUDauOS4c7YE+M2f50qDtFXOnYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJDOTY3MTU4NDJFMTk0NDVBRTkyNjhDOTc5Q0UzQzhG NTc2RDg4RDAeFw0yNjAzMjUxNDQ2MTVaFw0yNjAzMzExMTE5MTVaMDMxMTAvBgNV BAMTKDk0ODQ2OTRFNDlBQUZCRDA4NDM1NDRFNDZEQjQwRkEzREJBNTI0MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYe0fSNPo70ZEme5t4/HAtqjdZ M8SThSoru6PHR4wdpRT+zyD3NrVEIZ9yIuzqtIk/0n+dymWy9C9En8H7oB5QSaHG G4fC5xLwF6mVtXgxMq6WQjDT/8A6Y108MyxlQw8Bixk/fiTeWxkkjvpMIFW9Y1LG S5GMafxZJUvgvppHLWygxXgTIoGOH5+6werXrrStmg1zgJi18zLiytcy1d62ZT5n cV28F4hCi0ZGQPNhJHS7IixNGRORUpG3lJPIr6bpEZlV7gQb0CpvMNiu3utJUZdf U5R3QfsNtGp2Uxy2kfybEoj9y3oJsFQrDYR5pDoMfUzZTINiGPkysVM1B61bAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUlIRpTkmq+9CENUTkbbQPo9ulJDkwHwYDVR0j BBgwFoAU0slnFYQuGURa6SaMl5zjyPV22I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNzdCQTgzQ0ZFRDlCNjdCOTFDMjEwRDI2Qjc4NUUxMEY0 QUMwMzRDMURBMzkxOUI1Q0E1RDFGRDFDNDA3ODc5LzAvRDJDOTY3MTU4NDJFMTk0 NDVBRTkyNjhDOTc5Q0UzQzhGNTc2RDg4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkM5NjcxNTg0MkUxOTQ0NUFF OTI2OEM5NzlDRTNDOEY1NzZEODhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjc3QkE4M0NGRUQ5QjY3QjkxQzIxMEQyNkI3ODVFMTBGNEFDMDM0QzFE QTM5MTlCNUNBNUQxRkQxQzQwNzg3OS8wL0QyQzk2NzE1ODQyRTE5NDQ1QUU5MjY4 Qzk3OUNFM0M4RjU3NkQ4OEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCpuknupNMKi+nAVFxAAsaTKCCH VHx9X9aTLW/83CDzwUlkFzQuFzqBNku3Dpx0/jlYRdm6xtZv/2v9jPP/svazShub JOYE0lGvhKxUwHrptfd1a+UMf3utizC7hhkJGKO0kC3g/I8p0DsWleg2jrSTKJWP /yaAIrps5yj5hKLjC/QmiebkM8beSXQaU6Yl6DH7rVle+2UAFR8atQmcxLCI6pfk di8slfu5JproBtFtSopHq2mVa0pw2movy+3yywh41trw2ejyyE+0YkURFydA8pYb knHZe4hQ0373JiUr5qb3wEeKY9rJDPSJZOk+Rm4h2LFZ4uwdK9B5mCCebIXx -----END CERTIFICATE-----Generated at Thu Mar 26 18:38:20 2026 by rpki-client