$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft File: C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft (raw, json) Hash identifier: PNfznkdsGu0NMRBOs+YfQNVY151Gn4hqxn6U0LpSbHk= Subject key identifier: 04:94:34:CC:E7:6D:F2:C7:8A:DE:10:9A:CB:2B:12:49:21:BD:63:F5 Authority key identifier: C3:9B:CE:AC:F9:BA:66:80:E0:AD:24:A3:9B:26:69:40:F1:AD:97:5A Certificate issuer: /CN=C39BCEACF9BA6680E0AD24A39B266940F1AD975A Certificate serial: 78DF3F716697B98ACEE3BE7A37821A0E7CF1EEFB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft Manifest number: 0173 Signing time: Wed 25 Mar 2026 11:29:19 +0000 Manifest this update: Wed 25 Mar 2026 11:24:19 +0000 Manifest next update: Mon 30 Mar 2026 17:15:19 +0000 Files and hashes: 1: 34352e3139312e38302e302f32322d3234203d3e20323639393036.roa (hash: QJQK31UEJAuCVH/cr9mXNmUPv6y15k7xfb1Vk0QrOuo=) 2: 323830333a636365303a3a2f33322d3332203d3e20323639393036.roa (hash: oo4nTMoHFEmc2rziShnB65Us8gunD75B2zl8uWP9ETE=) 3: C39BCEACF9BA6680E0AD24A39B266940F1AD975A.crl (hash: Li5mN6XfrvC3MNtOGgIPVVxMRj3JYYVZaKx815j348s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.crl rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 17:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:df:3f:71:66:97:b9:8a:ce:e3:be:7a:37:82:1a:0e:7c:f1:ee:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C39BCEACF9BA6680E0AD24A39B266940F1AD975A Validity Not Before: Mar 25 11:24:19 2026 GMT Not After : Mar 30 17:15:19 2026 GMT Subject: CN=049434CCE76DF2C78ADE109ACB2B124921BD63F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:12:cd:36:40:3b:37:db:d4:bf:fd:f9:81: f1:2d:c6:92:13:c2:45:f9:7b:fe:26:5f:83:97:43: 59:70:b1:af:3a:bd:8b:66:d1:ef:6d:c5:72:00:6d: cd:5d:1a:82:fe:3c:5e:ff:44:f7:12:01:27:36:4b: 50:2d:46:dd:14:cd:5a:62:1e:08:7d:b8:57:74:ec: e8:fe:a8:6c:0a:8a:82:c1:a3:8d:ba:a7:27:e5:87: 38:35:a7:45:95:52:a4:f1:ab:d6:8b:2e:5e:c6:f2: 36:38:da:df:a9:bb:15:24:bd:bb:ea:94:b5:92:8c: ec:cc:ca:87:08:d8:86:ae:c3:89:f7:c9:09:38:47: cb:85:41:71:de:c2:8b:59:5c:6a:41:46:44:e9:9d: 64:e1:a6:71:0e:fa:bc:35:3b:5c:e1:b1:4f:c6:a7: 1e:7b:e5:e1:ba:b7:33:ef:55:06:8e:9c:fa:51:74: 93:1b:15:9c:3b:67:ad:27:30:85:97:07:d4:70:a3: c4:42:87:a3:da:35:84:d3:a2:54:70:51:5e:31:61: e6:1e:67:a5:67:27:f3:1a:76:30:57:23:72:f0:a5: 51:a0:c7:1f:95:c7:50:cc:b0:b0:d2:2a:05:93:89: c2:41:23:0e:ec:13:59:3d:b5:9f:b3:63:10:c6:d0: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:94:34:CC:E7:6D:F2:C7:8A:DE:10:9A:CB:2B:12:49:21:BD:63:F5 X509v3 Authority Key Identifier: keyid:C3:9B:CE:AC:F9:BA:66:80:E0:AD:24:A3:9B:26:69:40:F1:AD:97:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:4b:f2:3a:ac:74:65:43:f5:ad:5c:06:4d:a0:04:32:95:65: be:66:7a:f8:77:35:4c:01:12:a2:1b:08:1c:7b:1a:ce:6d:d0: ba:1e:1c:ba:f5:42:3f:6a:a6:0d:e7:4c:18:88:da:22:bc:6d: 1d:34:6d:d9:ec:2c:70:2a:e7:08:1a:c3:49:51:1a:6a:44:49: 3d:42:50:21:80:6c:f5:aa:b3:85:50:65:82:29:1f:ea:ae:30: cf:13:b4:bd:f1:cd:15:15:6b:2b:26:7d:ac:c0:e8:95:94:24: 22:52:13:d9:e3:14:08:37:ad:ef:80:5d:cf:48:e0:89:b6:37: 90:29:b4:04:cf:4b:d3:ea:53:1f:ce:d4:f6:70:b2:4f:4d:78: bc:67:87:ec:b0:9e:5b:37:32:d8:ff:90:d0:96:4c:a2:00:fc: 60:c0:28:c6:fb:91:0d:3c:b2:61:e5:1d:35:41:ad:54:06:e8: dc:a7:6c:86:ff:2e:63:43:20:fa:f0:ee:49:fc:57:48:1d:7e: 2e:62:00:73:42:c4:72:3d:68:d1:dc:b4:65:76:2b:66:c9:87: 7c:a2:6f:7c:41:fd:5c:9e:b8:a4:0c:7b:69:bf:35:fa:93:f1: de:44:92:08:4a:11:35:98:97:61:a5:a4:9f:6f:7d:81:47:a0: c6:46:61:b2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeN8/cWaXuYrO4756N4IaDnzx7vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM5QkNFQUNGOUJBNjY4MEUwQUQyNEEzOUIyNjY5NDBG MUFEOTc1QTAeFw0yNjAzMjUxMTI0MTlaFw0yNjAzMzAxNzE1MTlaMDMxMTAvBgNV BAMTKDA0OTQzNENDRTc2REYyQzc4QURFMTA5QUNCMkIxMjQ5MjFCRDYzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0xLNNkA7N9vUv/35gfEtxpIT wkX5e/4mX4OXQ1lwsa86vYtm0e9txXIAbc1dGoL+PF7/RPcSASc2S1AtRt0UzVpi Hgh9uFd07Oj+qGwKioLBo426pyflhzg1p0WVUqTxq9aLLl7G8jY42t+puxUkvbvq lLWSjOzMyocI2Iauw4n3yQk4R8uFQXHewotZXGpBRkTpnWThpnEO+rw1O1zhsU/G px575eG6tzPvVQaOnPpRdJMbFZw7Z60nMIWXB9Rwo8RCh6PaNYTTolRwUV4xYeYe Z6VnJ/MadjBXI3LwpVGgxx+Vx1DMsLDSKgWTicJBIw7sE1k9tZ+zYxDG0GsPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUBJQ0zOdt8seK3hCayysSSSG9Y/UwHwYDVR0j BBgwFoAUw5vOrPm6ZoDgrSSjmyZpQPGtl1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRjA3M0FCNTc4NERERjNFRDA0RDJBNEM3NTUyNThFQzE2 MTE4QTA4RkRBMkVENkU4RjY2MzE1RDI4QTQ0NkJELzAvQzM5QkNFQUNGOUJBNjY4 MEUwQUQyNEEzOUIyNjY5NDBGMUFEOTc1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMzlCQ0VBQ0Y5QkE2NjgwRTBB RDI0QTM5QjI2Njk0MEYxQUQ5NzVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkYwNzNBQjU3ODREREYzRUQwNEQyQTRDNzU1MjU4RUMxNjExOEEwOEZE QTJFRDZFOEY2NjMxNUQyOEE0NDZCRC8wL0MzOUJDRUFDRjlCQTY2ODBFMEFEMjRB MzlCMjY2OTQwRjFBRDk3NUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDS/I6rHRlQ/WtXAZNoAQylWW+ Znr4dzVMARKiGwgcexrObdC6Hhy69UI/aqYN50wYiNoivG0dNG3Z7CxwKucIGsNJ URpqREk9QlAhgGz1qrOFUGWCKR/qrjDPE7S98c0VFWsrJn2swOiVlCQiUhPZ4xQI N63vgF3PSOCJtjeQKbQEz0vT6lMfztT2cLJPTXi8Z4fssJ5bNzLY/5DQlkyiAPxg wCjG+5ENPLJh5R01Qa1UBujcp2yG/y5jQyD68O5J/FdIHX4uYgBzQsRyPWjR3LRl ditmyYd8om98Qf1cnrikDHtpvzX6k/HeRJIIShE1mJdhpaSfb32BR6DGRmGy -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:28 2026 by rpki-client