$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft File: 3214A9089E97D5F53B714A9F9256A933E4595E53.mft (raw, json) Hash identifier: 9ToDdfPhFRRUJHDsulUiX6C7iGoLLg2Wh6/G6rCo1AI= Subject key identifier: 0D:64:D6:25:97:31:1B:98:EB:0B:50:3B:03:DF:EE:3B:3E:40:BF:3D Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53 Certificate issuer: /CN=3214A9089E97D5F53B714A9F9256A933E4595E53 Certificate serial: 142057AF692EE8B7F6021A24ABB1F1AD11EADB38 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft Manifest number: 0182 Signing time: Wed 25 Mar 2026 16:32:11 +0000 Manifest this update: Wed 25 Mar 2026 16:27:11 +0000 Manifest next update: Sun 29 Mar 2026 21:07:11 +0000 Files and hashes: 1: 34352e3137382e33372e302f32342d3234203d3e203232373234.roa (hash: 0HhnYrRRVi7CHJEvS9xN8EZDppFHk6whkimhveshWDc=) 2: 34352e3137382e33392e302f32342d3234203d3e203232373234.roa (hash: AP7UFP0rpGQbityeHpAmDNcuegyejWrJPgbpZy6kEh0=) 3: 3214A9089E97D5F53B714A9F9256A933E4595E53.crl (hash: 8Jn/uBlYSvO4rVnrsPVnY7gh9pHicl4XpHBCuwd/fK8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 21:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:20:57:af:69:2e:e8:b7:f6:02:1a:24:ab:b1:f1:ad:11:ea:db:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53 Validity Not Before: Mar 25 16:27:11 2026 GMT Not After : Mar 29 21:07:11 2026 GMT Subject: CN=0D64D62597311B98EB0B503B03DFEE3B3E40BF3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:6d:86:32:ef:d5:15:fd:4a:c0:ae:ed:64: b5:24:d6:29:4d:f7:ab:aa:40:96:8b:f6:6b:f5:86: 9e:d7:6e:d1:23:8e:99:39:13:37:b1:7c:99:92:02: 4c:84:7f:5e:eb:fd:80:53:1b:c2:74:6d:d9:95:f6: 99:02:aa:8f:92:f9:86:61:22:b2:c2:bb:03:28:1c: 08:59:27:81:af:e3:fd:60:1a:8f:dd:95:30:c4:9c: 28:ea:2b:9f:62:3c:c2:43:4f:7d:3f:3f:e3:ba:df: 76:f1:4d:8a:a8:9d:c0:dc:90:21:25:8a:b6:1a:66: bb:cc:c1:ff:d4:75:63:fd:9d:0f:05:f3:9c:9f:c3: 8e:5f:ab:45:6c:73:48:e9:b6:1b:16:55:40:27:3e: f2:e6:40:d4:4a:72:97:5d:54:14:9b:83:77:a5:14: 67:88:1a:17:c1:33:df:49:e4:d0:04:ae:49:ed:86: 14:8e:0b:5f:d9:56:99:88:4f:a7:24:bf:b4:83:c0: ab:83:3a:64:ef:da:4b:ac:59:db:65:57:b4:af:98: df:2c:78:72:cd:dc:d1:54:6e:61:8e:c7:e7:f2:ef: 8c:ab:fa:a4:27:ca:3f:1f:12:f2:d3:4f:47:b9:cc: f7:e1:29:ee:27:0e:80:11:72:a3:35:f2:8f:70:9b: 6b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:64:D6:25:97:31:1B:98:EB:0B:50:3B:03:DF:EE:3B:3E:40:BF:3D X509v3 Authority Key Identifier: keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:5a:2d:c8:12:5c:a4:68:aa:f6:83:76:4b:c3:86:59:f4:8e: 5b:b1:5a:e3:70:ae:1d:08:de:2f:8f:d5:c7:c5:a5:f0:2c:93: 12:07:8f:fa:0e:77:eb:30:b2:aa:ca:19:a4:bd:09:b8:b7:ef: e9:d2:35:04:56:ec:60:4f:5a:83:fd:21:fa:30:30:11:eb:40: ee:4c:a0:cd:8b:c0:68:d0:9c:1f:75:f7:ef:7c:92:09:a0:2e: 8f:2a:e7:eb:f8:33:50:80:18:2f:c8:30:e4:a6:d1:4b:89:d3: 75:c1:1f:b9:15:ff:5a:cc:c9:6b:e3:98:df:58:a4:08:16:59: ed:09:78:a2:8f:72:45:00:1c:3a:37:ea:41:7b:37:6d:50:70: 0d:2c:00:e2:07:f8:99:5c:a7:aa:f3:e0:75:b2:64:1d:e9:01: 6b:42:74:33:48:d4:4c:c0:10:ed:b2:b2:32:a4:45:d2:10:1b: a3:dd:e4:ab:7b:48:73:ea:59:ae:fc:1a:63:5c:d2:c9:db:82: 9d:df:f1:96:af:65:3a:1d:94:1e:c2:6b:6f:fc:90:f8:c4:af: 65:6b:d0:9b:4e:f8:42:0e:a0:c9:a5:38:ea:69:6d:2b:0c:bf: f5:80:87:fe:bf:5f:ea:4b:78:c1:79:2a:26:f0:1d:25:1d:f3: 59:3d:4a:b4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFCBXr2ku6Lf2Ahokq7HxrRHq2zgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIxNEE5MDg5RTk3RDVGNTNCNzE0QTlGOTI1NkE5MzNF NDU5NUU1MzAeFw0yNjAzMjUxNjI3MTFaFw0yNjAzMjkyMTA3MTFaMDMxMTAvBgNV BAMTKDBENjRENjI1OTczMTFCOThFQjBCNTAzQjAzREZFRTNCM0U0MEJGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12G2GMu/VFf1KwK7tZLUk1ilN 96uqQJaL9mv1hp7XbtEjjpk5EzexfJmSAkyEf17r/YBTG8J0bdmV9pkCqo+S+YZh IrLCuwMoHAhZJ4Gv4/1gGo/dlTDEnCjqK59iPMJDT30/P+O633bxTYqoncDckCEl irYaZrvMwf/UdWP9nQ8F85yfw45fq0Vsc0jpthsWVUAnPvLmQNRKcpddVBSbg3el FGeIGhfBM99J5NAErknthhSOC1/ZVpmIT6ckv7SDwKuDOmTv2kusWdtlV7SvmN8s eHLN3NFUbmGOx+fy74yr+qQnyj8fEvLTT0e5zPfhKe4nDoARcqM18o9wm2tFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDWTWJZcxG5jrC1A7A9/uOz5Avz0wHwYDVR0j BBgwFoAUMhSpCJ6X1fU7cUqfklapM+RZXlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMTI2OTU1Rjg2NzdFODU4MzZENkMwMDNFMzhCRTNDRTcy N0IyQzk3RkQ2MjU1ODFCMDA4ODc5M0NFMTlERUFGLzAvMzIxNEE5MDg5RTk3RDVG NTNCNzE0QTlGOTI1NkE5MzNFNDU5NUU1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjE0QTkwODlFOTdENUY1M0I3 MTRBOUY5MjU2QTkzM0U0NTk1RTUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzEyNjk1NUY4Njc3RTg1ODM2RDZDMDAzRTM4QkUzQ0U3MjdCMkM5N0ZE NjI1NTgxQjAwODg3OTNDRTE5REVBRi8wLzMyMTRBOTA4OUU5N0Q1RjUzQjcxNEE5 RjkyNTZBOTMzRTQ1OTVFNTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDdWi3IElykaKr2g3ZLw4ZZ9I5b sVrjcK4dCN4vj9XHxaXwLJMSB4/6DnfrMLKqyhmkvQm4t+/p0jUEVuxgT1qD/SH6 MDAR60DuTKDNi8Bo0JwfdffvfJIJoC6PKufr+DNQgBgvyDDkptFLidN1wR+5Ff9a zMlr45jfWKQIFlntCXiij3JFABw6N+pBezdtUHANLADiB/iZXKeq8+B1smQd6QFr QnQzSNRMwBDtsrIypEXSEBuj3eSre0hz6lmu/BpjXNLJ24Kd3/GWr2U6HZQewmtv /JD4xK9la9CbTvhCDqDJpTjqaW0rDL/1gIf+v1/qS3jBeSom8B0lHfNZPUq0 -----END CERTIFICATE-----Generated at Thu Mar 26 21:56:45 2026 by rpki-client