$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.mft File: 9F2857C840DE891C3C4CE0EE86756147DDB65ABF.mft (raw, json) Hash identifier: 862+qsq8rX7c71XqcOqP1UNLWKSFgtq3iB3+Td9w048= Subject key identifier: 60:DA:91:E7:B2:C0:B5:3E:5D:C6:85:78:92:71:E4:34:9F:E3:1B:06 Authority key identifier: 9F:28:57:C8:40:DE:89:1C:3C:4C:E0:EE:86:75:61:47:DD:B6:5A:BF Certificate issuer: /CN=9F2857C840DE891C3C4CE0EE86756147DDB65ABF Certificate serial: 5B4A53E7C3B6E8F149619F4DF203F2D22AB7A6C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.mft Manifest number: 0171 Signing time: Tue 24 Mar 2026 08:13:17 +0000 Manifest this update: Tue 24 Mar 2026 08:08:17 +0000 Manifest next update: Sun 29 Mar 2026 17:36:17 +0000 Files and hashes: 1: 9F2857C840DE891C3C4CE0EE86756147DDB65ABF.crl (hash: QypKn3+E3q4Lt4dbw++Fz9XKgIrQAXhy36csIFGnjcE=) 2: 34352e3137342e3137382e302f32332d3234203d3e20323637383635.roa (hash: Z011pP0jWHN9IW+30CnQVmui0k/P5rj22E4YtCFRaJI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.crl rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 17:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4a:53:e7:c3:b6:e8:f1:49:61:9f:4d:f2:03:f2:d2:2a:b7:a6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F2857C840DE891C3C4CE0EE86756147DDB65ABF Validity Not Before: Mar 24 08:08:17 2026 GMT Not After : Mar 29 17:36:17 2026 GMT Subject: CN=60DA91E7B2C0B53E5DC685789271E4349FE31B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:30:15:99:e0:61:ac:84:8e:1e:ed:08:aa:d7: 75:e9:96:73:6d:28:12:ac:98:49:f8:4a:fd:17:fb: 5f:e8:87:d3:6a:3c:fb:3e:02:ac:a9:41:eb:21:41: 93:8b:80:af:97:a3:53:d9:34:bf:0b:8d:45:12:23: f8:15:02:b9:88:d5:d9:91:e9:40:04:c6:10:0b:15: df:35:79:f4:f4:12:5f:5d:f0:4b:dd:c4:e4:16:04: a8:26:05:65:ee:71:c2:70:be:23:43:98:3d:2f:db: a5:a5:df:96:e1:10:9b:34:10:1e:02:77:f7:f3:74: cb:d2:a1:91:36:3b:f3:1c:cf:d6:b9:aa:02:da:f8: 05:a9:16:7f:41:e1:eb:b1:b8:a0:39:dd:81:f2:70: 64:ea:2b:2c:9a:59:41:62:a6:26:5b:3d:7f:e8:59: a6:e9:5e:cb:fa:bc:3b:2a:61:2a:e1:d9:c2:98:0e: 6b:00:69:2c:19:03:d9:b7:ab:c0:49:26:98:45:9a: 53:12:a1:80:13:43:6b:b0:48:b2:2a:1d:ae:51:1a: c9:94:cc:49:80:4b:b7:34:60:e5:54:6f:8e:8f:02: 51:84:9c:2e:de:85:f1:c6:b7:18:ec:d6:98:cc:7f: 88:7f:ae:e7:76:d6:a0:e5:73:b1:84:a8:47:82:d3: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DA:91:E7:B2:C0:B5:3E:5D:C6:85:78:92:71:E4:34:9F:E3:1B:06 X509v3 Authority Key Identifier: keyid:9F:28:57:C8:40:DE:89:1C:3C:4C:E0:EE:86:75:61:47:DD:B6:5A:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:83:38:de:3a:67:ea:5e:43:9c:83:ae:ba:57:54:f4:26:13: 8d:0f:fe:84:ce:24:b0:73:e1:3f:1a:ef:09:70:0d:8c:21:36: 9b:bf:4f:d9:13:7a:16:1f:ec:a3:db:81:f2:3a:a1:30:13:b6: 70:4e:f5:2d:cb:95:5f:c4:54:b6:3b:38:55:84:6b:27:b2:2a: 55:85:b3:0e:aa:07:7e:d0:2e:ad:8d:f7:07:d6:62:ab:84:f3: 55:9c:49:d3:dd:b7:ac:56:5a:04:ab:8e:ec:c5:aa:91:b1:4d: 48:91:81:36:ff:16:e5:3d:33:29:78:20:10:f7:6e:97:1b:63: 33:d2:a5:34:00:8e:10:ef:3b:9a:24:a5:60:30:3c:c3:da:ad: 34:ac:72:45:5c:0b:e9:7f:47:58:f0:f8:68:4b:d2:de:73:ec: 12:62:99:98:65:27:b9:92:16:35:14:58:13:f1:cd:52:3b:cb: bd:e7:3a:92:6c:35:42:70:f9:ca:78:21:bc:79:01:f3:eb:a9: 41:ea:e4:b1:2b:0a:85:e3:00:b1:ba:9d:46:bd:84:fa:a4:a3: 03:0d:00:c9:2b:c5:9b:49:88:79:c2:da:15:3c:37:2c:05:4e: c5:27:f4:bb:4a:0b:fd:f8:82:0b:e8:b7:83:db:8e:59:bf:52: a0:6a:1f:61 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUW0pT58O26PFJYZ9N8gPy0iq3pscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYyODU3Qzg0MERFODkxQzNDNENFMEVFODY3NTYxNDdE REI2NUFCRjAeFw0yNjAzMjQwODA4MTdaFw0yNjAzMjkxNzM2MTdaMDMxMTAvBgNV BAMTKDYwREE5MUU3QjJDMEI1M0U1REM2ODU3ODkyNzFFNDM0OUZFMzFCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIMBWZ4GGshI4e7Qiq13XplnNt KBKsmEn4Sv0X+1/oh9NqPPs+AqypQeshQZOLgK+Xo1PZNL8LjUUSI/gVArmI1dmR 6UAExhALFd81efT0El9d8EvdxOQWBKgmBWXuccJwviNDmD0v26Wl35bhEJs0EB4C d/fzdMvSoZE2O/Mcz9a5qgLa+AWpFn9B4euxuKA53YHycGTqKyyaWUFipiZbPX/o WabpXsv6vDsqYSrh2cKYDmsAaSwZA9m3q8BJJphFmlMSoYATQ2uwSLIqHa5RGsmU zEmAS7c0YOVUb46PAlGEnC7ehfHGtxjs1pjMf4h/rud21qDlc7GEqEeC00tRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYNqR57LAtT5dxoV4knHkNJ/jGwYwHwYDVR0j BBgwFoAUnyhXyEDeiRw8TODuhnVhR922Wr8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjQ3RUZFODE5QkY1NkE1MDlEN0RBNDg0MkUxQUI2RUQ3 MjQxRTgwMTlBQzE1NzI2QjRFRjBDNjk4Q0Y5QzdFLzAvOUYyODU3Qzg0MERFODkx QzNDNENFMEVFODY3NTYxNDdEREI2NUFCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjI4NTdDODQwREU4OTFDM0M0 Q0UwRUU4Njc1NjE0N0REQjY1QUJGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzY0N0VGRTgxOUJGNTZBNTA5RDdEQTQ4NDJFMUFCNkVENzI0MUU4MDE5 QUMxNTcyNkI0RUYwQzY5OENGOUM3RS8wLzlGMjg1N0M4NDBERTg5MUMzQzRDRTBF RTg2NzU2MTQ3RERCNjVBQkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJgzjeOmfqXkOcg666V1T0JhON D/6EziSwc+E/Gu8JcA2MITabv0/ZE3oWH+yj24HyOqEwE7ZwTvUty5VfxFS2OzhV hGsnsipVhbMOqgd+0C6tjfcH1mKrhPNVnEnT3besVloEq47sxaqRsU1IkYE2/xbl PTMpeCAQ926XG2Mz0qU0AI4Q7zuaJKVgMDzD2q00rHJFXAvpf0dY8PhoS9Lec+wS YpmYZSe5khY1FFgT8c1SO8u95zqSbDVCcPnKeCG8eQHz66lB6uSxKwqF4wCxup1G vYT6pKMDDQDJK8WbSYh5wtoVPDcsBU7FJ/S7Sgv9+IIL6LeD245Zv1Kgah9h -----END CERTIFICATE-----Generated at Thu Mar 26 19:50:39 2026 by rpki-client