$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft File: D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft (raw, json) Hash identifier: uXkxjYH4Ry8xPk0AzrGGxCRWQEXL8GJ/BfgajZ8/wLQ= Subject key identifier: 87:4A:D2:2B:51:ED:83:FD:A7:63:96:26:C9:D6:5C:14:06:7B:9A:8D Authority key identifier: D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88 Certificate issuer: /CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88 Certificate serial: 34244717D3417DEE2AB0B065391B7D282DB60D08 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft Manifest number: 017F Signing time: Tue 24 Mar 2026 09:44:05 +0000 Manifest this update: Tue 24 Mar 2026 09:39:05 +0000 Manifest next update: Mon 30 Mar 2026 07:50:05 +0000 Files and hashes: 1: 323830333a326536303a3a2f33322d3430203d3e20323637393230.roa (hash: 2XXQwR92/KjgJ/2++HVI7fSD1UdmL5aNxYFyD/p5LNw=) 2: 34352e3137392e3139322e302f32322d3234203d3e20323637393230.roa (hash: hHYg6WIVt3mCg+ZCVTv0B9LXCxPEHGPAO0NWqvzsuQc=) 3: D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl (hash: 0vmjuLBn2ayp26QYwfaPrnjnEMus8u3ZZFMTdQ81raQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 07:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:24:47:17:d3:41:7d:ee:2a:b0:b0:65:39:1b:7d:28:2d:b6:0d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88 Validity Not Before: Mar 24 09:39:05 2026 GMT Not After : Mar 30 07:50:05 2026 GMT Subject: CN=874AD22B51ED83FDA7639626C9D65C14067B9A8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:18:e7:c0:fe:75:87:dc:2f:59:3b:8a:9d: 57:48:a4:89:3b:31:89:f9:dc:db:1b:31:7e:f8:b0: 50:64:0e:8b:62:01:cb:0a:2f:44:fa:11:3c:dd:ec: 71:98:77:6b:85:a1:4c:09:f8:ec:21:93:57:08:dc: b1:93:79:8d:f5:82:4b:a4:06:8c:ea:2c:0a:e0:5e: a3:7c:f9:32:f4:9f:87:a0:e2:bc:6a:36:05:ff:43: 5c:5a:71:bc:26:5e:98:1e:2a:dc:46:8b:0c:ac:af: 6e:72:36:84:0d:d5:31:ac:41:ee:32:08:ec:60:4a: 4e:1c:3e:a0:aa:11:a6:be:65:58:14:65:dc:6b:9c: 03:03:93:b9:64:a2:51:87:9c:c2:d7:56:9c:4e:ed: 32:d2:8b:49:04:10:d9:07:41:4f:8e:84:fa:ba:12: 4f:5f:9a:95:f8:0f:9d:99:50:53:18:4d:69:31:27: 45:65:9d:db:52:f0:95:b6:2b:46:f8:d2:40:95:4b: 51:d5:d3:5f:ad:50:62:4d:81:56:2c:e4:f5:f8:6b: b7:28:40:fc:06:5b:65:12:fc:26:0f:49:30:50:3b: ae:b1:32:51:5e:ff:77:b7:39:f8:9b:2b:0e:b6:21: 76:5a:95:19:48:ec:4e:da:8d:a9:3c:e3:60:c4:02: 5d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4A:D2:2B:51:ED:83:FD:A7:63:96:26:C9:D6:5C:14:06:7B:9A:8D X509v3 Authority Key Identifier: keyid:D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:42:05:18:a1:ab:c7:5f:29:09:4a:39:71:28:26:3d:a6:1c: 11:1a:24:4e:f1:d8:c1:72:6a:1c:22:43:e6:90:24:cb:92:88: 2e:77:8b:6c:e1:76:42:eb:97:72:5d:10:0b:83:be:8b:bc:57: 61:b0:b6:1b:b8:b0:8c:a9:e8:dd:b0:43:43:be:55:e3:2a:c8: c5:06:f9:e0:19:33:08:bf:ee:40:83:9d:37:15:e1:02:49:81: ee:2c:1e:a2:fa:57:b7:c2:bb:e8:82:93:67:ed:8f:0f:7d:51: c4:d0:f1:36:53:0d:81:5a:30:79:44:76:f3:e2:93:4a:07:1c: 83:df:3d:f2:2a:42:99:25:41:0c:03:82:5c:4f:d6:d1:55:04: fc:dc:24:26:70:85:2e:ed:8e:0f:63:b8:cf:be:4f:e5:50:20: c8:7f:cb:ce:be:5c:63:c7:20:2c:33:93:ce:10:5a:b3:2f:87: 74:6c:c3:8b:48:88:3d:3f:7d:78:a1:8c:13:4d:45:e3:2d:b3: 51:f8:34:30:8b:0c:f9:26:ef:65:74:58:22:7a:5b:3c:e8:af: 8e:12:fd:e2:7a:d8:e3:4f:f8:55:51:1f:19:0b:06:cc:ba:33: d8:cb:af:cc:ed:15:af:75:66:e7:af:f4:d7:4e:75:d0:b9:51: e2:d1:70:02 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNCRHF9NBfe4qsLBlORt9KC22DQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDOTQ3N0NBNUJGMTE1NUFCRjUxNzA3OTcwRUE4MUNG RTQ0RUE4ODAeFw0yNjAzMjQwOTM5MDVaFw0yNjAzMzAwNzUwMDVaMDMxMTAvBgNV BAMTKDg3NEFEMjJCNTFFRDgzRkRBNzYzOTYyNkM5RDY1QzE0MDY3QjlBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PRjnwP51h9wvWTuKnVdIpIk7 MYn53NsbMX74sFBkDotiAcsKL0T6ETzd7HGYd2uFoUwJ+Owhk1cI3LGTeY31gkuk BozqLArgXqN8+TL0n4eg4rxqNgX/Q1xacbwmXpgeKtxGiwysr25yNoQN1TGsQe4y COxgSk4cPqCqEaa+ZVgUZdxrnAMDk7lkolGHnMLXVpxO7TLSi0kEENkHQU+OhPq6 Ek9fmpX4D52ZUFMYTWkxJ0VlndtS8JW2K0b40kCVS1HV01+tUGJNgVYs5PX4a7co QPwGW2US/CYPSTBQO66xMlFe/3e3OfibKw62IXZalRlI7E7ajak842DEAl27AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUh0rSK1Htg/2nY5YmydZcFAZ7mo0wHwYDVR0j BBgwFoAU2MlHfKW/EVWr9RcHlw6oHP5E6ogwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQkY4NjY5NzdCRDk1RjFGMUE1ODM5REFDOUIyQkFEOEJF QTgxRTJGOEM0MEM3NDY0QkMzQ0UzQ0FCOTU2OEVDLzAvRDhDOTQ3N0NBNUJGMTE1 NUFCRjUxNzA3OTcwRUE4MUNGRTQ0RUE4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEM5NDc3Q0E1QkYxMTU1QUJG NTE3MDc5NzBFQTgxQ0ZFNDRFQTg4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0JGODY2OTc3QkQ5NUYxRjFBNTgzOURBQzlCMkJBRDhCRUE4MUUyRjhD NDBDNzQ2NEJDM0NFM0NBQjk1NjhFQy8wL0Q4Qzk0NzdDQTVCRjExNTVBQkY1MTcw Nzk3MEVBODFDRkU0NEVBODgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVQgUYoavHXykJSjlxKCY9phwR GiRO8djBcmocIkPmkCTLkogud4ts4XZC65dyXRALg76LvFdhsLYbuLCMqejdsEND vlXjKsjFBvngGTMIv+5Ag503FeECSYHuLB6i+le3wrvogpNn7Y8PfVHE0PE2Uw2B WjB5RHbz4pNKBxyD3z3yKkKZJUEMA4JcT9bRVQT83CQmcIUu7Y4PY7jPvk/lUCDI f8vOvlxjxyAsM5POEFqzL4d0bMOLSIg9P314oYwTTUXjLbNR+DQwiwz5Ju9ldFgi els86K+OEv3ietjjT/hVUR8ZCwbMujPYy6/M7RWvdWbnr/TXTnXQuVHi0XAC -----END CERTIFICATE-----Generated at Fri Mar 27 05:41:42 2026 by rpki-client