$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/0B85C072201D3DC921F121020F043E1B35429A6A.mft File: 0B85C072201D3DC921F121020F043E1B35429A6A.mft (raw, json) Hash identifier: X5aX7oVOu0aPDWZplV68V5gbbBNFNx/PHJozX0u7ats= Subject key identifier: D3:34:50:EB:1E:15:7D:76:B2:52:21:E5:DC:AF:99:21:75:CC:70:DB Authority key identifier: 0B:85:C0:72:20:1D:3D:C9:21:F1:21:02:0F:04:3E:1B:35:42:9A:6A Certificate issuer: /CN=0B85C072201D3DC921F121020F043E1B35429A6A Certificate serial: 7785E988DD21DDA7094C8232C861F59C02EC9E26 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B85C072201D3DC921F121020F043E1B35429A6A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/0B85C072201D3DC921F121020F043E1B35429A6A.mft Manifest number: 11 Signing time: Wed 25 Mar 2026 19:03:39 +0000 Manifest this update: Wed 25 Mar 2026 18:58:39 +0000 Manifest next update: Mon 30 Mar 2026 21:32:39 +0000 Files and hashes: 1: 3137302e3234362e3136302e302f32322d3234203d3e203631343738.roa (hash: mRY2Q4xe7tInrqrxoRmsXzHfFRucA7W/bzMHyiJV0Jw=) 2: 34352e3233372e38382e302f32322d3234203d3e203631343738.roa (hash: wKDc38+xrGuCESoCRI41DlDmQnWkqjDukJh7flEvvUs=) 3: 3136382e3139352e3132302e302f32322d3234203d3e203631343738.roa (hash: reOIRQ7wpNmjK7nWl1orfwvM9sfOIeJ1Hlu3hvQ06i0=) 4: 3133312e37322e37362e302f32322d3234203d3e20323634383131.roa (hash: nOOfuImVQeqcU+LJCzNeGHzmJ5sFQWrQyS9Ya0N0P9Y=) 5: 323830333a636438303a383030303a3a2f33332d3438203d3e203631343738.roa (hash: X20VWPCHkKjrq01RJpssuASqXOzUm0X6eMm33orhfLQ=) 6: 323830333a636438303a3a2f33332d3438203d3e20323634383131.roa (hash: OK3NtGvFliR7m2vZlGcQdK4oP/iPZIyYQsXvn0gRcEk=) 7: 0B85C072201D3DC921F121020F043E1B35429A6A.crl (hash: kQzkKcr3//ukZN1IXRPjFuyvfVIgMo2qLggJQalWA8c=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/0B85C072201D3DC921F121020F043E1B35429A6A.crl rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/0B85C072201D3DC921F121020F043E1B35429A6A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B85C072201D3DC921F121020F043E1B35429A6A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:85:e9:88:dd:21:dd:a7:09:4c:82:32:c8:61:f5:9c:02:ec:9e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B85C072201D3DC921F121020F043E1B35429A6A Validity Not Before: Mar 25 18:58:39 2026 GMT Not After : Mar 30 21:32:39 2026 GMT Subject: CN=D33450EB1E157D76B25221E5DCAF992175CC70DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:ce:8b:ba:9c:37:6e:f5:97:44:69:62:3e: a8:3b:cb:6a:f0:64:85:6e:72:b4:ff:a5:7b:9a:ca: 81:ac:d5:3a:96:f7:c9:c3:7d:02:35:71:c7:b4:3b: 18:13:6d:8b:27:d0:74:70:81:3e:34:03:93:b8:c1: 9a:ed:de:4d:e6:5d:6f:c9:41:8f:43:c5:68:dc:56: 31:be:69:9c:82:a5:b7:74:4d:c6:f7:c5:e9:29:3b: 2f:44:ce:86:fe:3d:d9:20:59:fe:d8:7d:84:37:88: 5b:1c:c4:32:de:3a:a3:80:64:61:07:73:8d:9f:ef: f5:81:94:c9:ff:cb:51:ef:8f:07:db:73:fd:ba:cf: 0d:13:a3:5a:5d:e4:75:ec:b4:74:07:1f:44:f1:a7: bf:09:31:73:21:7d:b6:2e:37:94:d6:13:af:27:86: 78:8b:b4:b7:e6:27:31:1f:41:7c:f1:52:1f:32:1b: 6d:0e:a1:e3:38:19:1b:04:56:3c:b1:7a:ba:ab:fc: 63:b6:f7:c4:29:0e:e3:51:3c:7c:64:7a:c1:8e:ff: c1:b2:2d:28:c4:7a:60:77:0c:76:50:e2:ea:dc:0b: 6d:19:e2:f9:f8:6c:58:7e:ff:b0:45:91:46:de:8a: bd:65:80:54:be:48:5c:d9:1f:21:7f:29:cf:aa:7a: e7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:34:50:EB:1E:15:7D:76:B2:52:21:E5:DC:AF:99:21:75:CC:70:DB X509v3 Authority Key Identifier: keyid:0B:85:C0:72:20:1D:3D:C9:21:F1:21:02:0F:04:3E:1B:35:42:9A:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/0B85C072201D3DC921F121020F043E1B35429A6A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B85C072201D3DC921F121020F043E1B35429A6A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/0B85C072201D3DC921F121020F043E1B35429A6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:14:28:bc:8c:5a:61:9f:e4:fd:93:45:93:2e:e0:f0:49:09: ac:38:02:08:76:9e:02:c8:3d:0c:c7:3e:89:09:fb:3b:3e:88: 07:c2:ac:01:ef:1d:a6:c1:a8:71:30:a1:6b:64:16:ff:32:b9: 4f:e9:9e:60:6c:64:4d:b3:41:17:c5:3c:79:16:38:12:96:44: 4b:66:70:b6:b3:94:00:b3:3f:5c:c4:c6:61:1b:27:b5:5d:11: fb:f0:5e:23:df:41:9f:11:bd:8f:08:1b:1d:24:9e:47:6c:24: 7a:b2:f8:bb:a2:63:87:61:43:ea:71:0a:54:64:c5:36:b8:df: 4a:12:be:82:49:05:34:03:2e:65:6d:4b:3e:a5:5f:3e:f8:c5: b9:23:69:b4:7d:df:45:74:4b:7f:de:06:96:3a:a3:d7:b4:41: b8:22:85:c5:12:3c:43:a6:10:75:09:50:f2:3c:6d:24:70:69: 69:63:20:24:37:f0:a4:c8:66:69:50:09:0f:46:8d:62:bc:21: e5:af:b3:81:a4:d0:38:90:9a:4f:92:d3:b9:18:a0:16:cd:16: 8f:df:96:57:00:f3:83:54:fc:b5:14:08:ed:04:25:a3:f6:36: 4a:5f:b8:04:00:1c:20:3e:37:0f:01:ab:9a:b5:78:f2:e8:76: 36:9f:92:63 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUd4XpiN0h3acJTIIyyGH1nALsniYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI4NUMwNzIyMDFEM0RDOTIxRjEyMTAyMEYwNDNFMUIz NTQyOUE2QTAeFw0yNjAzMjUxODU4MzlaFw0yNjAzMzAyMTMyMzlaMDMxMTAvBgNV BAMTKEQzMzQ1MEVCMUUxNTdENzZCMjUyMjFFNURDQUY5OTIxNzVDQzcwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3M6Lupw3bvWXRGliPqg7y2rw ZIVucrT/pXuayoGs1TqW98nDfQI1cce0OxgTbYsn0HRwgT40A5O4wZrt3k3mXW/J QY9DxWjcVjG+aZyCpbd0Tcb3xekpOy9Ezob+PdkgWf7YfYQ3iFscxDLeOqOAZGEH c42f7/WBlMn/y1Hvjwfbc/26zw0To1pd5HXstHQHH0Txp78JMXMhfbYuN5TWE68n hniLtLfmJzEfQXzxUh8yG20OoeM4GRsEVjyxerqr/GO298QpDuNRPHxkesGO/8Gy LSjEemB3DHZQ4urcC20Z4vn4bFh+/7BFkUbeir1lgFS+SFzZHyF/Kc+qeueZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0zRQ6x4VfXayUiHl3K+ZIXXMcNswHwYDVR0j BBgwFoAUC4XAciAdPckh8SECDwQ+GzVCmmowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQzA5NUNEREEwMDBBRjJGRjdBMThDODI2OUI5ODJFQ0Qw Mjk5NkQ0RTRBNUVCMERDMkEwNjlBMEZGQUY3RkVDLzAvMEI4NUMwNzIyMDFEM0RD OTIxRjEyMTAyMEYwNDNFMUIzNTQyOUE2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQjg1QzA3MjIwMUQzREM5MjFG MTIxMDIwRjA0M0UxQjM1NDI5QTZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0MwOTVDRERBMDAwQUYyRkY3QTE4QzgyNjlCOTgyRUNEMDI5OTZENEU0 QTVFQjBEQzJBMDY5QTBGRkFGN0ZFQy8wLzBCODVDMDcyMjAxRDNEQzkyMUYxMjEw MjBGMDQzRTFCMzU0MjlBNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEFCi8jFphn+T9k0WTLuDwSQms OAIIdp4CyD0Mxz6JCfs7PogHwqwB7x2mwahxMKFrZBb/MrlP6Z5gbGRNs0EXxTx5 FjgSlkRLZnC2s5QAsz9cxMZhGye1XRH78F4j30GfEb2PCBsdJJ5HbCR6svi7omOH YUPqcQpUZMU2uN9KEr6CSQU0Ay5lbUs+pV8++MW5I2m0fd9FdEt/3gaWOqPXtEG4 IoXFEjxDphB1CVDyPG0kcGlpYyAkN/CkyGZpUAkPRo1ivCHlr7OBpNA4kJpPktO5 GKAWzRaP35ZXAPODVPy1FAjtBCWj9jZKX7gEABwgPjcPAauatXjy6HY2n5Jj -----END CERTIFICATE-----Generated at Fri Mar 27 05:05:55 2026 by rpki-client