$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft File: AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft (raw, json) Hash identifier: oPo1Ar0++llF4SUET2sSJZoUDI+7h1fJTHUoXU8UNRg= Subject key identifier: 52:71:74:76:FF:EF:4C:2D:9D:09:C8:56:67:94:EF:9B:F8:61:AA:91 Authority key identifier: AA:0F:5D:9C:08:F3:12:D3:4F:4C:45:FB:76:4B:24:1B:3C:6C:62:A6 Certificate issuer: /CN=AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6 Certificate serial: 0814A97566FFC2C454EBFCD553E8C4D97845A6B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft Manifest number: 012A Signing time: Wed 25 Mar 2026 19:59:12 +0000 Manifest this update: Wed 25 Mar 2026 19:54:12 +0000 Manifest next update: Mon 30 Mar 2026 23:58:12 +0000 Files and hashes: 1: 323830333a336435303a3a2f33322d3438203d3e20323733383736.roa (hash: 0qJOZ3oT3nInhidsGfv3WX77GVHPFDZRqUoNSJZ0uI4=) 2: AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl (hash: u7CYKgh+9IinrB5GtDvxFQDTXyH+mxSNS1i34qZmh9c=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:14:a9:75:66:ff:c2:c4:54:eb:fc:d5:53:e8:c4:d9:78:45:a6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6 Validity Not Before: Mar 25 19:54:12 2026 GMT Not After : Mar 30 23:58:12 2026 GMT Subject: CN=52717476FFEF4C2D9D09C8566794EF9BF861AA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4c:21:cb:4a:75:f2:78:c4:2e:6e:02:a0:ad: 71:fc:3f:93:e1:c7:b0:11:44:b0:3c:a4:cb:76:ac: 94:a5:8e:8d:d0:34:65:09:07:7a:a3:9d:9d:67:f2: 42:b5:d2:5b:2e:2c:9a:eb:79:8e:9c:0b:61:3a:a4: dd:99:09:ee:5a:64:a9:9a:38:db:76:6d:90:05:65: fa:c4:8d:7d:07:10:bb:02:64:c9:81:39:63:d6:59: 59:b7:7a:0d:98:99:47:d9:b2:74:46:be:29:73:97: 74:f4:b2:b9:5b:81:dd:20:a3:dc:6c:65:34:6e:0f: 37:25:95:ca:aa:90:53:90:91:90:14:f9:41:9e:78: 9c:4a:51:0d:a5:77:03:80:a9:83:42:01:bf:7d:14: 46:9c:a4:b6:37:04:7b:36:70:89:22:e3:c8:93:5e: c3:e8:2e:39:c4:6c:aa:43:34:2a:66:aa:69:67:8a: 40:1a:63:a1:fe:3a:32:23:2b:8b:83:5d:c9:2a:2b: 76:8e:44:04:a4:46:49:cc:d9:e6:e8:5d:5a:53:52: c4:08:3c:7a:23:a1:bb:06:64:a7:ed:94:cc:69:51: d7:67:88:38:b8:2f:7e:fe:68:11:e8:db:32:55:df: d1:1d:48:c3:18:66:48:a5:4f:1f:2e:be:6a:b7:3e: 84:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:71:74:76:FF:EF:4C:2D:9D:09:C8:56:67:94:EF:9B:F8:61:AA:91 X509v3 Authority Key Identifier: keyid:AA:0F:5D:9C:08:F3:12:D3:4F:4C:45:FB:76:4B:24:1B:3C:6C:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:73:92:29:c4:a4:81:16:b4:4b:33:f0:47:2b:59:ee:ca:7f: 50:22:1a:7f:12:f0:47:e8:09:39:37:2d:16:bc:0f:8a:7c:e0: 33:0f:3c:fe:e0:94:2e:c8:af:5b:55:00:1d:23:70:ab:5a:32: df:81:34:4c:b4:f3:67:26:16:38:5e:85:af:58:01:2a:fb:a2: 2a:2b:0d:7d:34:fb:6c:97:76:ac:df:57:16:9b:77:a6:3a:00: 6f:93:1e:fe:cc:2c:2e:c5:f6:21:33:fa:2f:f7:cd:62:22:77: c7:e3:7c:fc:3b:b9:ac:70:b6:d5:de:51:30:fe:2f:41:e6:12: b8:9e:b1:c0:7a:20:47:60:1e:17:d4:75:c4:4c:c4:6f:91:51: 34:0f:a6:0d:31:c2:48:9c:56:f3:9c:6e:7a:7f:98:35:ec:85: 4b:d0:b3:6d:9a:97:ee:b0:53:a0:3c:3c:d0:3b:b5:e8:0d:22: aa:05:9d:4a:c6:af:4a:8a:fb:eb:0d:23:1a:d0:75:47:e5:e7: 01:fd:58:26:2e:24:14:bb:7b:e6:ca:e5:10:59:af:49:b6:d5: 3a:a0:fe:4d:f0:91:6d:e9:a9:f5:6c:47:3b:19:4e:29:0b:3a: c3:6b:b8:57:75:52:11:77:26:a0:7b:8f:1a:79:21:af:6c:8e: 2b:c6:75:f2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCBSpdWb/wsRU6/zVU+jE2XhFprQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEwRjVEOUMwOEYzMTJEMzRGNEM0NUZCNzY0QjI0MUIz QzZDNjJBNjAeFw0yNjAzMjUxOTU0MTJaFw0yNjAzMzAyMzU4MTJaMDMxMTAvBgNV BAMTKDUyNzE3NDc2RkZFRjRDMkQ5RDA5Qzg1NjY3OTRFRjlCRjg2MUFBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJTCHLSnXyeMQubgKgrXH8P5Ph x7ARRLA8pMt2rJSljo3QNGUJB3qjnZ1n8kK10lsuLJrreY6cC2E6pN2ZCe5aZKma ONt2bZAFZfrEjX0HELsCZMmBOWPWWVm3eg2YmUfZsnRGvilzl3T0srlbgd0go9xs ZTRuDzcllcqqkFOQkZAU+UGeeJxKUQ2ldwOAqYNCAb99FEacpLY3BHs2cIki48iT XsPoLjnEbKpDNCpmqmlnikAaY6H+OjIjK4uDXckqK3aORASkRknM2eboXVpTUsQI PHojobsGZKftlMxpUddniDi4L37+aBHo2zJV39EdSMMYZkilTx8uvmq3PoQ/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUUnF0dv/vTC2dCchWZ5Tvm/hhqpEwHwYDVR0j BBgwFoAUqg9dnAjzEtNPTEX7dkskGzxsYqYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRjIxRkIxQ0E3OTU1MUQ0Q0Q3NjIxQTU3MkIwNzM4M0Uz NDlEOTIzNTQzMzk4QzIxRjE2MUZGODExN0YzQThBLzAvQUEwRjVEOUMwOEYzMTJE MzRGNEM0NUZCNzY0QjI0MUIzQzZDNjJBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTBGNUQ5QzA4RjMxMkQzNEY0 QzQ1RkI3NjRCMjQxQjNDNkM2MkE2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0YyMUZCMUNBNzk1NTFENENENzYyMUE1NzJCMDczODNFMzQ5RDkyMzU0 MzM5OEMyMUYxNjFGRjgxMTdGM0E4QS8wL0FBMEY1RDlDMDhGMzEyRDM0RjRDNDVG Qjc2NEIyNDFCM0M2QzYyQTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlc5IpxKSBFrRLM/BHK1nuyn9Q Ihp/EvBH6Ak5Ny0WvA+KfOAzDzz+4JQuyK9bVQAdI3CrWjLfgTRMtPNnJhY4XoWv WAEq+6IqKw19NPtsl3as31cWm3emOgBvkx7+zCwuxfYhM/ov981iInfH43z8O7ms cLbV3lEw/i9B5hK4nrHAeiBHYB4X1HXETMRvkVE0D6YNMcJInFbznG56f5g17IVL 0LNtmpfusFOgPDzQO7XoDSKqBZ1Kxq9KivvrDSMa0HVH5ecB/VgmLiQUu3vmyuUQ Wa9JttU6oP5N8JFt6an1bEc7GU4pCzrDa7hXdVIRdyage48aeSGvbI4rxnXy -----END CERTIFICATE-----Generated at Thu Mar 26 21:57:22 2026 by rpki-client