$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft File: DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft (raw, json) Hash identifier: zD4swqhU9i2Y3m7w64md+rwRkqb3bIlWbS+EquQH3ng= Subject key identifier: AE:67:C5:3D:0A:16:75:CB:2A:AA:52:0E:74:93:4A:46:47:52:27:88 Authority key identifier: DE:8A:21:D3:81:A2:A8:57:4B:0F:6A:2D:86:54:9E:47:F4:FB:87:D8 Certificate issuer: /CN=DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8 Certificate serial: 35CFF29E371B3DC40A3DB0BEFAE54EF44492DB34 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft Manifest number: 4B Signing time: Tue 24 Mar 2026 13:21:07 +0000 Manifest this update: Tue 24 Mar 2026 13:16:07 +0000 Manifest next update: Sun 29 Mar 2026 18:40:07 +0000 Files and hashes: 1: 323830313a31653a663830303a3a2f34382d3438203d3e203237393531.roa (hash: /TWHYacLQ2VcHMhBLiriVERdLXzF8txlA1CLYUcai7c=) 2: 323830313a31653a663830303a3a2f34382d3438203d3e203133343839.roa (hash: SlzPnJ5AL9Ad3rN32w40SC3dtu6ziK56idtD+G1TPA0=) 3: DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl (hash: y8HGgxu9Gq82PZ2t3oItxT0urr/if1gTx4PspWn/0oI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 17:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cf:f2:9e:37:1b:3d:c4:0a:3d:b0:be:fa:e5:4e:f4:44:92:db:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8 Validity Not Before: Mar 24 13:16:07 2026 GMT Not After : Mar 29 18:40:07 2026 GMT Subject: CN=AE67C53D0A1675CB2AAA520E74934A4647522788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1b:36:a6:86:50:58:84:8f:7a:09:11:a5:3d: 19:17:aa:a8:5c:fd:df:3d:1e:84:35:fe:3d:01:d4: dc:2a:30:02:81:d1:6c:cf:94:a8:0c:91:9d:e6:8e: 8e:06:69:83:b2:a6:8f:fa:03:02:22:1f:58:6c:10: 22:03:d5:1b:a0:19:f2:29:00:d7:03:c6:d1:67:89: d9:5c:31:9c:a9:e3:83:bf:8c:ad:1a:00:63:c3:19: e9:df:9f:7d:5c:49:1d:1f:ce:25:01:70:de:b7:4b: 89:7a:91:f2:40:b1:c7:e7:c3:2e:26:38:07:68:d6: a8:a3:f6:12:a3:f8:76:ea:6c:3b:0b:1f:7f:1f:e1: 8b:ad:72:41:a1:a1:e4:f1:b0:9b:3e:c7:47:0f:8d: 5c:1b:4d:86:3f:59:23:96:e6:72:54:5f:55:3e:a6: 3e:90:3c:74:15:b6:77:31:cc:dc:92:f6:1d:0a:52: b9:07:64:f3:47:17:8c:56:f3:21:c9:3e:ad:86:e4: a1:f9:ea:17:76:17:50:7b:0c:5d:cc:bd:0f:c9:19: 5f:a8:62:17:86:bc:f2:98:17:69:f0:50:47:e1:63: 1d:6a:80:61:e8:de:15:7c:12:c2:e7:1f:c5:20:27: 5b:8c:ac:f5:bb:c0:ab:76:af:37:06:d3:e2:2b:89: 7d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:67:C5:3D:0A:16:75:CB:2A:AA:52:0E:74:93:4A:46:47:52:27:88 X509v3 Authority Key Identifier: keyid:DE:8A:21:D3:81:A2:A8:57:4B:0F:6A:2D:86:54:9E:47:F4:FB:87:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:01:e6:e1:51:3e:66:d3:d6:c3:d5:1c:f4:fd:53:ee:a4:18: b3:4c:15:89:34:b0:b1:35:ac:59:26:62:41:c0:5c:35:3a:f8: 9e:2c:c3:f0:94:4a:be:23:84:86:c8:06:83:33:d6:c2:b3:1a: 49:e6:db:e5:fe:29:51:31:9b:a3:14:c4:96:9e:80:10:99:37: 3d:9a:00:31:80:6e:e1:44:f1:8b:21:61:25:1f:3e:d6:7e:4f: 51:e3:e2:53:63:35:bc:b5:b8:f7:90:d0:06:44:a5:c9:07:2f: cf:c5:b4:53:2b:34:d9:1b:fd:b6:7b:7f:54:ca:e2:08:63:83: 1a:da:e6:65:8d:f5:a7:fb:29:fe:9e:94:3f:bb:5c:24:99:87: e3:4b:7a:e1:dc:d9:d7:49:96:d4:57:0c:a9:2b:3a:bb:66:1f: 69:37:2a:92:0e:0c:e9:48:52:c3:46:5e:94:0d:04:37:9f:97: de:01:27:37:35:33:38:fd:90:21:c3:6b:e5:50:78:12:aa:7c: a2:33:c2:7d:c7:da:e1:d9:45:b3:ef:6d:ef:5b:2a:c4:62:6d: 1c:d5:9e:ea:d2:6a:41:9f:59:ea:cd:97:f9:89:53:dd:d6:61: db:e9:07:b7:3e:c0:d6:8a:b0:70:11:05:ff:9f:13:48:b9:18: ee:d6:32:2c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNc/ynjcbPcQKPbC++uVO9ESS2zQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4QTIxRDM4MUEyQTg1NzRCMEY2QTJEODY1NDlFNDdG NEZCODdEODAeFw0yNjAzMjQxMzE2MDdaFw0yNjAzMjkxODQwMDdaMDMxMTAvBgNV BAMTKEFFNjdDNTNEMEExNjc1Q0IyQUFBNTIwRTc0OTM0QTQ2NDc1MjI3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjGzamhlBYhI96CRGlPRkXqqhc /d89HoQ1/j0B1NwqMAKB0WzPlKgMkZ3mjo4GaYOypo/6AwIiH1hsECID1RugGfIp ANcDxtFnidlcMZyp44O/jK0aAGPDGenfn31cSR0fziUBcN63S4l6kfJAscfnwy4m OAdo1qij9hKj+HbqbDsLH38f4YutckGhoeTxsJs+x0cPjVwbTYY/WSOW5nJUX1U+ pj6QPHQVtncxzNyS9h0KUrkHZPNHF4xW8yHJPq2G5KH56hd2F1B7DF3MvQ/JGV+o YheGvPKYF2nwUEfhYx1qgGHo3hV8EsLnH8UgJ1uMrPW7wKt2rzcG0+IriX0PAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrmfFPQoWdcsqqlIOdJNKRkdSJ4gwHwYDVR0j BBgwFoAU3ooh04GiqFdLD2othlSeR/T7h9gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENjBEODdBQ0Q3Q0MxRDhGRjhBNTcxRUMzNUM4MTE1MDhF REJBNTAwQTk3MDM5QzgxRjUyRUMxRUY3M0RFNTFCLzAvREU4QTIxRDM4MUEyQTg1 NzRCMEY2QTJEODY1NDlFNDdGNEZCODdEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERThBMjFEMzgxQTJBODU3NEIw RjZBMkQ4NjU0OUU0N0Y0RkI4N0Q4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDYwRDg3QUNEN0NDMUQ4RkY4QTU3MUVDMzVDODExNTA4RURCQTUwMEE5 NzAzOUM4MUY1MkVDMUVGNzNERTUxQi8wL0RFOEEyMUQzODFBMkE4NTc0QjBGNkEy RDg2NTQ5RTQ3RjRGQjg3RDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKAebhUT5m09bD1Rz0/VPupBiz TBWJNLCxNaxZJmJBwFw1OvieLMPwlEq+I4SGyAaDM9bCsxpJ5tvl/ilRMZujFMSW noAQmTc9mgAxgG7hRPGLIWElHz7Wfk9R4+JTYzW8tbj3kNAGRKXJBy/PxbRTKzTZ G/22e39UyuIIY4Ma2uZljfWn+yn+npQ/u1wkmYfjS3rh3NnXSZbUVwypKzq7Zh9p NyqSDgzpSFLDRl6UDQQ3n5feASc3NTM4/ZAhw2vlUHgSqnyiM8J9x9rh2UWz723v WyrEYm0c1Z7q0mpBn1nqzZf5iVPd1mHb6Qe3PsDWirBwEQX/nxNIuRju1jIs -----END CERTIFICATE-----Generated at Thu Mar 26 19:51:13 2026 by rpki-client