$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft File: 8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft (raw, json) Hash identifier: nH5JmeEfHYkYjTzQqvBovaKKPqkMq4y7+5nIcmSyj8o= Subject key identifier: E4:C6:9F:CC:E6:1D:75:E1:51:C5:C8:17:63:F3:69:F0:63:9F:5A:0D Authority key identifier: 82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7 Certificate issuer: /CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7 Certificate serial: 785F213722DA942C58C559FC5F90F141BDD924D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft Manifest number: 0172 Signing time: Tue 24 Mar 2026 17:38:46 +0000 Manifest this update: Tue 24 Mar 2026 17:33:46 +0000 Manifest next update: Sun 29 Mar 2026 17:28:46 +0000 Files and hashes: 1: 8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl (hash: wuyGP47hAxqR0k0080g+ThHi9zkijQZaC3qUJVv8tJ0=) 2: 3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa (hash: jQefNXFa8HJkacEnYYFGNxbYxaFxu43mD0MIg9MW4QM=) 3: 323830333a363431303a3a2f33322d3438203d3e20323731383535.roa (hash: Pknb2OqB8wp2QvMzwhCQiLuC0bITgtTrf1yvhHtJM18=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 17:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5f:21:37:22:da:94:2c:58:c5:59:fc:5f:90:f1:41:bd:d9:24:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7 Validity Not Before: Mar 24 17:33:46 2026 GMT Not After : Mar 29 17:28:46 2026 GMT Subject: CN=E4C69FCCE61D75E151C5C81763F369F0639F5A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:6c:56:77:d6:a1:0e:c7:e3:a4:75:51:96:e9: e2:b2:7f:df:56:8a:d7:5d:db:60:2a:9c:dd:90:8b: a1:a6:1d:64:f4:d0:17:a4:4f:99:dc:1c:aa:d0:74: 28:6c:8b:06:e6:e2:fe:cb:8b:b0:15:d9:ba:8a:ac: 24:99:00:10:9d:e8:7a:24:82:31:17:69:4d:c6:65: ca:ce:68:d1:34:5f:a2:73:6f:f8:b7:68:74:22:e1: fa:99:04:94:e5:35:89:c9:72:39:ac:07:cf:b8:c4: 67:2b:b4:af:b8:b2:42:1d:1a:6e:80:9a:e9:cd:7f: 03:c4:80:e5:0d:49:9f:f9:5a:01:2c:99:84:a9:c6: 08:8f:31:c5:a0:a6:8c:f9:e9:df:4c:2d:29:31:c0: 5d:8f:16:21:b9:c3:00:01:79:12:d6:b4:ee:f7:e9: a3:9a:21:a7:5c:2d:82:5b:70:ac:9b:8a:52:3c:98: 47:38:61:f6:a1:a1:32:00:33:43:a4:5d:e0:ac:25: 06:e0:25:8d:9b:33:cd:99:b5:46:c5:5f:ec:ae:47: c2:ce:92:6b:9a:88:ca:95:6a:ce:24:e8:10:be:a2: 96:5b:95:26:31:ff:50:19:ed:0e:1a:8f:83:4f:2f: ab:a7:9d:8b:35:19:a3:5a:f8:e0:4a:30:eb:62:08: 3d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C6:9F:CC:E6:1D:75:E1:51:C5:C8:17:63:F3:69:F0:63:9F:5A:0D X509v3 Authority Key Identifier: keyid:82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ac:3e:ab:68:18:24:c7:cc:c3:0d:29:6a:3c:e7:6f:b0:d0: 85:4f:91:35:0f:87:74:d3:88:e2:e6:19:40:07:b6:0c:d3:5b: c1:c3:1a:90:2b:ae:26:a7:42:7d:5b:66:aa:5c:4d:c5:ff:b4: 49:a9:ba:e4:00:cf:ea:74:69:70:90:c5:d5:82:bb:4b:14:82: 55:d2:c5:29:71:33:6c:5b:b3:1c:ea:54:56:db:90:0b:88:6b: 33:80:43:0b:25:3e:59:73:46:50:17:3e:75:d0:6b:76:85:e1: 94:cd:74:0e:2d:a7:ac:5e:f7:98:88:ef:ea:7c:58:dd:3b:c4: d3:d4:07:25:63:84:e6:08:41:6d:8d:64:fb:b2:49:c0:b5:bc: f8:60:6d:09:d6:2e:99:b0:22:74:d2:ec:42:ef:81:ce:e1:2b: ee:e2:73:4d:e6:1d:b6:d3:81:b9:ef:9c:0b:d0:a9:29:c5:60: 01:ef:b3:2e:18:49:7e:46:c9:88:c7:85:f3:2b:9f:c7:fe:05: 54:6f:0a:03:c7:9f:b5:da:8b:8e:b4:d5:04:ce:34:cb:30:c8: b9:07:f0:75:f2:34:e7:32:64:1d:8f:f3:36:48:41:43:eb:75: 6c:09:d1:f6:f8:5e:ff:78:ee:a8:df:14:19:39:25:b4:fc:f2: e2:c1:a2:e0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeF8hNyLalCxYxVn8X5DxQb3ZJNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIyNUQ1ODUxMTc0REEzMEJDQ0NBQTZBQ0YyNUFCQzhC QkZFOTJCNzAeFw0yNjAzMjQxNzMzNDZaFw0yNjAzMjkxNzI4NDZaMDMxMTAvBgNV BAMTKEU0QzY5RkNDRTYxRDc1RTE1MUM1QzgxNzYzRjM2OUYwNjM5RjVBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4bFZ31qEOx+OkdVGW6eKyf99W itdd22AqnN2Qi6GmHWT00BekT5ncHKrQdChsiwbm4v7Li7AV2bqKrCSZABCd6Hok gjEXaU3GZcrOaNE0X6Jzb/i3aHQi4fqZBJTlNYnJcjmsB8+4xGcrtK+4skIdGm6A munNfwPEgOUNSZ/5WgEsmYSpxgiPMcWgpoz56d9MLSkxwF2PFiG5wwABeRLWtO73 6aOaIadcLYJbcKybilI8mEc4YfahoTIAM0OkXeCsJQbgJY2bM82ZtUbFX+yuR8LO kmuaiMqVas4k6BC+opZblSYx/1AZ7Q4aj4NPL6unnYs1GaNa+OBKMOtiCD1rAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU5MafzOYddeFRxcgXY/Np8GOfWg0wHwYDVR0j BBgwFoAUgiXVhRF02jC8zKpqzyWryLv+krcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTlDMTcyMjEyQzU3RDFCMjA1NDUwNUVDRkEwRDM2NkZF RkU0NjJBQjI4M0FDOTlBRjMxMTdBMTAwMkI1MjhBLzAvODIyNUQ1ODUxMTc0REEz MEJDQ0NBQTZBQ0YyNUFCQzhCQkZFOTJCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjI1RDU4NTExNzREQTMwQkND Q0FBNkFDRjI1QUJDOEJCRkU5MkI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDk5QzE3MjIxMkM1N0QxQjIwNTQ1MDVFQ0ZBMEQzNjZGRUZFNDYyQUIy ODNBQzk5QUYzMTE3QTEwMDJCNTI4QS8wLzgyMjVENTg1MTE3NERBMzBCQ0NDQUE2 QUNGMjVBQkM4QkJGRTkyQjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbrD6raBgkx8zDDSlqPOdvsNCF T5E1D4d004ji5hlAB7YM01vBwxqQK64mp0J9W2aqXE3F/7RJqbrkAM/qdGlwkMXV grtLFIJV0sUpcTNsW7Mc6lRW25ALiGszgEMLJT5Zc0ZQFz510Gt2heGUzXQOLaes XveYiO/qfFjdO8TT1AclY4TmCEFtjWT7sknAtbz4YG0J1i6ZsCJ00uxC74HO4Svu 4nNN5h2204G575wL0KkpxWAB77MuGEl+RsmIx4XzK5/H/gVUbwoDx5+12ouOtNUE zjTLMMi5B/B18jTnMmQdj/M2SEFD63VsCdH2+F7/eO6o3xQZOSW0/PLiwaLg -----END CERTIFICATE-----Generated at Thu Mar 26 19:47:16 2026 by rpki-client