$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft File: 8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft (raw, json) Hash identifier: g3LVTtjFoDKl5P3uvKcDJXJ8zgdyzARKbc7TE3YFn5s= Subject key identifier: 52:5E:9A:BC:FD:FC:77:59:A1:E5:66:3F:1A:E6:B0:AC:06:D8:FD:0B Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3 Certificate issuer: /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3 Certificate serial: 5E10B7B5B2451B745CE1F31385CC7F6E7B03D394 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft Manifest number: 98 Signing time: Wed 25 Mar 2026 20:04:15 +0000 Manifest this update: Wed 25 Mar 2026 19:59:15 +0000 Manifest next update: Mon 30 Mar 2026 14:39:15 +0000 Files and hashes: 1: 3230302e32342e342e302f32342d3234203d3e20323632353839.roa (hash: /cq/M3M2PBJx0XRNTOLE/4/zdKmI/6CURhYvAxoiK3k=) 2: 3230302e32342e322e302f32342d3234203d3e20323632353839.roa (hash: 8hwcwgOUQnslDeHwMH4mxXmu+aaYI3ja58BF7Smg5EA=) 3: 3230302e32342e302e302f32332d3234203d3e203138363738.roa (hash: RDpns3uQkHJjJ6ZEVv0fHm7AtHuypdjnZoRTV11H/50=) 4: 8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl (hash: naYOTp1tUNTqDsSCjqnRPNXXkm0Ttr6es9lmI/+BaiQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 14:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:10:b7:b5:b2:45:1b:74:5c:e1:f3:13:85:cc:7f:6e:7b:03:d3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3 Validity Not Before: Mar 25 19:59:15 2026 GMT Not After : Mar 30 14:39:15 2026 GMT Subject: CN=525E9ABCFDFC7759A1E5663F1AE6B0AC06D8FD0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:60:32:bb:21:9a:b0:23:83:55:fa:de:c3: 24:d5:1f:c7:34:b5:a5:72:de:9c:c9:66:84:9b:4c: fe:0a:18:ac:34:dd:44:6d:6d:c4:29:19:3d:e9:ba: 63:7b:38:4e:6d:84:3c:38:06:20:22:53:00:69:76: 25:ad:4c:e4:56:f3:e9:e7:f6:f1:e5:a1:31:ed:3e: c8:83:40:9b:60:52:b4:10:88:75:0f:38:d1:1e:34: f9:7e:e6:c6:52:c5:6e:24:c8:f4:6e:f0:73:bd:6e: 51:f8:bb:b4:56:34:31:ee:80:25:fd:df:ad:1a:cb: f9:10:e8:b6:ff:15:a3:25:36:2c:44:f1:4f:47:b0: 79:06:a9:e8:e9:75:d8:71:c9:d4:b6:0f:c4:8a:ec: 0d:16:08:df:ae:b2:da:8a:0e:b5:2a:f5:50:65:62: 50:0c:a5:5b:2c:4c:ea:2d:53:98:fb:0d:c8:56:b9: 0e:2e:6b:c2:31:83:a7:3f:d4:1e:7f:d1:8f:54:33: 34:b7:b2:d4:4d:5b:76:be:cd:c1:a0:cd:bd:88:39: 22:f0:b0:e6:ec:66:0b:1f:c9:af:c2:fd:26:30:69: 11:2b:03:4d:0a:07:f3:5e:a8:ba:42:7d:ea:a0:51: c9:80:4c:65:56:26:42:cf:e9:7e:de:65:05:e0:d6: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5E:9A:BC:FD:FC:77:59:A1:E5:66:3F:1A:E6:B0:AC:06:D8:FD:0B X509v3 Authority Key Identifier: keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a2:b0:cf:dd:7a:c0:69:af:92:a3:46:e2:bd:39:6b:13:fb: 30:89:f5:d3:da:2b:06:08:27:7b:d7:df:9a:c1:1d:29:90:d5: 2e:54:b5:03:63:d4:8e:74:9f:58:27:18:1b:11:53:a7:a8:66: 53:d8:0b:31:e7:5d:77:5b:cf:e5:e4:0b:f9:7a:bb:bc:77:e9: 3d:01:c0:30:8b:68:2b:87:9c:39:b6:be:ed:c2:62:35:8f:e2: b9:93:0d:90:fd:ed:b7:b4:03:c1:b7:45:f2:14:12:84:37:ac: 9b:7c:e2:19:15:2c:c8:24:e7:1f:e0:f0:b9:ee:43:c9:d9:84: 8b:17:b8:b3:a1:eb:69:1d:2d:73:88:1e:7d:d5:9e:99:83:80: 4f:76:18:0d:77:13:1d:76:68:8b:62:06:7e:73:8f:a6:45:4d: 29:00:9c:04:fe:8f:32:34:70:53:bb:8e:bf:a1:8c:65:7a:6f: 02:e5:17:b1:b8:d3:16:4b:f7:5d:df:70:a9:66:c1:17:38:c8: f4:69:d5:2e:fc:c4:8a:fd:9b:c0:70:79:3b:52:1f:f4:ea:df: eb:23:ef:1d:fc:71:dc:86:73:e5:05:4d:9d:9d:b9:9b:3c:56: a2:29:1e:ac:9c:c9:0f:5c:7c:a3:4f:30:2d:e1:b7:d6:ec:a1: ea:67:e6:63 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXhC3tbJFG3Rc4fMThcx/bnsD05QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFOUYwMzVGOEIxNkQxRTk4QjkxOUI0RUZDNzM5NzhB M0EyRThBMzAeFw0yNjAzMjUxOTU5MTVaFw0yNjAzMzAxNDM5MTVaMDMxMTAvBgNV BAMTKDUyNUU5QUJDRkRGQzc3NTlBMUU1NjYzRjFBRTZCMEFDMDZEOEZEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32WAyuyGasCODVfrewyTVH8c0 taVy3pzJZoSbTP4KGKw03URtbcQpGT3pumN7OE5thDw4BiAiUwBpdiWtTORW8+nn 9vHloTHtPsiDQJtgUrQQiHUPONEeNPl+5sZSxW4kyPRu8HO9blH4u7RWNDHugCX9 360ay/kQ6Lb/FaMlNixE8U9HsHkGqejpddhxydS2D8SK7A0WCN+ustqKDrUq9VBl YlAMpVssTOotU5j7DchWuQ4ua8Ixg6c/1B5/0Y9UMzS3stRNW3a+zcGgzb2IOSLw sObsZgsfya/C/SYwaRErA00KB/NeqLpCfeqgUcmATGVWJkLP6X7eZQXg1t0lAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUUl6avP38d1mh5WY/GuawrAbY/QswHwYDVR0j BBgwFoAUjenwNfixbR6YuRm078c5eKOi6KMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERjMzRDkwOTc5QTlBRjMxNDc4QkFGQzRCQjczRkEyNTk5 OEE3MDkxOUVERjE4N0U4MTU0MEM4QUJGMTQyODk3LzAvOERFOUYwMzVGOEIxNkQx RTk4QjkxOUI0RUZDNzM5NzhBM0EyRThBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REU5RjAzNUY4QjE2RDFFOThC OTE5QjRFRkM3Mzk3OEEzQTJFOEEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREYzM0Q5MDk3OUE5QUYzMTQ3OEJBRkM0QkI3M0ZBMjU5OThBNzA5MTlF REYxODdFODE1NDBDOEFCRjE0Mjg5Ny8wLzhERTlGMDM1RjhCMTZEMUU5OEI5MTlC NEVGQzczOTc4QTNBMkU4QTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxorDP3XrAaa+So0bivTlrE/sw ifXT2isGCCd719+awR0pkNUuVLUDY9SOdJ9YJxgbEVOnqGZT2Asx5113W8/l5Av5 eru8d+k9AcAwi2grh5w5tr7twmI1j+K5kw2Q/e23tAPBt0XyFBKEN6ybfOIZFSzI JOcf4PC57kPJ2YSLF7izoetpHS1ziB591Z6Zg4BPdhgNdxMddmiLYgZ+c4+mRU0p AJwE/o8yNHBTu46/oYxlem8C5RexuNMWS/dd33CpZsEXOMj0adUu/MSK/ZvAcHk7 Uh/06t/rI+8d/HHchnPlBU2dnbmbPFaiKR6snMkPXHyjTzAt4bfW7KHqZ+Zj -----END CERTIFICATE-----Generated at Thu Mar 26 21:21:37 2026 by rpki-client