$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft File: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft (raw, json) Hash identifier: 5QhCHowPz8fDkwYHxTV+Iza3pgw+cQHHZ5g6Js2rmc8= Subject key identifier: 01:E7:B7:4F:CB:70:81:04:4D:9B:20:CA:F8:74:49:E0:20:93:0B:2D Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A Certificate issuer: /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Certificate serial: 354D0FFD54441276FF792D5A454D599FBF8B63BE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft Manifest number: 016F Signing time: Thu 26 Mar 2026 17:36:37 +0000 Manifest this update: Thu 26 Mar 2026 17:31:37 +0000 Manifest next update: Tue 31 Mar 2026 14:37:37 +0000 Files and hashes: 1: 3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa (hash: xGM+NbHWopBvvPH46YQ4xiS44h2wG95TA1HWO6+z76w=) 2: 323830333a333031303a3a2f33322d3332203d3e20323731383038.roa (hash: ycgTaa6XtkZ44he6da0OLX1fdjnjoEwGBmaH4AloShg=) 3: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl (hash: rlbEao5/lKDvCA68ZNdjouKyAifdRLxI1qxe7MZokGE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4d:0f:fd:54:44:12:76:ff:79:2d:5a:45:4d:59:9f:bf:8b:63:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Validity Not Before: Mar 26 17:31:37 2026 GMT Not After : Mar 31 14:37:37 2026 GMT Subject: CN=01E7B74FCB7081044D9B20CAF87449E020930B2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:19:31:d7:8f:2d:8d:40:37:a7:b7:56:42:ed: fa:86:70:dd:43:8d:72:67:e9:02:75:a4:c4:20:a2: 96:06:50:93:08:62:35:b1:17:ef:31:21:bc:ee:bb: 20:43:e8:74:86:b1:52:29:b4:07:37:86:c7:3d:17: 3d:fe:89:54:7f:3c:32:26:1d:4f:f7:98:8e:8a:52: 1b:17:7a:32:94:1e:e8:4a:da:c6:bb:73:3a:b9:ef: 7c:5a:32:0f:c5:88:de:d3:f4:f6:68:59:35:ac:6a: 93:b1:a5:d5:3e:3f:77:0f:c9:f1:d5:69:3d:42:b2: 04:0b:61:75:c4:84:19:a7:e5:d9:dc:92:50:27:f0: 1e:bd:c3:c3:eb:3b:cc:f2:02:d2:57:a2:2d:04:04: 17:2e:b7:d8:39:ed:be:7f:33:5d:be:31:06:94:42: 70:9d:26:3b:43:f6:1b:83:61:18:d7:9e:ba:a0:1e: 0a:98:23:50:7b:d3:96:b1:d3:87:5d:40:ee:f0:e7: a9:b4:44:77:c4:ac:01:cb:55:89:ee:93:c6:d7:10: a1:f9:4f:55:d0:3c:9a:54:82:f2:0c:6f:02:51:a1: a2:e3:e6:f9:c1:a5:1a:2c:1d:6b:b7:28:55:75:9e: 6e:db:4c:06:0e:e9:04:3a:c0:4b:2e:63:40:b3:b4: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E7:B7:4F:CB:70:81:04:4D:9B:20:CA:F8:74:49:E0:20:93:0B:2D X509v3 Authority Key Identifier: keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1e:ad:91:b7:d8:d4:7d:9a:7b:7c:a4:be:0a:33:a2:ad:89: 7f:88:05:dd:02:6a:25:16:ec:5a:57:13:6c:ca:07:c0:bd:37: 01:88:b6:2b:c5:fe:97:a8:c6:08:20:c5:50:4e:93:b7:91:8d: 69:0b:70:e4:22:ad:da:f6:c5:33:c4:be:ef:c6:b2:40:d8:48: 70:05:ac:df:bb:de:97:9a:01:65:ef:c2:f8:be:18:6a:7f:68: 22:1b:1c:10:52:cc:ba:c5:6d:1f:f2:5c:a9:1e:f6:35:e6:d1: 96:25:f6:36:b5:1b:a8:2a:14:69:fd:ce:d5:2f:97:52:3f:b8: f2:e1:b5:2d:41:8d:7d:a0:6a:54:36:68:7e:17:c9:83:f9:0d: 53:63:b6:41:2f:0e:a6:f1:df:7f:a9:56:54:da:15:32:3d:2a: f4:2c:5d:d1:28:2a:ae:ea:d7:dc:15:9e:31:7e:b8:8b:e9:cc: 39:5a:88:c9:7a:9c:6a:68:7a:f8:19:8a:0b:1c:63:2c:27:d5: 55:6d:31:1d:c3:39:0e:fd:41:60:d9:1a:c2:6e:c4:8c:3a:ae: e7:82:d6:56:7e:cb:48:fb:a5:65:a7:2f:24:06:8e:49:82:4b: 51:f7:17:43:2b:df:1b:48:12:0c:15:1f:2a:0f:3f:54:b4:a5: af:d3:30:64 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNU0P/VREEnb/eS1aRU1Zn7+LY74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ1QUZCQjlERDVFRjZGQjc5NTlBRjc4NENBMzYyRjFG QTA4RDIwQTAeFw0yNjAzMjYxNzMxMzdaFw0yNjAzMzExNDM3MzdaMDMxMTAvBgNV BAMTKDAxRTdCNzRGQ0I3MDgxMDQ0RDlCMjBDQUY4NzQ0OUUwMjA5MzBCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGTHXjy2NQDent1ZC7fqGcN1D jXJn6QJ1pMQgopYGUJMIYjWxF+8xIbzuuyBD6HSGsVIptAc3hsc9Fz3+iVR/PDIm HU/3mI6KUhsXejKUHuhK2sa7czq573xaMg/FiN7T9PZoWTWsapOxpdU+P3cPyfHV aT1CsgQLYXXEhBmn5dncklAn8B69w8PrO8zyAtJXoi0EBBcut9g57b5/M12+MQaU QnCdJjtD9huDYRjXnrqgHgqYI1B705ax04ddQO7w56m0RHfErAHLVYnuk8bXEKH5 T1XQPJpUgvIMbwJRoaLj5vnBpRosHWu3KFV1nm7bTAYO6QQ6wEsuY0CztDdXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUAee3T8twgQRNmyDK+HRJ4CCTCy0wHwYDVR0j BBgwFoAUnVr7ud1e9vt5Wa94TKNi8foI0gowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FQTVDOEU0RDUzQ0UyNjU0RUZDMTcyMjUxRjk0OTJGQjY0 NzkxM0I2MzRGODMzMjY5N0I2N0FDQUUzRTQ3MUMzLzAvOUQ1QUZCQjlERDVFRjZG Qjc5NTlBRjc4NENBMzYyRjFGQTA4RDIwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDVBRkJCOURENUVGNkZCNzk1 OUFGNzg0Q0EzNjJGMUZBMDhEMjBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRUE1QzhFNEQ1M0NFMjY1NEVGQzE3MjI1MUY5NDkyRkI2NDc5MTNCNjM0 RjgzMzI2OTdCNjdBQ0FFM0U0NzFDMy8wLzlENUFGQkI5REQ1RUY2RkI3OTU5QUY3 ODRDQTM2MkYxRkEwOEQyMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoHq2Rt9jUfZp7fKS+CjOirYl/ iAXdAmolFuxaVxNsygfAvTcBiLYrxf6XqMYIIMVQTpO3kY1pC3DkIq3a9sUzxL7v xrJA2EhwBazfu96XmgFl78L4vhhqf2giGxwQUsy6xW0f8lypHvY15tGWJfY2tRuo KhRp/c7VL5dSP7jy4bUtQY19oGpUNmh+F8mD+Q1TY7ZBLw6m8d9/qVZU2hUyPSr0 LF3RKCqu6tfcFZ4xfriL6cw5WojJepxqaHr4GYoLHGMsJ9VVbTEdwzkO/UFg2RrC bsSMOq7ngtZWfstI+6Vlpy8kBo5JgktR9xdDK98bSBIMFR8qDz9UtKWv0zBk -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:30 2026 by rpki-client