$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft File: CD721CE88C796E837A067F6BF32EA1016FA71013.mft (raw, json) Hash identifier: DRh74LZ+huDzYBtpE0QX9qWdTSRntyF2YXmghTLwQak= Subject key identifier: 91:98:99:A3:99:54:5A:49:35:68:D1:73:34:11:16:0A:3A:4A:86:35 Authority key identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 Certificate issuer: /CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Certificate serial: 504380C3DB94DA84F271F03ABF838C83865A8509 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft Manifest number: 017A Signing time: Wed 25 Mar 2026 17:52:55 +0000 Manifest this update: Wed 25 Mar 2026 17:47:55 +0000 Manifest next update: Mon 30 Mar 2026 16:41:55 +0000 Files and hashes: 1: 323830313a3137343a3a2f34342d3438203d3e20323731373830.roa (hash: 3RYErcH5CMzplfkgJZUvReGfpvtYD9FH/ICCFHqCyK0=) 2: CD721CE88C796E837A067F6BF32EA1016FA71013.crl (hash: Z+mUuPwrrGrc7+TQrMa/U29Sqzdg+7BjqzujeFWXGhM=) 3: 34352e3233332e342e302f32322d3234203d3e20323731373830.roa (hash: tXsl4iW/udLvpxf89fNeyIOORbMp+7ZTyo8QBA042A0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 16:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:43:80:c3:db:94:da:84:f2:71:f0:3a:bf:83:8c:83:86:5a:85:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Validity Not Before: Mar 25 17:47:55 2026 GMT Not After : Mar 30 16:41:55 2026 GMT Subject: CN=919899A399545A493568D1733411160A3A4A8635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:61:4e:6b:cb:c3:a9:ca:24:b3:23:bd:75: 7b:6c:52:ed:ef:0c:b8:a6:ca:29:be:a2:1f:f7:34: a0:d2:7f:f9:6a:10:ff:2d:83:37:db:70:00:08:25: 17:47:14:2a:43:48:98:b4:19:bc:f3:07:44:75:0b: 8b:e7:df:a9:78:d7:6f:91:0b:8c:2f:b0:04:34:98: c7:98:3b:7d:0a:34:2e:f9:6c:a6:50:71:3a:75:44: 71:b6:b1:d4:b9:18:de:d5:fc:8e:60:3a:22:99:65: bc:83:5d:d9:32:66:45:8a:e2:5d:15:e0:d2:d3:97: 95:2d:14:51:ef:2c:d4:99:3b:6d:34:60:5b:ef:42: 10:94:11:c2:00:78:4b:90:21:e2:dc:bf:cc:d4:44: 8f:1f:90:39:08:32:79:16:e7:6f:0d:7d:ff:c2:ee: 12:d6:1d:13:67:40:5f:e5:3a:9c:42:ab:69:f7:dc: dc:19:c0:96:55:1b:d3:c9:8f:77:cd:26:dd:af:10: b0:6c:54:2e:2a:28:df:5a:d3:02:f4:76:9b:4b:63: 67:37:9e:dc:9b:05:1a:13:cf:c5:6e:1d:62:ec:c5: 81:d2:a3:0d:02:8b:44:f4:a7:84:8a:68:99:77:9f: 57:20:07:57:0e:e3:f2:fc:fd:f7:92:e0:de:15:75: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:98:99:A3:99:54:5A:49:35:68:D1:73:34:11:16:0A:3A:4A:86:35 X509v3 Authority Key Identifier: keyid:CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d0:33:2c:0d:0e:a2:37:55:87:3a:69:31:ec:80:ae:3d:ef: 06:37:5d:86:67:76:ee:48:0e:ea:ea:0c:ad:d0:76:a5:7f:c8: 52:fd:e9:3d:ea:c6:d3:52:b4:fa:e2:12:1f:63:43:6e:c4:4e: fa:99:40:0e:ee:f2:d6:96:2e:d7:30:90:0a:6c:e9:ce:d8:5d: c1:53:21:a0:4c:fc:68:ff:74:79:e1:71:09:c9:48:00:f8:4c: b9:70:5f:91:fd:1e:17:bd:a1:b9:55:d3:44:bf:74:42:85:79: 6f:af:4f:8b:eb:bd:cf:97:f5:95:98:f6:c8:52:e5:61:7e:a4: 22:7e:68:be:02:17:dc:1d:08:cc:72:eb:2c:6a:12:ca:5d:68: 0f:a4:56:c2:e2:8c:3d:84:c3:77:c8:bc:49:02:c5:7d:b0:a4: 43:76:3b:53:07:23:b1:04:b2:16:32:61:fb:97:72:3f:79:4a: db:86:a6:56:9d:c9:d6:d1:c2:b8:ca:a4:6e:3d:43:0e:b9:42: 24:3c:61:14:b8:67:bd:b9:0c:e4:04:09:39:ae:df:50:b5:06: 20:52:47:78:27:6d:78:11:4f:ef:d1:fb:26:29:4a:32:57:73: 63:cd:32:a7:07:1f:45:62:59:d8:68:a2:25:d4:43:2f:5a:73: 62:00:4d:15 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUEOAw9uU2oTycfA6v4OMg4ZahQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3MjFDRTg4Qzc5NkU4MzdBMDY3RjZCRjMyRUExMDE2 RkE3MTAxMzAeFw0yNjAzMjUxNzQ3NTVaFw0yNjAzMzAxNjQxNTVaMDMxMTAvBgNV BAMTKDkxOTg5OUEzOTk1NDVBNDkzNTY4RDE3MzM0MTExNjBBM0E0QTg2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6SWFOa8vDqcoksyO9dXtsUu3v DLimyim+oh/3NKDSf/lqEP8tgzfbcAAIJRdHFCpDSJi0GbzzB0R1C4vn36l412+R C4wvsAQ0mMeYO30KNC75bKZQcTp1RHG2sdS5GN7V/I5gOiKZZbyDXdkyZkWK4l0V 4NLTl5UtFFHvLNSZO200YFvvQhCUEcIAeEuQIeLcv8zURI8fkDkIMnkW528Nff/C 7hLWHRNnQF/lOpxCq2n33NwZwJZVG9PJj3fNJt2vELBsVC4qKN9a0wL0dptLY2c3 ntybBRoTz8VuHWLsxYHSow0Ci0T0p4SKaJl3n1cgB1cO4/L8/feS4N4VdSthAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUkZiZo5lUWkk1aNFzNBEWCjpKhjUwHwYDVR0j BBgwFoAUzXIc6Ix5boN6Bn9r8y6hAW+nEBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNDg3QUYyQTQwREZFNEExMTQ1RUMzMTgyMzQ0N0YwMDRF QzE0ODlDQkIwQ0I2NDNCRUExOUY5MjQ1MTYyODg3LzAvQ0Q3MjFDRTg4Qzc5NkU4 MzdBMDY3RjZCRjMyRUExMDE2RkE3MTAxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDcyMUNFODhDNzk2RTgzN0Ew NjdGNkJGMzJFQTEwMTZGQTcxMDEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjQ4N0FGMkE0MERGRTRBMTE0NUVDMzE4MjM0NDdGMDA0RUMxNDg5Q0JC MENCNjQzQkVBMTlGOTI0NTE2Mjg4Ny8wL0NENzIxQ0U4OEM3OTZFODM3QTA2N0Y2 QkYzMkVBMTAxNkZBNzEwMTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ0DMsDQ6iN1WHOmkx7ICuPe8G N12GZ3buSA7q6gyt0Half8hS/ek96sbTUrT64hIfY0NuxE76mUAO7vLWli7XMJAK bOnO2F3BUyGgTPxo/3R54XEJyUgA+Ey5cF+R/R4XvaG5VdNEv3RChXlvr0+L673P l/WVmPbIUuVhfqQifmi+AhfcHQjMcussahLKXWgPpFbC4ow9hMN3yLxJAsV9sKRD djtTByOxBLIWMmH7l3I/eUrbhqZWncnW0cK4yqRuPUMOuUIkPGEUuGe9uQzkBAk5 rt9QtQYgUkd4J214EU/v0fsmKUoyV3NjzTKnBx9FYlnYaKIl1EMvWnNiAE0V -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:06 2026 by rpki-client