$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft File: C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft (raw, json) Hash identifier: 3AK9TIf1OswURvxinDexH8EoFU28SXGHpSsA0U6yO2M= Subject key identifier: DD:4A:64:CB:59:47:AA:AD:16:52:B1:B8:F7:07:9B:77:E9:E5:8D:0A Authority key identifier: C9:8C:BA:FA:1B:63:46:1F:71:81:D2:0C:05:CB:6C:83:B4:A7:52:B4 Certificate issuer: /CN=C98CBAFA1B63461F7181D20C05CB6C83B4A752B4 Certificate serial: 10C812320406BAE8043890823347CE749330CBAA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft Manifest number: 017A Signing time: Tue 24 Mar 2026 03:14:53 +0000 Manifest this update: Tue 24 Mar 2026 03:09:53 +0000 Manifest next update: Sun 29 Mar 2026 22:35:53 +0000 Files and hashes: 1: 323830333a626131303a3a2f33322d3438203d3e20323731393334.roa (hash: oTwSIGsqoyDZVgbxIluEyLzBbprrmKy7BRKe/pUh16M=) 2: C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.crl (hash: LkFmmyo6Y36U7AvN50nppxpY337hH7b6V567Ds+HC5I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.crl rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 22:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c8:12:32:04:06:ba:e8:04:38:90:82:33:47:ce:74:93:30:cb:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98CBAFA1B63461F7181D20C05CB6C83B4A752B4 Validity Not Before: Mar 24 03:09:53 2026 GMT Not After : Mar 29 22:35:53 2026 GMT Subject: CN=DD4A64CB5947AAAD1652B1B8F7079B77E9E58D0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:32:fa:98:cf:a6:25:bd:cc:28:ef:0b:1c: 39:d2:f5:e6:de:72:5f:9f:da:8e:0c:3e:3d:d8:bc: da:ec:bb:f4:08:21:b4:ac:f7:e0:29:6a:77:5e:38: d1:f9:94:ac:f0:28:59:6f:eb:e5:d5:22:eb:24:83: a1:4b:84:24:6b:29:d1:5f:b3:b1:a0:60:3c:3d:60: e9:6a:55:12:7d:78:53:a1:21:c0:b6:0a:36:d0:98: 69:ec:eb:c0:f0:bc:f6:db:8c:dc:d3:78:ca:e0:2c: c3:9f:c0:78:97:de:6e:4f:8b:56:c9:65:40:b7:ec: 04:c5:c8:c1:e4:d1:40:2c:6c:ea:1b:39:72:31:df: 59:89:0b:eb:dc:6e:db:35:99:0e:77:65:1d:01:23: 34:cb:3d:7f:29:0c:cf:27:94:a5:ec:28:e3:39:3f: cb:1c:b0:1f:77:6a:1e:6d:24:78:30:ba:73:43:70: 8a:2e:d8:35:20:4d:29:a1:39:40:53:21:d4:69:65: 1e:76:cf:ec:08:32:6b:4e:64:0f:dc:05:5c:2e:09: e1:68:00:af:01:48:01:d6:70:e5:b5:1e:08:27:b9: 89:0a:a4:95:0f:5f:73:e0:44:ab:b5:e2:a3:aa:73: 1a:5f:c8:9a:3a:1a:25:e9:0f:bc:45:f7:cd:c2:fb: c1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4A:64:CB:59:47:AA:AD:16:52:B1:B8:F7:07:9B:77:E9:E5:8D:0A X509v3 Authority Key Identifier: keyid:C9:8C:BA:FA:1B:63:46:1F:71:81:D2:0C:05:CB:6C:83:B4:A7:52:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:72:89:51:2c:a6:a7:22:35:4a:1b:44:b1:aa:9d:51:6f:16: c1:f4:d5:8a:52:52:d5:e8:e5:aa:de:ee:18:cb:68:9d:5f:9c: 7a:ee:d1:b3:3d:2c:87:d7:bf:91:61:20:7e:36:84:dd:3a:af: 6b:e3:78:81:6e:a4:56:22:7d:cf:8f:ee:bd:54:43:ef:69:fc: ea:a6:35:10:59:e7:03:9b:48:9c:6b:d5:d1:9f:41:97:43:65: c2:19:f8:12:58:31:fe:f6:75:00:33:32:58:53:31:45:2d:0b: 81:ec:86:12:c9:4f:b1:1d:9a:d3:3f:1a:79:eb:e6:05:f5:44: 7e:85:9a:49:33:68:f4:16:41:da:a2:28:d6:43:83:ed:c2:ad: e4:2d:7f:2c:37:42:cd:de:49:85:ef:0c:cb:dd:b2:6c:78:c0: 8f:9f:c0:01:ae:c0:04:4c:2d:19:0d:5f:02:5b:c1:9f:86:67: e8:55:62:a7:55:a9:63:85:77:d9:a1:4e:23:2d:82:3d:10:e0: b7:4d:0c:41:5c:4d:99:52:80:ea:64:7b:18:b3:ef:e5:12:8b: b0:19:35:e8:b8:8b:aa:f8:cf:da:5a:ef:23:17:ff:42:fb:d0: 33:68:71:f3:c2:7d:f0:1c:d8:65:9e:f7:cb:44:74:8a:cf:4c: 68:a9:b3:eb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEMgSMgQGuugEOJCCM0fOdJMwy6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4Q0JBRkExQjYzNDYxRjcxODFEMjBDMDVDQjZDODNC NEE3NTJCNDAeFw0yNjAzMjQwMzA5NTNaFw0yNjAzMjkyMjM1NTNaMDMxMTAvBgNV BAMTKERENEE2NENCNTk0N0FBQUQxNjUyQjFCOEY3MDc5Qjc3RTlFNThEMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJTL6mM+mJb3MKO8LHDnS9ebe cl+f2o4MPj3YvNrsu/QIIbSs9+ApandeONH5lKzwKFlv6+XVIuskg6FLhCRrKdFf s7GgYDw9YOlqVRJ9eFOhIcC2CjbQmGns68DwvPbbjNzTeMrgLMOfwHiX3m5Pi1bJ ZUC37ATFyMHk0UAsbOobOXIx31mJC+vcbts1mQ53ZR0BIzTLPX8pDM8nlKXsKOM5 P8scsB93ah5tJHgwunNDcIou2DUgTSmhOUBTIdRpZR52z+wIMmtOZA/cBVwuCeFo AK8BSAHWcOW1HggnuYkKpJUPX3PgRKu14qOqcxpfyJo6GiXpD7xF983C+8H9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3Upky1lHqq0WUrG49webd+nljQowHwYDVR0j BBgwFoAUyYy6+htjRh9xgdIMBctsg7SnUrQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GREZGMTE4OEMyQjA1MEJFMjQ2RTZFMjg0NzVDODM4QzlE RTQxMzRGRjJFREE2NzFBMjg1OUUwMkY1QzdFRTgxLzAvQzk4Q0JBRkExQjYzNDYx RjcxODFEMjBDMDVDQjZDODNCNEE3NTJCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DOThDQkFGQTFCNjM0NjFGNzE4 MUQyMEMwNUNCNkM4M0I0QTc1MkI0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkRGRjExODhDMkIwNTBCRTI0NkU2RTI4NDc1QzgzOEM5REU0MTM0RkYy RURBNjcxQTI4NTlFMDJGNUM3RUU4MS8wL0M5OENCQUZBMUI2MzQ2MUY3MTgxRDIw QzA1Q0I2QzgzQjRBNzUyQjQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2colRLKanIjVKG0Sxqp1RbxbB 9NWKUlLV6OWq3u4Yy2idX5x67tGzPSyH17+RYSB+NoTdOq9r43iBbqRWIn3Pj+69 VEPvafzqpjUQWecDm0ica9XRn0GXQ2XCGfgSWDH+9nUAMzJYUzFFLQuB7IYSyU+x HZrTPxp56+YF9UR+hZpJM2j0FkHaoijWQ4Ptwq3kLX8sN0LN3kmF7wzL3bJseMCP n8ABrsAETC0ZDV8CW8GfhmfoVWKnValjhXfZoU4jLYI9EOC3TQxBXE2ZUoDqZHsY s+/lEouwGTXouIuq+M/aWu8jF/9C+9AzaHHzwn3wHNhlnvfLRHSKz0xoqbPr -----END CERTIFICATE-----Generated at Fri Mar 27 00:45:26 2026 by rpki-client