$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.mft File: 3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.mft (raw, json) Hash identifier: 1Mn8xRX+1J1xgmmPLhX+Dwc+EOmRcKVsqd1K4L+bEiE= Subject key identifier: BC:EE:0C:93:35:A7:77:1E:3B:EB:3F:25:48:5D:72:FD:82:5F:31:E7 Authority key identifier: 3C:E8:6C:C1:C9:4E:C0:C2:A8:D0:C6:68:C7:AA:44:FC:5E:3D:E9:4F Certificate issuer: /CN=3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F Certificate serial: 33356B8B6D2638D6711B50D6CBE3E36A6F48F8CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.mft Manifest number: 017F Signing time: Tue 24 Mar 2026 20:45:34 +0000 Manifest this update: Tue 24 Mar 2026 20:40:34 +0000 Manifest next update: Mon 30 Mar 2026 07:08:34 +0000 Files and hashes: 1: 34352e3137382e31322e302f32322d3332203d3e20323637383930.roa (hash: DYt5mTp/d65dWNC/jGDRj9BfszAQ1HwlSti3YBLPH5o=) 2: 323830333a646136303a3a2f33322d313238203d3e20323637383930.roa (hash: amrKY9T/yjjyovTPGabU/YwJFw0ZfKJtbe5q1YV+LcQ=) 3: 3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.crl (hash: fLp5VzZ2y8fu1o0sP7ubaXCS7d2mGTxM/rYshq6Ox+0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.crl rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 07:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:35:6b:8b:6d:26:38:d6:71:1b:50:d6:cb:e3:e3:6a:6f:48:f8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F Validity Not Before: Mar 24 20:40:34 2026 GMT Not After : Mar 30 07:08:34 2026 GMT Subject: CN=BCEE0C9335A7771E3BEB3F25485D72FD825F31E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:c8:03:92:9f:d8:7d:f7:a7:34:e6:70:f0: a3:0e:22:b2:b5:61:7b:d4:d9:24:21:c3:e0:55:37: ca:45:a0:04:a1:2c:f9:af:43:76:38:7e:4d:c9:a8: 58:70:4d:f3:f2:68:74:80:0d:32:c3:71:b6:0c:93: dd:2f:7a:b9:9e:01:b9:f2:1d:71:83:f6:a8:89:80: 04:5f:43:a1:77:89:32:ed:f4:af:3a:7e:04:aa:71: 10:53:77:63:4b:19:c7:0a:f0:73:2b:bb:58:73:5a: 38:61:02:c0:b4:57:08:e8:07:b8:48:54:b5:38:1a: 0b:1a:a8:98:e4:7b:a9:a1:2a:89:20:36:5b:1b:40: 95:15:cd:0e:5c:4d:12:41:0f:b7:41:d2:7a:3c:c5: fe:b2:fe:6d:d6:67:ee:3d:26:27:9d:80:05:e7:e5: 98:94:a4:6c:f8:32:73:12:dc:47:ef:1c:96:11:90: ca:5f:c6:c2:85:36:4d:18:24:68:a8:ab:de:11:dc: 2d:25:88:68:59:f6:ce:8b:2f:f5:d6:84:59:1c:51: 14:78:73:80:19:4b:59:78:99:e1:c1:90:fd:56:55: cf:f7:44:b6:c0:9d:59:c1:be:96:be:41:d1:02:e7: 6a:fb:3d:aa:f6:81:59:9b:d5:c1:72:bb:bd:69:36: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EE:0C:93:35:A7:77:1E:3B:EB:3F:25:48:5D:72:FD:82:5F:31:E7 X509v3 Authority Key Identifier: keyid:3C:E8:6C:C1:C9:4E:C0:C2:A8:D0:C6:68:C7:AA:44:FC:5E:3D:E9:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:65:11:35:05:9c:b3:10:03:0e:d7:ec:29:ef:58:3d:3e:92: 75:4e:13:c5:ed:c3:a8:0c:9a:8a:3f:0e:d6:1c:c1:bc:d8:85: d1:f8:4e:3d:3b:e0:65:05:a2:42:0f:51:9f:a7:05:f0:c2:2b: f5:ad:74:ef:1a:2d:2a:7a:4a:a5:b7:c2:b2:28:02:3b:9b:c1: 80:e8:4f:26:2c:21:b9:b2:50:18:c9:f9:c5:7c:a8:65:78:65: f6:da:5b:e1:24:42:93:22:fb:8e:79:af:32:e4:b1:ba:6f:92: a2:15:db:3f:79:f6:bd:de:41:dd:14:c5:45:71:2f:b4:a9:c2: 6b:98:5e:f0:a5:8e:1d:3b:85:c0:35:c0:40:43:9b:c1:05:ed: e7:8a:6e:5b:c5:6a:95:38:48:3b:98:31:62:82:90:78:c0:72: c5:61:d4:53:dc:53:a1:89:96:87:d1:d3:10:d0:fc:db:c1:6b: c4:b6:ea:00:f2:2e:e1:5c:2f:a7:26:08:29:79:9b:2a:e6:ba: 9d:47:a9:d3:a9:92:f5:ac:60:b9:91:d2:d5:9b:cc:4e:e2:47: aa:0e:81:48:76:ab:63:e7:1c:2f:37:2a:91:72:f4:86:4e:62: 64:56:ce:3a:a2:aa:2d:cb:35:d8:5d:20:20:c4:9a:95:32:32: d0:b8:89:86 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMzVri20mONZxG1DWy+Pjam9I+MswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFODZDQzFDOTRFQzBDMkE4RDBDNjY4QzdBQTQ0RkM1 RTNERTk0RjAeFw0yNjAzMjQyMDQwMzRaFw0yNjAzMzAwNzA4MzRaMDMxMTAvBgNV BAMTKEJDRUUwQzkzMzVBNzc3MUUzQkVCM0YyNTQ4NUQ3MkZEODI1RjMxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv38gDkp/YffenNOZw8KMOIrK1 YXvU2SQhw+BVN8pFoAShLPmvQ3Y4fk3JqFhwTfPyaHSADTLDcbYMk90vermeAbny HXGD9qiJgARfQ6F3iTLt9K86fgSqcRBTd2NLGccK8HMru1hzWjhhAsC0VwjoB7hI VLU4GgsaqJjke6mhKokgNlsbQJUVzQ5cTRJBD7dB0no8xf6y/m3WZ+49JiedgAXn 5ZiUpGz4MnMS3EfvHJYRkMpfxsKFNk0YJGioq94R3C0liGhZ9s6LL/XWhFkcURR4 c4AZS1l4meHBkP1WVc/3RLbAnVnBvpa+QdEC52r7Par2gVmb1cFyu71pNrZDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvO4MkzWndx476z8lSF1y/YJfMecwHwYDVR0j BBgwFoAUPOhswclOwMKo0MZox6pE/F496U8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GRkU2MzYyNUM5QUI3QUEwNDRGNUMzNzNCRkI4QTE4RjAx RjgzQTU3OEZDNTVBQjQzMkQ1MDQ5MTI0MkJBRkE4LzAvM0NFODZDQzFDOTRFQzBD MkE4RDBDNjY4QzdBQTQ0RkM1RTNERTk0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0U4NkNDMUM5NEVDMEMyQThE MEM2NjhDN0FBNDRGQzVFM0RFOTRGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkZFNjM2MjVDOUFCN0FBMDQ0RjVDMzczQkZCOEExOEYwMUY4M0E1NzhG QzU1QUI0MzJENTA0OTEyNDJCQUZBOC8wLzNDRTg2Q0MxQzk0RUMwQzJBOEQwQzY2 OEM3QUE0NEZDNUUzREU5NEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxZRE1BZyzEAMO1+wp71g9PpJ1 ThPF7cOoDJqKPw7WHMG82IXR+E49O+BlBaJCD1GfpwXwwiv1rXTvGi0qekqlt8Ky KAI7m8GA6E8mLCG5slAYyfnFfKhleGX22lvhJEKTIvuOea8y5LG6b5KiFds/efa9 3kHdFMVFcS+0qcJrmF7wpY4dO4XANcBAQ5vBBe3nim5bxWqVOEg7mDFigpB4wHLF YdRT3FOhiZaH0dMQ0PzbwWvEtuoA8i7hXC+nJggpeZsq5rqdR6nTqZL1rGC5kdLV m8xO4keqDoFIdqtj5xwvNyqRcvSGTmJkVs46oqotyzXYXSAgxJqVMjLQuImG -----END CERTIFICATE-----Generated at Thu Mar 26 21:03:57 2026 by rpki-client