$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.mft File: 0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.mft (raw, json) Hash identifier: sSIVzGCCyV9c+AWlS9c+LREqutQ/0DZX6mp7VSgyeBI= Subject key identifier: 4B:F9:70:D0:79:59:53:36:2D:37:8E:D0:12:BB:BE:63:EB:09:9A:ED Authority key identifier: 0C:A7:02:4A:CC:22:C6:6C:E1:D4:3A:34:A1:5D:3D:2B:70:F1:8C:6A Certificate issuer: /CN=0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A Certificate serial: 6054DDC5B6034AA4CDD69B3C15791E3B6C9F5D6A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.mft Manifest number: 017C Signing time: Wed 08 Apr 2026 01:49:40 +0000 Manifest this update: Wed 08 Apr 2026 01:44:40 +0000 Manifest next update: Mon 13 Apr 2026 16:26:40 +0000 Files and hashes: 1: 323830313a31653a343030303a3a2f34352d3438203d3e20323632323636.roa (hash: jzW0RmDWtqZQZHLspy1FgZY9p1hdIVNiSGUxW8PrIeM=) 2: 0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.crl (hash: ROFjriUGODD7208ZqBo4TfKVpqJqjizkMjJM3oFFaRM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.crl rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 12 Apr 2026 05:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:54:dd:c5:b6:03:4a:a4:cd:d6:9b:3c:15:79:1e:3b:6c:9f:5d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A Validity Not Before: Apr 8 01:44:40 2026 GMT Not After : Apr 13 16:26:40 2026 GMT Subject: CN=4BF970D0795953362D378ED012BBBE63EB099AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:9a:14:2c:8b:cb:76:31:57:4e:8e:34:18:60: b4:90:21:da:5d:7a:96:d1:11:34:04:e6:2f:82:a3: 07:bb:96:b4:60:03:6e:4d:64:e7:58:34:07:b2:cc: 91:49:55:c0:d6:b2:05:95:82:8e:7c:04:7b:d5:0f: b8:ee:ef:01:77:f5:5f:c3:25:99:18:83:da:18:a9: e8:50:b0:e5:f8:81:51:e7:4a:8c:16:ca:f5:c5:ab: e2:d6:8e:da:b2:a3:de:cd:15:9a:77:76:6f:2d:a5: 05:2e:f8:47:a2:35:a9:e8:0f:3a:7c:37:5c:b9:0a: 1d:85:55:cc:5f:29:44:a2:98:c5:53:b7:5c:42:6d: 96:b6:2c:5d:53:28:58:27:56:f6:01:89:43:83:15: 2f:d0:5a:82:ce:7b:0b:7b:a6:42:ae:d2:d3:00:38: 95:4d:7e:3a:78:3e:bd:50:61:82:7c:05:0a:7e:59: 7b:0e:c3:65:40:fe:9d:15:2a:a2:02:c1:72:31:d8: d2:e6:4a:0b:d7:d2:60:94:6e:03:03:be:ac:79:95: e7:8b:d9:ae:e8:83:17:90:45:bf:d0:fc:f8:a9:7b: 3d:a9:a8:76:3c:57:c8:0c:aa:c3:c6:1d:90:30:c2: c6:e1:9c:c4:99:c1:55:5a:20:f6:d7:e4:d1:21:88: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F9:70:D0:79:59:53:36:2D:37:8E:D0:12:BB:BE:63:EB:09:9A:ED X509v3 Authority Key Identifier: keyid:0C:A7:02:4A:CC:22:C6:6C:E1:D4:3A:34:A1:5D:3D:2B:70:F1:8C:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:29:24:ca:aa:a2:71:a7:1f:a2:a3:3d:8c:fd:77:29:03:25: a0:27:4d:07:1b:9c:72:f3:77:b2:e2:54:f5:86:db:f6:a0:65: 3a:91:02:da:29:f5:15:86:f0:63:9c:21:6e:4a:74:b2:20:76: 86:64:67:55:12:43:d7:38:f2:79:a8:8b:96:64:59:39:4f:92: 57:57:e1:4b:93:2e:38:48:ec:fd:66:76:6d:fb:e2:84:fa:b3: 20:b5:d0:35:a1:6b:e6:46:b8:4d:50:03:2f:71:06:2a:fa:05: f6:c8:4b:52:75:7a:af:f2:31:25:c2:49:ca:79:82:0c:d2:c6: a4:7a:be:ed:a8:a0:be:d4:4c:c7:3a:73:fe:c7:b7:09:1b:97: 7e:f3:98:e5:c2:9a:c6:4c:cd:f3:21:f5:0d:60:15:5f:af:5f: 1a:ce:d0:02:24:3b:a8:f6:15:46:4c:5f:af:1d:f4:1f:cc:4d: e9:d8:27:28:f1:25:89:17:15:1e:69:93:c1:36:04:ec:03:84: 66:51:f7:04:93:ea:8f:09:63:a4:4f:1b:4d:99:4b:c3:72:5b: 70:5e:d5:90:f0:d0:5f:33:a6:d8:16:c9:6f:c8:50:c0:7d:5a: 29:34:ec:33:08:a1:55:bc:79:50:ea:2e:47:1f:44:60:41:a0: 38:d6:a4:10 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYFTdxbYDSqTN1ps8FXkeO2yfXWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENBNzAyNEFDQzIyQzY2Q0UxRDQzQTM0QTE1RDNEMkI3 MEYxOEM2QTAeFw0yNjA0MDgwMTQ0NDBaFw0yNjA0MTMxNjI2NDBaMDMxMTAvBgNV BAMTKDRCRjk3MEQwNzk1OTUzMzYyRDM3OEVEMDEyQkJCRTYzRUIwOTlBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5mhQsi8t2MVdOjjQYYLSQIdpd epbRETQE5i+Cowe7lrRgA25NZOdYNAeyzJFJVcDWsgWVgo58BHvVD7ju7wF39V/D JZkYg9oYqehQsOX4gVHnSowWyvXFq+LWjtqyo97NFZp3dm8tpQUu+EeiNanoDzp8 N1y5Ch2FVcxfKUSimMVTt1xCbZa2LF1TKFgnVvYBiUODFS/QWoLOewt7pkKu0tMA OJVNfjp4Pr1QYYJ8BQp+WXsOw2VA/p0VKqICwXIx2NLmSgvX0mCUbgMDvqx5leeL 2a7ogxeQRb/Q/Pipez2pqHY8V8gMqsPGHZAwwsbhnMSZwVVaIPbX5NEhiBKxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUS/lw0HlZUzYtN47QEru+Y+sJmu0wHwYDVR0j BBgwFoAUDKcCSswixmzh1Do0oV09K3DxjGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQzNDRUM2NUNFMTNGOTlCRjc1QzQxM0Q2RTVBOTAxNzdB QjBCMTU1QjgyNDYxNDU0NDI3MUQ1MTY0QTAyMjNCLzAvMENBNzAyNEFDQzIyQzY2 Q0UxRDQzQTM0QTE1RDNEMkI3MEYxOEM2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0E3MDI0QUNDMjJDNjZDRTFE NDNBMzRBMTVEM0QyQjcwRjE4QzZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUMzQ0VDNjVDRTEzRjk5QkY3NUM0MTNENkU1QTkwMTc3QUIwQjE1NUI4 MjQ2MTQ1NDQyNzFENTE2NEEwMjIzQi8wLzBDQTcwMjRBQ0MyMkM2NkNFMUQ0M0Ez NEExNUQzRDJCNzBGMThDNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkKSTKqqJxpx+ioz2M/XcpAyWg J00HG5xy83ey4lT1htv2oGU6kQLaKfUVhvBjnCFuSnSyIHaGZGdVEkPXOPJ5qIuW ZFk5T5JXV+FLky44SOz9ZnZt++KE+rMgtdA1oWvmRrhNUAMvcQYq+gX2yEtSdXqv 8jElwknKeYIM0saker7tqKC+1EzHOnP+x7cJG5d+85jlwprGTM3zIfUNYBVfr18a ztACJDuo9hVGTF+vHfQfzE3p2Cco8SWJFxUeaZPBNgTsA4RmUfcEk+qPCWOkTxtN mUvDcltwXtWQ8NBfM6bYFslvyFDAfVopNOwzCKFVvHlQ6i5HH0RgQaA41qQQ -----END CERTIFICATE-----Generated at Wed Apr 8 08:50:07 2026 by rpki-client