$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft File: 864255909469F50CE15FE2F07B617FAAD2741BE0.mft (raw, json) Hash identifier: zwMd3nhqNTNMquhFVw0SfOCC976VWh/fk5Kfq0nxlWQ= Subject key identifier: 68:8A:35:C6:4D:A8:0A:3A:60:7A:76:1B:B5:25:3A:B8:A3:EA:A8:AE Authority key identifier: 86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0 Certificate issuer: /CN=864255909469F50CE15FE2F07B617FAAD2741BE0 Certificate serial: 5BDDD4AAF28D8143B43C0559324CF547B118A4BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft Manifest number: 016D Signing time: Fri 20 Mar 2026 15:34:33 +0000 Manifest this update: Fri 20 Mar 2026 15:29:33 +0000 Manifest next update: Wed 25 Mar 2026 19:46:33 +0000 Files and hashes: 1: 864255909469F50CE15FE2F07B617FAAD2741BE0.crl (hash: eJzYzvjckJlFdcNUdNZcHdsqOimasL3Ipbv/3j3s5+0=) 2: 323830333a616631303a3a2f33322d3332203d3e20323732313232.roa (hash: PrUXshR7u0kS1lF3fu/UXiSrnWx5hDHM8k8hDFmDGYk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Mar 2026 10:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:dd:d4:aa:f2:8d:81:43:b4:3c:05:59:32:4c:f5:47:b1:18:a4:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864255909469F50CE15FE2F07B617FAAD2741BE0 Validity Not Before: Mar 20 15:29:33 2026 GMT Not After : Mar 25 19:46:33 2026 GMT Subject: CN=688A35C64DA80A3A607A761BB5253AB8A3EAA8AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:9b:0e:57:ed:25:09:03:b5:3b:7e:41:20: 4d:2e:0e:0f:17:25:6c:35:0f:4f:70:27:04:34:26: 43:95:86:3f:c5:8c:dc:b4:24:2f:10:44:17:0b:d2: fd:fb:c9:65:00:0e:3e:14:c7:4f:8d:ee:33:3d:0d: a6:cf:2f:1f:44:d6:e1:53:c5:8b:a8:50:c3:ff:63: fd:5c:54:84:53:55:d4:45:f3:d3:31:ab:10:5a:bd: a5:b1:84:d1:0c:04:dd:2e:97:25:63:2d:61:c7:f0: 77:92:2e:60:ad:f0:eb:62:a1:ed:26:a4:e1:b1:3a: ec:cf:e2:7d:22:5e:65:aa:9d:67:ca:8a:e7:51:15: 7d:61:91:c8:61:3a:94:aa:1a:c5:3c:21:56:36:ee: d9:8a:29:f1:02:08:49:4b:ea:68:eb:7b:c9:ca:8c: 38:8a:fb:ed:e5:b6:ac:92:fb:a5:7e:05:4e:83:53: 18:9a:5a:38:be:7e:bd:dc:0f:ca:11:85:56:00:41: 89:d7:1d:f3:e6:01:c9:87:d2:7a:1b:30:20:94:d3: 55:85:a9:3e:f6:21:31:bd:de:b0:3f:66:7f:23:37: 31:4c:45:dd:01:70:07:41:6c:a2:73:cd:59:8e:7a: 6f:76:a7:ea:b4:9f:b0:62:5e:22:97:a6:74:54:49: 57:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8A:35:C6:4D:A8:0A:3A:60:7A:76:1B:B5:25:3A:B8:A3:EA:A8:AE X509v3 Authority Key Identifier: keyid:86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0b:6b:07:d2:aa:a3:e2:98:22:46:4b:c2:ec:e1:52:dd:92: 9b:7d:0c:8d:8f:bc:d2:06:99:d5:01:f8:9f:df:6a:2b:a2:36: 8a:5b:68:72:09:f2:10:7a:8a:c6:c2:aa:6a:a8:9a:89:3b:21: fd:ee:88:0f:72:1f:77:74:fe:4f:50:7f:98:2b:81:3a:96:a5: 38:ad:a9:04:3e:5c:f9:96:21:74:30:89:b2:20:54:4f:48:17: 73:d7:da:5c:97:3f:85:a1:5d:7d:79:68:29:fc:88:0b:48:7e: 48:5a:0a:fb:ed:35:9c:fd:b8:df:bb:43:4d:58:ae:7c:6e:a2: 45:a1:5a:e4:b2:6b:ab:8c:0b:e4:89:13:bb:c9:e4:42:63:ab: 05:27:7d:b3:bc:78:9f:9f:5c:cf:ca:f4:84:ff:21:ce:d9:4a: 95:14:2e:a2:af:47:b1:58:63:b5:ec:00:b5:37:2c:92:2c:fc: db:5c:8a:d5:ef:f9:49:78:b8:d4:18:4b:80:d3:71:1d:a6:8a: e5:c7:be:0b:e4:ab:4a:be:0a:72:ec:3f:3c:33:42:a6:62:89: 4b:b4:91:9e:e1:a6:39:28:8c:26:98:65:02:dd:20:2b:b4:10: d8:99:a7:72:e0:49:d8:34:a3:17:49:6c:b5:20:60:cb:8b:32: 4b:3b:02:2b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUW93UqvKNgUO0PAVZMkz1R7EYpL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0MjU1OTA5NDY5RjUwQ0UxNUZFMkYwN0I2MTdGQUFE Mjc0MUJFMDAeFw0yNjAzMjAxNTI5MzNaFw0yNjAzMjUxOTQ2MzNaMDMxMTAvBgNV BAMTKDY4OEEzNUM2NERBODBBM0E2MDdBNzYxQkI1MjUzQUI4QTNFQUE4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC385sOV+0lCQO1O35BIE0uDg8X JWw1D09wJwQ0JkOVhj/FjNy0JC8QRBcL0v37yWUADj4Ux0+N7jM9DabPLx9E1uFT xYuoUMP/Y/1cVIRTVdRF89MxqxBavaWxhNEMBN0ulyVjLWHH8HeSLmCt8Otioe0m pOGxOuzP4n0iXmWqnWfKiudRFX1hkchhOpSqGsU8IVY27tmKKfECCElL6mjre8nK jDiK++3ltqyS+6V+BU6DUxiaWji+fr3cD8oRhVYAQYnXHfPmAcmH0nobMCCU01WF qT72ITG93rA/Zn8jNzFMRd0BcAdBbKJzzVmOem92p+q0n7BiXiKXpnRUSVe1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaIo1xk2oCjpgenYbtSU6uKPqqK4wHwYDVR0j BBgwFoAUhkJVkJRp9QzhX+Lwe2F/qtJ0G+AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMzVCRjE5MzBDQTdBMDEzRTQxQzhCQUI2MEI5MzdDOEMx MDI2NDMwM0EyOTM4QkJGNEJDQzRCMUY5OUNCQjBDLzAvODY0MjU1OTA5NDY5RjUw Q0UxNUZFMkYwN0I2MTdGQUFEMjc0MUJFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjQyNTU5MDk0NjlGNTBDRTE1 RkUyRjA3QjYxN0ZBQUQyNzQxQkUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjM1QkYxOTMwQ0E3QTAxM0U0MUM4QkFCNjBCOTM3QzhDMTAyNjQzMDNB MjkzOEJCRjRCQ0M0QjFGOTlDQkIwQy8wLzg2NDI1NTkwOTQ2OUY1MENFMTVGRTJG MDdCNjE3RkFBRDI3NDFCRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAcC2sH0qqj4pgiRkvC7OFS3ZKb fQyNj7zSBpnVAfif32orojaKW2hyCfIQeorGwqpqqJqJOyH97ogPch93dP5PUH+Y K4E6lqU4rakEPlz5liF0MImyIFRPSBdz19pclz+FoV19eWgp/IgLSH5IWgr77TWc /bjfu0NNWK58bqJFoVrksmurjAvkiRO7yeRCY6sFJ32zvHifn1zPyvSE/yHO2UqV FC6ir0exWGO17AC1NyySLPzbXIrV7/lJeLjUGEuA03Edporlx74L5KtKvgpy7D88 M0KmYolLtJGe4aY5KIwmmGUC3SArtBDYmady4EnYNKMXSWy1IGDLizJLOwIr -----END CERTIFICATE-----Generated at Sat Mar 21 19:03:45 2026 by rpki-client