$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft File: 864255909469F50CE15FE2F07B617FAAD2741BE0.mft (raw, json) Hash identifier: CdqCUXP6PF0yDrGM1PZV1ah+E252dKGR195iqFegUlE= Subject key identifier: 85:3B:E9:1A:A4:FB:8C:D2:86:A7:DC:47:42:BE:57:16:C6:D0:BE:40 Authority key identifier: 86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0 Certificate issuer: /CN=864255909469F50CE15FE2F07B617FAAD2741BE0 Certificate serial: 3664F40E7B263E6CEB6B5F44D4A66D633AF2F41A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft Manifest number: 016C Signing time: Thu 19 Mar 2026 09:36:58 +0000 Manifest this update: Thu 19 Mar 2026 09:31:58 +0000 Manifest next update: Mon 23 Mar 2026 15:29:58 +0000 Files and hashes: 1: 323830333a616631303a3a2f33322d3332203d3e20323732313232.roa (hash: PrUXshR7u0kS1lF3fu/UXiSrnWx5hDHM8k8hDFmDGYk=) 2: 864255909469F50CE15FE2F07B617FAAD2741BE0.crl (hash: 1J8VxSGzTXxQ/7YKa9S6i8urk6BmTRvThF6vnXyUAls=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Mar 2026 15:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:64:f4:0e:7b:26:3e:6c:eb:6b:5f:44:d4:a6:6d:63:3a:f2:f4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864255909469F50CE15FE2F07B617FAAD2741BE0 Validity Not Before: Mar 19 09:31:58 2026 GMT Not After : Mar 23 15:29:58 2026 GMT Subject: CN=853BE91AA4FB8CD286A7DC4742BE5716C6D0BE40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:71:f1:78:7e:d4:cd:82:36:97:a1:89:36: 93:ee:a2:3e:df:db:f5:8b:27:57:20:c2:db:64:93: 4f:0b:ab:3f:bd:25:45:2f:f8:28:28:7d:ba:81:ad: 13:15:fb:6f:9a:ad:73:0f:e6:48:66:e8:72:04:9e: 48:68:c9:03:2e:17:16:cd:5c:37:45:8e:df:a7:07: 1d:ba:18:3e:07:db:ab:d8:a3:7d:a1:a3:ee:0a:43: c8:47:a3:7b:de:bf:c5:76:71:bf:dc:75:90:1d:0a: f3:74:d1:4b:aa:5b:28:5d:b3:cc:90:98:bd:28:6e: 33:08:0b:9a:0e:c0:ba:40:83:64:0d:6b:da:27:f2: 16:18:4a:85:61:3a:55:76:57:df:34:7f:cd:f0:f0: 2b:cd:bc:1d:2d:9e:65:43:ad:98:a1:15:1e:4c:fe: 14:50:93:8b:bb:93:f3:47:84:cf:68:3c:dd:9f:6b: b5:c5:6f:cb:cf:3a:e3:53:c8:92:c0:35:d6:09:5b: 2c:ce:95:62:83:34:e0:a6:02:e7:50:83:29:ec:ed: d4:80:cf:4d:fc:62:42:3b:1f:f2:8c:0d:2d:5f:55: 74:01:a2:61:02:c1:ae:95:37:11:55:5e:54:da:45: 4a:2b:f1:52:af:f4:ca:66:35:d1:04:67:9e:0a:25: 04:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3B:E9:1A:A4:FB:8C:D2:86:A7:DC:47:42:BE:57:16:C6:D0:BE:40 X509v3 Authority Key Identifier: keyid:86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e8:41:15:66:5e:8e:c6:d3:8e:cb:7e:d2:c8:63:7d:4b:e6: 8f:9e:92:25:7a:d5:e4:b9:ea:94:d5:59:c2:30:b1:58:a9:48: 8b:1d:64:c0:d6:e7:ff:c6:aa:fb:8c:d2:83:e8:ef:f7:55:26: 4c:24:ff:ee:37:29:52:01:8c:f3:e6:50:bc:90:49:8e:e4:f0: 52:96:a4:7c:08:67:69:72:55:3f:56:d1:42:d6:76:a0:8f:f0: 45:21:5c:80:cc:43:44:d7:5d:e0:1e:0d:d3:fa:65:2b:e9:9b: 9b:22:b4:67:5a:f9:f9:d9:3d:a8:03:3f:93:b6:86:ef:c6:e2: 62:38:b9:80:ab:be:34:6b:a6:3f:84:d7:3d:62:cf:a8:db:79: 38:de:36:9b:5d:be:9c:84:6e:38:71:f0:2d:cf:3b:2e:5f:99: c1:45:84:28:90:c9:03:b1:64:aa:ac:75:97:6c:65:68:9f:b8: 26:f9:07:e3:e4:1d:d7:ed:52:4c:54:fd:c7:b6:22:5b:1b:f8: 30:95:8b:47:36:78:75:c7:31:05:18:67:37:df:d0:e4:13:d9: 57:0c:d7:ed:a7:a8:9c:23:45:13:88:ca:38:0e:e5:e5:29:42: 0b:b2:28:a2:03:af:6b:26:42:fe:fe:a0:a5:ae:ce:39:7d:8e: e1:4c:f9:da -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNmT0DnsmPmzra19E1KZtYzry9BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0MjU1OTA5NDY5RjUwQ0UxNUZFMkYwN0I2MTdGQUFE Mjc0MUJFMDAeFw0yNjAzMTkwOTMxNThaFw0yNjAzMjMxNTI5NThaMDMxMTAvBgNV BAMTKDg1M0JFOTFBQTRGQjhDRDI4NkE3REM0NzQyQkU1NzE2QzZEMEJFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71HHxeH7UzYI2l6GJNpPuoj7f 2/WLJ1cgwttkk08Lqz+9JUUv+CgofbqBrRMV+2+arXMP5khm6HIEnkhoyQMuFxbN XDdFjt+nBx26GD4H26vYo32ho+4KQ8hHo3vev8V2cb/cdZAdCvN00UuqWyhds8yQ mL0objMIC5oOwLpAg2QNa9on8hYYSoVhOlV2V980f83w8CvNvB0tnmVDrZihFR5M /hRQk4u7k/NHhM9oPN2fa7XFb8vPOuNTyJLANdYJWyzOlWKDNOCmAudQgyns7dSA z038YkI7H/KMDS1fVXQBomECwa6VNxFVXlTaRUor8VKv9MpmNdEEZ54KJQSdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUhTvpGqT7jNKGp9xHQr5XFsbQvkAwHwYDVR0j BBgwFoAUhkJVkJRp9QzhX+Lwe2F/qtJ0G+AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMzVCRjE5MzBDQTdBMDEzRTQxQzhCQUI2MEI5MzdDOEMx MDI2NDMwM0EyOTM4QkJGNEJDQzRCMUY5OUNCQjBDLzAvODY0MjU1OTA5NDY5RjUw Q0UxNUZFMkYwN0I2MTdGQUFEMjc0MUJFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjQyNTU5MDk0NjlGNTBDRTE1 RkUyRjA3QjYxN0ZBQUQyNzQxQkUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjM1QkYxOTMwQ0E3QTAxM0U0MUM4QkFCNjBCOTM3QzhDMTAyNjQzMDNB MjkzOEJCRjRCQ0M0QjFGOTlDQkIwQy8wLzg2NDI1NTkwOTQ2OUY1MENFMTVGRTJG MDdCNjE3RkFBRDI3NDFCRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBK6EEVZl6OxtOOy37SyGN9S+aP npIletXkueqU1VnCMLFYqUiLHWTA1uf/xqr7jNKD6O/3VSZMJP/uNylSAYzz5lC8 kEmO5PBSlqR8CGdpclU/VtFC1nagj/BFIVyAzENE113gHg3T+mUr6ZubIrRnWvn5 2T2oAz+TtobvxuJiOLmAq740a6Y/hNc9Ys+o23k43jabXb6chG44cfAtzzsuX5nB RYQokMkDsWSqrHWXbGVon7gm+Qfj5B3X7VJMVP3HtiJbG/gwlYtHNnh1xzEFGGc3 39DkE9lXDNftp6icI0UTiMo4DuXlKUILsiiiA69rJkL+/qClrs45fY7hTPna -----END CERTIFICATE-----Generated at Fri Mar 20 17:02:26 2026 by rpki-client