$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.mft File: 848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.mft (raw, json) Hash identifier: Ef/9ZgWpmB+ZS6JTGHWz7iqj3iDaT0RTexjNV4gcbmE= Subject key identifier: CA:41:08:FB:E4:9D:2B:52:7E:FE:40:52:E6:01:2A:EE:E8:54:44:61 Authority key identifier: 84:8C:7E:4D:8C:40:1E:55:9D:FC:0C:DD:58:C6:C5:2E:0D:14:72:0B Certificate issuer: /CN=848C7E4D8C401E559DFC0CDD58C6C52E0D14720B Certificate serial: 29903EC03303A21AC1CDECCB3B3B56314308F8AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.mft Manifest number: 017D Signing time: Sat 14 Mar 2026 15:33:28 +0000 Manifest this update: Sat 14 Mar 2026 15:28:28 +0000 Manifest next update: Fri 20 Mar 2026 10:21:28 +0000 Files and hashes: 1: 848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.crl (hash: 7he3O6CYXvt+lfsDD9bKOxXGlOUslGAdJQrvHiodZGI=) 2: 34352e3233362e3130302e302f32322d3234203d3e20323636383036.roa (hash: GqZsTpru7wYJHknIHedfeRl1iuUpbiibh4MZZ8tjf90=) 3: 323830333a623061303a3a2f33322d3438203d3e20323636383036.roa (hash: 3QueJhoCBuP71d+0IcjuIlqrKBjKoDHfc1zvcanhPJ8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.crl rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Mar 2026 05:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:90:3e:c0:33:03:a2:1a:c1:cd:ec:cb:3b:3b:56:31:43:08:f8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848C7E4D8C401E559DFC0CDD58C6C52E0D14720B Validity Not Before: Mar 14 15:28:28 2026 GMT Not After : Mar 20 10:21:28 2026 GMT Subject: CN=CA4108FBE49D2B527EFE4052E6012AEEE8544461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3c:48:29:11:81:a5:c9:c7:6d:6b:3f:fb:00: ad:59:9f:2e:4e:a2:7b:0b:42:88:02:98:17:bc:52: 17:18:7b:e5:e4:27:5d:a5:60:8c:ac:ce:1b:91:4a: 9f:a4:84:23:07:dd:a3:23:42:b7:3b:4d:3d:68:0c: 9e:65:48:07:be:98:e8:cd:5b:a9:85:86:cd:8c:a3: d3:9b:57:76:62:4f:b2:e5:d3:95:4e:fa:3b:8b:48: 8a:b6:0a:c8:f3:cd:0f:0c:a2:ed:a5:b5:06:a0:8d: 0b:9a:64:1f:c3:6b:65:d2:fb:f3:dc:11:dc:cb:bf: fb:a8:08:ab:9b:2a:1b:ab:62:48:9d:f2:d7:b1:3a: 91:ba:65:de:e2:37:c1:02:7b:c5:f6:a3:ef:a2:41: df:39:c0:05:3a:70:fa:93:1a:8d:cf:0e:9f:b6:95: 4b:ba:a0:f5:fa:81:b2:72:f4:ad:54:ea:74:14:74: 68:45:13:50:be:bf:f6:44:83:40:15:90:10:c7:be: bb:8b:d0:66:7b:0a:0d:da:46:56:86:61:94:a4:66: 61:87:6d:f2:21:fe:89:f9:fb:d6:79:1a:47:82:82: da:b4:59:e5:d9:76:9f:44:14:34:a6:a2:c7:37:18: 9f:63:32:81:91:04:32:33:65:eb:29:d8:b7:16:f5: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:41:08:FB:E4:9D:2B:52:7E:FE:40:52:E6:01:2A:EE:E8:54:44:61 X509v3 Authority Key Identifier: keyid:84:8C:7E:4D:8C:40:1E:55:9D:FC:0C:DD:58:C6:C5:2E:0D:14:72:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a2:e7:90:7a:b8:21:26:61:d5:31:23:0e:25:57:23:f0:01: 81:9d:5d:22:a9:aa:6d:09:a0:8e:ae:09:c5:7c:9a:4d:db:6f: 84:b3:e8:f8:d4:35:fe:16:87:0a:6f:49:84:48:d7:4e:91:77: 8c:f2:27:89:8f:ac:f0:29:0a:de:11:6e:55:96:a0:1a:04:59: d1:2a:1e:28:0d:90:65:69:b6:d5:20:2c:16:90:75:33:f1:ba: 58:f4:5e:e9:1d:8e:de:a3:1e:19:f4:94:f2:39:56:0f:9f:66: 1e:16:19:30:18:36:82:35:16:4e:30:ba:bf:5a:0d:d4:fe:8c: d5:5f:87:a3:fb:3b:79:98:be:08:ae:e3:2d:0c:f0:ae:b5:f0: d8:8c:54:85:5a:8b:5c:5a:b8:11:e2:87:ec:b7:89:71:fa:55: 0b:64:10:56:63:8e:72:51:3d:7e:29:ec:47:1b:17:f4:dd:87: 02:7b:82:38:39:89:18:45:e1:42:f9:ce:6c:07:34:2b:a6:8c: f5:6f:b6:19:50:a4:68:78:51:a4:43:80:28:d0:28:b7:61:e3: a0:92:4a:6d:13:dc:68:cd:90:bd:5a:85:7c:de:d3:4f:bc:18: fe:f4:59:57:b8:3d:4f:ef:1d:b3:4e:d6:dc:ac:61:3b:6f:d2: 67:b4:5c:78 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKZA+wDMDohrBzezLOztWMUMI+K0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4QzdFNEQ4QzQwMUU1NTlERkMwQ0RENThDNkM1MkUw RDE0NzIwQjAeFw0yNjAzMTQxNTI4MjhaFw0yNjAzMjAxMDIxMjhaMDMxMTAvBgNV BAMTKENBNDEwOEZCRTQ5RDJCNTI3RUZFNDA1MkU2MDEyQUVFRTg1NDQ0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtPEgpEYGlycdtaz/7AK1Zny5O onsLQogCmBe8UhcYe+XkJ12lYIyszhuRSp+khCMH3aMjQrc7TT1oDJ5lSAe+mOjN W6mFhs2Mo9ObV3ZiT7Ll05VO+juLSIq2CsjzzQ8Mou2ltQagjQuaZB/Da2XS+/Pc EdzLv/uoCKubKhurYkid8texOpG6Zd7iN8ECe8X2o++iQd85wAU6cPqTGo3PDp+2 lUu6oPX6gbJy9K1U6nQUdGhFE1C+v/ZEg0AVkBDHvruL0GZ7Cg3aRlaGYZSkZmGH bfIh/on5+9Z5GkeCgtq0WeXZdp9EFDSmosc3GJ9jMoGRBDIzZesp2LcW9YihAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUykEI++SdK1J+/kBS5gEq7uhURGEwHwYDVR0j BBgwFoAUhIx+TYxAHlWd/AzdWMbFLg0UcgswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNjAzMkQ5QzQ1Qzc3QTUwRTUwMUU0NkRFMjA0RkVCNjhF MTJFM0E0NTFBRTVBNjlENTVEQjBBMUI1QjBFM0Y1LzAvODQ4QzdFNEQ4QzQwMUU1 NTlERkMwQ0RENThDNkM1MkUwRDE0NzIwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDhDN0U0RDhDNDAxRTU1OURG QzBDREQ1OEM2QzUyRTBEMTQ3MjBCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzYwMzJEOUM0NUM3N0E1MEU1MDFFNDZERTIwNEZFQjY4RTEyRTNBNDUx QUU1QTY5RDU1REIwQTFCNUIwRTNGNS8wLzg0OEM3RTREOEM0MDFFNTU5REZDMENE RDU4QzZDNTJFMEQxNDcyMEIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHoueQerghJmHVMSMOJVcj8AGB nV0iqaptCaCOrgnFfJpN22+Es+j41DX+FocKb0mESNdOkXeM8ieJj6zwKQreEW5V lqAaBFnRKh4oDZBlabbVICwWkHUz8bpY9F7pHY7eox4Z9JTyOVYPn2YeFhkwGDaC NRZOMLq/Wg3U/ozVX4ej+zt5mL4IruMtDPCutfDYjFSFWotcWrgR4ofst4lx+lUL ZBBWY45yUT1+KexHGxf03YcCe4I4OYkYReFC+c5sBzQrpoz1b7YZUKRoeFGkQ4Ao 0Ci3YeOgkkptE9xozZC9WoV83tNPvBj+9FlXuD1P7x2zTtbcrGE7b9JntFx4 -----END CERTIFICATE-----Generated at Mon Mar 16 02:02:18 2026 by rpki-client