$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft File: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft (raw, json) Hash identifier: wVU2VC7t+HfxQVLSZbU6rDxd5IrNSBM8GkieIgM0klY= Subject key identifier: BC:0F:A9:19:42:D4:64:46:01:03:2E:18:38:D2:77:0C:47:AC:A2:87 Authority key identifier: CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C Certificate issuer: /CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C Certificate serial: 2E28DFBC395CE1C19DE2CC4C1A9DF015F05C684B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft Manifest number: 0170 Signing time: Fri 20 Mar 2026 11:57:33 +0000 Manifest this update: Fri 20 Mar 2026 11:52:33 +0000 Manifest next update: Wed 25 Mar 2026 16:26:33 +0000 Files and hashes: 1: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl (hash: PqpSBVOcBnyLFXprcWmAuQXASZSNX3SI9cyQk87HZyI=) 2: 3136342e3136332e3132302e302f32332d3234203d3e20323635383334.roa (hash: ITajnx8AoEh3NK9eg3wJYTD8jN+mIdo7dvHMiOnMIP8=) 3: 3136342e3136332e3132322e302f32332d3234203d3e20323734323837.roa (hash: pzH8ChjyGM8irvisCLOMRVfFg2o+/iOBhQZU0VAmYyg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Mar 2026 21:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:28:df:bc:39:5c:e1:c1:9d:e2:cc:4c:1a:9d:f0:15:f0:5c:68:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C Validity Not Before: Mar 20 11:52:33 2026 GMT Not After : Mar 25 16:26:33 2026 GMT Subject: CN=BC0FA91942D4644601032E1838D2770C47ACA287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:ca:2f:86:ab:7f:25:11:70:b3:46:3b:c0: 18:84:3b:8b:88:69:43:d8:7f:ad:b1:33:90:d6:8c: 74:e7:80:95:fa:ec:1e:31:f9:6e:2d:89:1c:ef:94: c4:b0:b4:99:53:75:ce:e4:ca:f8:59:0b:36:12:64: aa:ae:99:de:5d:db:fd:7c:8c:23:bd:f1:2a:3d:b6: 3d:e0:1c:50:4d:ed:83:88:7d:6b:01:bd:3f:31:bd: d9:39:05:1e:cc:0d:e9:83:66:81:68:77:a9:9f:36: 69:11:89:df:fb:4d:cf:55:ff:a4:49:be:ed:3c:88: 7b:83:96:e0:c2:a7:50:d1:57:e4:e5:51:d2:b3:80: bc:f5:fb:6a:f3:41:5b:4a:27:5e:c5:1d:15:2d:2f: 55:51:ca:8a:bb:e8:2e:21:95:0a:f9:3b:a6:cc:93: 6c:a7:b4:b5:e2:b7:86:be:fb:f9:4b:29:6b:47:fd: a9:2c:10:c2:08:a8:ce:b5:dd:3e:50:b1:00:dc:c1: fb:ad:72:4d:71:07:49:06:e4:0c:c2:3f:55:18:dc: 79:14:17:1a:a2:fc:26:75:42:bf:f0:97:b5:1b:61: 79:49:87:09:b6:3b:63:38:78:88:5c:44:1c:7c:f0: 34:d5:38:09:38:ad:19:c9:31:d2:6b:77:3d:8d:40: 4a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0F:A9:19:42:D4:64:46:01:03:2E:18:38:D2:77:0C:47:AC:A2:87 X509v3 Authority Key Identifier: keyid:CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e0:36:f5:3c:8a:e5:c2:b8:6d:e2:65:3a:93:a1:27:25:6c: e8:76:94:3f:29:d0:ba:d1:f6:96:24:c2:1d:6c:3f:60:af:d7: ce:64:71:f5:f2:b6:df:ef:f3:49:07:ec:bf:4c:14:51:87:fb: a4:e0:ff:41:28:73:05:6e:87:d8:21:8b:a1:df:0b:44:0f:00: 0b:e9:80:b5:71:4f:4e:53:43:01:60:06:52:3e:30:50:40:dc: ab:e1:57:0f:59:19:17:c8:e3:12:f6:4b:36:22:54:5d:6a:e7: a9:aa:18:7a:ae:4d:78:2e:bc:d0:f1:47:75:12:4d:2d:4c:55: b4:3d:a3:9f:33:ef:a4:d2:2f:40:a4:0a:fe:b1:4a:b4:4b:54: 07:94:f4:12:f2:94:5a:16:1f:d6:7d:0c:f9:36:a9:62:36:d5: 14:7a:11:0f:42:3e:d1:2d:e5:f6:ee:44:6b:95:44:d0:17:36: 67:8c:9f:56:63:ac:08:fd:66:f5:f7:9a:9a:56:b4:8a:52:7b: a2:e6:6d:55:ee:4d:cb:a4:c3:a6:dc:a6:c9:a5:cc:b0:51:e3: 99:d4:aa:f6:84:31:6a:97:68:27:36:4e:e8:b0:30:b0:c2:c2: 84:a1:a0:13:d8:51:2f:b4:fb:11:dc:bd:f2:af:e6:5c:c1:a7: 6c:31:e3:23 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULijfvDlc4cGd4sxMGp3wFfBcaEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDE5OENENEM2NTZDNEFEQ0VDNzM3MEQ2OUY2MUM0 QUJFREIxQzAeFw0yNjAzMjAxMTUyMzNaFw0yNjAzMjUxNjI2MzNaMDMxMTAvBgNV BAMTKEJDMEZBOTE5NDJENDY0NDYwMTAzMkUxODM4RDI3NzBDNDdBQ0EyODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgrsovhqt/JRFws0Y7wBiEO4uI aUPYf62xM5DWjHTngJX67B4x+W4tiRzvlMSwtJlTdc7kyvhZCzYSZKqumd5d2/18 jCO98So9tj3gHFBN7YOIfWsBvT8xvdk5BR7MDemDZoFod6mfNmkRid/7Tc9V/6RJ vu08iHuDluDCp1DRV+TlUdKzgLz1+2rzQVtKJ17FHRUtL1VRyoq76C4hlQr5O6bM k2yntLXit4a++/lLKWtH/aksEMIIqM613T5QsQDcwfutck1xB0kG5AzCP1UY3HkU Fxqi/CZ1Qr/wl7UbYXlJhwm2O2M4eIhcRBx88DTVOAk4rRnJMdJrdz2NQEoZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvA+pGULUZEYBAy4YONJ3DEesoocwHwYDVR0j BBgwFoAUzcAZjNTGVsStzsc3DWn2HEq+2xwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80OTU5RTUyMTk1QUI3Nzk0MkQzODE4NzE4ODM4QjU2ODJC RjBDM0E4NDE4NURFQTU5M0MyNUNCMkVCNTcyM0NFLzAvQ0RDMDE5OENENEM2NTZD NEFEQ0VDNzM3MEQ2OUY2MUM0QUJFREIxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREMwMTk4Q0Q0QzY1NkM0QURD RUM3MzcwRDY5RjYxQzRBQkVEQjFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDk1OUU1MjE5NUFCNzc5NDJEMzgxODcxODgzOEI1NjgyQkYwQzNBODQx ODVERUE1OTNDMjVDQjJFQjU3MjNDRS8wL0NEQzAxOThDRDRDNjU2QzRBRENFQzcz NzBENjlGNjFDNEFCRURCMUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB74Db1PIrlwrht4mU6k6EnJWzo dpQ/KdC60faWJMIdbD9gr9fOZHH18rbf7/NJB+y/TBRRh/uk4P9BKHMFbofYIYuh 3wtEDwAL6YC1cU9OU0MBYAZSPjBQQNyr4VcPWRkXyOMS9ks2IlRdauepqhh6rk14 LrzQ8Ud1Ek0tTFW0PaOfM++k0i9ApAr+sUq0S1QHlPQS8pRaFh/WfQz5NqliNtUU ehEPQj7RLeX27kRrlUTQFzZnjJ9WY6wI/Wb195qaVrSKUnui5m1V7k3LpMOm3KbJ pcywUeOZ1Kr2hDFql2gnNk7osDCwwsKEoaAT2FEvtPsR3L3yr+ZcwadsMeMj -----END CERTIFICATE-----Generated at Fri Mar 20 18:39:07 2026 by rpki-client