$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft File: D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft (raw, json) Hash identifier: u/++Uf4zz80gmkFBtgSCzqwFtCsm77vn9rFUuwyxfvk= Subject key identifier: 28:EB:8A:AA:10:0A:29:3F:15:BE:16:F6:31:44:7C:5B:C6:04:10:19 Authority key identifier: D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28 Certificate issuer: /CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28 Certificate serial: 6E1FBDCD7A4097257A33713EA5D1C507F993CC74 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft Manifest number: 0173 Signing time: Fri 06 Mar 2026 03:47:08 +0000 Manifest this update: Fri 06 Mar 2026 03:42:08 +0000 Manifest next update: Tue 10 Mar 2026 10:59:08 +0000 Files and hashes: 1: D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl (hash: m4ss/gvaQPJf9adDtTEeFC/bFb/zBtMS6rs9uoEAIEg=) 2: 323830333a653538303a3a2f33322d3332203d3e203631343637.roa (hash: pyRi37f/R2phnwiN1pIBrly71Xw+IUWnhpmTlw5mr5E=) 3: 3133312e302e3133362e302f32322d3232203d3e203631343637.roa (hash: Z45HMP/4w5OSwLRGRQivT1PyaX/d8uD752WbmIGUS78=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Mar 2026 10:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1f:bd:cd:7a:40:97:25:7a:33:71:3e:a5:d1:c5:07:f9:93:cc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28 Validity Not Before: Mar 6 03:42:08 2026 GMT Not After : Mar 10 10:59:08 2026 GMT Subject: CN=28EB8AAA100A293F15BE16F631447C5BC6041019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:12:bf:81:5a:ef:40:53:ba:6c:d7:7e:f8:25: 85:c1:59:c4:17:79:fd:a9:0b:19:07:33:1f:df:7f: 7a:2f:0c:dc:35:27:2c:04:8b:2c:3e:c3:64:62:d4: dc:51:40:a5:7b:b7:51:29:92:41:04:ac:46:1d:c5: e9:1c:a0:a7:d2:c2:52:38:2c:41:8b:c1:e8:5a:7d: dd:55:e0:40:e0:f1:64:22:a8:9c:ce:ef:f6:5b:e0: 74:de:31:c8:27:11:fa:b1:1c:2f:7d:1d:cd:2e:0b: 71:72:41:7e:81:9f:0d:45:78:6b:09:cc:71:58:54: d5:c4:71:1a:7b:02:7a:0a:e0:75:50:d4:07:11:e6: 9f:ba:2f:d2:63:30:22:e9:22:59:ca:ba:d9:b0:32: 84:48:62:68:e6:36:40:31:a9:04:22:6d:1c:a2:41: 75:c5:34:8f:2f:b1:44:c7:ab:bc:93:f6:c1:79:b1: 9a:a0:d9:92:d9:5e:84:7f:90:39:0a:2b:61:e4:f8: 4a:3d:55:20:e6:c4:8d:83:1b:b6:ea:43:c6:59:62: bb:92:27:72:3d:26:16:9f:89:b9:ad:97:f2:fb:46: 3a:af:54:f7:69:1e:ca:5f:50:88:4f:48:c9:1d:9f: a8:5e:99:22:2e:ed:b2:e4:c4:1b:29:47:d6:d9:49: 5e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EB:8A:AA:10:0A:29:3F:15:BE:16:F6:31:44:7C:5B:C6:04:10:19 X509v3 Authority Key Identifier: keyid:D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bf:51:64:7d:7d:20:be:1a:e8:e0:e7:cf:72:68:cd:18:29: 2c:c1:50:0e:b1:e1:ab:e1:9e:98:89:5a:09:e5:28:47:d5:ae: db:2c:7f:61:1b:4c:fa:80:11:f2:69:d9:2c:b7:40:e0:a4:80: 36:9c:22:1f:d8:a6:3a:40:12:88:ae:8a:c8:84:52:91:d8:0d: 1b:cf:70:72:e0:cc:7a:a6:6b:ca:a7:03:6d:4d:57:d1:dc:6e: 60:93:42:63:e5:00:04:5c:26:d3:34:a8:c5:98:9a:5e:34:f2: 72:8e:55:da:80:88:c6:d9:1d:11:f8:ad:49:82:c8:e6:79:e5: 39:98:37:ba:46:cb:24:a1:e3:c1:e7:9d:a4:16:c8:26:1b:18: 4b:a8:b1:a2:f0:22:dc:35:3d:7e:ba:d8:87:25:e0:ea:8f:3a: e7:be:8d:2a:3f:62:bc:d2:f7:79:92:84:e6:b2:72:c6:25:a2: 0a:6c:32:42:38:e6:f1:39:84:f0:b0:82:4b:4e:df:a2:c2:c2: 5e:bb:36:42:e6:19:b1:b1:6d:d3:93:52:be:7c:e7:11:90:c9: c0:ec:4f:60:34:04:98:f2:02:58:6e:ce:5c:35:95:91:dc:98: d1:ba:8f:99:85:b9:b9:5e:30:e9:a1:0d:3c:2d:8c:f2:45:24: 4d:90:14:8b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbh+9zXpAlyV6M3E+pdHFB/mTzHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwODczNURDRkJENDQzOUYxRjYxQTYxNzlEQkU5MjBE ODZCMUUyODAeFw0yNjAzMDYwMzQyMDhaFw0yNjAzMTAxMDU5MDhaMDMxMTAvBgNV BAMTKDI4RUI4QUFBMTAwQTI5M0YxNUJFMTZGNjMxNDQ3QzVCQzYwNDEwMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYEr+BWu9AU7ps1374JYXBWcQX ef2pCxkHMx/ff3ovDNw1JywEiyw+w2Ri1NxRQKV7t1EpkkEErEYdxekcoKfSwlI4 LEGLwehafd1V4EDg8WQiqJzO7/Zb4HTeMcgnEfqxHC99Hc0uC3FyQX6Bnw1FeGsJ zHFYVNXEcRp7AnoK4HVQ1AcR5p+6L9JjMCLpIlnKutmwMoRIYmjmNkAxqQQibRyi QXXFNI8vsUTHq7yT9sF5sZqg2ZLZXoR/kDkKK2Hk+Eo9VSDmxI2DG7bqQ8ZZYruS J3I9Jhafibmtl/L7RjqvVPdpHspfUIhPSMkdn6hemSIu7bLkxBspR9bZSV5TAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKOuKqhAKKT8Vvhb2MUR8W8YEEBkwHwYDVR0j BBgwFoAU0whzXc+9RDnx9hphedvpINhrHigwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QUY0MzdERDdEMTFGMjhDNTgzMjk1RjkzQjlDNTRDRkU5 ODAyNUNBREQyNzdBNTM2NEJDMDU2NzQ5NjE4ODY5LzAvRDMwODczNURDRkJENDQz OUYxRjYxQTYxNzlEQkU5MjBEODZCMUUyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzA4NzM1RENGQkQ0NDM5RjFG NjFBNjE3OURCRTkyMEQ4NkIxRTI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEFGNDM3REQ3RDExRjI4QzU4MzI5NUY5M0I5QzU0Q0ZFOTgwMjVDQURE Mjc3QTUzNjRCQzA1Njc0OTYxODg2OS8wL0QzMDg3MzVEQ0ZCRDQ0MzlGMUY2MUE2 MTc5REJFOTIwRDg2QjFFMjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfv1FkfX0gvhro4OfPcmjNGCks wVAOseGr4Z6YiVoJ5ShH1a7bLH9hG0z6gBHyadkst0DgpIA2nCIf2KY6QBKIrorI hFKR2A0bz3By4Mx6pmvKpwNtTVfR3G5gk0Jj5QAEXCbTNKjFmJpeNPJyjlXagIjG 2R0R+K1JgsjmeeU5mDe6RsskoePB552kFsgmGxhLqLGi8CLcNT1+utiHJeDqjzrn vo0qP2K80vd5koTmsnLGJaIKbDJCOObxOYTwsIJLTt+iwsJeuzZC5hmxsW3Tk1K+ fOcRkMnA7E9gNASY8gJYbs5cNZWR3JjRuo+Zhbm5XjDpoQ08LYzyRSRNkBSL -----END CERTIFICATE-----Generated at Sat Mar 7 12:50:03 2026 by rpki-client