$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json) Hash identifier: hYG2nScZjpqfEKM5UDN45Upo3rjpff4W+CCpMIBJXCA= Subject key identifier: 2A:51:69:7F:DE:21:86:65:85:89:1E:BC:EC:F5:6B:17:AD:CB:77:A1 Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Certificate serial: 7CBF1DD58690070615815FE26EEDE7882559B8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft Manifest number: 017B Signing time: Fri 13 Mar 2026 20:42:08 +0000 Manifest this update: Fri 13 Mar 2026 20:37:08 +0000 Manifest next update: Wed 18 Mar 2026 14:45:08 +0000 Files and hashes: 1: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: XE2awn9T+5ggVHcwpgRTfWKLa6eNnQYDkphDSuamOgQ=) 2: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: kgjgwHarhaMs6Iouvoz80koNaPks3R7U+aIkHqr9IWM=) 3: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: 3qSvPNolcXMWFFg+Iyz9hEV+0KJSseO7jiwzTdFsTII=) 4: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: L57VWgacj/zmSjf7yEB+iUGkpSFTYzflOQWN6Q62GvI=) 5: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: dbTjuGS3PzrURh7F2dZU8q1IyUt3ByHVC9cX7x0Huss=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Mar 2026 04:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bf:1d:d5:86:90:07:06:15:81:5f:e2:6e:ed:e7:88:25:59:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Validity Not Before: Mar 13 20:37:08 2026 GMT Not After : Mar 18 14:45:08 2026 GMT Subject: CN=2A51697FDE21866585891EBCECF56B17ADCB77A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2c:27:f3:14:35:eb:1d:f7:bb:31:77:8d:73: dc:03:bb:0d:fa:1f:38:67:5c:96:b9:2b:11:65:33: 7e:e0:97:93:fe:7b:da:0c:c8:cf:2c:5c:96:ea:2c: 89:88:6a:82:0a:13:ba:f4:2c:58:6d:21:4f:34:7c: 0c:47:1a:5d:b8:96:d9:72:42:93:36:5d:27:a9:f6: 4b:17:42:13:61:2a:78:04:7a:c9:ad:fe:2e:d3:38: 24:b4:68:c9:c6:71:7e:4d:06:58:7d:7e:8a:1e:81: fe:e7:0a:59:70:83:fd:ee:ee:9a:79:68:a0:af:b0: 4a:eb:17:bb:46:c3:61:c8:ae:c9:e7:73:17:39:05: 09:57:02:3f:09:fb:58:37:da:e5:12:de:b4:cb:ec: 27:e5:87:08:20:c5:f5:46:a1:67:37:3a:49:0a:18: 0a:f1:a5:09:60:05:fb:b0:f9:dc:79:97:b7:2b:fd: d8:c1:41:c2:94:bb:a0:d9:4b:50:aa:29:53:f8:63: c0:48:94:a1:31:d8:91:25:ef:42:b0:ba:d0:df:96: 56:32:0c:c0:c8:a4:28:de:d2:77:63:98:1f:65:25: 94:92:78:7e:ce:12:72:e1:3b:8e:b2:fb:7e:df:7f: 97:ab:15:43:cf:9a:49:66:a9:7a:0d:a6:f1:93:da: 78:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:51:69:7F:DE:21:86:65:85:89:1E:BC:EC:F5:6B:17:AD:CB:77:A1 X509v3 Authority Key Identifier: keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f9:aa:b0:53:01:3c:4d:76:d6:84:d1:34:fe:4f:28:54:68: 18:1c:5b:ab:9e:31:14:0a:ac:fb:f5:b4:0c:2c:0f:bb:b8:a3: 99:4b:e0:ef:a6:44:25:4a:3c:49:b0:a5:39:b6:d9:90:a5:c1: e9:cf:e9:aa:7f:bb:2b:8a:05:08:e5:af:9b:f3:e4:75:9b:32: 35:50:8b:fc:20:32:68:2a:8f:d3:2b:9f:3c:dd:8f:d5:f8:d2: a5:0c:b4:f6:56:e8:fd:5b:59:5e:ec:12:43:d4:fc:87:35:a8: 75:12:50:be:33:7a:3f:88:58:2f:d1:e9:59:e9:19:f2:d1:9c: 20:83:60:b2:d4:26:4e:82:8e:30:27:0e:20:6a:fd:ec:b7:f3: d5:5e:1b:bf:b5:a1:f4:e3:2d:47:52:9f:ac:aa:89:51:24:be: 12:69:d6:3b:3e:fe:00:1a:46:f5:c2:56:b1:71:77:ce:d7:f7: fd:70:3a:0a:46:08:f2:62:33:17:da:b8:ce:0f:d1:ac:fd:07: a0:ef:1e:58:62:ba:ec:55:8d:75:76:bb:20:c0:10:d8:72:ce: 2a:ff:d8:f3:1a:ab:06:f2:11:d6:44:21:71:a4:1d:94:4d:66: b5:9f:64:bf:4c:d4:b3:61:e3:f0:c4:a7:dc:25:27:03:7d:09: d2:e1:8a:38 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgITfL8d1YaQBwYVgV/ibu3niCVZuDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDQTMyNUM3NThCRDk1QUUyMzM4RDM3QkIzMEZDQTI3QjhG QkU4REE5MB4XDTI2MDMxMzIwMzcwOFoXDTI2MDMxODE0NDUwOFowMzExMC8GA1UE AxMoMkE1MTY5N0ZERTIxODY2NTg1ODkxRUJDRUNGNTZCMTdBRENCNzdBMTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL4sJ/MUNesd97sxd41z3AO7Dfof OGdclrkrEWUzfuCXk/572gzIzyxcluosiYhqggoTuvQsWG0hTzR8DEcaXbiW2XJC kzZdJ6n2SxdCE2EqeAR6ya3+LtM4JLRoycZxfk0GWH1+ih6B/ucKWXCD/e7umnlo oK+wSusXu0bDYciuyedzFzkFCVcCPwn7WDfa5RLetMvsJ+WHCCDF9UahZzc6SQoY CvGlCWAF+7D53HmXtyv92MFBwpS7oNlLUKopU/hjwEiUoTHYkSXvQrC60N+WVjIM wMikKN7Sd2OYH2UllJJ4fs4ScuE7jrL7ft9/l6sVQ8+aSWapeg2m8ZPaeMkCAwEA AaOCAtMwggLPMB0GA1UdDgQWBBQqUWl/3iGGZYWJHrzs9WsXrct3oTAfBgNVHSME GDAWgBTKMlx1i9la4jONN7sw/KJ7j76NqTAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0 L3Jwa2kvbGFjbmljL0MwOTI3RDRFMThGNzdFRkI2MDJBRTIxRDU2MTFCODlDNkUy RUI0RDE5NUJBMTg0OEREOTk2MUY4NEEwRUQyQjIvMC9DQTMyNUM3NThCRDk1QUUy MzM4RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNybDCBuQYIKwYBBQUHAQEEgawwgakw gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wL0NBMzI1Qzc1OEJEOTVBRTIzMzhE MzdCQjMwRkNBMjdCOEZCRThEQTkuY2VyMIG5BggrBgEFBQcBCwSBrDCBqTCBpgYI KwYBBQUHMAuGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZFMkVCNEQxOTVC QTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JC MzBGQ0EyN0I4RkJFOERBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFP5qrBTATxNdtaE0TT+TyhUaBgc W6ueMRQKrPv1tAwsD7u4o5lL4O+mRCVKPEmwpTm22ZClwenP6ap/uyuKBQjlr5vz 5HWbMjVQi/wgMmgqj9Mrnzzdj9X40qUMtPZW6P1bWV7sEkPU/Ic1qHUSUL4zej+I WC/R6VnpGfLRnCCDYLLUJk6CjjAnDiBq/ey389VeG7+1ofTjLUdSn6yqiVEkvhJp 1js+/gAaRvXCVrFxd87X9/1wOgpGCPJiMxfauM4P0az9B6DvHlhiuuxVjXV2uyDA ENhyzir/2PMaqwbyEdZEIXGkHZRNZrWfZL9M1LNh4/DEp9wlJwN9CdLhijg= -----END CERTIFICATE-----Generated at Sat Mar 14 10:29:05 2026 by rpki-client