$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json) Hash identifier: VgPfTzNgAfDQOjNdVBQ3UgOA/KNRg/htcflC6fBX6Ec= Subject key identifier: 4D:C4:B1:0C:48:CA:E6:A4:D4:4F:A5:31:8C:D2:88:7F:55:97:0B:75 Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Certificate serial: 4A4EA96F574E8AF549C6D263524A6AC4D8DABCF5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft Manifest number: 017C Signing time: Sun 15 Mar 2026 14:47:26 +0000 Manifest this update: Sun 15 Mar 2026 14:42:26 +0000 Manifest next update: Fri 20 Mar 2026 14:26:26 +0000 Files and hashes: 1: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: kgjgwHarhaMs6Iouvoz80koNaPks3R7U+aIkHqr9IWM=) 2: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: dbTjuGS3PzrURh7F2dZU8q1IyUt3ByHVC9cX7x0Huss=) 3: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: XE2awn9T+5ggVHcwpgRTfWKLa6eNnQYDkphDSuamOgQ=) 4: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: M4hHTMHVMtcLqEyKDuR4+keLm1laKEw5AU7MCIKLm3s=) 5: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: L57VWgacj/zmSjf7yEB+iUGkpSFTYzflOQWN6Q62GvI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Mar 2026 14:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4e:a9:6f:57:4e:8a:f5:49:c6:d2:63:52:4a:6a:c4:d8:da:bc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Validity Not Before: Mar 15 14:42:26 2026 GMT Not After : Mar 20 14:26:26 2026 GMT Subject: CN=4DC4B10C48CAE6A4D44FA5318CD2887F55970B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ac:99:67:d8:1b:73:a1:57:71:42:00:ec:be: 0e:30:31:9e:80:2c:02:e8:88:e5:ef:ae:08:a1:68: 8c:28:2e:c0:0d:21:cb:56:91:3b:78:10:ad:ef:4b: df:7a:a7:a7:4b:30:e6:d8:67:e9:01:ce:1b:2a:db: c3:b5:bb:66:bd:5e:30:2a:b5:d3:ca:17:4d:81:53: 12:73:6b:38:5e:42:f8:8a:d6:b0:d1:d6:ab:f7:a5: 33:72:54:bc:77:c2:26:0a:3f:78:72:3d:1c:6a:b5: b9:b4:40:7e:5c:55:f6:ab:b2:84:20:20:d9:6d:12: 06:69:a9:45:60:91:68:cc:96:3a:a9:89:6f:fe:ee: 5a:a7:c9:59:31:04:fe:56:d9:e1:01:da:b9:71:4f: 71:d7:c1:03:da:c8:47:6c:b8:3d:71:e6:db:88:f3: 37:70:7f:b7:be:4a:4a:6d:4e:7d:2c:1b:07:53:23: ed:cc:14:7f:06:5a:d2:3d:f6:d8:17:28:e0:c2:80: 6b:8d:50:5f:15:e6:d7:ea:04:95:46:43:87:f6:d0: 26:b1:56:2f:39:99:87:db:b4:ef:dd:c9:ae:08:60: 68:dd:30:1e:d8:49:58:fc:b0:95:be:55:8c:0b:97: d5:2e:1a:09:a2:b9:85:10:c7:4d:f1:1c:96:e4:d1: 0b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C4:B1:0C:48:CA:E6:A4:D4:4F:A5:31:8C:D2:88:7F:55:97:0B:75 X509v3 Authority Key Identifier: keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8f:80:cc:4c:ea:fa:ce:c6:b3:ef:0a:fc:24:d5:73:a3:dc: c9:72:a2:99:7e:82:f8:2c:ba:b9:75:22:57:a4:54:ed:8d:f1: 74:24:46:ad:77:72:ea:09:a6:80:e8:88:43:64:f9:87:6c:04: 55:f1:00:5a:0d:db:9e:14:de:51:7e:ef:75:1f:0f:14:d4:ff: 31:c1:be:a5:de:76:e1:a5:84:65:4f:47:e1:9a:cd:67:c5:e6: 3d:32:0b:d3:93:44:3c:63:52:6b:3b:ba:0b:a5:f1:54:b9:ed: d8:5a:22:27:41:81:c7:e0:30:b1:d7:24:c2:84:67:c7:b9:6a: 33:63:e0:2f:2f:90:bc:16:74:96:71:b5:44:47:ba:fb:46:41: d2:32:f3:66:12:20:cb:8d:35:e0:3f:39:83:41:59:da:80:ee: 82:05:4e:d7:4d:82:43:f3:80:66:12:32:ef:bd:ad:da:43:f7: 6a:32:88:5b:f9:09:a2:fe:07:69:86:d2:59:cf:13:4b:78:9f: ac:f4:e3:95:13:a7:32:8c:00:3a:6b:30:1b:bc:01:b9:6b:fb: f7:bb:a7:de:52:0e:ba:3b:e5:09:48:ae:88:fc:3f:ed:45:bd: e4:13:7f:b2:56:a1:51:5b:c4:d4:5e:fb:1b:ad:63:60:73:5e: d6:ac:aa:c6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSk6pb1dOivVJxtJjUkpqxNjavPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JCMzBGQ0EyN0I4 RkJFOERBOTAeFw0yNjAzMTUxNDQyMjZaFw0yNjAzMjAxNDI2MjZaMDMxMTAvBgNV BAMTKDREQzRCMTBDNDhDQUU2QTRENDRGQTUzMThDRDI4ODdGNTU5NzBCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUrJln2BtzoVdxQgDsvg4wMZ6A LALoiOXvrgihaIwoLsANIctWkTt4EK3vS996p6dLMObYZ+kBzhsq28O1u2a9XjAq tdPKF02BUxJzazheQviK1rDR1qv3pTNyVLx3wiYKP3hyPRxqtbm0QH5cVfarsoQg INltEgZpqUVgkWjMljqpiW/+7lqnyVkxBP5W2eEB2rlxT3HXwQPayEdsuD1x5tuI 8zdwf7e+SkptTn0sGwdTI+3MFH8GWtI99tgXKODCgGuNUF8V5tfqBJVGQ4f20Cax Vi85mYfbtO/dya4IYGjdMB7YSVj8sJW+VYwLl9UuGgmiuYUQx03xHJbk0QsNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTcSxDEjK5qTUT6UxjNKIf1WXC3UwHwYDVR0j BBgwFoAUyjJcdYvZWuIzjTe7MPyie4++jakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZF MkVCNEQxOTVCQTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFF MjMzOEQzN0JCMzBGQ0EyN0I4RkJFOERBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTMyNUM3NThCRDk1QUUyMzM4 RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzA5MjdENEUxOEY3N0VGQjYwMkFFMjFENTYxMUI4OUM2RTJFQjREMTk1 QkExODQ4REQ5OTYxRjg0QTBFRDJCMi8wL0NBMzI1Qzc1OEJEOTVBRTIzMzhEMzdC QjMwRkNBMjdCOEZCRThEQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNj4DMTOr6zsaz7wr8JNVzo9zJ cqKZfoL4LLq5dSJXpFTtjfF0JEatd3LqCaaA6IhDZPmHbARV8QBaDdueFN5Rfu91 Hw8U1P8xwb6l3nbhpYRlT0fhms1nxeY9MgvTk0Q8Y1JrO7oLpfFUue3YWiInQYHH 4DCx1yTChGfHuWozY+AvL5C8FnSWcbVER7r7RkHSMvNmEiDLjTXgPzmDQVnagO6C BU7XTYJD84BmEjLvva3aQ/dqMohb+Qmi/gdphtJZzxNLeJ+s9OOVE6cyjAA6azAb vAG5a/v3u6feUg66O+UJSK6I/D/tRb3kE3+yVqFRW8TUXvsbrWNgc17WrKrG -----END CERTIFICATE-----Generated at Tue Mar 17 15:04:28 2026 by rpki-client