$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft File: 965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft (raw, json) Hash identifier: iEPdvroNqeNIepzpU4JWkkKcSQn1V036Cfx9xIf3DnE= Subject key identifier: 0C:84:FB:31:5A:46:98:CD:4E:6B:50:DA:B8:B5:BC:2D:B3:5F:AE:BB Authority key identifier: 96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D Certificate issuer: /CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D Certificate serial: 4BA6A02D6C2CC42041A833054A20A1DEEA55257C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft Manifest number: 0167 Signing time: Mon 09 Mar 2026 11:59:02 +0000 Manifest this update: Mon 09 Mar 2026 11:54:02 +0000 Manifest next update: Sat 14 Mar 2026 17:36:02 +0000 Files and hashes: 1: 965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl (hash: lFWp+JvBFQl3GY0d9YAkL+257Zhf46r9+HFT046uQxc=) 2: 3139302e372e3136302e302f32302d3230203d3e203237393038.roa (hash: s953Iau+LEUEMVS5+HKJ/tmf9MsBiJseXOeY6aldEGw=) 3: 323830333a643838303a3a2f33322d3332203d3e203237393038.roa (hash: jJpg1batYRqfpXmsbQRnx+A363T9d2FeeCzDmuaZyGs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Mar 2026 17:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a6:a0:2d:6c:2c:c4:20:41:a8:33:05:4a:20:a1:de:ea:55:25:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D Validity Not Before: Mar 9 11:54:02 2026 GMT Not After : Mar 14 17:36:02 2026 GMT Subject: CN=0C84FB315A4698CD4E6B50DAB8B5BC2DB35FAEBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:9c:3b:68:d8:2e:ac:5e:22:3b:6c:9f:83: 63:c3:e5:bf:d2:e1:2d:be:14:ad:cb:86:09:38:4d: c2:9c:ba:af:6e:1d:c9:87:91:72:36:45:17:ad:77: e9:70:2a:de:0c:1c:a6:f9:5f:65:fd:1f:84:04:2e: b7:ed:8f:da:bb:06:87:f0:e6:a3:2c:b8:da:42:e0: b8:5e:17:68:3e:68:5a:6b:47:2e:59:7c:2d:2a:80: 58:7f:73:78:9a:62:79:d2:a9:5a:92:11:12:d1:3c: 14:7b:97:06:3f:0b:3f:32:27:f0:23:96:d5:f8:b4: 6b:48:1d:0e:c7:8c:5d:60:89:d0:71:36:6c:81:ac: 81:ea:56:b9:94:38:db:25:bd:64:44:9f:9e:89:0b: 3b:cf:6b:07:aa:12:5b:ca:a3:b7:58:35:25:07:7f: 6a:db:cb:d0:6c:0c:9f:7a:67:e3:53:1f:13:d0:4a: d9:33:de:61:34:24:99:18:65:c7:a3:dc:91:7d:58: 49:70:30:a0:b1:07:3c:25:34:ba:11:f2:36:fe:e3: 2b:62:59:e2:04:54:ac:b2:fe:f0:c0:66:4f:3b:c3: f9:6e:b8:2d:39:63:be:04:13:9b:c0:03:c9:51:0b: d5:85:9a:3a:87:00:7c:f0:55:4e:40:b0:95:b2:2f: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:84:FB:31:5A:46:98:CD:4E:6B:50:DA:B8:B5:BC:2D:B3:5F:AE:BB X509v3 Authority Key Identifier: keyid:96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7a:e3:6a:3b:1a:e3:b7:b4:83:82:73:04:66:0e:16:4e:bc: 6f:12:a0:de:a2:8d:9f:6e:fc:46:00:95:08:43:29:51:22:db: f5:60:7b:af:90:0d:4a:89:9f:98:2b:9e:88:9a:be:a6:d3:8a: ff:95:40:ea:19:37:5e:9c:97:f4:59:5f:71:06:60:38:a1:97: 61:36:e1:2e:ba:99:42:60:1b:13:86:f8:66:bc:da:4c:d1:dc: f4:ee:86:b5:e0:f7:b9:e1:ae:e3:ba:5b:57:ae:0e:54:09:86: a4:89:97:7b:07:76:0f:55:1c:23:c0:b2:8d:f9:b0:c9:cb:24: bd:56:f3:0a:8d:84:9e:64:ea:2d:50:4d:49:8f:c6:53:a0:95: c4:aa:2f:39:ee:f4:71:93:27:7d:0f:d5:93:bb:ac:26:02:ff: 00:e7:14:08:57:d6:af:2b:f6:d1:b2:98:af:6c:21:4d:9c:e1: 1e:25:44:fd:15:f0:e5:70:ef:0f:37:75:e1:8e:d6:c2:a5:7f: bc:a9:8f:fa:c2:d6:db:9f:9a:4f:e7:b9:7e:e6:c2:52:54:24: 7f:81:26:7f:59:ae:23:78:ee:d7:7b:b3:6c:a5:ff:55:3b:da: aa:02:ef:34:d9:e4:19:6a:9b:60:5c:56:d7:1a:66:53:59:72: 15:0a:32:5e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUS6agLWwsxCBBqDMFSiCh3upVJXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY1RUZBMTlBQTRCREIzQjZEMzNCQUU1NDc0REY4QzEz QTJFRUI2RDAeFw0yNjAzMDkxMTU0MDJaFw0yNjAzMTQxNzM2MDJaMDMxMTAvBgNV BAMTKDBDODRGQjMxNUE0Njk4Q0Q0RTZCNTBEQUI4QjVCQzJEQjM1RkFFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/a5w7aNgurF4iO2yfg2PD5b/S 4S2+FK3Lhgk4TcKcuq9uHcmHkXI2RRetd+lwKt4MHKb5X2X9H4QELrftj9q7Bofw 5qMsuNpC4LheF2g+aFprRy5ZfC0qgFh/c3iaYnnSqVqSERLRPBR7lwY/Cz8yJ/Aj ltX4tGtIHQ7HjF1gidBxNmyBrIHqVrmUONslvWREn56JCzvPaweqElvKo7dYNSUH f2rby9BsDJ96Z+NTHxPQStkz3mE0JJkYZcej3JF9WElwMKCxBzwlNLoR8jb+4yti WeIEVKyy/vDAZk87w/luuC05Y74EE5vAA8lRC9WFmjqHAHzwVU5AsJWyL3/bAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDIT7MVpGmM1Oa1DauLW8LbNfrrswHwYDVR0j BBgwFoAUll76GapL2zttM7rlR034wTou620wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMkQ5REY2Qjg1Nzc3QjlGNTNFODFBRkZEODk2NjE2MjdF OERGRkY4MUVFQjhENjRDNzY3ODBFRjFBMEU0MkM5LzAvOTY1RUZBMTlBQTRCREIz QjZEMzNCQUU1NDc0REY4QzEzQTJFRUI2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjVFRkExOUFBNEJEQjNCNkQz M0JBRTU0NzRERjhDMTNBMkVFQjZELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzJEOURGNkI4NTc3N0I5RjUzRTgxQUZGRDg5NjYxNjI3RThERkZGODFF RUI4RDY0Qzc2NzgwRUYxQTBFNDJDOS8wLzk2NUVGQTE5QUE0QkRCM0I2RDMzQkFF NTQ3NERGOEMxM0EyRUVCNkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANeuNqOxrjt7SDgnMEZg4WTrxv EqDeoo2fbvxGAJUIQylRItv1YHuvkA1KiZ+YK56Imr6m04r/lUDqGTdenJf0WV9x BmA4oZdhNuEuuplCYBsThvhmvNpM0dz07oa14Pe54a7jultXrg5UCYakiZd7B3YP VRwjwLKN+bDJyyS9VvMKjYSeZOotUE1Jj8ZToJXEqi857vRxkyd9D9WTu6wmAv8A 5xQIV9avK/bRspivbCFNnOEeJUT9FfDlcO8PN3XhjtbCpX+8qY/6wtbbn5pP57l+ 5sJSVCR/gSZ/Wa4jeO7Xe7Nspf9VO9qqAu802eQZaptgXFbXGmZTWXIVCjJe -----END CERTIFICATE-----Generated at Wed Mar 11 10:00:39 2026 by rpki-client