$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft File: 1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft (raw, json) Hash identifier: 23hhLVbEIzoaL+nmeVZe6YQUgpF9UdSZYdhtsjKBLaQ= Subject key identifier: 0E:90:88:E5:A6:E5:58:A2:8D:C3:00:C8:5F:9B:ED:4D:5E:60:A0:04 Authority key identifier: 1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF Certificate issuer: /CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF Certificate serial: 0EA6D097A175B7B7B8DE919A158B84488C0C3D14 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft Manifest number: 0185 Signing time: Fri 27 Mar 2026 11:32:00 +0000 Manifest this update: Fri 27 Mar 2026 11:27:00 +0000 Manifest next update: Thu 02 Apr 2026 07:20:00 +0000 Files and hashes: 1: 323830313a3163323a3a2f34342d3434203d3e203133343839.roa (hash: i300+FiRFGhFB4TGAEd2yWVtg6SPlx8ytL9pGDOzRGY=) 2: 1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl (hash: 1t658ZUaz5lVRWp92osLC3C+AyK+3Pw7ImE1oR7k/V8=) 3: 323830313a3163323a3a2f34342d3434203d3e203138373437.roa (hash: eIFZJHZ+zcKv3MhYkEcJP6ey5EwPtMkDG9CYToRA5Es=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 01 Apr 2026 21:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a6:d0:97:a1:75:b7:b7:b8:de:91:9a:15:8b:84:48:8c:0c:3d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF Validity Not Before: Mar 27 11:27:00 2026 GMT Not After : Apr 2 07:20:00 2026 GMT Subject: CN=0E9088E5A6E558A28DC300C85F9BED4D5E60A004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:31:89:83:18:5d:8b:ed:97:cb:cf:cd:46: e0:3e:ed:8b:28:1f:52:90:23:d7:0d:ae:03:9d:3e: f7:0c:b7:7f:f4:2c:7f:73:3e:c3:45:50:83:8e:b3: 81:27:d2:12:22:b4:65:19:8b:94:4a:bb:bc:0b:51: fc:d4:16:98:fe:c7:87:d0:0f:b6:93:d3:1f:3d:4c: f5:81:ac:bc:c3:a5:ba:ba:be:26:fb:74:60:80:79: 1c:ee:23:a6:a4:b6:64:4b:72:10:e7:4a:9d:13:83: 29:af:a0:0c:83:38:f5:6d:92:23:07:d6:e5:38:97: c0:a9:f8:e5:4c:03:9e:1a:ef:03:9d:ea:63:38:98: 2f:df:62:f6:74:ff:99:36:76:b9:34:82:9e:9f:e5: e5:0d:70:86:d3:2a:96:bd:d2:ec:35:b4:25:04:d5: 03:00:4d:3e:47:09:33:34:47:62:66:58:bd:7e:7c: 2b:c6:c7:d1:b4:53:e6:6d:e4:69:5d:81:14:7a:11: c2:d0:b7:9a:4e:3f:27:cd:27:c4:2f:a8:71:68:11: 28:b2:76:40:a5:ab:68:17:38:23:28:c7:09:40:00: 01:f5:3f:5c:b9:5b:17:2f:b1:cc:22:c8:db:d2:aa: 81:98:a5:44:da:70:3e:24:3d:b2:2d:3a:80:f4:71: 87:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:90:88:E5:A6:E5:58:A2:8D:C3:00:C8:5F:9B:ED:4D:5E:60:A0:04 X509v3 Authority Key Identifier: keyid:1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b5:f1:44:f3:18:a4:fc:57:7c:e1:29:19:15:c3:87:56:de: ee:98:01:09:23:1c:26:eb:cc:ec:4b:59:5b:08:e9:af:6e:1e: 9b:18:e5:07:54:20:64:ba:ef:12:cd:79:ac:64:83:3e:a6:7c: 37:f2:3f:7d:15:51:33:08:6e:0c:34:71:eb:28:15:fb:31:af: d4:1a:b0:a1:e7:38:00:91:dd:f9:4b:41:6c:2d:d7:cb:be:ce: 3b:c3:9d:2b:d6:51:29:43:c7:61:85:ca:84:bc:f4:c6:cc:bc: 70:4d:d2:10:99:01:8f:a0:27:12:f8:53:99:c8:d6:e5:01:db: d8:75:f7:26:00:f8:3b:d1:79:ad:66:fa:2d:2b:79:61:cd:43: 70:29:8a:29:40:8b:49:f0:80:63:57:18:90:be:83:e3:a5:4c: 7d:c0:f7:b2:fb:7e:0c:c6:39:bb:91:3b:c4:4f:e0:94:c9:71: 82:49:09:12:11:71:44:aa:7a:ca:de:65:59:f9:3d:92:4c:7f: e8:4b:d8:43:43:a8:d7:04:f2:22:76:fb:09:67:1b:1a:40:20: 09:68:8d:73:02:4b:41:b6:26:f0:71:0c:1e:e5:9d:9c:d3:cd: f1:66:be:1a:e3:8e:10:ee:35:66:3e:d6:6b:02:ab:d2:5a:35: 22:7a:d2:95 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDqbQl6F1t7e43pGaFYuESIwMPRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVCNkVGM0NDNTQyMUFDM0FGNzFDQ0RDREY0M0JCMDU1 NkU2QkVGRjAeFw0yNjAzMjcxMTI3MDBaFw0yNjA0MDIwNzIwMDBaMDMxMTAvBgNV BAMTKDBFOTA4OEU1QTZFNTU4QTI4REMzMDBDODVGOUJFRDRENUU2MEEwMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWGTGJgxhdi+2Xy8/NRuA+7Yso H1KQI9cNrgOdPvcMt3/0LH9zPsNFUIOOs4En0hIitGUZi5RKu7wLUfzUFpj+x4fQ D7aT0x89TPWBrLzDpbq6vib7dGCAeRzuI6aktmRLchDnSp0TgymvoAyDOPVtkiMH 1uU4l8Cp+OVMA54a7wOd6mM4mC/fYvZ0/5k2drk0gp6f5eUNcIbTKpa90uw1tCUE 1QMATT5HCTM0R2JmWL1+fCvGx9G0U+Zt5GldgRR6EcLQt5pOPyfNJ8QvqHFoESiy dkClq2gXOCMoxwlAAAH1P1y5WxcvscwiyNvSqoGYpUTacD4kPbItOoD0cYfrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDpCI5ablWKKNwwDIX5vtTV5goAQwHwYDVR0j BBgwFoAUHrbvPMVCGsOvcczc30O7BVbmvv8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DREMxMEZGRTI5MEMyNjcwRkIzM0Y4MTI3N0Y3NUEzRTg1 NkM5RTJBNTA0MjFCNEExQjZGQ0RFQjNEM0IwMTQyLzAvMUVCNkVGM0NDNTQyMUFD M0FGNzFDQ0RDREY0M0JCMDU1NkU2QkVGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRUI2RUYzQ0M1NDIxQUMzQUY3 MUNDRENERjQzQkIwNTU2RTZCRUZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0RDMTBGRkUyOTBDMjY3MEZCMzNGODEyNzdGNzVBM0U4NTZDOUUyQTUw NDIxQjRBMUI2RkNERUIzRDNCMDE0Mi8wLzFFQjZFRjNDQzU0MjFBQzNBRjcxQ0NE Q0RGNDNCQjA1NTZFNkJFRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUtfFE8xik/Fd84SkZFcOHVt7u mAEJIxwm68zsS1lbCOmvbh6bGOUHVCBkuu8SzXmsZIM+pnw38j99FVEzCG4MNHHr KBX7Ma/UGrCh5zgAkd35S0FsLdfLvs47w50r1lEpQ8dhhcqEvPTGzLxwTdIQmQGP oCcS+FOZyNblAdvYdfcmAPg70XmtZvotK3lhzUNwKYopQItJ8IBjVxiQvoPjpUx9 wPey+34Mxjm7kTvET+CUyXGCSQkSEXFEqnrK3mVZ+T2STH/oS9hDQ6jXBPIidvsJ ZxsaQCAJaI1zAktBtibwcQwe5Z2c083xZr4a444Q7jVmPtZrAqvSWjUietKV -----END CERTIFICATE-----Generated at Sun Mar 29 08:41:54 2026 by rpki-client