$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft File: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft (raw, json) Hash identifier: oEMJBNJm8cSFB1Yp9V/OAe+dshdv3o7JXGxStOQQKAI= Subject key identifier: AE:07:4F:28:C3:7C:56:EB:C1:71:BD:ED:D9:BA:F0:56:D9:53:05:C0 Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8 Certificate issuer: /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8 Certificate serial: 2EEC10369C5AA145BFC87FEF00752CE0AE27C292 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft Manifest number: 0178 Signing time: Tue 24 Mar 2026 01:23:48 +0000 Manifest this update: Tue 24 Mar 2026 01:18:48 +0000 Manifest next update: Sat 28 Mar 2026 06:04:48 +0000 Files and hashes: 1: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl (hash: hQDP87r68L7aHnqehQNB59ScGJpWViN4g6lZS2aC+G0=) 2: 323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa (hash: FZCojbBJ25VJmrSI0Yf+rfkLP/OViCaX28gQ9vWyt7Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Mar 2026 06:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ec:10:36:9c:5a:a1:45:bf:c8:7f:ef:00:75:2c:e0:ae:27:c2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8 Validity Not Before: Mar 24 01:18:48 2026 GMT Not After : Mar 28 06:04:48 2026 GMT Subject: CN=AE074F28C37C56EBC171BDEDD9BAF056D95305C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:05:8b:16:f5:84:3d:99:b7:d8:a8:d7:71:96: 0e:a2:5d:33:2b:f9:da:af:ac:7f:ba:e8:0e:7f:b0: 40:a5:c0:2b:8e:ea:da:84:6d:f8:c1:90:76:f0:18: c7:09:9b:c7:15:e9:7e:d3:fe:02:a0:89:d4:70:8d: ba:eb:8b:69:e5:28:e7:e9:48:da:5b:a4:d0:37:d1: 07:fa:c0:e5:6e:67:53:58:a5:d7:63:b7:b1:9d:63: 9d:c1:a5:ab:45:0b:03:9b:8b:09:65:c6:b7:68:80: 0f:c4:fa:23:b5:e7:ad:ed:69:13:31:18:72:d9:05: b1:37:a5:3a:e9:7e:ba:1b:54:2c:db:d3:ee:af:24: cd:ce:63:f7:c9:a6:a6:70:e3:f5:aa:1f:bd:65:c7: ec:55:6e:b1:90:c6:50:64:a0:13:ce:6e:22:0c:61: f3:9f:9f:63:c6:39:8f:b4:bc:77:90:bf:40:9d:44: 3b:70:22:ba:a2:6f:d0:77:3c:ba:55:e0:3c:9a:16: d5:d4:50:7f:41:ef:2e:4e:a2:e9:84:93:73:d5:7a: f2:0a:13:4c:5b:3f:4c:05:f1:ce:2f:ab:05:91:d6: 1d:77:27:f4:6d:39:2e:8a:b7:8a:9a:31:cc:b8:cd: 61:8a:27:9c:65:7d:6a:b9:d2:f1:2a:23:2f:3d:37: dc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:07:4F:28:C3:7C:56:EB:C1:71:BD:ED:D9:BA:F0:56:D9:53:05:C0 X509v3 Authority Key Identifier: keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:92:76:b9:82:74:83:1a:88:76:5f:8b:9a:61:7b:a4:60:a9: 83:be:0e:22:eb:06:1d:e5:5c:58:d8:eb:ea:27:9a:92:b7:52: 5c:fd:09:4a:ec:b6:ab:ec:aa:ef:f8:71:93:0f:78:41:f1:33: f8:28:5d:37:ec:26:1a:33:53:e5:06:96:da:75:b1:a7:c9:bf: c8:ce:e4:d8:d9:77:0e:c3:f1:fd:1d:e6:f3:8f:9d:d9:67:77: e6:3b:59:88:28:19:34:5e:d0:d3:7d:30:75:03:7b:25:6a:64: 17:36:b0:68:a5:2b:0b:0e:8d:60:05:51:b9:bb:c9:be:a8:bd: ff:f8:49:7c:b7:37:77:bf:58:00:00:2f:3c:3e:3c:e0:f5:fd: 31:27:a1:a3:9f:ed:08:75:ae:ef:d6:8c:b7:a6:1c:23:34:25: 80:6d:c8:a5:72:52:30:33:03:80:ba:58:f9:ff:0d:95:0c:51: b5:e0:55:99:dd:e6:d2:19:90:1a:7e:2d:2c:30:70:4c:77:e1: 30:43:c6:ce:5e:09:d2:95:6d:db:fa:68:1d:91:9e:ba:86:f2: e3:0d:69:4f:eb:b9:0d:4a:18:ed:e6:37:d7:bf:ba:c3:16:2f: a1:ca:a3:db:22:d8:43:1c:35:93:30:84:b5:be:33:3b:4e:8a: fd:e5:2d:cc -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULuwQNpxaoUW/yH/vAHUs4K4nwpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCOERGMUYwQkU2MDlGQjZGOTgwMDNFQjk2QzlDREU3 MkI1M0FGODAeFw0yNjAzMjQwMTE4NDhaFw0yNjAzMjgwNjA0NDhaMDMxMTAvBgNV BAMTKEFFMDc0RjI4QzM3QzU2RUJDMTcxQkRFREQ5QkFGMDU2RDk1MzA1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqBYsW9YQ9mbfYqNdxlg6iXTMr +dqvrH+66A5/sEClwCuO6tqEbfjBkHbwGMcJm8cV6X7T/gKgidRwjbrri2nlKOfp SNpbpNA30Qf6wOVuZ1NYpddjt7GdY53BpatFCwObiwllxrdogA/E+iO1563taRMx GHLZBbE3pTrpfrobVCzb0+6vJM3OY/fJpqZw4/WqH71lx+xVbrGQxlBkoBPObiIM YfOfn2PGOY+0vHeQv0CdRDtwIrqib9B3PLpV4DyaFtXUUH9B7y5OoumEk3PVevIK E0xbP0wF8c4vqwWR1h13J/RtOS6Kt4qaMcy4zWGKJ5xlfWq50vEqIy89N9xZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrgdPKMN8VuvBcb3t2brwVtlTBcAwHwYDVR0j BBgwFoAU37jfHwvmCftvmAA+uWyc3nK1OvgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNzEzNDREQzk5NzdBRjIxQjJGM0NERjY1NTYyODI5NTk2 OEY5OTA3OUI1QTlGMzlBQkNEMDRBNzk0OUQ5RDMxLzAvREZCOERGMUYwQkU2MDlG QjZGOTgwMDNFQjk2QzlDREU3MkI1M0FGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERkI4REYxRjBCRTYwOUZCNkY5 ODAwM0VCOTZDOUNERTcyQjUzQUY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjcxMzQ0REM5OTc3QUYyMUIyRjNDREY2NTU2MjgyOTU5NjhGOTkwNzlC NUE5RjM5QUJDRDA0QTc5NDlEOUQzMS8wL0RGQjhERjFGMEJFNjA5RkI2Rjk4MDAz RUI5NkM5Q0RFNzJCNTNBRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbkna5gnSDGoh2X4uaYXukYKmD vg4i6wYd5VxY2OvqJ5qSt1Jc/QlK7Lar7Krv+HGTD3hB8TP4KF037CYaM1PlBpba dbGnyb/IzuTY2XcOw/H9Hebzj53ZZ3fmO1mIKBk0XtDTfTB1A3slamQXNrBopSsL Do1gBVG5u8m+qL3/+El8tzd3v1gAAC88Pjzg9f0xJ6Gjn+0Ida7v1oy3phwjNCWA bcilclIwMwOAulj5/w2VDFG14FWZ3ebSGZAafi0sMHBMd+EwQ8bOXgnSlW3b+mgd kZ66hvLjDWlP67kNShjt5jfXv7rDFi+hyqPbIthDHDWTMIS1vjM7Tor95S3M -----END CERTIFICATE-----Generated at Tue Mar 24 18:35:25 2026 by rpki-client