$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft File: 25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft (raw, json) Hash identifier: zIAS72aqqSGxVjuvlax9EUSZ0FhMiwptCBIs2bFZxpA= Subject key identifier: 4E:86:12:FE:90:5B:D2:AB:A1:08:F3:97:16:4C:82:AB:EB:67:65:D2 Authority key identifier: 25:E2:A4:34:94:D1:3C:6F:2A:BA:67:5D:1A:57:C4:D0:0A:10:8B:2B Certificate issuer: /CN=25E2A43494D13C6F2ABA675D1A57C4D00A108B2B Certificate serial: 68F85171AA28FE096673BC879C4B0CF3D955E395 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft Manifest number: 0171 Signing time: Mon 02 Mar 2026 09:15:18 +0000 Manifest this update: Mon 02 Mar 2026 09:10:18 +0000 Manifest next update: Sun 08 Mar 2026 01:59:18 +0000 Files and hashes: 1: 3230302e3233332e34342e302f32322d3234203d3e203238303332.roa (hash: pO0VwxtE9jLErof31Uyg3SpGqGPzuxPDWIpYL3jzyt4=) 2: 323830333a323565303a3a2f33322d3336203d3e203238303332.roa (hash: eVh6MVqzHUmq4v7nCGYKMiawe1/eCdQhcGnTOE9xoHc=) 3: 25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl (hash: xWo1oq10U/AWR19+1fnXw9yrBdWKy+gk57R5fc3uruQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f8:51:71:aa:28:fe:09:66:73:bc:87:9c:4b:0c:f3:d9:55:e3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25E2A43494D13C6F2ABA675D1A57C4D00A108B2B Validity Not Before: Mar 2 09:10:18 2026 GMT Not After : Mar 8 01:59:18 2026 GMT Subject: CN=4E8612FE905BD2ABA108F397164C82ABEB6765D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:36:a7:17:09:01:fc:47:bd:b3:48:85:d1: 23:39:f8:d3:aa:9f:14:ef:45:23:24:68:1e:a9:7d: 82:27:cd:78:1c:64:01:a2:63:3b:09:22:af:b1:cd: 01:43:a6:e6:48:0b:7f:1d:83:d4:8e:47:cc:7f:18: df:2b:a6:3e:d7:75:1a:d1:3f:e2:14:b3:32:8f:e0: bc:3b:76:b4:2d:3d:d1:bb:d3:7e:da:2a:19:04:27: 14:39:b3:5e:fd:fd:52:66:28:4c:dc:26:e7:75:48: 66:ed:b1:51:c0:8b:86:af:a6:f9:89:b7:08:1c:d1: 3d:1f:ab:74:ae:b5:aa:8a:e1:bf:ad:1e:d6:87:13: 72:3b:28:09:72:fd:fb:da:c2:96:28:e0:d3:a1:ba: 1e:06:b2:0f:d8:ec:fd:b0:e7:15:3d:15:50:6a:70: 44:91:7e:db:ff:2e:3a:75:5f:37:d2:f0:d9:80:04: ff:fb:49:f3:ee:a8:bc:11:13:71:f9:f8:c0:cd:19: 7c:27:ae:c8:d8:df:c6:ca:65:6c:a4:22:d7:9c:1f: 13:c9:b2:4a:32:3e:dc:76:23:bc:a9:60:50:eb:25: d4:37:eb:a0:bd:8d:e7:3b:82:36:d3:65:2c:d6:62: 68:1c:14:ec:aa:53:a4:25:90:e4:e2:14:7d:50:a1: ab:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:86:12:FE:90:5B:D2:AB:A1:08:F3:97:16:4C:82:AB:EB:67:65:D2 X509v3 Authority Key Identifier: keyid:25:E2:A4:34:94:D1:3C:6F:2A:BA:67:5D:1A:57:C4:D0:0A:10:8B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3f:59:5d:d9:f6:6c:9a:c4:45:ad:51:24:21:32:c7:02:d9: d7:2d:35:24:5a:14:d7:8e:8f:ea:ec:4f:fb:cf:08:67:b5:65: 1b:c3:fe:60:ce:06:dc:57:d2:ac:f2:0e:ef:3b:ab:61:ec:1c: ba:b8:b7:e1:c4:63:ff:17:66:2e:31:96:c4:62:6d:65:32:2e: 12:38:4d:4b:d0:ae:5d:87:22:f6:39:e6:32:e8:04:5a:86:78: 1a:4f:ab:39:a1:2b:d9:d1:a5:9b:c6:21:ff:0d:8c:4e:7f:9d: 36:75:f3:e4:dd:d9:d9:a8:cd:73:ca:cd:90:4a:bb:97:41:5e: bf:2e:f9:4e:4d:7f:6c:bb:25:0d:54:b4:b4:ed:7b:13:1b:7e: 7e:7c:d7:11:97:89:1a:86:80:45:6c:da:07:28:de:66:c5:f2: 69:ee:74:94:2e:c8:bf:53:dc:d9:08:ae:93:f4:65:71:65:b8: ab:da:3b:83:f4:ad:af:67:dc:76:6f:0f:57:07:60:f9:6f:be: 4f:f8:4f:0a:f2:b6:3c:49:58:e4:aa:27:f4:d0:8b:0c:de:d2: eb:5e:3d:f4:1f:64:9c:03:25:3f:44:03:6c:19:ad:aa:73:41: e6:20:ef:6c:06:0e:62:38:2b:68:63:bc:71:5a:ef:89:c8:c9: cd:a0:11:a1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaPhRcaoo/glmc7yHnEsM89lV45UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVFMkE0MzQ5NEQxM0M2RjJBQkE2NzVEMUE1N0M0RDAw QTEwOEIyQjAeFw0yNjAzMDIwOTEwMThaFw0yNjAzMDgwMTU5MThaMDMxMTAvBgNV BAMTKDRFODYxMkZFOTA1QkQyQUJBMTA4RjM5NzE2NEM4MkFCRUI2NzY1RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQzanFwkB/Ee9s0iF0SM5+NOq nxTvRSMkaB6pfYInzXgcZAGiYzsJIq+xzQFDpuZIC38dg9SOR8x/GN8rpj7XdRrR P+IUszKP4Lw7drQtPdG7037aKhkEJxQ5s179/VJmKEzcJud1SGbtsVHAi4avpvmJ twgc0T0fq3SutaqK4b+tHtaHE3I7KAly/fvawpYo4NOhuh4Gsg/Y7P2w5xU9FVBq cESRftv/Ljp1XzfS8NmABP/7SfPuqLwRE3H5+MDNGXwnrsjY38bKZWykItecHxPJ skoyPtx2I7ypYFDrJdQ366C9jec7gjbTZSzWYmgcFOyqU6QlkOTiFH1QoatZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUToYS/pBb0quhCPOXFkyCq+tnZdIwHwYDVR0j BBgwFoAUJeKkNJTRPG8qumddGlfE0AoQiyswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNEVEREVFNkI2Rjg4RUExN0U2QzJDRDU2QzU1RjI5QTE5 MzdFQjg3NDVERDU2RjNFNzFCMzQwQTlGRjgzMEE2LzAvMjVFMkE0MzQ5NEQxM0M2 RjJBQkE2NzVEMUE1N0M0RDAwQTEwOEIyQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUUyQTQzNDk0RDEzQzZGMkFC QTY3NUQxQTU3QzREMDBBMTA4QjJCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDRFRERFRTZCNkY4OEVBMTdFNkMyQ0Q1NkM1NUYyOUExOTM3RUI4NzQ1 REQ1NkYzRTcxQjM0MEE5RkY4MzBBNi8wLzI1RTJBNDM0OTREMTNDNkYyQUJBNjc1 RDFBNTdDNEQwMEExMDhCMkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBeP1ld2fZsmsRFrVEkITLHAtnX LTUkWhTXjo/q7E/7zwhntWUbw/5gzgbcV9Ks8g7vO6th7By6uLfhxGP/F2YuMZbE Ym1lMi4SOE1L0K5dhyL2OeYy6ARahngaT6s5oSvZ0aWbxiH/DYxOf502dfPk3dnZ qM1zys2QSruXQV6/LvlOTX9suyUNVLS07XsTG35+fNcRl4kahoBFbNoHKN5mxfJp 7nSULsi/U9zZCK6T9GVxZbir2juD9K2vZ9x2bw9XB2D5b75P+E8K8rY8SVjkqif0 0IsM3tLrXj30H2ScAyU/RANsGa2qc0HmIO9sBg5iOCtoY7xxWu+JyMnNoBGh -----END CERTIFICATE-----Generated at Mon Mar 2 17:32:14 2026 by rpki-client