$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft File: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft (raw, json) Hash identifier: MnJAUAUMHtv6Upxth43sBjXupPxyVjh33rjQURHY3os= Subject key identifier: CF:12:8B:9A:52:1D:4D:4D:06:ED:D6:6B:5A:83:32:1D:47:06:E3:2B Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6 Certificate issuer: /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6 Certificate serial: 6602D737F50C9D6DA7066FB96C897FE620F40E32 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft Manifest number: 0171 Signing time: Sun 01 Mar 2026 20:57:30 +0000 Manifest this update: Sun 01 Mar 2026 20:52:30 +0000 Manifest next update: Sat 07 Mar 2026 03:50:30 +0000 Files and hashes: 1: 3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa (hash: HA7OAjjav6xGtFtc3xm/kmZwclGIrpK5p+eZ/CT9NeI=) 2: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl (hash: y+MTVoPSp9b5D0Y0+SOYOUtIU3Uy4vtLPzdjlRLwOhE=) 3: 3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa (hash: KsW2J3ahyaXYo1RVyTmMoodNP/HTzrq2tB5PnE85x3o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 03:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:02:d7:37:f5:0c:9d:6d:a7:06:6f:b9:6c:89:7f:e6:20:f4:0e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6 Validity Not Before: Mar 1 20:52:30 2026 GMT Not After : Mar 7 03:50:30 2026 GMT Subject: CN=CF128B9A521D4D4D06EDD66B5A83321D4706E32B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:50:af:dc:c1:da:9b:71:9d:b7:e2:37:54:69: f5:d3:56:c4:ef:3d:90:12:24:47:ca:d1:d5:56:b9: 16:b8:bb:56:72:07:41:fc:89:9e:0d:e1:4f:a8:f9: 9e:c9:b4:53:62:33:67:b4:7b:0f:e3:3b:90:8e:66: f8:c0:63:b5:e4:97:0d:a8:cd:0b:6c:91:a0:5f:79: 4f:40:e5:57:f2:70:9b:0c:b1:40:68:cb:ed:2f:eb: 98:2c:08:32:97:64:97:53:21:ea:6f:67:3b:3d:ef: d9:f0:68:8e:28:a5:e2:de:3b:4b:f4:d2:ee:57:b1: ac:4a:18:e8:05:4e:0e:aa:d4:84:88:d1:1d:48:29: 61:bc:51:3b:3d:79:df:5c:9e:4d:d4:d2:39:95:07: 37:70:79:ab:d3:b8:f9:51:8c:4d:8a:56:28:27:02: f0:01:98:4a:e7:23:41:3d:78:72:db:2a:05:50:a5: 6c:1f:da:40:49:6a:7c:d2:e8:3c:e9:4a:c8:48:73: b8:36:58:f0:af:90:36:36:39:70:a7:54:05:08:63: f8:40:d2:2c:04:0d:52:ac:55:d9:21:21:3c:0f:e0: 60:47:30:90:71:13:d2:81:14:46:fb:31:bf:02:19: 4e:f8:fa:c7:ef:ed:aa:59:1e:ee:70:ad:02:03:f4: dc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:12:8B:9A:52:1D:4D:4D:06:ED:D6:6B:5A:83:32:1D:47:06:E3:2B X509v3 Authority Key Identifier: keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:dc:a2:b9:89:0c:8f:25:c4:c7:6d:22:5c:7b:4d:67:f7:17: 78:ca:b0:ad:12:fa:b4:81:53:27:f6:36:f2:cf:8e:a1:58:75: 98:21:e3:3a:4b:f6:c2:db:3d:8a:a3:47:58:12:b3:16:db:57: 0d:00:57:a4:cb:1d:d6:5a:c2:01:d9:6c:ca:23:55:bf:47:c3: 13:31:9d:38:6b:a0:6e:a8:51:8e:dd:6e:4a:cf:33:54:9c:cd: 51:a4:6f:82:1d:0e:c1:30:b3:19:28:42:cd:ff:e6:e8:d4:e1: 74:c0:27:d1:5c:25:6c:b1:5a:01:16:45:4c:f2:e6:62:c7:1b: 17:6e:c1:a8:26:b4:15:49:0e:6b:40:cc:b2:fb:e3:79:17:ff: 94:03:ad:1c:d7:66:8d:1d:df:0b:74:b3:fc:0b:36:1e:48:d3: ed:57:65:24:e9:96:ba:94:59:40:37:4b:f8:1d:51:cf:5d:7e: 80:24:89:91:86:3d:5e:83:7f:d4:86:44:a8:33:8e:bf:72:b4: 90:d1:53:51:75:5e:97:fd:57:d7:ea:5d:f2:01:07:ce:71:20: c8:8e:96:d9:e4:67:56:9c:d3:d6:a4:12:29:3c:c9:89:05:cb: e2:73:39:b9:c4:b1:e2:7d:40:0c:e7:6c:30:7c:c6:ed:66:f8: 99:a3:02:66 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZgLXN/UMnW2nBm+5bIl/5iD0DjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4RjBCQjE2NkQxNEU3REQyNUZBNzhDNzg2QjkxN0Qy NjQyQThFNjAeFw0yNjAzMDEyMDUyMzBaFw0yNjAzMDcwMzUwMzBaMDMxMTAvBgNV BAMTKENGMTI4QjlBNTIxRDRENEQwNkVERDY2QjVBODMzMjFENDcwNkUzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPUK/cwdqbcZ234jdUafXTVsTv PZASJEfK0dVWuRa4u1ZyB0H8iZ4N4U+o+Z7JtFNiM2e0ew/jO5COZvjAY7Xklw2o zQtskaBfeU9A5VfycJsMsUBoy+0v65gsCDKXZJdTIepvZzs979nwaI4opeLeO0v0 0u5XsaxKGOgFTg6q1ISI0R1IKWG8UTs9ed9cnk3U0jmVBzdweavTuPlRjE2KVign AvABmErnI0E9eHLbKgVQpWwf2kBJanzS6DzpSshIc7g2WPCvkDY2OXCnVAUIY/hA 0iwEDVKsVdkhITwP4GBHMJBxE9KBFEb7Mb8CGU74+sfv7apZHu5wrQID9NzZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzxKLmlIdTU0G7dZrWoMyHUcG4yswHwYDVR0j BBgwFoAUaI8LsWbRTn3SX6eMeGuRfSZCqOYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQTdFNjlGNzk2MTY5RTY5QzA2NDU4RDAyMzk4MjY1QUND NkEzMjRCMDNBMTkwQ0ZCRTJDN0NCNzJCRDAyNjA5LzAvNjg4RjBCQjE2NkQxNEU3 REQyNUZBNzhDNzg2QjkxN0QyNjQyQThFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82ODhGMEJCMTY2RDE0RTdERDI1 RkE3OEM3ODZCOTE3RDI2NDJBOEU2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0E3RTY5Rjc5NjE2OUU2OUMwNjQ1OEQwMjM5ODI2NUFDQzZBMzI0QjAz QTE5MENGQkUyQzdDQjcyQkQwMjYwOS8wLzY4OEYwQkIxNjZEMTRFN0REMjVGQTc4 Qzc4NkI5MTdEMjY0MkE4RTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBy3KK5iQyPJcTHbSJce01n9xd4 yrCtEvq0gVMn9jbyz46hWHWYIeM6S/bC2z2Ko0dYErMW21cNAFekyx3WWsIB2WzK I1W/R8MTMZ04a6BuqFGO3W5KzzNUnM1RpG+CHQ7BMLMZKELN/+bo1OF0wCfRXCVs sVoBFkVM8uZixxsXbsGoJrQVSQ5rQMyy++N5F/+UA60c12aNHd8LdLP8CzYeSNPt V2Uk6Za6lFlAN0v4HVHPXX6AJImRhj1eg3/UhkSoM46/crSQ0VNRdV6X/VfX6l3y AQfOcSDIjpbZ5GdWnNPWpBIpPMmJBcviczm5xLHifUAM52wwfMbtZviZowJm -----END CERTIFICATE-----Generated at Mon Mar 2 21:39:24 2026 by rpki-client