$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft File: 3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft (raw, json) Hash identifier: dWjD8Hid/auwm9WRtmZLD06OIhBCM3D4h2Q3O1u6lt8= Subject key identifier: 20:1E:07:50:E9:3A:0D:09:17:76:1E:E4:BA:03:3B:D0:38:BD:BA:1F Authority key identifier: 3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27 Certificate issuer: /CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27 Certificate serial: 524972EA969C1E0EB2B9E2DF6DA1211F761D0820 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft Manifest number: 0137 Signing time: Sun 01 Mar 2026 23:44:08 +0000 Manifest this update: Sun 01 Mar 2026 23:39:08 +0000 Manifest next update: Fri 06 Mar 2026 20:57:08 +0000 Files and hashes: 1: 3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl (hash: 4VJIjGZ93dPDFbwzsJ6O498ldZscjw95aYDUUxNwLsg=) 2: 3138372e3130322e3233302e302f32342d3234203d3e20323730313630.roa (hash: a0k+CwYndo/yJVuwlwMwgfTqpZBa1L3iIsbKzuB2Ssk=) 3: 3138372e3130322e3232392e302f32342d3234203d3e20323733323830.roa (hash: UjH8uRWjG8Ut49YxqXvAmJPaNA3fGdCfKDBGUGrCSiI=) 4: 323830363a3362373a3a2f33322d3332203d3e20323730313135.roa (hash: ApUEMcIFcj7OmyMwoOymjdorssjQseVK3/CqqZnrHys=) 5: 3138372e3130322e3232382e302f32332d3234203d3e20323730313135.roa (hash: T5qcA5Hg+4yxfH7EqrPAjjz2OExW8ImItq8qjroLAnQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 06 Mar 2026 20:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:49:72:ea:96:9c:1e:0e:b2:b9:e2:df:6d:a1:21:1f:76:1d:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27 Validity Not Before: Mar 1 23:39:08 2026 GMT Not After : Mar 6 20:57:08 2026 GMT Subject: CN=201E0750E93A0D0917761EE4BA033BD038BDBA1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:92:f9:03:ed:4d:e5:86:bf:0a:c3:0f:88:bf: ba:e2:5d:53:86:d7:e8:3f:d0:35:8d:ad:32:32:62: 67:eb:43:73:8f:89:0e:ad:f9:c9:e0:36:a7:8a:30: d7:ea:5f:d8:3c:c3:01:fe:c8:f2:3e:24:a5:02:43: eb:89:1d:97:3d:df:fa:5c:d5:1d:f9:38:6c:d1:75: 0f:41:bd:6f:e9:f2:3e:26:ce:fb:74:fc:87:b5:cc: e8:dc:34:5c:81:a5:52:40:cf:f8:ba:af:bd:77:a2: 3e:83:e7:d5:a2:99:7e:2c:5f:f5:3c:55:2b:29:26: e3:f6:ce:6b:a4:64:ef:ac:65:c3:77:46:a4:01:42: 2b:88:be:13:bc:47:a1:d1:e2:97:dd:f3:b5:da:0c: 4c:0c:52:7a:06:86:ca:bd:41:8d:72:26:19:88:00: 69:cf:cb:0d:91:75:59:6d:77:f6:be:1d:11:ab:83: 70:73:3c:88:b1:22:ba:f4:ad:52:d4:b0:8e:b3:7e: 28:ba:b5:d9:d0:b3:e6:90:e7:57:82:73:29:78:c5: 7d:31:e9:3c:ba:23:08:20:cc:20:0e:ae:3d:96:7f: 06:6a:83:0c:eb:b0:05:b5:d7:64:c3:04:92:cb:4a: 0d:35:e0:29:bd:f2:a3:bb:1b:17:cc:37:5d:1d:db: 09:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1E:07:50:E9:3A:0D:09:17:76:1E:E4:BA:03:3B:D0:38:BD:BA:1F X509v3 Authority Key Identifier: keyid:3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:94:ae:4c:d9:e2:ce:25:c3:51:76:b4:96:7e:88:dd:83:6b: 42:26:4e:df:39:9f:9b:fb:20:2d:89:3c:ac:db:3a:26:ce:be: d1:9e:c9:54:cc:85:7e:83:52:85:37:eb:d9:39:50:b0:58:71: 44:3d:89:93:42:12:ab:66:fe:bf:b3:a5:4a:fc:11:d8:1b:77: c8:4b:5e:d5:76:56:05:63:40:b2:61:2d:c6:5b:0f:b3:f9:d6: a3:d1:33:ef:af:ce:32:4b:db:4c:2a:67:87:6b:56:8e:ac:ce: 29:22:05:c7:40:96:ad:21:ec:81:9c:7b:11:47:3a:98:25:ba: d5:85:de:f4:b5:2d:42:69:fb:97:e0:6f:ac:ff:32:84:99:2e: cd:a7:7f:80:b9:a4:3c:bc:50:04:25:df:1e:eb:8c:1b:d9:d4: e6:68:d6:09:08:1b:6c:4b:a5:07:7a:5d:ff:ba:ca:c7:1b:48: 10:1f:f1:fa:45:ea:21:86:1c:bf:8a:be:16:bf:54:1e:cd:80: 63:7c:93:31:c3:b2:f1:c6:0c:6e:0c:4c:e8:3c:47:7a:98:16: c4:19:66:e0:ab:e5:84:7c:1a:d7:f2:68:2d:24:1a:cf:f2:0c: 1f:3b:df:c8:20:e5:61:8e:3f:f9:a4:4b:0d:f0:69:f0:28:a1: e9:53:13:80 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUkly6pacHg6yueLfbaEhH3YdCCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E0QTI5REVCRDU5QzdBMDRFNjE5M0E0MkE1RUZDM0My NDRCMkQyNzAeFw0yNjAzMDEyMzM5MDhaFw0yNjAzMDYyMDU3MDhaMDMxMTAvBgNV BAMTKDIwMUUwNzUwRTkzQTBEMDkxNzc2MUVFNEJBMDMzQkQwMzhCREJBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYkvkD7U3lhr8Kww+Iv7riXVOG 1+g/0DWNrTIyYmfrQ3OPiQ6t+cngNqeKMNfqX9g8wwH+yPI+JKUCQ+uJHZc93/pc 1R35OGzRdQ9BvW/p8j4mzvt0/Ie1zOjcNFyBpVJAz/i6r713oj6D59WimX4sX/U8 VSspJuP2zmukZO+sZcN3RqQBQiuIvhO8R6HR4pfd87XaDEwMUnoGhsq9QY1yJhmI AGnPyw2RdVltd/a+HRGrg3BzPIixIrr0rVLUsI6zfii6tdnQs+aQ51eCcyl4xX0x 6Ty6IwggzCAOrj2WfwZqgwzrsAW112TDBJLLSg014Cm98qO7GxfMN10d2wlLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIB4HUOk6DQkXdh7kugM70Di9uh8wHwYDVR0j BBgwFoAUOkop3r1Zx6BOYZOkKl78PCRLLScwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQ0FBQ0RCQzIyMkQ2NEQ0OUU1QzJFQkJCN0YyN0Y4NjEw ODU4OTBFMjY1QjhDNjUxQ0FGNTlDNzI1QUE3RDFFLzAvM0E0QTI5REVCRDU5QzdB MDRFNjE5M0E0MkE1RUZDM0MyNDRCMkQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTRBMjlERUJENTlDN0EwNEU2 MTkzQTQyQTVFRkMzQzI0NEIyRDI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0NBQUNEQkMyMjJENjRENDlFNUMyRUJCQjdGMjdGODYxMDg1ODkwRTI2 NUI4QzY1MUNBRjU5QzcyNUFBN0QxRS8wLzNBNEEyOURFQkQ1OUM3QTA0RTYxOTNB NDJBNUVGQzNDMjQ0QjJEMjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxlK5M2eLOJcNRdrSWfojdg2tC Jk7fOZ+b+yAtiTys2zomzr7RnslUzIV+g1KFN+vZOVCwWHFEPYmTQhKrZv6/s6VK /BHYG3fIS17VdlYFY0CyYS3GWw+z+daj0TPvr84yS9tMKmeHa1aOrM4pIgXHQJat IeyBnHsRRzqYJbrVhd70tS1CafuX4G+s/zKEmS7Np3+AuaQ8vFAEJd8e64wb2dTm aNYJCBtsS6UHel3/usrHG0gQH/H6Reohhhy/ir4Wv1QezYBjfJMxw7LxxgxuDEzo PEd6mBbEGWbgq+WEfBrX8mgtJBrP8gwfO9/IIOVhjj/5pEsN8GnwKKHpUxOA -----END CERTIFICATE-----Generated at Mon Mar 2 18:16:29 2026 by rpki-client