$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json) Hash identifier: ZLRiZ0yZAJv7iizOSDA8yGg2mv7nyaGz1OJqCbnj+s4= Subject key identifier: 7A:7E:45:8E:BC:98:F2:01:05:AF:01:81:1A:18:8F:30:E6:EA:35:36 Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 3C58B0307C1468C9D01862355C673D29E4B404DB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft Manifest number: 0169 Signing time: Sat 28 Feb 2026 19:26:44 +0000 Manifest this update: Sat 28 Feb 2026 19:21:44 +0000 Manifest next update: Thu 05 Mar 2026 14:24:44 +0000 Files and hashes: 1: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=) 2: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: 4YT76mg5dITWNiH2hE5kgjyBgua4a3LhZgbWUTw9x8I=) 3: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: xNhkVVRpXYFai8yrSjzxAabhnPZ5irdzZYjECPkxfZc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:58:b0:30:7c:14:68:c9:d0:18:62:35:5c:67:3d:29:e4:b4:04:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Feb 28 19:21:44 2026 GMT Not After : Mar 5 14:24:44 2026 GMT Subject: CN=7A7E458EBC98F20105AF01811A188F30E6EA3536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0d:d8:14:cd:7d:92:a0:e6:e0:01:03:c9:15: 87:04:aa:e9:be:48:4a:57:92:71:ce:60:46:b2:ef: 1b:fb:ee:ef:df:a9:df:c7:75:2f:6f:80:61:b2:f3: 3b:27:59:33:dc:06:e0:c2:cc:99:55:24:51:ac:97: 8a:bb:19:4e:72:02:ca:d9:5b:8e:af:87:ed:7d:22: 36:a1:d0:1b:3e:42:10:e2:d6:e1:4f:42:3c:ff:e6: 4b:1a:a8:1c:1c:38:55:b8:a2:65:b7:46:76:0b:e6: c0:0d:32:b3:10:cb:a1:24:96:6a:60:c9:c3:ec:58: c7:85:88:e4:7d:7a:82:a7:52:ad:b9:3e:f8:6a:ac: c7:98:9f:1f:62:4f:f2:33:cb:3c:11:49:22:8c:92: 6c:d6:7b:a9:33:1a:b9:77:a0:de:f3:9b:1f:c5:63: d6:74:15:07:7d:1c:89:82:79:0c:2f:b2:70:c4:32: 73:40:37:68:88:00:0e:84:f1:8a:56:86:e4:13:79: fa:8e:60:29:35:75:71:f9:30:6e:da:e2:c6:f7:48: 2e:5e:10:ec:73:56:10:e5:9f:7a:2c:a2:a3:c3:39: 79:79:78:06:26:3f:35:84:5c:09:22:18:2f:28:a4: 29:46:a9:04:61:d4:32:cb:4c:03:d5:64:02:79:b5: 25:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7E:45:8E:BC:98:F2:01:05:AF:01:81:1A:18:8F:30:E6:EA:35:36 X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:04:09:20:ea:0b:6f:37:61:af:f9:40:ca:e7:d7:9c:cb:2b: ab:77:34:f8:6d:e7:f0:61:93:21:ae:2c:5f:a4:be:8c:2f:f6: 26:ff:23:89:6c:76:08:9f:b2:44:7c:ed:1c:72:59:1c:ff:59: 41:d8:8b:0d:98:fa:b2:f6:6e:99:4f:27:b4:10:e9:e9:14:99: bb:c5:34:a8:02:22:22:b6:15:41:1a:da:c0:83:81:5c:17:e8: 69:be:5b:ce:2e:9f:b6:72:c7:82:ff:8e:7c:77:bb:39:7a:02: a6:a1:8d:36:08:99:43:89:86:80:45:2f:cb:09:ad:13:93:d8: 5e:a7:b3:e0:d8:a9:97:3e:3f:64:7c:60:18:f2:84:d5:80:61: 15:9a:da:87:83:64:fb:73:ed:f5:ba:b3:6c:98:a0:e5:25:c8: ab:02:21:a0:77:ea:78:a9:73:c8:58:46:7f:c5:cc:7c:90:ba: af:1e:34:fc:43:f7:a4:50:c0:28:02:e5:f8:40:4d:79:b6:e1: 32:98:08:23:12:b2:22:b0:04:2d:65:13:c1:27:3f:00:92:80: ce:87:4f:a3:6b:f3:1c:d6:f2:c2:3b:16:62:b2:5d:06:77:a2: ea:96:7b:e5:f6:cc:c0:47:47:b1:2f:b3:fd:c9:74:9b:9a:e2: 62:41:20:6f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPFiwMHwUaMnQGGI1XGc9KeS0BNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNjAyMjgxOTIxNDRaFw0yNjAzMDUxNDI0NDRaMDMxMTAvBgNV BAMTKDdBN0U0NThFQkM5OEYyMDEwNUFGMDE4MTFBMTg4RjMwRTZFQTM1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWDdgUzX2SoObgAQPJFYcEqum+ SEpXknHOYEay7xv77u/fqd/HdS9vgGGy8zsnWTPcBuDCzJlVJFGsl4q7GU5yAsrZ W46vh+19Ijah0Bs+QhDi1uFPQjz/5ksaqBwcOFW4omW3RnYL5sANMrMQy6Eklmpg ycPsWMeFiOR9eoKnUq25PvhqrMeYnx9iT/IzyzwRSSKMkmzWe6kzGrl3oN7zmx/F Y9Z0FQd9HImCeQwvsnDEMnNAN2iIAA6E8YpWhuQTefqOYCk1dXH5MG7a4sb3SC5e EOxzVhDln3osoqPDOXl5eAYmPzWEXAkiGC8opClGqQRh1DLLTAPVZAJ5tSVBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUen5FjryY8gEFrwGBGhiPMObqNTYwHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6BAkg6gtvN2Gv+UDK59ecyyur dzT4befwYZMhrixfpL6ML/Ym/yOJbHYIn7JEfO0cclkc/1lB2IsNmPqy9m6ZTye0 EOnpFJm7xTSoAiIithVBGtrAg4FcF+hpvlvOLp+2cseC/458d7s5egKmoY02CJlD iYaARS/LCa0Tk9hep7Pg2KmXPj9kfGAY8oTVgGEVmtqHg2T7c+31urNsmKDlJcir AiGgd+p4qXPIWEZ/xcx8kLqvHjT8Q/ekUMAoAuX4QE15tuEymAgjErIisAQtZRPB Jz8AkoDOh0+ja/Mc1vLCOxZisl0Gd6Lqlnvl9szAR0exL7P9yXSbmuJiQSBv -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:44 2026 by rpki-client