$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft File: 3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft (raw, json) Hash identifier: kqNPSoN3tpTIxJMy090tcRwBPEE2jXvc5D/+83mAovI= Subject key identifier: 5C:A8:B3:22:4F:7B:38:8D:F2:26:AC:7E:14:15:0E:B4:D4:42:91:93 Authority key identifier: 3C:F3:E4:35:C7:AF:14:89:2C:AA:1C:B3:75:14:E4:D1:5F:6D:85:2E Certificate issuer: /CN=3CF3E435C7AF14892CAA1CB37514E4D15F6D852E Certificate serial: 3683C0C403090573429EE1FFA3084D8FD11BE9FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft Manifest number: 0170 Signing time: Sun 01 Mar 2026 04:27:56 +0000 Manifest this update: Sun 01 Mar 2026 04:22:56 +0000 Manifest next update: Thu 05 Mar 2026 18:11:56 +0000 Files and hashes: 1: 3139302e31322e3134342e302f32322d3234203d3e20323730313237.roa (hash: WNKj59VoaoxbjTXXUb6YM2ItYxEsOLBlSEJW2Z+s9xM=) 2: 323830313a63343a32613a3a2f34382d3438203d3e20323730313237.roa (hash: /S9FBjdHdDmKM4gkrFWARETkkqiMpiMv1Mp8IdLNqsU=) 3: 3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl (hash: TUamLx5dW0P73C0Ju/r7mtM8QyVzrLK11vsTCVhflWE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 18:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:83:c0:c4:03:09:05:73:42:9e:e1:ff:a3:08:4d:8f:d1:1b:e9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CF3E435C7AF14892CAA1CB37514E4D15F6D852E Validity Not Before: Mar 1 04:22:56 2026 GMT Not After : Mar 5 18:11:56 2026 GMT Subject: CN=5CA8B3224F7B388DF226AC7E14150EB4D4429193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:43:8c:30:b6:0c:8e:00:6b:db:e5:81:18: a2:f0:5c:0a:ba:04:6c:d7:ea:a4:f8:41:84:74:fd: b2:36:45:c5:98:f7:d8:91:e5:99:52:4d:a0:0f:27: b2:d4:8e:51:18:83:21:1b:e9:14:c9:95:f9:31:98: 09:f5:3d:1b:0e:63:84:cf:1f:3a:8c:fe:de:17:95: 16:84:0c:69:c0:b8:66:62:35:0e:ec:ef:41:22:db: 93:a2:04:86:91:95:5a:6b:ca:c1:45:54:c0:11:48: 4a:45:76:d4:3a:5e:2b:74:7f:a9:a0:54:25:f5:b4: c2:52:9d:58:2c:c3:e3:fc:e2:9a:80:20:1a:5f:28: e3:79:4e:1f:fb:fe:ae:83:9d:a3:a2:a8:bc:41:68: a1:29:69:dd:a6:d4:96:9a:37:38:af:7c:b5:f2:6d: ca:05:f3:e2:16:90:a4:5f:6f:dc:05:9a:6d:74:4a: db:3a:81:35:fd:21:e9:a3:12:76:b2:df:42:24:a9: 57:93:af:cc:07:3a:63:c5:f0:7d:58:87:1b:59:1a: 68:2f:6a:c7:44:27:c5:4e:bf:e9:32:15:64:7d:a6: bc:d6:b3:8d:59:7f:65:d7:d6:e1:28:9d:ef:ba:01: e9:82:23:57:4b:cb:f5:1c:6c:ae:ef:37:56:63:fe: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A8:B3:22:4F:7B:38:8D:F2:26:AC:7E:14:15:0E:B4:D4:42:91:93 X509v3 Authority Key Identifier: keyid:3C:F3:E4:35:C7:AF:14:89:2C:AA:1C:B3:75:14:E4:D1:5F:6D:85:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:1f:a8:68:83:bb:90:7b:5d:2a:45:ae:17:b3:2c:24:f0:a0: c5:a2:12:0a:aa:db:b9:0c:61:82:09:d2:1c:46:17:db:ed:9a: 83:de:b3:8d:95:7a:14:d9:58:58:a9:be:74:58:9d:7c:f6:7a: 74:0b:a0:3a:f8:b4:0b:4c:25:86:6e:f8:ab:d3:1a:89:a2:4d: ca:2c:51:44:30:1d:00:73:12:5f:62:47:92:33:6b:a6:5e:4b: c7:cd:e6:da:57:e3:d0:89:12:5f:6e:69:af:34:77:17:7c:62: fe:e8:ad:4a:07:de:83:a5:b9:bb:2e:20:7d:cc:4e:73:48:71: 78:b3:77:70:a9:01:95:e2:b7:b4:48:77:6e:6e:31:13:b2:d2: d2:9c:f1:28:a1:a8:f4:56:2c:07:57:70:3c:28:48:6d:35:02: 27:1d:d1:3f:fc:3b:0d:b8:41:8d:fe:43:b6:e6:1c:5f:8d:27: bc:69:6b:85:66:26:3d:00:b1:45:de:66:1f:7b:56:bb:0c:3d: 26:1c:20:b4:63:9c:9c:7a:ed:bf:73:6c:75:0d:cd:a8:e6:73: 61:d6:63:cb:7b:65:ab:86:23:79:47:43:2d:3c:bc:e3:02:c1: d9:64:bf:8c:a6:3a:a6:18:ef:61:95:73:53:d1:8a:68:e0:cd: af:28:f1:b3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNoPAxAMJBXNCnuH/owhNj9Eb6fwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGM0U0MzVDN0FGMTQ4OTJDQUExQ0IzNzUxNEU0RDE1 RjZEODUyRTAeFw0yNjAzMDEwNDIyNTZaFw0yNjAzMDUxODExNTZaMDMxMTAvBgNV BAMTKDVDQThCMzIyNEY3QjM4OERGMjI2QUM3RTE0MTUwRUI0RDQ0MjkxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1EOMMLYMjgBr2+WBGKLwXAq6 BGzX6qT4QYR0/bI2RcWY99iR5ZlSTaAPJ7LUjlEYgyEb6RTJlfkxmAn1PRsOY4TP HzqM/t4XlRaEDGnAuGZiNQ7s70Ei25OiBIaRlVprysFFVMARSEpFdtQ6Xit0f6mg VCX1tMJSnVgsw+P84pqAIBpfKON5Th/7/q6DnaOiqLxBaKEpad2m1JaaNzivfLXy bcoF8+IWkKRfb9wFmm10Sts6gTX9IemjEnay30IkqVeTr8wHOmPF8H1YhxtZGmgv asdEJ8VOv+kyFWR9przWs41Zf2XX1uEone+6AemCI1dLy/UcbK7vN1Zj/uVVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXKizIk97OI3yJqx+FBUOtNRCkZMwHwYDVR0j BBgwFoAUPPPkNcevFIksqhyzdRTk0V9thS4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81N0UzRTk0OTA3QTRENTI0QTU2REE0MUQ3MjM1QUUxRjU1 QzE0RDBCOTcxQkFFMzlGMTc0MTA0MTc5QTFCRDBGLzAvM0NGM0U0MzVDN0FGMTQ4 OTJDQUExQ0IzNzUxNEU0RDE1RjZEODUyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0YzRTQzNUM3QUYxNDg5MkNB QTFDQjM3NTE0RTREMTVGNkQ4NTJFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTdFM0U5NDkwN0E0RDUyNEE1NkRBNDFENzIzNUFFMUY1NUMxNEQwQjk3 MUJBRTM5RjE3NDEwNDE3OUExQkQwRi8wLzNDRjNFNDM1QzdBRjE0ODkyQ0FBMUNC Mzc1MTRFNEQxNUY2RDg1MkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5H6hog7uQe10qRa4Xsywk8KDF ohIKqtu5DGGCCdIcRhfb7ZqD3rONlXoU2VhYqb50WJ189np0C6A6+LQLTCWGbvir 0xqJok3KLFFEMB0AcxJfYkeSM2umXkvHzebaV+PQiRJfbmmvNHcXfGL+6K1KB96D pbm7LiB9zE5zSHF4s3dwqQGV4re0SHdubjETstLSnPEooaj0ViwHV3A8KEhtNQIn HdE//DsNuEGN/kO25hxfjSe8aWuFZiY9ALFF3mYfe1a7DD0mHCC0Y5yceu2/c2x1 Dc2o5nNh1mPLe2WrhiN5R0MtPLzjAsHZZL+MpjqmGO9hlXNT0Ypo4M2vKPGz -----END CERTIFICATE-----Generated at Mon Mar 2 20:19:56 2026 by rpki-client