$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft File: 648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft (raw, json) Hash identifier: O98tnfo3dZn8UeOJJB0hV2xdLaWgO/jdzdGBK+TNm/4= Subject key identifier: BF:B3:0F:EA:DF:5A:C1:27:A8:4F:CD:0C:EB:09:FA:23:FE:D6:4E:F0 Authority key identifier: 64:8F:B5:35:ED:8D:F4:46:D0:27:D2:3B:A0:4E:6A:CF:6A:CB:FB:7C Certificate issuer: /CN=648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C Certificate serial: 37C573F1F2B153FAD47AF24464639EFB5D2A008E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft Manifest number: 2E Signing time: Sun 01 Mar 2026 19:41:46 +0000 Manifest this update: Sun 01 Mar 2026 19:36:46 +0000 Manifest next update: Thu 05 Mar 2026 20:04:46 +0000 Files and hashes: 1: 323830363a3432643a3a2f33322d3332203d3e20323732343039.roa (hash: uN6tty7mkQaQxkU5KfULDNMRU1kOAAd04903zpBkwZs=) 2: 648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl (hash: Wn4ANedvklKVxOUgCkUkKCSUcqPw3B1pUfRgwAS8HpY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 20:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c5:73:f1:f2:b1:53:fa:d4:7a:f2:44:64:63:9e:fb:5d:2a:00:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C Validity Not Before: Mar 1 19:36:46 2026 GMT Not After : Mar 5 20:04:46 2026 GMT Subject: CN=BFB30FEADF5AC127A84FCD0CEB09FA23FED64EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:3c:5c:21:f1:c9:22:63:53:7e:f4:17:18: 45:ad:e7:97:91:a8:0a:00:00:fa:77:03:21:24:81: 75:75:ad:2d:49:79:53:c9:7f:7a:0a:4c:8b:19:80: 0a:13:dc:98:d5:9b:6f:62:8f:40:73:44:2e:41:ae: c7:34:eb:8a:c6:26:8f:3a:28:d7:3e:88:d4:2b:07: a8:7d:19:4e:44:ef:9f:e6:3b:ce:a3:4f:19:62:19: c1:56:e5:96:9b:e9:86:b3:23:34:bc:7d:0b:a0:ca: 31:bf:31:18:a2:24:70:fd:2c:66:f8:5b:67:6c:a1: c7:df:05:63:8f:c9:ae:97:a6:65:0f:d6:eb:a7:32: ec:6e:a1:00:09:f1:85:bd:c3:9b:d5:78:4c:a3:b2: fa:53:3d:07:c8:2e:f2:de:ab:57:f7:c0:df:aa:56: 04:da:e5:a5:10:c2:06:ef:ad:e6:8c:bf:af:8c:78: 42:48:87:c1:a9:03:b4:dc:31:38:3c:3c:5c:75:1e: 4f:33:a0:5b:c9:62:58:b0:93:08:6a:6c:61:45:13: c4:28:b9:f7:2c:ed:ea:72:30:e5:4d:3d:32:ac:bd: af:84:c0:e2:30:b4:4e:72:01:09:69:af:08:96:0e: c0:cd:53:88:39:30:7c:38:11:bd:3e:0a:a8:1e:70: 52:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B3:0F:EA:DF:5A:C1:27:A8:4F:CD:0C:EB:09:FA:23:FE:D6:4E:F0 X509v3 Authority Key Identifier: keyid:64:8F:B5:35:ED:8D:F4:46:D0:27:D2:3B:A0:4E:6A:CF:6A:CB:FB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:17:a9:c9:92:d7:5a:1f:01:09:fe:e9:57:13:c1:59:8e:79: 9f:64:05:fd:34:d4:ea:f4:61:0c:c5:d9:06:25:81:d8:a0:18: 69:82:35:68:16:20:65:8b:29:59:57:a1:dd:ae:59:72:a7:7c: b3:8b:1b:8b:a3:d7:58:cf:80:4b:cd:f8:e6:fa:12:64:77:e7: 3d:26:ee:62:10:60:96:30:01:04:df:db:81:29:c1:7c:44:23: 08:71:90:bd:ea:52:b2:7f:8e:ce:e0:d8:43:9c:ef:c5:3e:09: 2b:3b:dc:e0:c5:fc:c8:40:0e:15:31:2c:52:2f:bf:6e:d8:43: e1:3c:32:0e:7e:dc:ac:98:f6:29:77:3a:a6:5f:b2:70:4b:12: b3:43:dd:0d:cc:98:21:09:60:03:b2:8c:9d:54:a3:98:71:67: a5:46:6d:ca:50:ea:5b:47:e1:84:ee:39:b5:63:16:7d:19:fa: e3:61:8f:be:66:f7:6a:01:e4:a8:68:15:88:31:63:14:99:c5: cd:0e:84:62:e1:79:57:41:98:86:ea:cc:5a:06:bf:11:10:82: 97:71:a6:0e:6c:47:e6:f9:69:eb:f3:b9:29:47:5e:37:ad:49: a9:f5:17:cd:63:be:25:60:50:5d:5a:83:ab:28:b6:f3:93:ca: 3e:f6:c6:10 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUN8Vz8fKxU/rUevJEZGOe+10qAI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4RkI1MzVFRDhERjQ0NkQwMjdEMjNCQTA0RTZBQ0Y2 QUNCRkI3QzAeFw0yNjAzMDExOTM2NDZaFw0yNjAzMDUyMDA0NDZaMDMxMTAvBgNV BAMTKEJGQjMwRkVBREY1QUMxMjdBODRGQ0QwQ0VCMDlGQTIzRkVENjRFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DDxcIfHJImNTfvQXGEWt55eR qAoAAPp3AyEkgXV1rS1JeVPJf3oKTIsZgAoT3JjVm29ij0BzRC5Brsc064rGJo86 KNc+iNQrB6h9GU5E75/mO86jTxliGcFW5Zab6YazIzS8fQugyjG/MRiiJHD9LGb4 W2dsocffBWOPya6XpmUP1uunMuxuoQAJ8YW9w5vVeEyjsvpTPQfILvLeq1f3wN+q VgTa5aUQwgbvreaMv6+MeEJIh8GpA7TcMTg8PFx1Hk8zoFvJYliwkwhqbGFFE8Qo ufcs7epyMOVNPTKsva+EwOIwtE5yAQlprwiWDsDNU4g5MHw4Eb0+CqgecFL5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUv7MP6t9awSeoT80M6wn6I/7WTvAwHwYDVR0j BBgwFoAUZI+1Ne2N9EbQJ9I7oE5qz2rL+3wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDg5RkFDRDAxODVDMDcyMTZGRjVDQkVCMzc5MTg2NzRE QTQ3OTdDQTYzRDhEOTM2MzhERTNGNEIyNUVGRURFLzAvNjQ4RkI1MzVFRDhERjQ0 NkQwMjdEMjNCQTA0RTZBQ0Y2QUNCRkI3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDhGQjUzNUVEOERGNDQ2RDAy N0QyM0JBMDRFNkFDRjZBQ0JGQjdDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQ4OUZBQ0QwMTg1QzA3MjE2RkY1Q0JFQjM3OTE4Njc0REE0Nzk3Q0E2 M0Q4RDkzNjM4REUzRjRCMjVFRkVERS8wLzY0OEZCNTM1RUQ4REY0NDZEMDI3RDIz QkEwNEU2QUNGNkFDQkZCN0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYF6nJktdaHwEJ/ulXE8FZjnmf ZAX9NNTq9GEMxdkGJYHYoBhpgjVoFiBliylZV6Hdrllyp3yzixuLo9dYz4BLzfjm +hJkd+c9Ju5iEGCWMAEE39uBKcF8RCMIcZC96lKyf47O4NhDnO/FPgkrO9zgxfzI QA4VMSxSL79u2EPhPDIOftysmPYpdzqmX7JwSxKzQ90NzJghCWADsoydVKOYcWel Rm3KUOpbR+GE7jm1YxZ9GfrjYY++ZvdqAeSoaBWIMWMUmcXNDoRi4XlXQZiG6sxa Br8REIKXcaYObEfm+Wnr87kpR143rUmp9RfNY74lYFBdWoOrKLbzk8o+9sYQ -----END CERTIFICATE-----Generated at Mon Mar 2 15:43:23 2026 by rpki-client