$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft File: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft (raw, json) Hash identifier: JXGmmG52Q502PbtQ5h8qIdqkv/VQjef2DJR2xYs33E8= Subject key identifier: 4F:E1:68:46:3D:4E:29:0A:82:BE:D1:B3:94:BC:EC:3A:FF:33:D0:08 Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Certificate serial: 03217DAFA1BDA17362BFA628EB968A00A085FD45 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft Manifest number: 0171 Signing time: Mon 02 Mar 2026 03:51:54 +0000 Manifest this update: Mon 02 Mar 2026 03:46:54 +0000 Manifest next update: Sat 07 Mar 2026 22:25:54 +0000 Files and hashes: 1: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl (hash: tRX7zrYJ/fnxIQ4nl9M+67/yozDL8jhFyzcj4byp4YU=) 2: 3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (hash: 5q596PM+UMqbzlUZpIqKCrSaY2zt4Z8whA1r356WEBE=) 3: 3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa (hash: /0Y/XVN9pkW+s3yM7K0FHkRnkMxilXQxG9LBKBIWu4w=) 4: 3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (hash: e4W3CYwq0H9Su+5FogKI0sugsWizWF/fcb5QNdAcrTY=) 5: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (hash: yID5IXtt+1VWbbRYBNze5PWYtWy1MT88oh9ww7MrBWs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:21:7d:af:a1:bd:a1:73:62:bf:a6:28:eb:96:8a:00:a0:85:fd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Validity Not Before: Mar 2 03:46:54 2026 GMT Not After : Mar 7 22:25:54 2026 GMT Subject: CN=4FE168463D4E290A82BED1B394BCEC3AFF33D008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:22:ee:98:f8:1c:54:fc:61:84:94:80:16: e1:92:12:c1:4d:e9:8d:85:01:e8:fc:cc:b7:57:39: 17:0a:a0:53:15:0d:41:3e:15:da:a7:eb:3e:76:10: 98:d2:b5:7a:ee:44:95:82:24:19:e9:e4:09:2f:ad: c5:be:d6:e2:65:ec:e5:4e:c8:b0:51:c4:1a:41:f0: 0c:70:69:0f:3a:13:51:7b:e7:71:ba:42:86:a2:68: e2:b4:17:d7:8e:5b:75:7f:5d:0d:c0:d3:ac:fe:31: 77:74:61:cb:c7:a2:a8:13:8a:24:94:f9:a1:f2:f3: 74:82:58:c5:76:11:d3:01:5f:bb:a5:4c:56:7f:a2: 7f:e3:e5:f6:39:32:13:e8:ea:20:e3:86:d7:fa:bf: 01:95:7e:51:f3:11:5f:11:d7:a5:df:eb:67:1f:11: eb:03:36:5a:e7:a8:b8:9c:6e:c2:16:3c:e3:08:a7: 61:a9:de:b3:ba:db:e8:27:3c:8e:c2:a7:89:1a:a4: 17:b7:5b:fb:92:bc:2c:8f:7f:be:92:70:a6:67:7b: 7f:f4:5d:42:55:92:77:23:b5:18:d9:24:49:b4:2b: 13:07:be:cf:10:9f:56:36:5e:01:19:89:23:79:74: f4:01:80:dd:fc:ef:dd:af:57:db:40:a6:e6:e9:49: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E1:68:46:3D:4E:29:0A:82:BE:D1:B3:94:BC:EC:3A:FF:33:D0:08 X509v3 Authority Key Identifier: keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:d8:c6:9b:f2:ff:89:7f:66:cc:9c:1d:58:9f:50:24:68:49: 3a:0a:a6:6e:b6:cd:65:8b:89:14:bf:2c:71:06:a9:37:6f:4e: 8e:12:c0:91:af:a1:15:94:98:ac:2d:1a:a4:5b:78:37:f9:19: 7b:92:47:8b:b9:bc:3e:d5:3d:35:a2:8c:6f:85:25:54:4a:00: d2:11:91:e8:3b:6d:fb:b0:54:4b:02:1c:ae:9b:b0:26:0f:05: 61:15:79:ea:7f:c8:1d:64:f5:d0:04:77:19:58:a9:d7:26:64: 6b:a2:11:7a:b5:7a:c5:71:64:d2:e0:6c:a7:20:5d:7f:fa:72: ee:4c:5e:d5:df:be:32:58:7c:1d:64:63:92:36:79:61:57:b0: 01:42:d9:c6:f7:b6:8c:2e:f3:54:99:57:a7:33:b8:cb:ae:04: 3d:2d:df:25:2b:d4:a1:33:05:64:fd:80:48:83:90:ec:3d:cb: 83:74:22:e8:b8:0f:4c:71:8f:5c:39:c7:d0:a0:60:e8:99:0d: 01:11:33:80:29:f9:d1:f3:c4:77:80:4a:9f:ae:81:fd:ff:cb: 96:aa:08:77:e6:fa:b5:23:b0:93:1f:7b:d8:68:98:7f:4e:67: e9:2d:6a:1c:db:45:01:85:eb:ea:ae:ae:6a:4a:d1:4d:14:eb: 05:82:7f:03 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAyF9r6G9oXNiv6Yo65aKAKCF/UUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyMUI4MUEzNUJBRjdFNUYxMEUwQzhBQkUxNjQ2Njc0 NUMzN0JGODAeFw0yNjAzMDIwMzQ2NTRaFw0yNjAzMDcyMjI1NTRaMDMxMTAvBgNV BAMTKDRGRTE2ODQ2M0Q0RTI5MEE4MkJFRDFCMzk0QkNFQzNBRkYzM0QwMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nSLumPgcVPxhhJSAFuGSEsFN 6Y2FAej8zLdXORcKoFMVDUE+Fdqn6z52EJjStXruRJWCJBnp5AkvrcW+1uJl7OVO yLBRxBpB8AxwaQ86E1F753G6QoaiaOK0F9eOW3V/XQ3A06z+MXd0YcvHoqgTiiSU +aHy83SCWMV2EdMBX7ulTFZ/on/j5fY5MhPo6iDjhtf6vwGVflHzEV8R16Xf62cf EesDNlrnqLicbsIWPOMIp2Gp3rO62+gnPI7Cp4kapBe3W/uSvCyPf76ScKZne3/0 XUJVkncjtRjZJEm0KxMHvs8Qn1Y2XgEZiSN5dPQBgN38792vV9tApubpSf3DAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUT+FoRj1OKQqCvtGzlLzsOv8z0AgwHwYDVR0j BBgwFoAUqiG4GjW69+XxDgyKvhZGZ0XDe/gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MjQ0MjRFODUyNDUwMDgyQjlCNTQzODFEM0E5NEE4MUQ1 OUNENEU2NjNEREE4NUE0MkM5QjA1MTc3RDc4M0UyLzAvQUEyMUI4MUEzNUJBRjdF NUYxMEUwQzhBQkUxNjQ2Njc0NUMzN0JGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIxQjgxQTM1QkFGN0U1RjEw RTBDOEFCRTE2NDY2NzQ1QzM3QkY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzI0NDI0RTg1MjQ1MDA4MkI5QjU0MzgxRDNBOTRBODFENTlDRDRFNjYz RERBODVBNDJDOUIwNTE3N0Q3ODNFMi8wL0FBMjFCODFBMzVCQUY3RTVGMTBFMEM4 QUJFMTY0NjY3NDVDMzdCRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBh2Mab8v+Jf2bMnB1Yn1AkaEk6 CqZuts1li4kUvyxxBqk3b06OEsCRr6EVlJisLRqkW3g3+Rl7kkeLubw+1T01ooxv hSVUSgDSEZHoO237sFRLAhyum7AmDwVhFXnqf8gdZPXQBHcZWKnXJmRrohF6tXrF cWTS4GynIF1/+nLuTF7V374yWHwdZGOSNnlhV7ABQtnG97aMLvNUmVenM7jLrgQ9 Ld8lK9ShMwVk/YBIg5DsPcuDdCLouA9McY9cOcfQoGDomQ0BETOAKfnR88R3gEqf roH9/8uWqgh35vq1I7CTH3vYaJh/TmfpLWoc20UBhevqrq5qStFNFOsFgn8D -----END CERTIFICATE-----Generated at Mon Mar 2 21:17:05 2026 by rpki-client