$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft File: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft (raw, json) Hash identifier: 6EEmVYuxA4O7GvpsRT5I5eAwU5nc1jVAicPKZatVXjM= Subject key identifier: 0E:44:54:CE:9E:4C:D9:60:8D:59:21:BC:9F:12:63:AE:73:F2:33:2D Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 Certificate issuer: /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Certificate serial: 7FA20712EF309C9E657D24DD546FCC92C7235701 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft Manifest number: 0170 Signing time: Sun 01 Mar 2026 00:19:31 +0000 Manifest this update: Sun 01 Mar 2026 00:14:31 +0000 Manifest next update: Thu 05 Mar 2026 23:27:31 +0000 Files and hashes: 1: 28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl (hash: nYcnz8cJpQZMO3tQFQwrzVPLL1nrQyZFXzOebc4h//k=) 2: 34352e3232342e3130342e302f32322d3234203d3e20323635383438.roa (hash: YlfTaaJzQD3Wb5Zv4CuDM26hXCXmaKxYbxt/qmrcoT0=) 3: 323830333a346132303a3a2f33322d3438203d3e20323635383438.roa (hash: lht6e9EhMwJ+EaxrB6aipbBelHpXI2dCPQ9d9c/l7pk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 23:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a2:07:12:ef:30:9c:9e:65:7d:24:dd:54:6f:cc:92:c7:23:57:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653 Validity Not Before: Mar 1 00:14:31 2026 GMT Not After : Mar 5 23:27:31 2026 GMT Subject: CN=0E4454CE9E4CD9608D5921BC9F1263AE73F2332D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4d:d4:de:d6:f9:dc:3a:47:97:7c:b9:6c:7e: 31:e9:e3:66:10:de:9a:f2:c4:bf:7a:25:a1:ec:d9: 71:62:ec:48:e8:a9:ce:ef:9c:34:ae:3a:fa:7d:d2: 1d:67:f1:ea:30:cf:19:e1:16:c6:e1:0b:58:a5:d8: ce:0c:93:bd:50:6e:f4:b9:91:36:82:c1:2c:bf:e2: 1b:7a:2e:db:56:95:cb:e2:35:cb:96:13:21:cb:71: 08:1d:1e:cc:f5:42:0a:21:a0:ce:40:b8:87:6a:a6: 58:28:55:59:b6:f4:b9:34:2f:80:8b:96:f3:0c:17: f1:1b:dc:8f:bd:1d:83:c9:4d:8f:90:6a:fc:60:b9: a6:e9:0b:3e:f9:49:bf:c1:50:91:2b:aa:21:67:d0: 14:65:bf:bc:1f:53:90:b6:7d:37:1a:be:5c:8a:64: 25:85:59:d2:00:3b:7d:1f:03:68:ad:01:cb:9a:b4: 6f:74:a7:f1:c9:4a:8d:fa:3a:60:7c:f1:28:2c:e7: 1f:5e:d9:13:8b:94:0f:73:74:23:88:1a:33:39:1a: 64:fd:a0:be:eb:da:d3:be:13:64:51:12:b9:2b:d3: f7:cd:04:2b:fb:bd:32:a0:51:22:3f:7f:b0:82:52: 10:00:50:50:6c:4b:51:31:ec:d2:cd:5c:66:bd:ce: ea:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:44:54:CE:9E:4C:D9:60:8D:59:21:BC:9F:12:63:AE:73:F2:33:2D X509v3 Authority Key Identifier: keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:50:04:06:80:ba:0f:68:13:ed:ab:6d:8d:5e:74:d1:19:7c: 3d:fc:f4:48:1e:84:70:39:0a:6d:1d:32:5e:bd:f4:50:6d:a7: 03:b8:7e:98:26:c4:53:9d:26:60:52:b5:e0:2b:73:f7:dd:d7: 54:81:5b:c2:93:61:92:7a:b1:4e:5d:86:b3:08:e9:c9:74:90: 01:c0:93:e2:a7:c2:55:ad:90:d8:02:b1:ff:7f:be:f2:96:a3: 75:eb:53:bd:fa:92:d1:6d:d3:45:4d:22:3a:39:be:14:78:57: 81:fe:4e:fb:ae:b0:db:e9:54:4b:2b:39:69:94:44:07:ce:c6: a4:22:83:99:1e:ec:93:d8:1a:da:cc:9b:ee:bd:c2:5a:3c:0d: c8:0f:a0:8b:d7:56:02:8b:1c:1c:6c:c2:5d:8c:e0:94:63:0f: ca:e1:5d:99:f5:cc:45:88:f8:ab:c9:49:91:19:fb:e1:55:1d: 9b:f2:55:9f:60:56:77:97:d6:a7:a5:18:15:fc:f2:09:f5:d4: a7:b2:1b:88:80:1e:55:58:94:5b:47:52:70:67:a5:a7:e1:09: 0c:04:ea:01:5f:32:71:98:d7:9d:1a:6f:d0:0b:cf:7c:d1:73: 7d:43:1d:2c:9e:4e:47:5d:82:14:a7:ec:44:a3:dc:bf:dd:89: 85:f5:f4:c7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUf6IHEu8wnJ5lfSTdVG/MkscjVwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBN0Q1M0JBQzUzMTA1Q0E4QTBCM0ExQzk1QzJFNkE3 MTk4MTY1MzAeFw0yNjAzMDEwMDE0MzFaFw0yNjAzMDUyMzI3MzFaMDMxMTAvBgNV BAMTKDBFNDQ1NENFOUU0Q0Q5NjA4RDU5MjFCQzlGMTI2M0FFNzNGMjMzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPTdTe1vncOkeXfLlsfjHp42YQ 3pryxL96JaHs2XFi7Ejoqc7vnDSuOvp90h1n8eowzxnhFsbhC1il2M4Mk71QbvS5 kTaCwSy/4ht6LttWlcviNcuWEyHLcQgdHsz1QgohoM5AuIdqplgoVVm29Lk0L4CL lvMMF/Eb3I+9HYPJTY+QavxguabpCz75Sb/BUJErqiFn0BRlv7wfU5C2fTcavlyK ZCWFWdIAO30fA2itAcuatG90p/HJSo36OmB88Sgs5x9e2ROLlA9zdCOIGjM5GmT9 oL7r2tO+E2RRErkr0/fNBCv7vTKgUSI/f7CCUhAAUFBsS1Ex7NLNXGa9zurNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDkRUzp5M2WCNWSG8nxJjrnPyMy0wHwYDVR0j BBgwFoAUKKfVO6xTEFyooLOhyVwuanGYFlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RDNDMkZFODI1MzZFNkI5NTQwOUNDMDQ0ODlEM0YwNURF MjA3NDUwNTgwREMwNDMwOTI1NDc5RUUxQzczNzg1LzAvMjhBN0Q1M0JBQzUzMTA1 Q0E4QTBCM0ExQzk1QzJFNkE3MTk4MTY1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEE3RDUzQkFDNTMxMDVDQThB MEIzQTFDOTVDMkU2QTcxOTgxNjUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0QzQzJGRTgyNTM2RTZCOTU0MDlDQzA0NDg5RDNGMDVERTIwNzQ1MDU4 MERDMDQzMDkyNTQ3OUVFMUM3Mzc4NS8wLzI4QTdENTNCQUM1MzEwNUNBOEEwQjNB MUM5NUMyRTZBNzE5ODE2NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUUAQGgLoPaBPtq22NXnTRGXw9 /PRIHoRwOQptHTJevfRQbacDuH6YJsRTnSZgUrXgK3P33ddUgVvCk2GSerFOXYaz COnJdJABwJPip8JVrZDYArH/f77ylqN161O9+pLRbdNFTSI6Ob4UeFeB/k77rrDb 6VRLKzlplEQHzsakIoOZHuyT2BrazJvuvcJaPA3ID6CL11YCixwcbMJdjOCUYw/K 4V2Z9cxFiPiryUmRGfvhVR2b8lWfYFZ3l9anpRgV/PIJ9dSnshuIgB5VWJRbR1Jw Z6Wn4QkMBOoBXzJxmNedGm/QC8980XN9Qx0snk5HXYIUp+xEo9y/3YmF9fTH -----END CERTIFICATE-----Generated at Mon Mar 2 23:01:18 2026 by rpki-client