$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft File: CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft (raw, json) Hash identifier: zBJOiwQHZ5996aoR+9D2HfIXzhnmy484ltVZ6RsI9E0= Subject key identifier: CB:16:9B:DF:36:71:C3:69:A5:72:2F:3B:D6:CE:C6:35:B2:5A:4D:12 Authority key identifier: CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC Certificate issuer: /CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC Certificate serial: 441A9996400B68A3E41EE16170F0769251C7BB25 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft Manifest number: 0167 Signing time: Sun 01 Mar 2026 12:42:49 +0000 Manifest this update: Sun 01 Mar 2026 12:37:49 +0000 Manifest next update: Fri 06 Mar 2026 04:59:49 +0000 Files and hashes: 1: 34352e3136322e39302e302f32342d3234203d3e20323633323434.roa (hash: v2bOXGe50hh9cJr9tjK8qqk6Xyv3HxDtznM7EuCmpDs=) 2: CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl (hash: ybS1fRVfyOgv8bEgyLha0Yf8IGxAKBXOW85kUSla5K8=) 3: 34352e3136322e39312e302f32342d3234203d3e20323633323434.roa (hash: ZMAlZm5/78JDLK+YTBtHGlTdCpa0kQYbPEJPAneZFXw=) 4: 34352e3136322e38392e302f32342d3234203d3e20323633323434.roa (hash: wHZ1R6IefJYpmXffcUNtSr8KlKvNi2vvD8yMb/xxOHQ=) 5: 34352e3136322e38382e302f32342d3234203d3e20323731383932.roa (hash: 1ml5lfnxDAnDNvyVlD2MJISivqVnbFtzSG7JfYYaQ2E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 06 Mar 2026 04:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:1a:99:96:40:0b:68:a3:e4:1e:e1:61:70:f0:76:92:51:c7:bb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC Validity Not Before: Mar 1 12:37:49 2026 GMT Not After : Mar 6 04:59:49 2026 GMT Subject: CN=CB169BDF3671C369A5722F3BD6CEC635B25A4D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:96:52:f6:90:47:db:93:26:8d:1b:b6:72: 4c:ad:e3:23:2e:41:03:dd:e6:8b:d2:cf:84:5d:4d: 7e:b8:c0:c9:87:88:fc:26:8e:a3:37:39:07:1e:d8: 0d:66:e9:6d:f0:c7:53:db:48:41:a2:64:26:7f:92: af:f9:7c:df:c9:ab:1a:0d:09:35:df:28:d6:0d:b6: a5:c0:84:ee:b8:dc:11:1e:db:a7:2e:17:fd:01:71: d3:e4:c9:0d:d8:09:11:eb:04:79:2a:d2:b0:1f:84: 83:3a:1f:4f:22:6e:80:c0:ff:2f:d8:1c:94:45:32: 29:08:15:19:d2:90:37:ea:4e:14:0a:e7:2b:1c:c2: 5b:5c:a8:e7:31:ac:d4:55:7d:c1:1c:a9:16:a1:29: a6:8b:6f:e3:f0:9a:d4:ba:38:c8:45:d4:cf:e5:61: 58:1c:7b:9d:20:46:4c:24:45:07:a7:f6:c6:ce:32: cf:cd:e1:62:78:9f:b4:fd:5b:1a:04:ec:71:49:cf: 0f:5d:e4:6d:38:83:db:7e:dc:3f:8b:53:ad:b1:ef: e2:d3:ca:e2:47:b2:3a:d8:54:a0:2f:e7:df:fa:cb: 96:be:73:ca:ab:be:c5:79:3b:69:06:92:df:50:ad: 51:53:d7:ea:78:59:9f:f7:a9:f8:31:49:a9:f2:3b: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:16:9B:DF:36:71:C3:69:A5:72:2F:3B:D6:CE:C6:35:B2:5A:4D:12 X509v3 Authority Key Identifier: keyid:CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:02:74:78:a3:d6:c7:0b:a7:10:59:73:89:64:ce:83:fc:d1: 33:3c:78:85:34:e9:04:1f:8b:94:bb:1b:5e:c4:c8:51:c0:a0: f4:6d:a4:02:7a:aa:5d:26:12:de:4b:c0:ee:e3:4c:b1:07:f4: da:e8:86:6f:00:d6:53:a0:f4:6f:70:df:ab:21:61:de:a1:76: dc:f7:c4:5a:26:7d:88:4c:bb:3e:4c:dc:1c:14:c2:19:30:81: a8:3d:2b:b1:c7:35:91:6e:ab:d7:3c:f0:88:fa:8f:cc:7c:c8: d2:52:f2:ab:a3:e0:a4:49:b4:03:97:e2:c7:99:ae:d8:49:66: 73:17:66:2a:8c:48:aa:df:0a:89:0e:9b:d4:47:84:14:92:8e: 80:ca:6f:2b:15:a7:c5:ec:fd:92:8d:f5:3e:9d:e1:6b:00:5e: ec:e9:fb:52:09:18:3b:d6:69:f7:0c:23:f4:a4:2d:3c:03:59: 56:27:61:cf:57:e7:9b:b3:cd:19:f2:af:f0:cd:cb:27:0d:29: a1:8f:3d:7d:2e:33:f3:9e:d7:14:11:11:d0:c8:20:cd:ad:14: 03:a1:67:94:fa:97:a6:7a:7a:60:a9:a4:d4:c7:88:03:1f:4c: 60:94:2c:d3:02:16:65:8e:d2:75:af:4c:cd:61:5b:6b:bb:2c: a0:64:00:73 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURBqZlkALaKPkHuFhcPB2klHHuyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzRkFGQzJFNTVCREZEMzNBMjYwM0Y2ODM5RDA1RUNG NTJBMkNFQzAeFw0yNjAzMDExMjM3NDlaFw0yNjAzMDYwNDU5NDlaMDMxMTAvBgNV BAMTKENCMTY5QkRGMzY3MUMzNjlBNTcyMkYzQkQ2Q0VDNjM1QjI1QTREMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER5ZS9pBH25MmjRu2ckyt4yMu QQPd5ovSz4RdTX64wMmHiPwmjqM3OQce2A1m6W3wx1PbSEGiZCZ/kq/5fN/JqxoN CTXfKNYNtqXAhO643BEe26cuF/0BcdPkyQ3YCRHrBHkq0rAfhIM6H08iboDA/y/Y HJRFMikIFRnSkDfqThQK5yscwltcqOcxrNRVfcEcqRahKaaLb+PwmtS6OMhF1M/l YVgce50gRkwkRQen9sbOMs/N4WJ4n7T9WxoE7HFJzw9d5G04g9t+3D+LU62x7+LT yuJHsjrYVKAv59/6y5a+c8qrvsV5O2kGkt9QrVFT1+p4WZ/3qfgxSanyO+gjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyxab3zZxw2mlci871s7GNbJaTRIwHwYDVR0j BBgwFoAUyj+vwuVb39M6JgP2g50F7PUqLOwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85OEJGNUIzMEM4MzRBQkE1NkE2ODlBRUM2NjMxRjdDMkQ4 RTI1N0Q0QUQxOEE0MUZEQ0RDMDhDMTUxQUMyNkNDLzAvQ0EzRkFGQzJFNTVCREZE MzNBMjYwM0Y2ODM5RDA1RUNGNTJBMkNFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTNGQUZDMkU1NUJERkQzM0Ey NjAzRjY4MzlEMDVFQ0Y1MkEyQ0VDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOThCRjVCMzBDODM0QUJBNTZBNjg5QUVDNjYzMUY3QzJEOEUyNTdENEFE MThBNDFGRENEQzA4QzE1MUFDMjZDQy8wL0NBM0ZBRkMyRTU1QkRGRDMzQTI2MDNG NjgzOUQwNUVDRjUyQTJDRUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbAnR4o9bHC6cQWXOJZM6D/NEz PHiFNOkEH4uUuxtexMhRwKD0baQCeqpdJhLeS8Du40yxB/Ta6IZvANZToPRvcN+r IWHeoXbc98RaJn2ITLs+TNwcFMIZMIGoPSuxxzWRbqvXPPCI+o/MfMjSUvKro+Ck SbQDl+LHma7YSWZzF2YqjEiq3wqJDpvUR4QUko6Aym8rFafF7P2SjfU+neFrAF7s 6ftSCRg71mn3DCP0pC08A1lWJ2HPV+ebs80Z8q/wzcsnDSmhjz19LjPzntcUERHQ yCDNrRQDoWeU+pemenpgqaTUx4gDH0xglCzTAhZljtJ1r0zNYVtruyygZABz -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:35 2026 by rpki-client