$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft File: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft (raw, json) Hash identifier: dQHOnotSs+qy8I0k+oFza1MwdPkBUrLJs3Y9ZzyBhME= Subject key identifier: B3:18:A9:EC:94:8F:E8:72:5A:00:20:82:55:D7:B3:DD:5F:02:C0:70 Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 Certificate issuer: /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Certificate serial: 68B5336B7091E7D765FF07BD029BA3B17E614907 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft Manifest number: 016F Signing time: Mon 02 Mar 2026 00:59:50 +0000 Manifest this update: Mon 02 Mar 2026 00:54:50 +0000 Manifest next update: Fri 06 Mar 2026 03:41:50 +0000 Files and hashes: 1: 3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa (hash: R4wTjBxWlpExbHfGaT9L7bqgCN2JZ/n8GYHNr7wl5ec=) 2: 3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa (hash: +9wicyU9h998wF2wwBYP3APlY+qNPrGJ9U0p+EVkmDU=) 3: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl (hash: BJUyxywFQCDNDWRPFgzbxBeHn82L2gi5KseqwS69Ges=) 4: 3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa (hash: 5PtwY/I4K1sqbgk4oepM0bf77G8DSkxSrrobd+DAweY=) 5: 3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa (hash: m0NGfYx5qfHiIZeFiCvtxN+EDVGwFXPY/gwPeOs7NQM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 06 Mar 2026 03:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b5:33:6b:70:91:e7:d7:65:ff:07:bd:02:9b:a3:b1:7e:61:49:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Validity Not Before: Mar 2 00:54:50 2026 GMT Not After : Mar 6 03:41:50 2026 GMT Subject: CN=B318A9EC948FE8725A00208255D7B3DD5F02C070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:03:77:62:98:37:13:5b:20:bf:2c:35:b1: cc:f4:6a:a2:37:ac:ff:83:10:24:7c:ca:bf:eb:f7: 05:fd:b0:f8:ab:be:8a:88:50:f5:7b:ad:f5:c5:63: c2:32:cb:96:43:45:ed:03:a7:e8:4a:af:ec:4e:18: be:e4:3c:93:60:0d:96:ef:3e:d9:89:09:3c:60:0b: a9:6d:6e:3c:2c:68:a9:4a:01:cd:f3:3b:28:c8:78: db:74:34:aa:85:9b:59:ee:14:ae:47:61:a5:dd:26: 21:15:11:04:4f:71:3a:06:f0:63:55:c2:16:97:21: 55:5c:08:45:29:6f:36:51:f7:fa:64:cf:fe:3c:5c: a4:4e:3b:e0:2c:c0:d8:ae:5f:f1:18:9a:33:5d:ed: d5:9d:01:63:76:83:10:bb:49:08:be:61:64:d8:53: 13:7e:a8:64:df:47:32:86:f5:f6:d3:d0:e4:26:cb: 79:80:64:44:b4:8d:f0:7f:04:6f:6c:83:46:68:94: df:c0:37:4b:28:05:b7:f4:07:f9:ff:04:eb:8a:d1: 4b:bf:7a:87:36:85:a2:fe:04:25:28:40:75:fb:d6: 31:59:39:12:d3:75:3e:1a:ab:b5:7c:7a:d4:8a:06: f5:c9:d3:86:43:e1:2f:ef:dd:ee:d0:65:11:e5:37: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:18:A9:EC:94:8F:E8:72:5A:00:20:82:55:D7:B3:DD:5F:02:C0:70 X509v3 Authority Key Identifier: keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:59:8a:f5:61:de:a7:b9:86:59:a7:4b:55:c4:3e:9d:36:ae: be:6b:70:74:bb:98:a0:76:61:44:0c:2a:ff:9c:46:17:d2:0b: 5b:0e:c8:60:80:7f:29:a6:ad:da:a8:2b:9e:50:75:1a:df:aa: 5d:02:8b:56:21:72:d1:d5:31:98:eb:f5:77:89:c9:1a:a1:20: c8:93:5a:03:62:58:45:61:fa:10:84:bb:e5:52:d2:60:1d:1b: 59:93:1d:90:f9:f0:2e:93:5c:ed:96:fc:a1:93:3d:5b:ff:cb: ee:7d:90:92:e9:b8:58:d4:45:53:02:5b:15:82:4d:1d:b0:c1: ff:2b:09:64:2a:29:3b:48:f1:78:a5:77:cc:8b:51:8d:0b:6a: 48:a3:0c:cd:17:85:14:45:22:49:d9:3f:8b:af:9f:77:99:de: 2e:b4:c2:42:a5:bc:e7:21:ae:63:91:a8:a0:79:c7:a7:73:4f: 7c:e7:98:dd:9e:bc:96:15:6e:73:60:ed:a9:8b:d8:8b:c2:64: e2:27:4d:c1:81:3b:60:1e:77:b4:2b:1c:33:2d:f8:06:a6:72: bd:15:33:09:a5:f2:84:41:a2:1c:af:47:25:b6:d5:ee:56:e1: 22:e8:35:f8:8c:41:80:c2:c1:89:f4:03:6e:e5:0f:26:52:3d: 60:52:5a:7e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaLUza3CR59dl/we9ApujsX5hSQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5QUZEM0E5MTI1RERDODhBRENFMkI2REZCQzYzN0Uz OEE3MTFGNTAeFw0yNjAzMDIwMDU0NTBaFw0yNjAzMDYwMzQxNTBaMDMxMTAvBgNV BAMTKEIzMThBOUVDOTQ4RkU4NzI1QTAwMjA4MjU1RDdCM0RENUYwMkMwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xQN3Ypg3E1sgvyw1scz0aqI3 rP+DECR8yr/r9wX9sPirvoqIUPV7rfXFY8Iyy5ZDRe0Dp+hKr+xOGL7kPJNgDZbv PtmJCTxgC6ltbjwsaKlKAc3zOyjIeNt0NKqFm1nuFK5HYaXdJiEVEQRPcToG8GNV whaXIVVcCEUpbzZR9/pkz/48XKROO+AswNiuX/EYmjNd7dWdAWN2gxC7SQi+YWTY UxN+qGTfRzKG9fbT0OQmy3mAZES0jfB/BG9sg0ZolN/AN0soBbf0B/n/BOuK0Uu/ eoc2haL+BCUoQHX71jFZORLTdT4aq7V8etSKBvXJ04ZD4S/v3e7QZRHlNz0FAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUsxip7JSP6HJaACCCVdez3V8CwHAwHwYDVR0j BBgwFoAUmJr9OpEl3ciK3OK237xjfjinEfUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjA1NjMwMEY3MDM0NEZFRjA2RkNFOTQwNjQ1MDI4Mjkz NzAwMUVBMUM3M0JGQzQzQjBBMDQ2NTc5MEE1REU0LzAvOTg5QUZEM0E5MTI1RERD ODhBRENFMkI2REZCQzYzN0UzOEE3MTFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODlBRkQzQTkxMjVEREM4OEFE Q0UyQjZERkJDNjM3RTM4QTcxMUY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkIwNTYzMDBGNzAzNDRGRUYwNkZDRTk0MDY0NTAyODI5MzcwMDFFQTFD NzNCRkM0M0IwQTA0NjU3OTBBNURFNC8wLzk4OUFGRDNBOTEyNUREQzg4QURDRTJC NkRGQkM2MzdFMzhBNzExRjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTWYr1Yd6nuYZZp0tVxD6dNq6+ a3B0u5igdmFEDCr/nEYX0gtbDshggH8ppq3aqCueUHUa36pdAotWIXLR1TGY6/V3 ickaoSDIk1oDYlhFYfoQhLvlUtJgHRtZkx2Q+fAuk1ztlvyhkz1b/8vufZCS6bhY 1EVTAlsVgk0dsMH/KwlkKik7SPF4pXfMi1GNC2pIowzNF4UURSJJ2T+Lr593md4u tMJCpbznIa5jkaigecenc09855jdnryWFW5zYO2pi9iLwmTiJ03BgTtgHne0Kxwz LfgGpnK9FTMJpfKEQaIcr0clttXuVuEi6DX4jEGAwsGJ9ANu5Q8mUj1gUlp+ -----END CERTIFICATE-----Generated at Mon Mar 2 17:58:55 2026 by rpki-client