$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft File: C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft (raw, json) Hash identifier: rIgswGTUphKlPEgNqqw7Ac2EfS3lkQvirn10ZU536Ho= Subject key identifier: 9A:E8:A9:C9:2A:FE:77:39:7A:21:C7:C6:E2:57:D5:3F:9E:4D:F6:DF Authority key identifier: C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A Certificate issuer: /CN=C7109B5FA9AA24BBF70E62A4318E4348C69F700A Certificate serial: 3C0891C2A1FE3AB64ED4886E8FCA5E6EB2D06C75 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft Manifest number: 0170 Signing time: Mon 02 Mar 2026 12:42:31 +0000 Manifest this update: Mon 02 Mar 2026 12:37:31 +0000 Manifest next update: Sat 07 Mar 2026 00:30:31 +0000 Files and hashes: 1: 34352e3232382e3135322e302f32322d3234203d3e20323636363636.roa (hash: HQ/vG5FAtTx0ICV8WnXdlF0TAVH1vUDxK7uaqriR6hA=) 2: C7109B5FA9AA24BBF70E62A4318E4348C69F700A.crl (hash: /A5e19Y2QjoKLWEdifcipVb6kPNx1ZPT85Mlqh0n2LI=) 3: 323830313a31393a623030303a3a2f34382d3438203d3e20323636363636.roa (hash: DH+HUbkry4p5kwV1aTpDNRofXuBai+7l0QhxwcrE6Sk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.crl rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 00:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:08:91:c2:a1:fe:3a:b6:4e:d4:88:6e:8f:ca:5e:6e:b2:d0:6c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7109B5FA9AA24BBF70E62A4318E4348C69F700A Validity Not Before: Mar 2 12:37:31 2026 GMT Not After : Mar 7 00:30:31 2026 GMT Subject: CN=9AE8A9C92AFE77397A21C7C6E257D53F9E4DF6DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:84:4e:aa:a6:e8:23:5f:90:71:80:f2:3c: 3f:7c:d9:cc:d0:51:0a:f7:33:54:2e:f1:cf:18:2d: 9f:c5:00:f5:24:59:e1:25:88:28:fc:a2:f7:28:49: d9:a7:66:74:d5:5f:de:2d:0d:c6:96:7f:97:a6:83: a6:61:5b:7c:80:de:0d:00:f0:a3:6b:19:e4:a6:6e: c2:66:dd:09:5a:dc:ab:7d:0c:df:2f:ef:50:0f:fe: 6c:96:36:c4:4a:02:08:ec:89:2a:2b:0c:32:c0:2d: 10:0a:e0:3e:85:37:b8:6e:ac:5a:72:b3:ab:a2:d3: ab:c0:91:ac:04:fe:b1:4a:20:a6:f8:21:3e:3a:17: 2d:29:f8:86:34:62:b8:e9:41:1c:b4:6e:90:df:7d: 4d:8b:88:79:79:d0:98:4c:f1:00:f5:00:14:65:4f: 26:f0:32:37:d4:07:c5:1d:d9:c5:7c:96:26:30:ce: f3:ff:5a:32:dc:54:75:22:81:bb:a3:f8:19:23:87: 01:48:b9:f2:ee:99:5c:85:ef:e9:72:20:ec:05:8d: 6a:21:89:5f:29:d7:69:08:e8:da:98:ad:d4:14:95: cc:7a:13:3b:a6:f6:e9:ab:11:db:74:c0:a7:98:aa: 5b:dc:6f:a4:f5:83:4c:ea:28:a5:26:09:99:02:bc: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E8:A9:C9:2A:FE:77:39:7A:21:C7:C6:E2:57:D5:3F:9E:4D:F6:DF X509v3 Authority Key Identifier: keyid:C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:85:db:a6:a6:b1:a7:95:18:d5:a4:b6:39:57:1e:c5:0c:c7: 5d:67:ac:6b:04:f0:67:dc:ff:8a:df:7f:2f:49:07:18:a7:2e: 70:74:c7:88:17:02:ba:33:b9:c4:b1:5a:51:82:f7:1e:e9:b7: a4:1f:e9:47:f0:31:40:3a:ac:4d:d3:bc:4b:cb:20:3f:c5:a6: 07:30:39:5f:98:84:14:ac:e0:7c:85:cc:0e:25:31:be:11:bd: d3:6a:1f:11:8a:9c:65:17:45:6c:f9:ec:e5:28:f4:e3:c6:7d: d5:a4:f1:e5:03:cd:8e:11:e6:13:86:05:dd:c0:0e:1e:45:c0: 5e:82:f4:ed:e0:4e:5b:2d:94:74:eb:30:5f:aa:ac:35:24:32: b3:1a:32:bb:b7:7b:81:b0:e1:e1:f4:d3:f8:ca:26:23:10:47: 98:1e:d5:0f:7b:f6:c9:84:48:e1:68:91:34:bb:5e:b8:2b:bc: ae:63:26:fb:01:b6:a7:8f:d2:e5:2d:2b:f9:1e:23:b9:be:fc: c0:8f:2e:54:3e:40:3c:34:10:c0:d3:56:4a:48:a8:b0:11:d2: 44:06:04:f7:e2:1c:f8:0f:3e:62:33:53:40:d0:b8:18:cd:f7: 26:41:e6:a0:68:1e:bb:4f:a2:07:70:84:68:95:ab:95:63:b8: 70:96:b9:84 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPAiRwqH+OrZO1Ihuj8pebrLQbHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDlCNUZBOUFBMjRCQkY3MEU2MkE0MzE4RTQzNDhD NjlGNzAwQTAeFw0yNjAzMDIxMjM3MzFaFw0yNjAzMDcwMDMwMzFaMDMxMTAvBgNV BAMTKDlBRThBOUM5MkFGRTc3Mzk3QTIxQzdDNkUyNTdENTNGOUU0REY2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzIROqqboI1+QcYDyPD982czQ UQr3M1Qu8c8YLZ/FAPUkWeEliCj8ovcoSdmnZnTVX94tDcaWf5emg6ZhW3yA3g0A 8KNrGeSmbsJm3Qla3Kt9DN8v71AP/myWNsRKAgjsiSorDDLALRAK4D6FN7hurFpy s6ui06vAkawE/rFKIKb4IT46Fy0p+IY0YrjpQRy0bpDffU2LiHl50JhM8QD1ABRl TybwMjfUB8Ud2cV8liYwzvP/WjLcVHUigbuj+BkjhwFIufLumVyF7+lyIOwFjWoh iV8p12kI6NqYrdQUlcx6Ezum9umrEdt0wKeYqlvcb6T1g0zqKKUmCZkCvHnnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUmuipySr+dzl6IcfG4lfVP55N9t8wHwYDVR0j BBgwFoAUxxCbX6mqJLv3DmKkMY5DSMafcAowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DODI4MTQ4QUE5Q0FENDFGNjA3NUY0MkRERDRERDUxQzg4 NDA2RDRGQTBGNDIxMjlFOTlGNDU1MzQyODI4QTdBLzAvQzcxMDlCNUZBOUFBMjRC QkY3MEU2MkE0MzE4RTQzNDhDNjlGNzAwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzEwOUI1RkE5QUEyNEJCRjcw RTYyQTQzMThFNDM0OEM2OUY3MDBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzgyODE0OEFBOUNBRDQxRjYwNzVGNDJEREQ0REQ1MUM4ODQwNkQ0RkEw RjQyMTI5RTk5RjQ1NTM0MjgyOEE3QS8wL0M3MTA5QjVGQTlBQTI0QkJGNzBFNjJB NDMxOEU0MzQ4QzY5RjcwMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKhdumprGnlRjVpLY5Vx7FDMdd Z6xrBPBn3P+K338vSQcYpy5wdMeIFwK6M7nEsVpRgvce6bekH+lH8DFAOqxN07xL yyA/xaYHMDlfmIQUrOB8hcwOJTG+Eb3Tah8RipxlF0Vs+ezlKPTjxn3VpPHlA82O EeYThgXdwA4eRcBegvTt4E5bLZR06zBfqqw1JDKzGjK7t3uBsOHh9NP4yiYjEEeY HtUPe/bJhEjhaJE0u164K7yuYyb7Abanj9LlLSv5HiO5vvzAjy5UPkA8NBDA01ZK SKiwEdJEBgT34hz4Dz5iM1NA0LgYzfcmQeagaB67T6IHcIRolauVY7hwlrmE -----END CERTIFICATE-----Generated at Mon Mar 2 22:37:29 2026 by rpki-client