$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft File: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft (raw, json) Hash identifier: YY8ZzsmGHd0gTsw4lUMDF75sO46Snkbb7ol/Z+60DY0= Subject key identifier: 41:AA:A4:09:24:4B:98:86:76:B7:12:F1:FF:D9:C2:89:66:6B:CF:FA Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A Certificate issuer: /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Certificate serial: 22940B341F5D9584A8D5500065D8CE4A27FC2D1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft Manifest number: 0164 Signing time: Mon 02 Mar 2026 09:15:17 +0000 Manifest this update: Mon 02 Mar 2026 09:10:17 +0000 Manifest next update: Sun 08 Mar 2026 01:44:17 +0000 Files and hashes: 1: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl (hash: WtRrKVX6GvA98tCpPgxQD4u3vQA6vP9JSBrLUjJR/O8=) 2: 323830333a333031303a3a2f33322d3332203d3e20323731383038.roa (hash: ycgTaa6XtkZ44he6da0OLX1fdjnjoEwGBmaH4AloShg=) 3: 3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa (hash: xGM+NbHWopBvvPH46YQ4xiS44h2wG95TA1HWO6+z76w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:94:0b:34:1f:5d:95:84:a8:d5:50:00:65:d8:ce:4a:27:fc:2d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Validity Not Before: Mar 2 09:10:17 2026 GMT Not After : Mar 8 01:44:17 2026 GMT Subject: CN=41AAA409244B988676B712F1FFD9C289666BCFFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:df:af:a2:8e:34:2a:d6:2a:03:42:fb:b5: 4c:a6:a4:f7:14:76:4b:94:67:89:09:a7:ac:67:8d: 05:b9:24:df:00:ff:54:cc:81:1e:fe:9e:17:b4:40: 35:27:cc:fa:65:35:d2:17:fc:8b:0e:3b:69:a1:c8: f3:c0:a4:2e:09:e4:52:e6:84:25:b8:25:98:7c:07: d6:ac:6d:a4:6e:c3:8f:15:d0:a6:8d:24:49:4e:33: 0b:a7:ef:49:cb:9f:54:cb:a9:17:96:dd:40:4d:52: 7d:1e:ba:0f:19:94:64:d6:55:53:28:f8:45:16:bd: 3b:2d:df:e1:44:3e:2c:8e:5b:5a:37:ad:5c:39:15: 8a:c1:0d:7e:e7:90:3b:67:72:9a:3c:e0:5b:5b:84: 73:b7:fc:bf:0f:58:0f:5c:9e:91:34:10:26:38:4d: ab:35:fc:a0:9a:4d:cb:d0:e0:7b:16:75:22:35:4b: a5:1e:50:7a:3e:82:74:e6:c4:06:a8:e0:97:14:ca: 81:ce:57:44:0e:6b:f7:d8:9a:3d:4c:ef:4b:05:e0: a8:cb:6e:3b:3d:03:2d:84:a7:11:ba:c4:cd:89:23: cc:7e:73:6f:cb:5c:ac:53:93:07:ec:6d:4f:20:f9: b0:53:d9:a1:10:3a:8c:9a:b8:7f:8c:76:08:56:c7: ea:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AA:A4:09:24:4B:98:86:76:B7:12:F1:FF:D9:C2:89:66:6B:CF:FA X509v3 Authority Key Identifier: keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:a4:cd:60:eb:a1:9a:87:a0:0b:6d:cf:2b:90:9b:45:70:4f: 03:35:4a:fa:00:1c:8b:24:96:1f:5a:14:b7:6e:77:51:bc:87: 03:72:6c:c0:24:76:53:49:c2:bc:19:63:3d:01:e8:8a:cf:fb: b7:90:2b:d3:02:4d:ea:ec:08:ba:4d:6c:34:28:21:76:08:29: 60:7f:28:f9:62:c7:0d:b0:78:e3:54:ab:39:8a:1a:db:8b:58: dc:26:72:06:93:82:57:08:0a:02:a4:22:de:57:93:5b:d5:be: be:2e:11:dc:e3:81:17:06:6f:9c:e9:7d:0b:53:04:77:63:e5: 36:90:d3:0a:c0:b9:9e:00:60:e7:44:88:7b:c4:c6:02:47:a7: 16:a8:cb:26:c1:e4:0f:b5:da:b2:83:bc:c2:4a:b9:a0:a3:f5: 20:d3:0a:b6:81:cb:7b:ac:39:35:de:52:9f:e8:15:7d:be:b1: 1c:03:2d:41:f9:4f:8f:90:c5:2c:d5:3f:2c:be:1c:e6:a1:42: 5e:0c:b8:74:98:6a:b8:f4:2a:b9:be:da:2e:c3:06:29:f3:63: 69:ee:a7:bd:55:03:d8:06:df:84:f3:9a:72:4e:2d:39:3d:83: 0e:14:49:e9:b0:40:21:cc:4a:84:7e:58:4e:16:7a:07:d6:14: 52:5e:4b:47 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIpQLNB9dlYSo1VAAZdjOSif8LR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ1QUZCQjlERDVFRjZGQjc5NTlBRjc4NENBMzYyRjFG QTA4RDIwQTAeFw0yNjAzMDIwOTEwMTdaFw0yNjAzMDgwMTQ0MTdaMDMxMTAvBgNV BAMTKDQxQUFBNDA5MjQ0Qjk4ODY3NkI3MTJGMUZGRDlDMjg5NjY2QkNGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJa9+voo40KtYqA0L7tUympPcU dkuUZ4kJp6xnjQW5JN8A/1TMgR7+nhe0QDUnzPplNdIX/IsOO2mhyPPApC4J5FLm hCW4JZh8B9asbaRuw48V0KaNJElOMwun70nLn1TLqReW3UBNUn0eug8ZlGTWVVMo +EUWvTst3+FEPiyOW1o3rVw5FYrBDX7nkDtncpo84FtbhHO3/L8PWA9cnpE0ECY4 Tas1/KCaTcvQ4HsWdSI1S6UeUHo+gnTmxAao4JcUyoHOV0QOa/fYmj1M70sF4KjL bjs9Ay2EpxG6xM2JI8x+c2/LXKxTkwfsbU8g+bBT2aEQOoyauH+MdghWx+qrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQaqkCSRLmIZ2txLx/9nCiWZrz/owHwYDVR0j BBgwFoAUnVr7ud1e9vt5Wa94TKNi8foI0gowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FQTVDOEU0RDUzQ0UyNjU0RUZDMTcyMjUxRjk0OTJGQjY0 NzkxM0I2MzRGODMzMjY5N0I2N0FDQUUzRTQ3MUMzLzAvOUQ1QUZCQjlERDVFRjZG Qjc5NTlBRjc4NENBMzYyRjFGQTA4RDIwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDVBRkJCOURENUVGNkZCNzk1 OUFGNzg0Q0EzNjJGMUZBMDhEMjBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRUE1QzhFNEQ1M0NFMjY1NEVGQzE3MjI1MUY5NDkyRkI2NDc5MTNCNjM0 RjgzMzI2OTdCNjdBQ0FFM0U0NzFDMy8wLzlENUFGQkI5REQ1RUY2RkI3OTU5QUY3 ODRDQTM2MkYxRkEwOEQyMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkpM1g66Gah6ALbc8rkJtFcE8D NUr6AByLJJYfWhS3bndRvIcDcmzAJHZTScK8GWM9AeiKz/u3kCvTAk3q7Ai6TWw0 KCF2CClgfyj5YscNsHjjVKs5ihrbi1jcJnIGk4JXCAoCpCLeV5Nb1b6+LhHc44EX Bm+c6X0LUwR3Y+U2kNMKwLmeAGDnRIh7xMYCR6cWqMsmweQPtdqyg7zCSrmgo/Ug 0wq2gct7rDk13lKf6BV9vrEcAy1B+U+PkMUs1T8svhzmoUJeDLh0mGq49Cq5vtou wwYp82Np7qe9VQPYBt+E85pyTi05PYMOFEnpsEAhzEqEflhOFnoH1hRSXktH -----END CERTIFICATE-----Generated at Mon Mar 2 20:20:49 2026 by rpki-client