$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft File: CD721CE88C796E837A067F6BF32EA1016FA71013.mft (raw, json) Hash identifier: b/tHVg65fkJPhGLrMvndb9ciq8aaDh3HPeJ/e60AJds= Subject key identifier: 2C:26:4C:29:42:46:F2:82:31:99:40:D6:EF:15:CB:34:E8:3A:C7:39 Authority key identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 Certificate issuer: /CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Certificate serial: 1A672EEF89DC4A12FDFACBAFEAFD281856CA3EF1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft Manifest number: 016D Signing time: Sun 01 Mar 2026 23:34:03 +0000 Manifest this update: Sun 01 Mar 2026 23:29:03 +0000 Manifest next update: Sat 07 Mar 2026 20:06:03 +0000 Files and hashes: 1: 323830313a3137343a3a2f34342d3438203d3e20323731373830.roa (hash: 3RYErcH5CMzplfkgJZUvReGfpvtYD9FH/ICCFHqCyK0=) 2: 34352e3233332e342e302f32322d3234203d3e20323731373830.roa (hash: tXsl4iW/udLvpxf89fNeyIOORbMp+7ZTyo8QBA042A0=) 3: CD721CE88C796E837A067F6BF32EA1016FA71013.crl (hash: U5rO7ZFGxPKYcN80xBn+4laojPGkb1x3djWIbDnnrqI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:67:2e:ef:89:dc:4a:12:fd:fa:cb:af:ea:fd:28:18:56:ca:3e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Validity Not Before: Mar 1 23:29:03 2026 GMT Not After : Mar 7 20:06:03 2026 GMT Subject: CN=2C264C294246F282319940D6EF15CB34E83AC739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:a6:16:a3:08:0a:c4:97:71:35:97:c1:52: 9b:36:f3:fd:a5:2b:ca:4b:9a:94:bc:e1:db:61:34: a1:c3:9e:22:27:e0:0b:a8:b1:4b:36:71:3c:22:98: 22:68:b5:69:20:b6:9b:72:22:a8:88:f9:08:67:5b: c1:77:f8:69:68:b9:f0:86:e3:a8:22:e1:d9:be:48: 8a:0d:0f:b2:1f:d4:12:53:8d:c1:09:2e:c9:b2:b2: 9d:31:79:4a:e8:9f:85:d2:22:3d:04:a7:65:b4:f5: 73:73:0e:2f:56:a1:0f:40:7c:a9:0d:15:3d:30:94: 01:c9:92:9f:5d:04:39:fb:d9:49:09:50:d7:b6:24: 57:02:ed:2d:7b:a8:4a:23:d2:00:19:57:21:af:b6: 09:e0:1b:22:04:1f:a6:57:9f:2c:f4:2a:53:bc:a2: 34:6a:db:ce:b9:ba:53:46:51:73:12:e3:d9:74:91: 91:a2:2d:67:d1:f1:98:bc:51:47:8c:41:83:24:da: f6:42:01:17:93:85:d6:81:9b:cf:15:0d:c5:8e:e8: c6:d6:06:98:45:a4:92:f6:30:1c:eb:88:02:f6:1b: c3:27:55:54:e8:dd:0c:03:8a:91:f7:89:69:9c:b6: 81:d4:8a:1d:3e:a7:f5:a4:93:98:bf:cf:1f:80:52: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:26:4C:29:42:46:F2:82:31:99:40:D6:EF:15:CB:34:E8:3A:C7:39 X509v3 Authority Key Identifier: keyid:CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ac:5d:ac:c6:4b:ac:ae:cc:57:64:03:91:05:2b:fb:ea:6b: 97:f8:a0:80:b9:b0:a7:e7:ec:f7:0c:63:74:b9:29:0e:94:44: 68:59:a6:d4:54:7c:12:c8:e6:12:9d:ce:7b:1e:97:f8:10:73: cf:d4:f1:ae:3e:37:a6:7c:87:e8:fe:8d:f2:26:e2:00:93:cd: c5:a2:65:41:31:04:26:53:fc:e5:b1:a8:21:23:1d:60:99:b2: 62:1e:45:69:81:16:3c:82:d4:66:28:1f:89:41:1f:f0:a4:bf: 75:33:d2:29:6d:b9:d6:8d:35:ab:b4:65:f2:1a:99:7c:05:a8: 05:9d:a2:25:12:56:ed:6e:c2:0d:fd:84:9b:60:bd:71:58:aa: 2a:cc:41:c8:86:d2:5e:f7:9c:10:7f:09:9b:39:b3:59:09:2a: 2b:e2:1d:96:5b:27:a9:2d:ee:41:cf:45:ec:86:0f:06:b3:d6: a4:05:8c:8d:7f:f5:52:39:ec:0b:8b:4e:94:a6:f8:9d:ef:32: cb:87:d1:30:2e:9c:ee:cb:2c:ae:23:f8:c4:0e:74:1d:11:5a: 36:4d:3a:06:09:9a:ef:92:20:f2:22:35:49:92:6c:4f:59:3b: 60:72:03:19:d7:b9:ce:54:89:60:1c:c3:a6:c7:c6:e2:e1:fc: 8e:22:96:44 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGmcu74ncShL9+suv6v0oGFbKPvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3MjFDRTg4Qzc5NkU4MzdBMDY3RjZCRjMyRUExMDE2 RkE3MTAxMzAeFw0yNjAzMDEyMzI5MDNaFw0yNjAzMDcyMDA2MDNaMDMxMTAvBgNV BAMTKDJDMjY0QzI5NDI0NkYyODIzMTk5NDBENkVGMTVDQjM0RTgzQUM3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1aYWowgKxJdxNZfBUps28/2l K8pLmpS84dthNKHDniIn4AuosUs2cTwimCJotWkgtptyIqiI+QhnW8F3+GloufCG 46gi4dm+SIoND7If1BJTjcEJLsmysp0xeUron4XSIj0Ep2W09XNzDi9WoQ9AfKkN FT0wlAHJkp9dBDn72UkJUNe2JFcC7S17qEoj0gAZVyGvtgngGyIEH6ZXnyz0KlO8 ojRq2865ulNGUXMS49l0kZGiLWfR8Zi8UUeMQYMk2vZCAReThdaBm88VDcWO6MbW BphFpJL2MBzriAL2G8MnVVTo3QwDipH3iWmctoHUih0+p/Wkk5i/zx+AUmTVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULCZMKUJG8oIxmUDW7xXLNOg6xzkwHwYDVR0j BBgwFoAUzXIc6Ix5boN6Bn9r8y6hAW+nEBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNDg3QUYyQTQwREZFNEExMTQ1RUMzMTgyMzQ0N0YwMDRF QzE0ODlDQkIwQ0I2NDNCRUExOUY5MjQ1MTYyODg3LzAvQ0Q3MjFDRTg4Qzc5NkU4 MzdBMDY3RjZCRjMyRUExMDE2RkE3MTAxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDcyMUNFODhDNzk2RTgzN0Ew NjdGNkJGMzJFQTEwMTZGQTcxMDEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjQ4N0FGMkE0MERGRTRBMTE0NUVDMzE4MjM0NDdGMDA0RUMxNDg5Q0JC MENCNjQzQkVBMTlGOTI0NTE2Mjg4Ny8wL0NENzIxQ0U4OEM3OTZFODM3QTA2N0Y2 QkYzMkVBMTAxNkZBNzEwMTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATrF2sxkusrsxXZAORBSv76muX +KCAubCn5+z3DGN0uSkOlERoWabUVHwSyOYSnc57Hpf4EHPP1PGuPjemfIfo/o3y JuIAk83FomVBMQQmU/zlsaghIx1gmbJiHkVpgRY8gtRmKB+JQR/wpL91M9IpbbnW jTWrtGXyGpl8BagFnaIlElbtbsIN/YSbYL1xWKoqzEHIhtJe95wQfwmbObNZCSor 4h2WWyepLe5Bz0Xshg8Gs9akBYyNf/VSOewLi06Upvid7zLLh9EwLpzuyyyuI/jE DnQdEVo2TToGCZrvkiDyIjVJkmxPWTtgcgMZ17nOVIlgHMOmx8bi4fyOIpZE -----END CERTIFICATE-----Generated at Mon Mar 2 17:32:05 2026 by rpki-client