$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft File: 921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft (raw, json) Hash identifier: SA/QnUepCjVlhN2Zbh9GSUwyyprsrWKF82posyHipHc= Subject key identifier: E2:AC:2C:35:3B:40:97:1E:26:DD:B5:CD:64:40:2F:E7:38:D7:5D:C1 Authority key identifier: 92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37 Certificate issuer: /CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437 Certificate serial: 3D47602033972ABAC484AA86E768B6691A3021B8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft Manifest number: 0126 Signing time: Tue 12 May 2026 00:57:02 +0000 Manifest this update: Tue 12 May 2026 00:52:02 +0000 Manifest next update: Sun 17 May 2026 07:49:02 +0000 Files and hashes: 1: 921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl (hash: mfwE5s6ISC5/qBBgKQ18i6yjEt+f3Wlbxgw+Vy2Xq4E=) 2: 3230302e33362e3135392e302f32342d3234203d3e20323731383739.roa (hash: a+WL1Tzck2mH2oJapuBeuDDD68+EX/IRs+ee+XJh0fo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 17 May 2026 07:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:47:60:20:33:97:2a:ba:c4:84:aa:86:e7:68:b6:69:1a:30:21:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437 Validity Not Before: May 12 00:52:02 2026 GMT Not After : May 17 07:49:02 2026 GMT Subject: CN=E2AC2C353B40971E26DDB5CD64402FE738D75DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:dc:18:42:12:23:fe:68:42:74:bc:37:15:fb: d4:ce:1b:27:66:d0:3f:66:f3:b5:bd:01:44:52:86: 90:d7:2a:49:68:c4:3f:7c:d2:d7:e9:33:30:ad:79: fa:a7:64:31:71:32:65:41:07:b6:8d:7f:19:31:6c: ba:00:4d:c6:fa:61:06:68:73:a9:78:27:78:f4:3c: 2a:6c:9e:c8:4a:58:42:07:18:f2:46:54:4f:88:21: d9:b0:55:07:9d:29:41:67:9e:ad:f7:bc:e7:35:43: c9:ec:2d:12:1a:b9:92:46:b6:1d:27:6d:02:f7:75: c4:3f:68:46:a2:23:44:2b:f9:34:c6:df:c6:d7:5a: ac:9c:14:1a:ec:8b:07:b1:8a:81:78:9b:de:16:a2: 6b:dc:68:8c:95:33:7e:e5:12:28:f5:ad:14:ea:38: 3d:08:84:24:52:b1:45:c9:ec:22:3f:e9:84:be:0f: f1:2d:03:02:d7:f1:ba:9f:17:29:37:b9:6c:a2:ee: dd:96:44:27:0a:a6:5b:29:ad:9e:f7:5c:f5:dc:66: f3:dc:91:cf:68:1b:90:49:93:16:18:ce:65:35:0a: 73:c4:d9:51:51:a1:d3:5f:8f:04:f1:86:f6:37:e0: f4:28:6b:81:51:da:db:96:fa:c8:1f:d6:ba:98:b0: db:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AC:2C:35:3B:40:97:1E:26:DD:B5:CD:64:40:2F:E7:38:D7:5D:C1 X509v3 Authority Key Identifier: keyid:92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:40:b1:25:3b:48:03:1f:80:cc:23:a9:40:1f:7f:6f:36:ba: 89:74:0b:bc:78:ba:c2:fc:a8:2c:92:90:22:a6:a2:d4:64:c8: 5f:be:c4:6e:66:f5:30:4d:3b:69:77:82:22:3e:e3:80:62:4e: b9:89:a7:14:b2:19:f2:33:df:59:0a:a3:96:58:c3:61:0e:87: ce:b4:e5:d3:39:bc:33:ec:b6:c5:54:ea:af:bc:08:8d:29:f1: d2:71:93:3b:bc:cf:07:37:26:ff:ea:d1:b6:28:cd:13:15:09: b4:f5:0b:aa:07:b8:5d:a7:bb:aa:8e:5c:f2:91:e5:d7:91:10: c0:f2:07:b7:d5:21:ca:87:d0:39:81:43:37:76:92:4c:c7:10: 6b:e8:58:de:38:62:0d:be:2d:e5:d0:00:fd:19:c9:77:82:ee: 5d:ef:16:d3:7a:21:22:72:29:b8:c5:ab:c7:3c:ec:f5:00:7d: 96:65:fc:39:6c:4f:49:a6:d2:89:3f:b6:7f:58:7e:61:ff:cc: e2:f9:a2:bc:a9:da:45:39:69:fa:ba:fc:d5:c4:6f:93:ea:c0: 06:5b:63:fe:aa:f4:eb:f4:ee:56:e4:26:24:cd:77:1d:12:60: 24:49:af:0e:8f:23:11:f3:e3:52:e5:38:e9:a1:09:d7:03:5b: e9:bc:84:e8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPUdgIDOXKrrEhKqG52i2aRowIbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRUUxMkJBNUQ4NTNGQjVDQUQ3NjdFRjQ3RDJFMEU2 MkEyRDQzNzAeFw0yNjA1MTIwMDUyMDJaFw0yNjA1MTcwNzQ5MDJaMDMxMTAvBgNV BAMTKEUyQUMyQzM1M0I0MDk3MUUyNkREQjVDRDY0NDAyRkU3MzhENzVEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD93BhCEiP+aEJ0vDcV+9TOGydm 0D9m87W9AURShpDXKkloxD980tfpMzCtefqnZDFxMmVBB7aNfxkxbLoATcb6YQZo c6l4J3j0PCpsnshKWEIHGPJGVE+IIdmwVQedKUFnnq33vOc1Q8nsLRIauZJGth0n bQL3dcQ/aEaiI0Qr+TTG38bXWqycFBrsiwexioF4m94WomvcaIyVM37lEij1rRTq OD0IhCRSsUXJ7CI/6YS+D/EtAwLX8bqfFyk3uWyi7t2WRCcKplsprZ73XPXcZvPc kc9oG5BJkxYYzmU1CnPE2VFRodNfjwTxhvY34PQoa4FR2tuW+sgf1rqYsNu1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU4qwsNTtAlx4m3bXNZEAv5zjXXcEwHwYDVR0j BBgwFoAUkh7hK6XYU/tcrXZ+9H0uDmKi1DcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81Q0VFNkE0OTk4MDJGMDgzNjg2OTgwMTBCQjVGMTcyRjUy NjgwRDI2MzFFNEJFMjQ0QUUxREMxNEJGOEYyNjdCLzAvOTIxRUUxMkJBNUQ4NTNG QjVDQUQ3NjdFRjQ3RDJFMEU2MkEyRDQzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjFFRTEyQkE1RDg1M0ZCNUNB RDc2N0VGNDdEMkUwRTYyQTJENDM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUNFRTZBNDk5ODAyRjA4MzY4Njk4MDEwQkI1RjE3MkY1MjY4MEQyNjMx RTRCRTI0NEFFMURDMTRCRjhGMjY3Qi8wLzkyMUVFMTJCQTVEODUzRkI1Q0FENzY3 RUY0N0QyRTBFNjJBMkQ0MzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUQLElO0gDH4DMI6lAH39vNrqJ dAu8eLrC/KgskpAipqLUZMhfvsRuZvUwTTtpd4IiPuOAYk65iacUshnyM99ZCqOW WMNhDofOtOXTObwz7LbFVOqvvAiNKfHScZM7vM8HNyb/6tG2KM0TFQm09QuqB7hd p7uqjlzykeXXkRDA8ge31SHKh9A5gUM3dpJMxxBr6FjeOGINvi3l0AD9Gcl3gu5d 7xbTeiEicim4xavHPOz1AH2WZfw5bE9JptKJP7Z/WH5h/8zi+aK8qdpFOWn6uvzV xG+T6sAGW2P+qvTr9O5W5CYkzXcdEmAkSa8OjyMR8+NS5TjpoQnXA1vpvITo -----END CERTIFICATE-----Generated at Wed May 13 19:04:56 2026 by rpki-client