$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft File: 21B9887060F924CDFF24C230D32A91B83A17CD97.mft (raw, json) Hash identifier: OPmk3GlT5OPGl6DfaE76SzuhlS4058Rg/nglmVJB774= Subject key identifier: 15:5A:C8:03:E7:3B:5E:44:5D:E1:1A:D3:8B:62:AA:FF:F0:17:27:AC Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97 Certificate issuer: /CN=21B9887060F924CDFF24C230D32A91B83A17CD97 Certificate serial: 3A3998337F3F3F467C91EEFD5913D2334988E673 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft Manifest number: 017E Signing time: Wed 25 Mar 2026 17:02:32 +0000 Manifest this update: Wed 25 Mar 2026 16:57:32 +0000 Manifest next update: Mon 30 Mar 2026 04:39:32 +0000 Files and hashes: 1: 21B9887060F924CDFF24C230D32A91B83A17CD97.crl (hash: F8LBf4wWqBjHUskfwahcjlDvmSyl1h7eyqseSW+0CFA=) 2: 323830303a3163303a3a2f33322d3332203d3e203237373730.roa (hash: MUubDt5IC8e9ZqLi9sqOs+Ca8qWwhxWJNmf6EaFb96g=) 3: 3230302e372e3132382e302f32302d3234203d3e203237373730.roa (hash: E1IQlK+SM6uZWwQ2NdtnO1wfKIzIa6EL9Yi8LlnCyVk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 17:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:39:98:33:7f:3f:3f:46:7c:91:ee:fd:59:13:d2:33:49:88:e6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97 Validity Not Before: Mar 25 16:57:32 2026 GMT Not After : Mar 30 04:39:32 2026 GMT Subject: CN=155AC803E73B5E445DE11AD38B62AAFFF01727AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:d6:90:44:88:b2:e4:a0:80:63:f9:b5:d2: e0:e0:b1:43:6c:dc:94:2b:39:3d:a7:1f:34:da:11: e9:2d:17:98:1f:2b:f7:bb:a7:10:02:3c:0c:7e:72: 05:9d:2e:da:f2:f1:24:31:f3:34:cd:c6:94:56:e6: 76:25:46:44:15:40:a2:d5:8f:0b:11:0a:cb:a5:c8: 39:e8:ad:dd:45:a6:88:d7:ae:7b:6e:fe:a3:3b:af: 99:dd:b8:8a:2a:5b:fd:8d:fe:6d:aa:ac:1a:69:c2: 54:18:45:83:b3:a4:bf:c3:58:53:bc:5e:21:06:52: 10:24:5e:4c:8f:79:c1:77:05:37:e8:8d:00:a2:2f: 47:43:e3:da:84:37:80:4d:70:2a:ae:d0:e6:17:8e: 08:a8:fe:6c:c8:43:03:7b:a7:78:a1:0e:6f:6d:1d: 3d:e7:0e:c8:4d:c0:06:af:91:d0:74:6d:f3:52:3c: 68:0e:2e:95:dd:fc:7e:3f:48:d3:7a:71:e0:25:37: 91:6c:92:89:3b:ab:0a:6c:eb:9b:e4:4a:09:5b:cc: 95:ae:b0:2b:b3:77:91:29:3d:a0:73:f9:f0:fb:70: db:70:fe:ad:26:66:f5:aa:69:6a:6a:94:5b:04:e4: 30:11:4d:12:48:24:05:2e:ad:e6:e5:a9:76:f3:fe: 83:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5A:C8:03:E7:3B:5E:44:5D:E1:1A:D3:8B:62:AA:FF:F0:17:27:AC X509v3 Authority Key Identifier: keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:69:f2:a1:9b:42:27:12:21:f3:73:46:72:89:ec:88:bd:38: a5:17:3b:cf:15:ac:a3:09:83:dc:80:66:6d:01:a7:43:cd:92: 48:73:2d:8d:49:b9:89:8f:20:67:d6:73:5d:b6:bd:ed:71:6b: 60:6f:d5:b4:80:99:9b:f2:e4:d0:05:84:68:73:c1:4f:0c:e6: c4:ad:38:69:0f:18:f2:0d:4b:8e:fd:0e:28:18:5b:4f:ee:ca: 4c:7a:46:e1:be:e8:a7:fa:d1:23:da:93:8a:34:4c:c1:9c:40: e9:eb:e6:eb:d9:a3:ad:84:c4:2d:95:fc:2f:ee:13:8d:cb:74: 06:f4:a9:0f:dc:b4:91:c6:c0:a2:65:03:77:46:d4:4c:25:83: ed:a2:d2:af:85:c3:18:6f:f5:b7:31:96:9c:5f:34:88:f2:d0: 59:b4:67:fa:ca:57:ae:3a:6b:a5:b2:78:1e:58:53:39:29:b0: d3:48:93:a7:b1:79:ed:b4:50:c6:77:51:af:76:db:2e:6c:9b: 0b:75:1d:52:ed:ef:23:2e:a3:a3:77:5c:37:bc:06:db:eb:ac: ef:bf:d0:5c:09:9f:45:f4:70:92:38:dc:ed:d5:f0:cf:4a:5e: 09:33:69:69:77:e8:e6:99:3e:f2:df:9a:db:66:e8:3e:16:04: f3:9a:ce:cc -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOjmYM38/P0Z8ke79WRPSM0mI5nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCOTg4NzA2MEY5MjRDREZGMjRDMjMwRDMyQTkxQjgz QTE3Q0Q5NzAeFw0yNjAzMjUxNjU3MzJaFw0yNjAzMzAwNDM5MzJaMDMxMTAvBgNV BAMTKDE1NUFDODAzRTczQjVFNDQ1REUxMUFEMzhCNjJBQUZGRjAxNzI3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4M9aQRIiy5KCAY/m10uDgsUNs 3JQrOT2nHzTaEektF5gfK/e7pxACPAx+cgWdLtry8SQx8zTNxpRW5nYlRkQVQKLV jwsRCsulyDnord1FpojXrntu/qM7r5nduIoqW/2N/m2qrBppwlQYRYOzpL/DWFO8 XiEGUhAkXkyPecF3BTfojQCiL0dD49qEN4BNcCqu0OYXjgio/mzIQwN7p3ihDm9t HT3nDshNwAavkdB0bfNSPGgOLpXd/H4/SNN6ceAlN5Fskok7qwps65vkSglbzJWu sCuzd5EpPaBz+fD7cNtw/q0mZvWqaWpqlFsE5DARTRJIJAUureblqXbz/oM/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUFVrIA+c7XkRd4RrTi2Kq//AXJ6wwHwYDVR0j BBgwFoAUIbmIcGD5JM3/JMIw0yqRuDoXzZcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDM3Q0E4Q0Q5NTc4Qjg1MTZGRjMzRjI0NzY0QUYxREEy MDc4ODA5MzA4RUJGM0YzMERCRjRFRjEwNzdEMzZDLzAvMjFCOTg4NzA2MEY5MjRD REZGMjRDMjMwRDMyQTkxQjgzQTE3Q0Q5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUI5ODg3MDYwRjkyNENERkYy NEMyMzBEMzJBOTFCODNBMTdDRDk3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQzN0NBOENEOTU3OEI4NTE2RkYzM0YyNDc2NEFGMURBMjA3ODgwOTMw OEVCRjNGMzBEQkY0RUYxMDc3RDM2Qy8wLzIxQjk4ODcwNjBGOTI0Q0RGRjI0QzIz MEQzMkE5MUI4M0ExN0NEOTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGafKhm0InEiHzc0ZyieyIvTil FzvPFayjCYPcgGZtAadDzZJIcy2NSbmJjyBn1nNdtr3tcWtgb9W0gJmb8uTQBYRo c8FPDObErThpDxjyDUuO/Q4oGFtP7spMekbhvuin+tEj2pOKNEzBnEDp6+br2aOt hMQtlfwv7hONy3QG9KkP3LSRxsCiZQN3RtRMJYPtotKvhcMYb/W3MZacXzSI8tBZ tGf6yleuOmulsngeWFM5KbDTSJOnsXnttFDGd1GvdtsubJsLdR1S7e8jLqOjd1w3 vAbb66zvv9BcCZ9F9HCSONzt1fDPSl4JM2lpd+jmmT7y35rbZug+FgTzms7M -----END CERTIFICATE-----Generated at Thu Mar 26 17:10:04 2026 by rpki-client