$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft File: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft (raw, json) Hash identifier: u1x2L2npZjvUsKdQ/t/r9cOScDBEGXKeUoYFnYEq87I= Subject key identifier: B8:43:A3:FD:A5:24:ED:3C:03:C6:E6:44:F4:69:F8:B6:B9:D9:71:13 Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D Certificate issuer: /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Certificate serial: 7AC4B0DE251C288B087E0ACF58A6D931030A96A3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft Manifest number: 0189 Signing time: Mon 11 May 2026 21:55:12 +0000 Manifest this update: Mon 11 May 2026 21:50:12 +0000 Manifest next update: Sat 16 May 2026 16:59:12 +0000 Files and hashes: 1: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl (hash: gLLDceN2cobXuxzPNh6ODA03fkDBkfKa/NsXenE/AF8=) 2: 323830333a323231303a3a2f33322d3438203d3e20323731383936.roa (hash: adCs36QNzm3GUXnrmgFT4GEFYY5rriy/pu2JadFfnwA=) 3: 3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa (hash: RBMW8BZBcRejMtZPORmbrU0EOWH7r7J/shUtPpOr2Tw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 16 May 2026 16:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c4:b0:de:25:1c:28:8b:08:7e:0a:cf:58:a6:d9:31:03:0a:96:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Validity Not Before: May 11 21:50:12 2026 GMT Not After : May 16 16:59:12 2026 GMT Subject: CN=B843A3FDA524ED3C03C6E644F469F8B6B9D97113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:ab:2b:0e:8b:1e:bd:6e:8c:d4:1b:2c:4d: 70:4e:cd:f6:2a:10:b7:0f:62:74:2a:72:5e:c2:e1: ea:05:2e:09:33:f3:89:bc:9c:39:15:66:a1:cb:02: ec:49:32:49:73:ad:98:61:78:46:f1:54:ef:86:bf: 10:83:eb:f8:22:12:78:a3:d0:6c:ec:d7:f2:a1:10: ce:ad:53:7d:b8:e1:78:5e:c9:15:9b:ff:b2:4d:81: 90:1d:a4:3a:b9:1e:2f:02:aa:70:cc:7a:47:2c:de: bc:7f:e9:bd:81:4f:33:0f:b8:17:fb:2a:21:b6:0c: de:17:c9:20:7f:9c:48:e6:44:76:f4:23:9e:23:a2: d7:58:81:a7:6a:54:9c:7a:08:d3:5a:42:83:b9:02: 21:29:47:8c:d8:df:a1:d8:d5:e9:51:d2:ac:ad:4d: 99:a0:20:67:0d:bd:33:ed:fc:78:23:f8:e8:f6:8e: 3f:d6:de:85:e5:ec:d1:e0:2b:de:95:84:aa:5b:ce: 6d:a7:d6:f2:78:24:14:1b:3c:de:06:ff:1f:df:1c: 60:3f:a6:3e:e7:7e:67:9c:f1:34:0c:42:27:57:15: 25:b4:86:26:f2:e4:84:4c:53:24:e3:fb:b4:e5:4e: 74:0e:6a:92:ca:11:0d:04:95:a5:fd:95:7d:c7:72: d6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:43:A3:FD:A5:24:ED:3C:03:C6:E6:44:F4:69:F8:B6:B9:D9:71:13 X509v3 Authority Key Identifier: keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a7:99:9a:af:71:9d:48:c1:51:c4:91:59:cd:eb:2f:0f:f2: c1:a7:ad:5a:83:9c:6d:bf:ff:67:0f:ba:2e:da:65:bc:56:66: 80:aa:d9:77:eb:b8:40:f0:99:d3:b3:58:46:2a:5b:a5:4c:e1: 40:56:66:36:b7:bd:eb:e3:28:d6:2e:6f:af:4a:eb:19:84:5a: ca:04:a3:1b:71:be:5f:49:01:3c:32:bd:e7:bf:f5:3a:1e:b5: 98:ef:bb:05:73:49:db:36:7a:f9:b2:07:1f:aa:7f:a4:ce:5d: c8:2a:fe:0a:bc:7d:ba:4c:6e:0f:36:d2:63:30:a5:6f:07:85: 86:26:7b:f0:51:48:cd:9d:b6:6a:94:fc:3d:cf:36:e3:2c:58: f1:4f:ff:33:39:e7:37:3d:cd:84:57:4c:41:e8:4d:25:37:86: dd:f5:8d:b6:d8:21:0a:64:78:4e:de:21:1d:eb:28:2c:86:8b: b2:6f:29:da:ef:e1:9c:1e:0b:e7:64:67:5e:be:24:a4:93:09: a4:c3:c7:fc:6e:4a:47:ca:91:a5:d4:7e:d4:1a:79:9e:9f:d3: e9:89:07:88:6a:2c:57:4d:26:32:28:2a:dc:0c:80:d6:22:29: 3f:9f:96:cf:a3:ac:1e:3a:4d:39:4b:6d:cc:d0:6f:8e:9f:21: 8f:f7:59:7f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUesSw3iUcKIsIfgrPWKbZMQMKlqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQzNFODRCMjJDQThEQkJFQjg0NTdGN0JGRTMwM0VD RkIzNTU3RDAeFw0yNjA1MTEyMTUwMTJaFw0yNjA1MTYxNjU5MTJaMDMxMTAvBgNV BAMTKEI4NDNBM0ZEQTUyNEVEM0MwM0M2RTY0NEY0NjlGOEI2QjlEOTcxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrKsrDosevW6M1BssTXBOzfYq ELcPYnQqcl7C4eoFLgkz84m8nDkVZqHLAuxJMklzrZhheEbxVO+GvxCD6/giEnij 0Gzs1/KhEM6tU3244XheyRWb/7JNgZAdpDq5Hi8CqnDMekcs3rx/6b2BTzMPuBf7 KiG2DN4XySB/nEjmRHb0I54jotdYgadqVJx6CNNaQoO5AiEpR4zY36HY1elR0qyt TZmgIGcNvTPt/Hgj+Oj2jj/W3oXl7NHgK96VhKpbzm2n1vJ4JBQbPN4G/x/fHGA/ pj7nfmec8TQMQidXFSW0hiby5IRMUyTj+7TlTnQOapLKEQ0ElaX9lX3HctazAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuEOj/aUk7TwDxuZE9Gn4trnZcRMwHwYDVR0j BBgwFoAUIbw+hLIsqNu+uEV/e/4wPs+zVX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjdDMUUyQkE2RTEzOTE0MkMxQ0Q1NEQ2M0E2MzVERDVG QzEyMzREQkZDM0YzRTdBMTc3QjA5MjNBQTg4Q0E0LzAvMjFCQzNFODRCMjJDQThE QkJFQjg0NTdGN0JGRTMwM0VDRkIzNTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUJDM0U4NEIyMkNBOERCQkVC ODQ1N0Y3QkZFMzAzRUNGQjM1NTdELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzY3QzFFMkJBNkUxMzkxNDJDMUNENTRENjNBNjM1REQ1RkMxMjM0REJG QzNGM0U3QTE3N0IwOTIzQUE4OENBNC8wLzIxQkMzRTg0QjIyQ0E4REJCRUI4NDU3 RjdCRkUzMDNFQ0ZCMzU1N0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwp5mar3GdSMFRxJFZzesvD/LB p61ag5xtv/9nD7ou2mW8VmaAqtl367hA8JnTs1hGKlulTOFAVmY2t73r4yjWLm+v SusZhFrKBKMbcb5fSQE8Mr3nv/U6HrWY77sFc0nbNnr5sgcfqn+kzl3IKv4KvH26 TG4PNtJjMKVvB4WGJnvwUUjNnbZqlPw9zzbjLFjxT/8zOec3Pc2EV0xB6E0lN4bd 9Y222CEKZHhO3iEd6ygshouybyna7+GcHgvnZGdeviSkkwmkw8f8bkpHypGl1H7U Gnmen9PpiQeIaixXTSYyKCrcDIDWIik/n5bPo6weOk05S23M0G+OnyGP91l/ -----END CERTIFICATE-----Generated at Wed May 13 15:43:16 2026 by rpki-client