$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft File: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft (raw, json) Hash identifier: aeARKE6XVMgMg0tQ24mYJMl7ybeG9nVprSs98lpeJKg= Subject key identifier: E9:9D:65:9B:64:D1:3C:F6:0E:EA:C2:3E:DA:F6:E2:AE:3B:61:C3:1F Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D Certificate issuer: /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Certificate serial: 630B462F68AE9C76B95B7CAA0430A1821DA29C0D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft Manifest number: 01AA Signing time: Fri 24 Jul 2026 05:07:59 +0000 Manifest this update: Fri 24 Jul 2026 05:02:59 +0000 Manifest next update: Wed 29 Jul 2026 16:49:59 +0000 Files and hashes: 1: 323830333a323231303a3a2f33322d3438203d3e20323731383936.roa (hash: adCs36QNzm3GUXnrmgFT4GEFYY5rriy/pu2JadFfnwA=) 2: 3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa (hash: RBMW8BZBcRejMtZPORmbrU0EOWH7r7J/shUtPpOr2Tw=) 3: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl (hash: 3ERxMs1NUOdeh62xqp7vHKZCFfYDydjq2LNm2Y43xyw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0b:46:2f:68:ae:9c:76:b9:5b:7c:aa:04:30:a1:82:1d:a2:9c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Validity Not Before: Jul 24 05:02:59 2026 GMT Not After : Jul 29 16:49:59 2026 GMT Subject: CN=E99D659B64D13CF60EEAC23EDAF6E2AE3B61C31F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:e7:0a:b6:1c:ac:dc:eb:94:21:0e:5b:bb: 31:0a:78:69:db:78:fc:81:57:00:6c:cc:e6:90:59: 1b:95:77:ee:db:8e:d4:c9:d0:1b:bb:07:a4:43:fd: 1b:69:8f:0d:62:96:f0:1b:16:88:80:bd:10:2f:3e: be:87:c9:37:b3:6d:78:c8:1a:21:59:fc:fc:c5:76: 25:0b:f9:9e:76:22:bc:bd:e6:da:e0:97:d6:0d:72: 85:8c:24:29:44:9d:92:86:83:9b:b9:c9:19:09:55: 37:fa:80:82:58:4f:37:a4:f5:c4:17:16:33:aa:f3: 7c:ea:58:7d:8a:b6:5d:65:ef:e4:c1:df:20:52:35: 0e:3b:6c:77:b5:02:9f:0f:99:de:68:0f:8c:7d:5a: 05:1a:3c:67:24:08:7e:10:3b:e0:39:c9:15:6e:6f: 50:58:6b:16:ec:6a:6a:55:20:1e:ad:c5:f7:dd:2e: 76:fe:b7:30:95:1c:8e:df:54:cf:fb:7e:a4:36:3c: 29:41:c6:2d:fa:d4:6b:fa:48:48:b8:d9:c1:34:f8: 63:1b:09:13:61:a6:db:ab:d8:16:9f:c1:67:ee:f5: 8f:15:4d:1e:0b:24:da:71:0d:fb:59:52:ad:c0:ba: d6:5f:94:c2:a1:d5:ef:4f:b4:a7:ff:e1:4f:cd:35: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9D:65:9B:64:D1:3C:F6:0E:EA:C2:3E:DA:F6:E2:AE:3B:61:C3:1F X509v3 Authority Key Identifier: keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:72:e4:6c:c7:53:82:d0:9b:e5:27:ef:61:63:a3:61:d7:59: a4:b4:6c:56:ff:25:ea:ac:35:e6:f4:37:0a:6d:59:96:39:1a: a1:93:26:ea:29:3c:57:a7:cf:15:84:8e:a5:5f:bf:66:3f:aa: aa:a5:83:64:c2:a1:60:2a:77:be:f4:0a:cc:7b:5b:66:b5:8a: 4c:50:88:17:86:f9:d0:8b:0a:ea:a2:65:78:4a:f0:80:82:63: 96:15:39:54:9f:eb:c6:9c:0e:61:df:24:c8:bb:2a:bc:e8:f4: 90:f3:66:db:5e:e0:50:b6:ef:c8:90:59:25:f0:5d:fd:df:45: 9b:43:90:92:f6:46:b6:d2:2b:57:1d:5c:88:c9:e0:fa:e0:bb: 5e:11:64:cc:b0:9b:34:ad:7c:05:66:42:25:84:f0:41:1c:2f: 16:7b:a6:dc:16:ea:7b:93:24:26:d2:7d:62:45:4f:a2:4c:bc: ac:6f:9d:a2:71:b4:1b:d1:91:2d:9e:ff:9f:71:a7:90:9a:e3: fb:71:5c:f1:0f:f8:95:40:3d:52:41:d7:9f:ad:5e:ca:10:0a: f7:ba:7d:ee:02:8f:8d:95:ae:b7:77:b8:e1:63:ed:d2:ca:19: 52:55:63:b4:fc:76:37:1a:8d:84:4b:f6:e2:28:52:2b:4f:8e: ef:11:33:54 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYwtGL2iunHa5W3yqBDChgh2inA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQzNFODRCMjJDQThEQkJFQjg0NTdGN0JGRTMwM0VD RkIzNTU3RDAeFw0yNjA3MjQwNTAyNTlaFw0yNjA3MjkxNjQ5NTlaMDMxMTAvBgNV BAMTKEU5OUQ2NTlCNjREMTNDRjYwRUVBQzIzRURBRjZFMkFFM0I2MUMzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDecKthys3OuUIQ5buzEKeGnb ePyBVwBszOaQWRuVd+7bjtTJ0Bu7B6RD/Rtpjw1ilvAbFoiAvRAvPr6HyTezbXjI GiFZ/PzFdiUL+Z52Iry95trgl9YNcoWMJClEnZKGg5u5yRkJVTf6gIJYTzek9cQX FjOq83zqWH2Ktl1l7+TB3yBSNQ47bHe1Ap8Pmd5oD4x9WgUaPGckCH4QO+A5yRVu b1BYaxbsampVIB6txffdLnb+tzCVHI7fVM/7fqQ2PClBxi361Gv6SEi42cE0+GMb CRNhptur2BafwWfu9Y8VTR4LJNpxDftZUq3AutZflMKh1e9PtKf/4U/NNZpzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6Z1lm2TRPPYO6sI+2vbirjthwx8wHwYDVR0j BBgwFoAUIbw+hLIsqNu+uEV/e/4wPs+zVX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjdDMUUyQkE2RTEzOTE0MkMxQ0Q1NEQ2M0E2MzVERDVG QzEyMzREQkZDM0YzRTdBMTc3QjA5MjNBQTg4Q0E0LzAvMjFCQzNFODRCMjJDQThE QkJFQjg0NTdGN0JGRTMwM0VDRkIzNTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUJDM0U4NEIyMkNBOERCQkVC ODQ1N0Y3QkZFMzAzRUNGQjM1NTdELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzY3QzFFMkJBNkUxMzkxNDJDMUNENTRENjNBNjM1REQ1RkMxMjM0REJG QzNGM0U3QTE3N0IwOTIzQUE4OENBNC8wLzIxQkMzRTg0QjIyQ0E4REJCRUI4NDU3 RjdCRkUzMDNFQ0ZCMzU1N0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCccuRsx1OC0JvlJ+9hY6Nh11mk tGxW/yXqrDXm9DcKbVmWORqhkybqKTxXp88VhI6lX79mP6qqpYNkwqFgKne+9ArM e1tmtYpMUIgXhvnQiwrqomV4SvCAgmOWFTlUn+vGnA5h3yTIuyq86PSQ82bbXuBQ tu/IkFkl8F3930WbQ5CS9ka20itXHVyIyeD64LteEWTMsJs0rXwFZkIlhPBBHC8W e6bcFup7kyQm0n1iRU+iTLysb52icbQb0ZEtnv+fcaeQmuP7cVzxD/iVQD1SQdef rV7KEAr3un3uAo+Nla63d7jhY+3SyhlSVWO0/HY3Go2ES/biKFIrT47vETNU -----END CERTIFICATE-----Generated at Fri Jul 24 17:41:05 2026 by rpki-client