$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft File: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft (raw, json) Hash identifier: hjjyCjLUqJRoA75ju0Sqg791dMUm7lsyrhSTwhW4rgY= Subject key identifier: EE:8C:FE:37:7F:7F:54:8E:1A:3C:B8:E9:43:F5:01:53:4A:07:EA:42 Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D Certificate issuer: /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Certificate serial: 1985521465CAD18D170BFABDA3A9E87BAE5B66E4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft Manifest number: 0173 Signing time: Tue 24 Mar 2026 19:55:03 +0000 Manifest this update: Tue 24 Mar 2026 19:50:03 +0000 Manifest next update: Sun 29 Mar 2026 23:53:03 +0000 Files and hashes: 1: 323830333a323231303a3a2f33322d3438203d3e20323731383936.roa (hash: adCs36QNzm3GUXnrmgFT4GEFYY5rriy/pu2JadFfnwA=) 2: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl (hash: JphW7HwLSN47t2bfvtba9nt1ULTqDlqTnJ3/PB9QvW0=) 3: 3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa (hash: RBMW8BZBcRejMtZPORmbrU0EOWH7r7J/shUtPpOr2Tw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 23:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:85:52:14:65:ca:d1:8d:17:0b:fa:bd:a3:a9:e8:7b:ae:5b:66:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Validity Not Before: Mar 24 19:50:03 2026 GMT Not After : Mar 29 23:53:03 2026 GMT Subject: CN=EE8CFE377F7F548E1A3CB8E943F501534A07EA42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2c:c1:ba:c0:94:1d:98:94:1b:b6:f2:f4:9f: a7:6f:5c:14:4a:87:5c:d0:cd:cd:16:4c:0f:ee:19: 55:6f:4a:82:7d:54:48:17:17:52:5f:0e:4b:68:a9: 82:7e:9b:37:bc:0b:d7:14:e6:40:8f:e2:3c:d9:12: 4f:12:b7:91:4b:cb:d0:77:80:cc:65:18:ba:8d:cc: ff:b9:6e:83:ea:00:b8:2c:b5:aa:8e:24:5a:bc:ad: cc:e9:60:e3:92:d7:32:a6:9a:a0:e6:7b:1f:b4:71: f5:f8:e5:b0:aa:26:6c:6d:84:b8:e2:24:01:18:ba: 3d:9f:ce:99:c3:64:55:4a:47:09:df:a6:b2:26:e7: 22:21:72:a8:68:a6:59:ef:bd:32:ef:51:19:10:ee: 2a:f3:10:4b:9b:41:a1:5f:a8:78:04:28:fa:45:db: b6:ae:88:11:6b:8d:83:ba:48:85:a7:e3:f1:a3:de: f7:93:24:25:29:f8:a7:82:ab:d4:f4:2a:d5:ba:c0: a7:7a:e2:05:b9:bb:e0:74:4a:bf:f7:94:47:f4:c2: af:70:bb:3e:8d:7c:1d:a7:9a:22:c7:1d:ab:0b:5f: ed:d2:95:06:bc:6a:d2:06:2a:94:47:b1:8b:fb:57: 19:db:bf:56:21:23:b4:9d:0d:07:32:a9:a2:65:8a: b0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8C:FE:37:7F:7F:54:8E:1A:3C:B8:E9:43:F5:01:53:4A:07:EA:42 X509v3 Authority Key Identifier: keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:e4:06:64:b0:0d:ab:6a:67:4e:a9:7d:c0:9f:50:23:ab:8d: e6:9c:9e:1e:88:2b:a6:28:1b:d1:2f:c3:b8:74:b5:2a:a1:7a: b9:20:65:25:b6:d2:9e:ad:7b:e2:de:65:f4:c3:d2:bc:5c:86: 1a:9f:42:19:f5:08:c1:18:90:22:d9:af:0f:7d:6d:12:a8:61: b3:e4:a5:0c:1a:73:81:eb:e4:97:01:da:75:c4:55:bd:53:f9: 8f:df:68:28:ea:e0:9d:e3:be:e1:21:22:ac:00:2d:8f:64:ad: 2e:8b:69:ab:ff:41:b9:e8:f3:5c:9f:c9:e0:8a:df:3f:3b:30: d7:3d:6d:0b:48:65:b4:16:87:8a:bf:97:c3:32:03:bf:7f:1d: 7f:88:70:61:19:c6:a5:39:3d:7c:a6:90:96:43:73:32:62:0e: 70:bc:1a:2e:b2:e5:70:f6:47:25:e9:99:e2:5f:cf:99:6b:ae: 0c:45:09:fe:66:fd:bf:5d:18:48:07:23:9d:c8:8f:60:3d:09: d4:b2:00:6f:d7:55:a9:f5:49:2c:7e:7a:3d:62:59:58:1a:80: 45:e7:62:9e:b7:e0:d8:87:ce:e1:82:6b:8d:8d:8d:68:d6:af: f4:e8:05:f6:89:9f:86:f4:88:0b:df:a8:a3:33:a1:e9:fd:f1: 78:bc:fe:32 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGYVSFGXK0Y0XC/q9o6noe65bZuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQzNFODRCMjJDQThEQkJFQjg0NTdGN0JGRTMwM0VD RkIzNTU3RDAeFw0yNjAzMjQxOTUwMDNaFw0yNjAzMjkyMzUzMDNaMDMxMTAvBgNV BAMTKEVFOENGRTM3N0Y3RjU0OEUxQTNDQjhFOTQzRjUwMTUzNEEwN0VBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDULMG6wJQdmJQbtvL0n6dvXBRK h1zQzc0WTA/uGVVvSoJ9VEgXF1JfDktoqYJ+mze8C9cU5kCP4jzZEk8St5FLy9B3 gMxlGLqNzP+5boPqALgstaqOJFq8rczpYOOS1zKmmqDmex+0cfX45bCqJmxthLji JAEYuj2fzpnDZFVKRwnfprIm5yIhcqhoplnvvTLvURkQ7irzEEubQaFfqHgEKPpF 27auiBFrjYO6SIWn4/Gj3veTJCUp+KeCq9T0KtW6wKd64gW5u+B0Sr/3lEf0wq9w uz6NfB2nmiLHHasLX+3SlQa8atIGKpRHsYv7Vxnbv1YhI7SdDQcyqaJlirDdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7oz+N39/VI4aPLjpQ/UBU0oH6kIwHwYDVR0j BBgwFoAUIbw+hLIsqNu+uEV/e/4wPs+zVX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjdDMUUyQkE2RTEzOTE0MkMxQ0Q1NEQ2M0E2MzVERDVG QzEyMzREQkZDM0YzRTdBMTc3QjA5MjNBQTg4Q0E0LzAvMjFCQzNFODRCMjJDQThE QkJFQjg0NTdGN0JGRTMwM0VDRkIzNTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUJDM0U4NEIyMkNBOERCQkVC ODQ1N0Y3QkZFMzAzRUNGQjM1NTdELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzY3QzFFMkJBNkUxMzkxNDJDMUNENTRENjNBNjM1REQ1RkMxMjM0REJG QzNGM0U3QTE3N0IwOTIzQUE4OENBNC8wLzIxQkMzRTg0QjIyQ0E4REJCRUI4NDU3 RjdCRkUzMDNFQ0ZCMzU1N0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDC5AZksA2ramdOqX3An1Ajq43m nJ4eiCumKBvRL8O4dLUqoXq5IGUlttKerXvi3mX0w9K8XIYan0IZ9QjBGJAi2a8P fW0SqGGz5KUMGnOB6+SXAdp1xFW9U/mP32go6uCd477hISKsAC2PZK0ui2mr/0G5 6PNcn8ngit8/OzDXPW0LSGW0FoeKv5fDMgO/fx1/iHBhGcalOT18ppCWQ3MyYg5w vBousuVw9kcl6ZniX8+Za64MRQn+Zv2/XRhIByOdyI9gPQnUsgBv11Wp9Uksfno9 YllYGoBF52Ket+DYh87hgmuNjY1o1q/06AX2iZ+G9IgL36ijM6Hp/fF4vP4y -----END CERTIFICATE-----Generated at Thu Mar 26 20:46:38 2026 by rpki-client