$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft File: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft (raw, json) Hash identifier: AGc3/mePcdOGYHgJFy5aw+fm7EKhN6JLFZ491JZkOzg= Subject key identifier: C3:47:DE:1A:0A:FA:A2:6D:D6:13:E9:FA:7D:C0:9D:E3:0F:16:87:8B Authority key identifier: 21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6 Certificate issuer: /CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6 Certificate serial: 778BDE22A387ACB430E6E2C433C3232B1DB6C902 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft Manifest number: 01CC Signing time: Mon 02 Nov 2026 16:06:00 +0000 Manifest this update: Mon 02 Nov 2026 16:01:00 +0000 Manifest next update: Sat 07 Nov 2026 22:56:00 +0000 Files and hashes: 1: 323830333a386135303a3a2f33322d3332203d3e20323733313735.roa (hash: nq297afTlSUJbpE9KucQxGzAF//C5+OApfISJeGV/Mg=) 2: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl (hash: reYwwrP8bDFBoeDGME69Kpq6IF+Xdqud1o9BhRFrOQU=) 3: 3139302e3131302e3232352e302f32342d3234203d3e20323733313735.roa (hash: 5KDksdh/kS2TEE0iZShC3+eJma/c1Kj8GO1qMma1g3E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Nov 2026 22:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:8b:de:22:a3:87:ac:b4:30:e6:e2:c4:33:c3:23:2b:1d:b6:c9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6 Validity Not Before: Nov 2 16:01:00 2026 GMT Not After : Nov 7 22:56:00 2026 GMT Subject: CN=C347DE1A0AFAA26DD613E9FA7DC09DE30F16878B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:67:8b:79:cc:76:aa:ab:af:77:ce:cd:7f:d2: 59:54:5a:9c:ed:9a:5b:6a:62:74:e0:9e:30:93:98: 58:b2:41:24:f8:ba:5c:70:53:06:c2:c0:4a:a8:32: 61:74:12:bc:41:37:2a:f8:96:7f:6a:67:51:8f:4c: d6:d6:59:6b:e5:34:55:ee:16:8f:51:95:45:d9:0b: ca:90:8f:e3:58:f8:90:e5:c2:aa:ac:4c:6e:44:38: a4:e7:58:17:3e:e4:e9:0c:79:a5:84:3d:ef:5c:52: 37:26:85:88:86:0f:a9:54:6a:e3:f9:d8:01:ed:80: 9f:a6:a3:5b:39:46:dc:c8:bd:32:39:04:19:56:e3: 44:99:57:72:1c:f6:77:3c:9a:9e:4d:15:8e:e8:5a: 59:26:af:c1:eb:88:26:37:c7:1d:c7:3b:4f:91:80: 21:12:72:04:17:05:63:b7:79:ca:18:54:ec:51:d1: 62:8f:2c:65:b0:c7:0f:0b:90:12:77:f1:93:79:e1: 98:a6:5d:dc:95:13:fd:89:12:05:82:5d:6d:11:a0: 49:95:d4:e6:04:08:76:b1:f0:18:b7:25:84:20:6c: b0:25:56:11:bd:f7:d4:51:bc:40:d4:ca:b7:23:5d: 48:ee:65:81:22:32:d5:47:ff:34:ae:46:74:ac:d0: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:47:DE:1A:0A:FA:A2:6D:D6:13:E9:FA:7D:C0:9D:E3:0F:16:87:8B X509v3 Authority Key Identifier: keyid:21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:77:be:f1:9d:c1:31:9f:71:d7:18:5d:2b:a2:4b:0e:7a:f1: d2:07:5b:fe:a8:39:d0:97:64:49:db:19:7f:0d:37:1d:15:ab: cc:fc:71:b9:36:6d:b0:78:78:c0:b0:40:3e:77:1f:bb:91:71: 25:3e:f6:08:7f:f1:f5:3c:50:86:bc:e3:ec:9d:b5:d3:06:5e: 60:ef:80:bb:d8:2c:16:05:68:f0:88:2c:38:b5:ef:56:54:96: d8:da:5e:cb:c6:5a:e5:d9:ab:60:f9:cf:d6:bf:ae:7a:09:bc: 7a:3b:27:65:be:ca:b4:63:74:5c:5b:e9:6c:91:b8:4c:51:40: db:b6:c1:e5:43:39:1c:a5:bd:6c:fd:a9:69:03:b2:bc:ed:f1: b5:bc:2b:96:fa:eb:9d:69:c6:03:53:14:28:b5:75:28:11:fa: 88:90:bb:c7:e4:37:bc:94:22:ff:94:a6:bc:99:fb:67:9b:43: c7:82:48:36:90:18:15:8c:c8:c9:8e:cd:e1:93:ed:1c:9f:b2: 4d:10:f5:75:c5:92:22:8f:04:dd:72:05:a7:8d:e4:19:07:24: fa:08:a4:53:4f:2b:76:d0:87:3a:90:ab:ab:c4:4a:4d:f8:73: dc:1a:b9:b9:77:9b:e7:c9:7e:df:7c:15:f4:c4:6d:3a:32:b6: 67:ba:d5:16 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUd4veIqOHrLQw5uLEM8MjKx22yQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBRkQ0NDM1RTlEODc3ODExMThCRDE2Rjk3QUQ4MUYx MTlCRkJENjAeFw0yNjExMDIxNjAxMDBaFw0yNjExMDcyMjU2MDBaMDMxMTAvBgNV BAMTKEMzNDdERTFBMEFGQUEyNkRENjEzRTlGQTdEQzA5REUzMEYxNjg3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmZ4t5zHaqq693zs1/0llUWpzt mltqYnTgnjCTmFiyQST4ulxwUwbCwEqoMmF0ErxBNyr4ln9qZ1GPTNbWWWvlNFXu Fo9RlUXZC8qQj+NY+JDlwqqsTG5EOKTnWBc+5OkMeaWEPe9cUjcmhYiGD6lUauP5 2AHtgJ+mo1s5RtzIvTI5BBlW40SZV3Ic9nc8mp5NFY7oWlkmr8HriCY3xx3HO0+R gCEScgQXBWO3ecoYVOxR0WKPLGWwxw8LkBJ38ZN54ZimXdyVE/2JEgWCXW0RoEmV 1OYECHax8Bi3JYQgbLAlVhG999RRvEDUyrcjXUjuZYEiMtVH/zSuRnSs0OSlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUw0feGgr6om3WE+n6fcCd4w8Wh4swHwYDVR0j BBgwFoAUIa/UQ16dh3gRGL0W+XrYHxGb+9YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQUE5NDkzQzFGNTk4NjBFNEFGMjEyMjQ1ODMyQkRDQ0E1 MDBCRTUxQjM5MTVCQjBCQ0ZDOEQzRDcyREFEOENGLzAvMjFBRkQ0NDM1RTlEODc3 ODExMThCRDE2Rjk3QUQ4MUYxMTlCRkJENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUFGRDQ0MzVFOUQ4Nzc4MTEx OEJEMTZGOTdBRDgxRjExOUJGQkQ2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREFBOTQ5M0MxRjU5ODYwRTRBRjIxMjI0NTgzMkJEQ0NBNTAwQkU1MUIz OTE1QkIwQkNGQzhEM0Q3MkRBRDhDRi8wLzIxQUZENDQzNUU5RDg3NzgxMTE4QkQx NkY5N0FEODFGMTE5QkZCRDYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADd77xncExn3HXGF0roksOevHS B1v+qDnQl2RJ2xl/DTcdFavM/HG5Nm2weHjAsEA+dx+7kXElPvYIf/H1PFCGvOPs nbXTBl5g74C72CwWBWjwiCw4te9WVJbY2l7Lxlrl2atg+c/Wv656Cbx6Oydlvsq0 Y3RcW+lskbhMUUDbtsHlQzkcpb1s/alpA7K87fG1vCuW+uudacYDUxQotXUoEfqI kLvH5De8lCL/lKa8mftnm0PHgkg2kBgVjMjJjs3hk+0cn7JNEPV1xZIijwTdcgWn jeQZByT6CKRTTyt20Ic6kKurxEpN+HPcGrm5d5vnyX7ffBX0xG06MrZnutUW -----END CERTIFICATE-----Generated at Wed Nov 4 04:06:13 2026 by rpki-client