$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft File: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft (raw, json) Hash identifier: 5NFNcg+WuteTJE2Z1XWsUqEHOjipq/KkF638OWZwEvY= Subject key identifier: 2D:C8:46:1E:FE:4D:18:DE:05:9D:03:7F:47:6F:A1:85:60:D9:AA:01 Authority key identifier: 21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6 Certificate issuer: /CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6 Certificate serial: 3811F06AFD0E35F6AA9FDC5035BB0AF5D565EADC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft Manifest number: 015F Signing time: Thu 26 Mar 2026 11:33:17 +0000 Manifest this update: Thu 26 Mar 2026 11:28:17 +0000 Manifest next update: Mon 30 Mar 2026 14:12:17 +0000 Files and hashes: 1: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl (hash: FVz0r8RKFYvuO+3NLZzb6zEWSHrn3toHJjGnywAEo3o=) 2: 323830333a386135303a3a2f33322d3332203d3e20323733313735.roa (hash: nq297afTlSUJbpE9KucQxGzAF//C5+OApfISJeGV/Mg=) 3: 3139302e3131302e3232352e302f32342d3234203d3e20323733313735.roa (hash: 5KDksdh/kS2TEE0iZShC3+eJma/c1Kj8GO1qMma1g3E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 14:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:11:f0:6a:fd:0e:35:f6:aa:9f:dc:50:35:bb:0a:f5:d5:65:ea:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6 Validity Not Before: Mar 26 11:28:17 2026 GMT Not After : Mar 30 14:12:17 2026 GMT Subject: CN=2DC8461EFE4D18DE059D037F476FA18560D9AA01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:88:82:f4:20:c7:e9:be:ed:f8:ff:89:e9: 74:0c:ee:3b:ac:f4:1d:f1:27:15:bf:f2:37:51:35: 43:10:1f:78:b7:29:71:3e:3f:d5:88:25:bc:bb:0a: db:29:d7:28:df:97:b6:4e:c8:57:2a:48:86:4c:ca: 42:d4:be:0f:00:46:1b:79:94:78:a6:ea:b9:e4:9a: 2c:18:6d:4b:18:8a:d7:21:3b:2e:cc:0d:5b:1f:4f: 12:c1:ca:10:fb:0c:29:d8:91:21:73:31:c5:2d:2c: 65:1d:f8:38:71:a2:1a:48:a9:86:72:cd:1d:6a:9c: ab:9a:a5:95:da:7e:4f:e9:1c:5e:a1:06:a9:91:c3: 7d:29:8c:8d:f2:41:db:29:e1:af:57:a6:1c:d6:a3: a7:27:93:f9:7b:17:f1:ca:71:48:c5:3f:80:e8:d5: 83:9d:d6:27:49:5f:66:ab:ec:fe:d3:b9:17:a5:16: 48:2c:7c:f3:12:8d:0e:54:72:04:4f:dc:fd:5c:1e: 2a:18:a3:6f:14:bc:5d:9d:db:fb:5e:30:0e:7a:9b: 62:fb:2d:4c:87:21:d4:52:a5:f6:4e:80:77:a7:9d: da:57:06:74:09:f9:f8:8d:c7:55:0b:70:90:56:a4: 8a:f9:92:f9:b2:0e:34:cc:5a:22:08:a4:5e:9b:b0: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C8:46:1E:FE:4D:18:DE:05:9D:03:7F:47:6F:A1:85:60:D9:AA:01 X509v3 Authority Key Identifier: keyid:21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8e:6d:5b:80:54:8b:61:92:90:ee:76:36:81:19:69:1d:a7: 6a:06:c6:80:9e:2f:b3:7b:dd:73:c8:3f:a8:65:96:29:83:14: ad:e0:ea:71:99:60:7a:ef:14:80:99:ef:0c:f5:41:d2:11:13: 8d:bc:8e:09:a4:13:bd:23:49:7c:0e:c6:8d:22:05:c6:7a:1c: e3:a3:aa:4f:20:e5:c7:82:bf:b3:dc:e3:be:57:62:42:73:7e: 63:73:e0:e0:41:91:8f:af:17:aa:9d:39:0b:d1:c8:4d:66:a2: 36:88:70:63:23:0b:6f:a4:43:b9:8a:99:3a:05:17:ed:97:b2: b7:b7:e8:1a:be:28:a8:db:20:7c:ff:2a:18:70:b0:60:61:80: 3b:b3:27:d0:64:b6:10:3c:bb:d2:b9:d4:82:3f:b5:a0:4c:2e: e0:b2:c9:09:4e:3a:b8:67:35:b0:ce:63:fa:b4:9e:5f:eb:1f: c2:fc:ef:8c:c0:76:29:bc:f2:50:1b:59:c0:8b:b6:81:8d:eb: 25:7f:12:23:0b:b1:2c:d5:45:3a:5a:56:74:21:9e:91:cd:21: a5:9c:bc:c1:76:06:d3:e9:2a:92:05:3d:77:63:a6:b5:c0:fe: 5d:5e:5d:e7:0c:6a:a0:21:fa:41:6f:e2:aa:5f:e2:57:a4:2e: db:eb:d1:49 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOBHwav0ONfaqn9xQNbsK9dVl6twwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBRkQ0NDM1RTlEODc3ODExMThCRDE2Rjk3QUQ4MUYx MTlCRkJENjAeFw0yNjAzMjYxMTI4MTdaFw0yNjAzMzAxNDEyMTdaMDMxMTAvBgNV BAMTKDJEQzg0NjFFRkU0RDE4REUwNTlEMDM3RjQ3NkZBMTg1NjBEOUFBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL54iC9CDH6b7t+P+J6XQM7jus 9B3xJxW/8jdRNUMQH3i3KXE+P9WIJby7Ctsp1yjfl7ZOyFcqSIZMykLUvg8ARht5 lHim6rnkmiwYbUsYitchOy7MDVsfTxLByhD7DCnYkSFzMcUtLGUd+DhxohpIqYZy zR1qnKuapZXafk/pHF6hBqmRw30pjI3yQdsp4a9XphzWo6cnk/l7F/HKcUjFP4Do 1YOd1idJX2ar7P7TuRelFkgsfPMSjQ5UcgRP3P1cHioYo28UvF2d2/teMA56m2L7 LUyHIdRSpfZOgHenndpXBnQJ+fiNx1ULcJBWpIr5kvmyDjTMWiIIpF6bsFz5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULchGHv5NGN4FnQN/R2+hhWDZqgEwHwYDVR0j BBgwFoAUIa/UQ16dh3gRGL0W+XrYHxGb+9YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQUE5NDkzQzFGNTk4NjBFNEFGMjEyMjQ1ODMyQkRDQ0E1 MDBCRTUxQjM5MTVCQjBCQ0ZDOEQzRDcyREFEOENGLzAvMjFBRkQ0NDM1RTlEODc3 ODExMThCRDE2Rjk3QUQ4MUYxMTlCRkJENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUFGRDQ0MzVFOUQ4Nzc4MTEx OEJEMTZGOTdBRDgxRjExOUJGQkQ2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREFBOTQ5M0MxRjU5ODYwRTRBRjIxMjI0NTgzMkJEQ0NBNTAwQkU1MUIz OTE1QkIwQkNGQzhEM0Q3MkRBRDhDRi8wLzIxQUZENDQzNUU5RDg3NzgxMTE4QkQx NkY5N0FEODFGMTE5QkZCRDYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKjm1bgFSLYZKQ7nY2gRlpHadq BsaAni+ze91zyD+oZZYpgxSt4OpxmWB67xSAme8M9UHSERONvI4JpBO9I0l8DsaN IgXGehzjo6pPIOXHgr+z3OO+V2JCc35jc+DgQZGPrxeqnTkL0chNZqI2iHBjIwtv pEO5ipk6BRftl7K3t+gaviio2yB8/yoYcLBgYYA7syfQZLYQPLvSudSCP7WgTC7g sskJTjq4ZzWwzmP6tJ5f6x/C/O+MwHYpvPJQG1nAi7aBjeslfxIjC7Es1UU6WlZ0 IZ6RzSGlnLzBdgbT6SqSBT13Y6a1wP5dXl3nDGqgIfpBb+KqX+JXpC7b69FJ -----END CERTIFICATE-----Generated at Fri Mar 27 02:36:21 2026 by rpki-client