$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft File: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft (raw, json) Hash identifier: 4VJad2kbwvQmfx1hXea0zt+saitA/x5WAq1usoMnFBI= Subject key identifier: D8:CF:AC:BD:21:B2:C1:61:B2:BE:19:20:06:94:05:EF:8E:FB:4A:72 Authority key identifier: 21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6 Certificate issuer: /CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6 Certificate serial: 2027C30827EDBAE064B20423455D0B33DD9C5BC9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft Manifest number: 019B Signing time: Thu 23 Jul 2026 07:32:59 +0000 Manifest this update: Thu 23 Jul 2026 07:27:59 +0000 Manifest next update: Tue 28 Jul 2026 16:22:59 +0000 Files and hashes: 1: 3139302e3131302e3232352e302f32342d3234203d3e20323733313735.roa (hash: 5KDksdh/kS2TEE0iZShC3+eJma/c1Kj8GO1qMma1g3E=) 2: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl (hash: pKbyLekT8y6VP7Hyr6idllUjDJzGtGTEcjuhyj0jVNU=) 3: 323830333a386135303a3a2f33322d3332203d3e20323733313735.roa (hash: nq297afTlSUJbpE9KucQxGzAF//C5+OApfISJeGV/Mg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:27:c3:08:27:ed:ba:e0:64:b2:04:23:45:5d:0b:33:dd:9c:5b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6 Validity Not Before: Jul 23 07:27:59 2026 GMT Not After : Jul 28 16:22:59 2026 GMT Subject: CN=D8CFACBD21B2C161B2BE1920069405EF8EFB4A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4d:97:3d:01:28:66:65:40:9a:bf:e2:19:f9: 1b:d7:bc:f3:ee:dc:2d:b2:cc:89:61:e9:a7:4b:60: 1b:35:98:2c:9b:6a:71:cd:c8:3e:91:ac:f3:bd:e8: 39:1d:a1:09:2e:7a:de:0b:a6:b6:94:b7:5f:63:e5: 98:95:a1:dd:63:4b:ff:94:93:ab:0c:4e:d4:92:1f: 85:47:3d:6a:15:96:2b:4a:83:cf:f7:42:04:d6:7a: dc:e8:8d:33:dd:7f:63:81:39:dc:f7:3c:e8:8c:13: 65:af:4b:9c:59:4a:ac:4a:04:e6:9d:2d:77:87:1c: 98:f5:18:54:96:9a:ae:b1:74:dd:e0:e2:b0:f8:19: af:e5:84:c7:87:67:a0:79:46:f5:61:48:f8:16:85: 3f:8d:31:a9:67:e4:21:a5:56:77:bc:1f:e6:d2:11: d6:b7:67:a8:cb:a5:27:ed:c5:bf:b6:db:52:5b:5d: 67:9f:69:f8:85:86:43:35:62:7f:1a:b3:26:69:ff: b7:99:aa:a6:c2:f4:39:19:fd:04:56:dc:4f:fa:38: 61:a6:3b:e6:78:8d:5c:40:3c:57:6a:b8:be:4c:0e: d4:4a:c6:bc:32:40:bf:b5:21:66:4a:6e:01:ca:07: 91:78:09:07:7c:00:e6:bc:09:b8:11:d2:2f:5e:e6: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CF:AC:BD:21:B2:C1:61:B2:BE:19:20:06:94:05:EF:8E:FB:4A:72 X509v3 Authority Key Identifier: keyid:21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b3:4e:1e:fe:fa:62:6b:6b:41:fb:e0:d9:ff:a5:e7:aa:5f: b4:95:b9:b0:e6:de:8c:95:24:b0:0e:5f:16:d0:95:a6:bc:59: fc:ea:0f:71:72:9b:5e:2a:54:af:c6:38:e2:73:14:51:5b:61: 05:45:49:ae:84:7c:ff:5d:84:ad:2a:74:17:db:6a:21:17:8c: b7:92:81:f3:35:5b:2e:3a:9e:ea:54:fa:e7:db:20:a0:c8:39: d6:2f:23:f4:6e:20:42:14:68:2f:0f:91:7a:f5:dc:f2:d3:8c: d0:b9:86:bc:78:c2:1e:00:ae:53:70:89:68:10:eb:8a:14:6c: 53:93:c8:2a:a1:d6:81:68:04:64:52:98:5e:ed:27:22:f6:d8: 9d:cb:a9:fa:48:46:47:e5:51:33:35:eb:5c:c2:79:a4:8d:26: 2d:ff:9f:50:2c:06:2a:55:c4:09:96:ff:2a:08:72:59:b1:ac: d1:8d:0c:62:8e:fb:be:d5:75:39:26:aa:8d:5c:39:f0:ea:30: 92:d3:4a:13:1e:cf:a8:85:6c:29:c5:62:ba:1a:a4:1c:ae:86: 7d:4a:a6:2f:f1:1b:a7:68:a0:83:af:14:b6:14:8b:42:04:3f: 6a:c7:02:68:e1:94:96:e6:79:d9:d9:21:69:8d:42:6b:76:0e: 8e:27:e5:9a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUICfDCCftuuBksgQjRV0LM92cW8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBRkQ0NDM1RTlEODc3ODExMThCRDE2Rjk3QUQ4MUYx MTlCRkJENjAeFw0yNjA3MjMwNzI3NTlaFw0yNjA3MjgxNjIyNTlaMDMxMTAvBgNV BAMTKEQ4Q0ZBQ0JEMjFCMkMxNjFCMkJFMTkyMDA2OTQwNUVGOEVGQjRBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTZc9AShmZUCav+IZ+RvXvPPu 3C2yzIlh6adLYBs1mCybanHNyD6RrPO96DkdoQkuet4LpraUt19j5ZiVod1jS/+U k6sMTtSSH4VHPWoVlitKg8/3QgTWetzojTPdf2OBOdz3POiME2WvS5xZSqxKBOad LXeHHJj1GFSWmq6xdN3g4rD4Ga/lhMeHZ6B5RvVhSPgWhT+NMaln5CGlVne8H+bS Eda3Z6jLpSftxb+221JbXWefafiFhkM1Yn8asyZp/7eZqqbC9DkZ/QRW3E/6OGGm O+Z4jVxAPFdquL5MDtRKxrwyQL+1IWZKbgHKB5F4CQd8AOa8CbgR0i9e5nB/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2M+svSGywWGyvhkgBpQF7477SnIwHwYDVR0j BBgwFoAUIa/UQ16dh3gRGL0W+XrYHxGb+9YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQUE5NDkzQzFGNTk4NjBFNEFGMjEyMjQ1ODMyQkRDQ0E1 MDBCRTUxQjM5MTVCQjBCQ0ZDOEQzRDcyREFEOENGLzAvMjFBRkQ0NDM1RTlEODc3 ODExMThCRDE2Rjk3QUQ4MUYxMTlCRkJENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUFGRDQ0MzVFOUQ4Nzc4MTEx OEJEMTZGOTdBRDgxRjExOUJGQkQ2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREFBOTQ5M0MxRjU5ODYwRTRBRjIxMjI0NTgzMkJEQ0NBNTAwQkU1MUIz OTE1QkIwQkNGQzhEM0Q3MkRBRDhDRi8wLzIxQUZENDQzNUU5RDg3NzgxMTE4QkQx NkY5N0FEODFGMTE5QkZCRDYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALs04e/vpia2tB++DZ/6Xnql+0 lbmw5t6MlSSwDl8W0JWmvFn86g9xcpteKlSvxjjicxRRW2EFRUmuhHz/XYStKnQX 22ohF4y3koHzNVsuOp7qVPrn2yCgyDnWLyP0biBCFGgvD5F69dzy04zQuYa8eMIe AK5TcIloEOuKFGxTk8gqodaBaARkUphe7Sci9tidy6n6SEZH5VEzNetcwnmkjSYt /59QLAYqVcQJlv8qCHJZsazRjQxijvu+1XU5JqqNXDnw6jCS00oTHs+ohWwpxWK6 GqQcroZ9SqYv8RunaKCDrxS2FItCBD9qxwJo4ZSW5nnZ2SFpjUJrdg6OJ+Wa -----END CERTIFICATE-----Generated at Fri Jul 24 16:29:22 2026 by rpki-client