$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft File: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft (raw, json) Hash identifier: ESBRjD6JRvpF9hY79bI+7aIG+RKuicGTvJ7O7LM5G2Q= Subject key identifier: 51:C1:3E:A7:8C:30:42:F1:46:2A:F5:29:8F:1C:11:A9:82:2F:8F:2B Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D Certificate issuer: /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Certificate serial: 4DA7D902A602568FE3069CC2D6A80A4CB4BB80D8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft Manifest number: 0167 Signing time: Sun 01 Mar 2026 03:21:15 +0000 Manifest this update: Sun 01 Mar 2026 03:16:15 +0000 Manifest next update: Fri 06 Mar 2026 05:50:15 +0000 Files and hashes: 1: 3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa (hash: RBMW8BZBcRejMtZPORmbrU0EOWH7r7J/shUtPpOr2Tw=) 2: 323830333a323231303a3a2f33322d3438203d3e20323731383936.roa (hash: adCs36QNzm3GUXnrmgFT4GEFYY5rriy/pu2JadFfnwA=) 3: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl (hash: btAbF+qcpUTF/uOSyFbIZs4oA2iANs0neV/6tjXk+5U=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 06 Mar 2026 05:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a7:d9:02:a6:02:56:8f:e3:06:9c:c2:d6:a8:0a:4c:b4:bb:80:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Validity Not Before: Mar 1 03:16:15 2026 GMT Not After : Mar 6 05:50:15 2026 GMT Subject: CN=51C13EA78C3042F1462AF5298F1C11A9822F8F2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:92:a4:a9:7a:4b:35:32:3a:88:93:e8:f3: f4:b4:b0:2e:1f:7e:84:a4:f1:50:a8:3c:3e:c8:a4: be:81:e1:e9:f8:86:46:21:95:73:a7:c8:62:3f:47: f3:6a:85:86:2f:b0:84:9b:ea:30:39:e9:21:56:da: a4:32:f1:14:c4:0a:aa:85:6e:eb:06:80:2b:9c:3e: 18:8b:d9:ba:d0:ab:b9:e5:ea:96:0d:fe:b0:19:c8: 2f:e8:6a:1a:53:c6:ee:ce:b1:89:eb:0e:02:69:7d: 64:40:c1:ee:49:51:ef:bd:9a:ad:1c:d7:c9:b3:fd: 92:0a:99:8c:3a:d9:ab:07:0a:77:7c:f7:2a:4f:50: 94:ce:6b:34:bb:29:19:24:bc:ef:36:16:cb:4b:ea: e9:5f:83:17:0b:ea:ef:76:1a:2f:ce:6a:59:c8:20: 18:da:03:60:54:58:ac:78:8f:62:f5:5b:15:87:3f: 13:b4:dd:23:7d:4d:c7:0c:81:82:67:56:29:36:c1: 75:de:13:c5:2c:ae:58:d4:ed:52:5c:98:fc:a2:09: 99:62:e5:a2:5b:ea:49:9a:bc:95:0b:35:ee:2c:e1: 86:e3:ad:6e:5e:dd:7f:df:a6:28:4f:07:7b:96:52: 90:39:02:b3:fe:32:ae:65:52:0f:18:d0:17:ca:33: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C1:3E:A7:8C:30:42:F1:46:2A:F5:29:8F:1C:11:A9:82:2F:8F:2B X509v3 Authority Key Identifier: keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:96:38:bc:15:a9:50:c0:5f:76:d2:cd:fe:0f:3b:76:b6:95: 9c:5a:34:37:04:22:9c:fd:d4:6a:62:ce:61:77:8f:50:81:b9: 77:67:97:c0:2c:57:8c:9b:88:8d:84:2a:41:8d:d3:1f:81:9a: ca:30:f1:d9:7f:09:25:2e:99:a2:57:d0:6b:b0:53:13:7f:0f: 05:49:b5:ac:27:22:9e:84:21:0b:40:e1:74:86:fc:3f:cd:6d: a4:16:32:84:d5:82:c9:cf:36:a7:d5:37:9a:b2:58:92:a2:d9: dc:44:5d:23:9b:fc:40:5b:60:4b:46:9d:bb:44:54:25:51:78: 47:2e:78:af:fe:46:62:24:c5:18:97:18:78:63:3b:83:11:7e: 5a:12:12:ee:e5:79:f8:9e:42:76:7b:2b:e0:ba:a4:a5:b0:8d: 66:68:b3:4d:f1:e4:16:ef:52:67:98:33:e6:4a:5a:d6:02:0f: 93:a2:58:47:63:24:38:3b:b1:b3:d1:24:83:b9:63:6e:43:ec: bd:66:47:b4:96:a1:c8:35:26:30:fe:ee:5a:e6:25:59:71:38: a8:b7:5c:4f:40:06:f9:7a:7f:1f:30:4f:09:25:41:38:13:c7: 7b:38:38:d7:ad:c4:57:57:b4:c1:e1:53:c3:80:95:85:32:64: 13:19:dc:a2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTafZAqYCVo/jBpzC1qgKTLS7gNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQzNFODRCMjJDQThEQkJFQjg0NTdGN0JGRTMwM0VD RkIzNTU3RDAeFw0yNjAzMDEwMzE2MTVaFw0yNjAzMDYwNTUwMTVaMDMxMTAvBgNV BAMTKDUxQzEzRUE3OEMzMDQyRjE0NjJBRjUyOThGMUMxMUE5ODIyRjhGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFZKkqXpLNTI6iJPo8/S0sC4f foSk8VCoPD7IpL6B4en4hkYhlXOnyGI/R/NqhYYvsISb6jA56SFW2qQy8RTECqqF busGgCucPhiL2brQq7nl6pYN/rAZyC/oahpTxu7OsYnrDgJpfWRAwe5JUe+9mq0c 18mz/ZIKmYw62asHCnd89ypPUJTOazS7KRkkvO82FstL6ulfgxcL6u92Gi/OalnI IBjaA2BUWKx4j2L1WxWHPxO03SN9TccMgYJnVik2wXXeE8UsrljU7VJcmPyiCZli 5aJb6kmavJULNe4s4YbjrW5e3X/fpihPB3uWUpA5ArP+Mq5lUg8Y0BfKMxwxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUUcE+p4wwQvFGKvUpjxwRqYIvjyswHwYDVR0j BBgwFoAUIbw+hLIsqNu+uEV/e/4wPs+zVX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjdDMUUyQkE2RTEzOTE0MkMxQ0Q1NEQ2M0E2MzVERDVG QzEyMzREQkZDM0YzRTdBMTc3QjA5MjNBQTg4Q0E0LzAvMjFCQzNFODRCMjJDQThE QkJFQjg0NTdGN0JGRTMwM0VDRkIzNTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUJDM0U4NEIyMkNBOERCQkVC ODQ1N0Y3QkZFMzAzRUNGQjM1NTdELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzY3QzFFMkJBNkUxMzkxNDJDMUNENTRENjNBNjM1REQ1RkMxMjM0REJG QzNGM0U3QTE3N0IwOTIzQUE4OENBNC8wLzIxQkMzRTg0QjIyQ0E4REJCRUI4NDU3 RjdCRkUzMDNFQ0ZCMzU1N0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnlji8FalQwF920s3+Dzt2tpWc WjQ3BCKc/dRqYs5hd49Qgbl3Z5fALFeMm4iNhCpBjdMfgZrKMPHZfwklLpmiV9Br sFMTfw8FSbWsJyKehCELQOF0hvw/zW2kFjKE1YLJzzan1TeasliSotncRF0jm/xA W2BLRp27RFQlUXhHLniv/kZiJMUYlxh4YzuDEX5aEhLu5Xn4nkJ2eyvguqSlsI1m aLNN8eQW71JnmDPmSlrWAg+TolhHYyQ4O7Gz0SSDuWNuQ+y9Zke0lqHINSYw/u5a 5iVZcTiot1xPQAb5en8fME8JJUE4E8d7ODjXrcRXV7TB4VPDgJWFMmQTGdyi -----END CERTIFICATE-----Generated at Mon Mar 2 16:13:54 2026 by rpki-client