$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft File: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft (raw, json) Hash identifier: yVULxcuYS7MYUYBk0Bts+zU5mLYtzbBIqgAZVdK9010= Subject key identifier: 20:01:98:E7:40:9B:7C:0C:86:5D:92:50:B1:4F:53:76:01:69:3D:82 Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D Certificate issuer: /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Certificate serial: 223B03AAE7E623B9268B29B4B971256123D73827 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft Manifest number: 01D5 Signing time: Thu 15 Oct 2026 08:56:21 +0000 Manifest this update: Thu 15 Oct 2026 08:51:21 +0000 Manifest next update: Mon 19 Oct 2026 10:39:21 +0000 Files and hashes: 1: 323830333a323231303a3a2f33322d3438203d3e20323731383936.roa (hash: xsgtkQtkAK+r9Xq0B6shBgk97VS5L9ZpHi7ArbjU55Y=) 2: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl (hash: XV7B26VnnI0+J7W9EYAFO1ToBzqZqmZYdu1UoSYShtM=) 3: 3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa (hash: RBMW8BZBcRejMtZPORmbrU0EOWH7r7J/shUtPpOr2Tw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 19 Oct 2026 10:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3b:03:aa:e7:e6:23:b9:26:8b:29:b4:b9:71:25:61:23:d7:38:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Validity Not Before: Oct 15 08:51:21 2026 GMT Not After : Oct 19 10:39:21 2026 GMT Subject: CN=200198E7409B7C0C865D9250B14F537601693D82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9f:81:41:eb:ac:89:49:90:58:af:5a:dc:84: 02:2d:64:71:38:07:1a:a3:81:d4:02:5f:36:03:76: 31:11:2c:9f:cb:39:be:d4:12:10:22:da:e3:29:cf: a6:09:3c:94:32:f4:f4:d0:dc:d9:69:b5:16:43:7f: 90:f5:41:36:54:20:9d:1c:14:fb:11:88:6f:44:26: f9:01:fe:4a:20:5a:0b:e5:fb:37:ba:b2:41:82:6e: 55:fe:1c:a9:d0:4f:58:b8:48:9b:db:dc:20:98:a5: be:07:40:bb:55:13:6b:21:a9:bb:97:de:22:0b:66: 1e:6a:17:4f:23:30:f2:88:ca:aa:7d:98:39:35:ed: f8:e1:13:3a:fa:9f:b9:40:02:61:6d:48:fe:92:98: 9d:65:02:02:8f:af:a4:96:22:82:cb:bd:b8:82:71: 16:8b:91:fa:a1:36:54:77:26:5e:f6:ab:4f:0e:6a: d8:53:b0:7e:da:2f:63:75:9a:d0:cc:ec:2f:4c:2f: 95:cd:39:cc:b4:21:9f:9c:75:f2:3e:83:91:cd:af: 23:d9:46:e9:27:39:b0:a7:ed:d5:30:3c:e5:55:b0: 0b:d4:56:97:37:72:17:f7:40:19:1b:7b:08:24:1b: 08:cd:00:bd:50:6e:3f:22:24:ed:b5:f0:1e:76:4b: 6d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:01:98:E7:40:9B:7C:0C:86:5D:92:50:B1:4F:53:76:01:69:3D:82 X509v3 Authority Key Identifier: keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:56:f8:b0:95:46:94:f1:a2:c9:34:53:3e:78:41:23:9d:4d: 0e:6c:fc:68:ba:ef:49:9a:8e:47:67:20:00:dc:f1:c0:42:30: 3e:50:fa:bb:63:e4:ee:f1:89:54:4a:45:f2:fc:4d:15:ec:21: 27:55:dc:22:1c:b2:6c:76:9f:a0:7b:7a:9c:55:14:25:d3:fa: bf:ff:a5:94:e6:e6:86:b2:e2:9a:5a:a7:27:ee:a7:8e:9f:2a: 66:83:19:c7:10:ea:9d:4d:78:a3:e9:d6:41:4a:33:ac:29:65: 8c:81:8f:30:55:23:74:80:86:67:dc:60:c3:23:b5:01:d5:0e: f3:ac:f1:22:35:a2:64:88:13:53:f5:0e:bc:68:bc:71:50:42: ef:18:8d:c9:a1:82:43:b6:e2:5f:0f:5d:b5:b4:94:7d:f8:5a: 29:e2:ca:9b:e8:71:46:47:54:9f:38:a2:cf:56:8e:2a:96:2d: 96:73:7d:37:ff:0a:aa:c6:37:5b:9a:5f:00:3f:0c:81:0f:8d: fc:ba:09:3f:a9:1c:4a:fb:73:ff:ec:dc:7e:4c:32:cb:30:a7: 4c:6e:d2:e0:d8:58:f8:31:98:c8:51:80:a0:65:d6:f6:59:6d: 35:4f:aa:5b:a3:ed:b7:65:6b:ac:74:ce:ab:28:9a:dc:5e:c4: 62:50:c5:63 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIjsDqufmI7kmiym0uXElYSPXOCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQzNFODRCMjJDQThEQkJFQjg0NTdGN0JGRTMwM0VD RkIzNTU3RDAeFw0yNjEwMTUwODUxMjFaFw0yNjEwMTkxMDM5MjFaMDMxMTAvBgNV BAMTKDIwMDE5OEU3NDA5QjdDMEM4NjVEOTI1MEIxNEY1Mzc2MDE2OTNEODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOn4FB66yJSZBYr1rchAItZHE4 BxqjgdQCXzYDdjERLJ/LOb7UEhAi2uMpz6YJPJQy9PTQ3NlptRZDf5D1QTZUIJ0c FPsRiG9EJvkB/kogWgvl+ze6skGCblX+HKnQT1i4SJvb3CCYpb4HQLtVE2shqbuX 3iILZh5qF08jMPKIyqp9mDk17fjhEzr6n7lAAmFtSP6SmJ1lAgKPr6SWIoLLvbiC cRaLkfqhNlR3Jl72q08OathTsH7aL2N1mtDM7C9ML5XNOcy0IZ+cdfI+g5HNryPZ RuknObCn7dUwPOVVsAvUVpc3chf3QBkbewgkGwjNAL1Qbj8iJO218B52S23/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIAGY50CbfAyGXZJQsU9TdgFpPYIwHwYDVR0j BBgwFoAUIbw+hLIsqNu+uEV/e/4wPs+zVX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjdDMUUyQkE2RTEzOTE0MkMxQ0Q1NEQ2M0E2MzVERDVG QzEyMzREQkZDM0YzRTdBMTc3QjA5MjNBQTg4Q0E0LzAvMjFCQzNFODRCMjJDQThE QkJFQjg0NTdGN0JGRTMwM0VDRkIzNTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUJDM0U4NEIyMkNBOERCQkVC ODQ1N0Y3QkZFMzAzRUNGQjM1NTdELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzY3QzFFMkJBNkUxMzkxNDJDMUNENTRENjNBNjM1REQ1RkMxMjM0REJG QzNGM0U3QTE3N0IwOTIzQUE4OENBNC8wLzIxQkMzRTg0QjIyQ0E4REJCRUI4NDU3 RjdCRkUzMDNFQ0ZCMzU1N0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByVviwlUaU8aLJNFM+eEEjnU0O bPxouu9Jmo5HZyAA3PHAQjA+UPq7Y+Tu8YlUSkXy/E0V7CEnVdwiHLJsdp+ge3qc VRQl0/q//6WU5uaGsuKaWqcn7qeOnypmgxnHEOqdTXij6dZBSjOsKWWMgY8wVSN0 gIZn3GDDI7UB1Q7zrPEiNaJkiBNT9Q68aLxxUELvGI3JoYJDtuJfD121tJR9+Fop 4sqb6HFGR1SfOKLPVo4qli2Wc303/wqqxjdbml8APwyBD438ugk/qRxK+3P/7Nx+ TDLLMKdMbtLg2Fj4MZjIUYCgZdb2WW01T6pbo+23ZWusdM6rKJrcXsRiUMVj -----END CERTIFICATE-----Generated at Thu Oct 15 16:07:52 2026 by rpki-client