$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft File: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft (raw, json) Hash identifier: txK76PC24olE4XCdNjCehO2LA4/TSbYmQBAk1hXZa2U= Subject key identifier: EC:3D:34:7B:DF:5C:B2:AD:8D:50:51:44:7E:B4:8E:16:E1:EA:AC:05 Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D Certificate issuer: /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Certificate serial: 3B1C2CF488E6B4BB038FB6F54AE5E1F74DDB1999 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft Manifest number: 017D Signing time: Thu 16 Apr 2026 02:24:57 +0000 Manifest this update: Thu 16 Apr 2026 02:19:57 +0000 Manifest next update: Tue 21 Apr 2026 08:59:57 +0000 Files and hashes: 1: 323830333a323231303a3a2f33322d3438203d3e20323731383936.roa (hash: adCs36QNzm3GUXnrmgFT4GEFYY5rriy/pu2JadFfnwA=) 2: 3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa (hash: RBMW8BZBcRejMtZPORmbrU0EOWH7r7J/shUtPpOr2Tw=) 3: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl (hash: vNZYlPhZ4HXnoBgip3vi/3VSks4wdjN+qS1gxnGZgLw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 08:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1c:2c:f4:88:e6:b4:bb:03:8f:b6:f5:4a:e5:e1:f7:4d:db:19:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Validity Not Before: Apr 16 02:19:57 2026 GMT Not After : Apr 21 08:59:57 2026 GMT Subject: CN=EC3D347BDF5CB2AD8D5051447EB48E16E1EAAC05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7e:bc:dd:b4:ce:ff:ab:8b:a4:23:2e:3b:c5: b0:e4:26:59:44:74:66:d6:09:50:fe:49:f6:89:db: 40:24:4e:5f:48:c2:74:05:19:04:75:07:c5:d2:bc: ec:1e:45:6c:7a:fd:ef:2a:49:ed:0a:d1:8e:c7:94: 99:56:5a:d8:67:ba:ad:f2:51:cc:6e:f5:7a:39:aa: be:85:98:6c:3b:8e:c0:df:e4:54:42:89:31:dc:f3: 5d:6f:73:1c:06:bd:8d:a3:04:d2:03:21:f1:b9:ec: 75:9a:c9:d4:e6:b3:1a:94:bc:41:cd:a0:d0:f0:c6: 9a:b6:c4:07:d7:05:f0:ed:96:fc:57:0f:36:21:65: 86:81:8f:ab:31:46:24:2f:3c:18:e3:6e:d9:6e:c8: 1f:85:06:24:c8:e8:50:ed:e3:1a:fd:0a:26:39:09: 58:4e:03:03:20:46:37:8f:96:9e:bb:db:26:dd:10: f8:62:5e:1f:05:dc:5d:75:8c:93:3b:d0:70:81:1c: f1:09:33:7f:47:82:7f:11:40:a2:d1:0c:d5:ed:05: 7e:ce:28:73:74:e7:e7:ba:bf:b2:82:24:dc:19:29: f2:9f:39:92:1a:37:0e:18:97:e5:77:ad:e9:e9:30: 5d:9f:92:72:be:07:08:fb:3d:13:ef:c7:b2:f6:8a: 07:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3D:34:7B:DF:5C:B2:AD:8D:50:51:44:7E:B4:8E:16:E1:EA:AC:05 X509v3 Authority Key Identifier: keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:12:d1:17:d6:43:a7:e2:a6:7f:94:16:aa:fb:b4:da:68:3a: 79:7e:d0:78:d9:ec:44:ce:81:1a:3f:fc:2b:93:dc:2f:e2:d0: ed:34:0e:8a:a9:c4:f9:c3:c6:fc:d8:61:d6:af:3d:20:a8:82: 9f:dc:cc:12:f3:b0:f1:3d:cf:12:b5:0b:cc:c5:08:69:85:5b: 41:8e:74:d7:91:16:cd:59:eb:f0:ed:4e:02:7b:68:d3:7b:96: ef:a0:42:36:2e:5c:f0:79:ed:5c:1f:0b:9e:1e:c7:f1:7c:dc: b0:ed:5d:20:8f:d9:4b:33:30:ef:02:93:9c:10:92:46:63:f9: 78:1d:8f:9e:b4:0e:6f:6d:26:2f:97:e6:59:94:36:9b:85:7f: 25:35:86:c6:89:15:f1:9e:22:11:51:a9:d8:a9:4e:de:6b:c2: f4:3b:41:00:b1:d4:0b:b3:31:9e:ac:08:a9:c1:e1:43:63:e5: 6b:a5:55:6a:1c:a8:f1:9b:ab:47:cc:a7:76:b8:4b:b1:0c:91: 07:ef:12:90:d5:5d:ef:b2:4d:07:36:30:19:c6:c6:20:27:b4: 5f:e1:e1:5b:70:a8:1a:70:85:6f:60:00:da:8b:8c:7a:aa:5f: fa:5b:ee:c6:ce:98:04:0e:9f:48:a3:fa:5d:98:7a:dd:59:14: f7:42:53:00 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOxws9IjmtLsDj7b1SuXh903bGZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQzNFODRCMjJDQThEQkJFQjg0NTdGN0JGRTMwM0VD RkIzNTU3RDAeFw0yNjA0MTYwMjE5NTdaFw0yNjA0MjEwODU5NTdaMDMxMTAvBgNV BAMTKEVDM0QzNDdCREY1Q0IyQUQ4RDUwNTE0NDdFQjQ4RTE2RTFFQUFDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfrzdtM7/q4ukIy47xbDkJllE dGbWCVD+SfaJ20AkTl9IwnQFGQR1B8XSvOweRWx6/e8qSe0K0Y7HlJlWWthnuq3y Ucxu9Xo5qr6FmGw7jsDf5FRCiTHc811vcxwGvY2jBNIDIfG57HWaydTmsxqUvEHN oNDwxpq2xAfXBfDtlvxXDzYhZYaBj6sxRiQvPBjjbtluyB+FBiTI6FDt4xr9CiY5 CVhOAwMgRjePlp672ybdEPhiXh8F3F11jJM70HCBHPEJM39Hgn8RQKLRDNXtBX7O KHN05+e6v7KCJNwZKfKfOZIaNw4Yl+V3renpMF2fknK+Bwj7PRPvx7L2igcjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7D00e99csq2NUFFEfrSOFuHqrAUwHwYDVR0j BBgwFoAUIbw+hLIsqNu+uEV/e/4wPs+zVX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjdDMUUyQkE2RTEzOTE0MkMxQ0Q1NEQ2M0E2MzVERDVG QzEyMzREQkZDM0YzRTdBMTc3QjA5MjNBQTg4Q0E0LzAvMjFCQzNFODRCMjJDQThE QkJFQjg0NTdGN0JGRTMwM0VDRkIzNTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUJDM0U4NEIyMkNBOERCQkVC ODQ1N0Y3QkZFMzAzRUNGQjM1NTdELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzY3QzFFMkJBNkUxMzkxNDJDMUNENTRENjNBNjM1REQ1RkMxMjM0REJG QzNGM0U3QTE3N0IwOTIzQUE4OENBNC8wLzIxQkMzRTg0QjIyQ0E4REJCRUI4NDU3 RjdCRkUzMDNFQ0ZCMzU1N0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCdEtEX1kOn4qZ/lBaq+7TaaDp5 ftB42exEzoEaP/wrk9wv4tDtNA6KqcT5w8b82GHWrz0gqIKf3MwS87DxPc8StQvM xQhphVtBjnTXkRbNWevw7U4Ce2jTe5bvoEI2Llzwee1cHwueHsfxfNyw7V0gj9lL MzDvApOcEJJGY/l4HY+etA5vbSYvl+ZZlDabhX8lNYbGiRXxniIRUanYqU7ea8L0 O0EAsdQLszGerAipweFDY+VrpVVqHKjxm6tHzKd2uEuxDJEH7xKQ1V3vsk0HNjAZ xsYgJ7Rf4eFbcKgacIVvYADai4x6ql/6W+7GzpgEDp9Io/pdmHrdWRT3QlMA -----END CERTIFICATE-----Generated at Fri Apr 17 23:10:11 2026 by rpki-client