$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft File: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft (raw, json) Hash identifier: 5PfGf5cU1C22b2nJLFHyZAguuNbzkBUIJCkpA/Uj7xU= Subject key identifier: 4D:D3:5F:14:3B:77:93:D2:3B:A4:F8:DA:C8:6E:B8:D3:F5:CB:70:14 Authority key identifier: 21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6 Certificate issuer: /CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6 Certificate serial: 0BB3128F8D2E61F86CFE066B5AD79BA448781A66 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft Manifest number: 01CA Signing time: Thu 29 Oct 2026 10:11:31 +0000 Manifest this update: Thu 29 Oct 2026 10:06:31 +0000 Manifest next update: Wed 04 Nov 2026 07:47:31 +0000 Files and hashes: 1: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl (hash: TE0YATNlKzEql3kzPebxswEf5i6O6LBQB0usZ2+riYc=) 2: 3139302e3131302e3232352e302f32342d3234203d3e20323733313735.roa (hash: 5KDksdh/kS2TEE0iZShC3+eJma/c1Kj8GO1qMma1g3E=) 3: 323830333a386135303a3a2f33322d3332203d3e20323733313735.roa (hash: nq297afTlSUJbpE9KucQxGzAF//C5+OApfISJeGV/Mg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 02:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b3:12:8f:8d:2e:61:f8:6c:fe:06:6b:5a:d7:9b:a4:48:78:1a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6 Validity Not Before: Oct 29 10:06:31 2026 GMT Not After : Nov 4 07:47:31 2026 GMT Subject: CN=4DD35F143B7793D23BA4F8DAC86EB8D3F5CB7014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f4:8d:ef:38:6a:a0:09:bf:be:38:d9:27:27: 2e:e2:7f:e6:0c:d9:ee:a8:34:a7:b7:70:ca:58:71: e3:33:2f:fd:fe:7e:44:5d:67:1b:bf:c1:cb:d8:d3: d3:c9:71:b9:b0:0c:e7:f3:b7:36:3d:ad:9a:e8:7a: 8a:72:f0:3d:fb:f4:f8:e8:03:6a:c9:2a:bc:13:04: e4:32:d6:12:83:86:0b:5f:84:23:a4:6b:92:63:3a: dc:47:28:15:63:32:c8:35:06:c6:9b:23:2c:cf:1d: c4:b2:be:1e:47:a1:c1:46:12:00:91:21:ac:d6:81: 5c:cb:99:fe:bf:dc:66:3c:e3:45:78:2e:5c:8c:38: ec:db:95:55:d3:68:9a:9c:2a:0e:49:2a:0c:0c:93: 9f:cf:9c:76:46:47:d3:c7:0d:16:96:88:64:a6:81: d3:c2:55:6c:fe:b3:3d:94:84:40:f6:e1:88:fe:32: 00:78:d3:b6:6c:23:b7:26:67:3f:92:49:bd:0a:6d: 3c:bb:38:45:fc:b8:07:8f:e1:87:cc:94:36:f1:32: 14:af:1c:92:e3:25:4b:b5:54:af:7c:f1:82:7d:44: 83:ac:1e:fc:97:be:c0:ce:82:0e:c4:ac:5b:5e:b1: 88:d4:ac:17:6e:a1:34:cc:da:d2:64:57:db:df:9b: d6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D3:5F:14:3B:77:93:D2:3B:A4:F8:DA:C8:6E:B8:D3:F5:CB:70:14 X509v3 Authority Key Identifier: keyid:21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fe:84:3f:52:37:7d:06:d8:b7:6f:f1:9c:2d:87:f7:c3:13: fe:fb:17:b1:97:f4:d5:6a:cb:e3:34:95:63:0a:99:a1:3c:c5: 88:07:b5:57:7a:59:d4:a5:7c:e7:88:da:88:6c:a8:4f:15:74: da:a9:1b:75:e7:db:b7:04:f3:de:c5:85:8e:4b:61:4d:02:0d: c6:00:d6:87:96:25:a5:47:50:8f:ac:30:0e:35:4b:f3:7f:1b: ab:7d:82:5d:f7:af:d7:3d:f5:c5:f9:97:45:4b:19:60:cf:fc: 87:67:51:8b:95:2b:c3:03:57:92:e6:c6:d0:f3:f6:f6:58:69: c4:97:78:23:3b:17:3e:cc:b7:64:f9:3c:a5:fe:f0:a3:d1:c9: 95:77:f2:3f:68:ea:f6:00:c3:0e:f8:f6:e6:32:d6:18:fe:5a: 3e:92:cb:55:d2:f2:34:1a:35:8f:b9:27:62:91:1e:b0:86:10: db:08:70:38:b0:c4:1b:5c:f9:2e:80:5e:fd:62:c0:09:39:19: 8d:3e:d4:71:bd:09:f7:43:3d:5e:2f:0f:84:86:16:ca:dd:da: 72:0d:f2:3d:0b:dd:9a:d3:5b:25:e5:fc:97:14:8e:75:1b:3a: 0b:a1:aa:fc:c7:17:d8:a7:e0:c7:7c:a2:3f:6c:50:8b:61:9a: b5:db:fc:7a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUC7MSj40uYfhs/gZrWtebpEh4GmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBRkQ0NDM1RTlEODc3ODExMThCRDE2Rjk3QUQ4MUYx MTlCRkJENjAeFw0yNjEwMjkxMDA2MzFaFw0yNjExMDQwNzQ3MzFaMDMxMTAvBgNV BAMTKDRERDM1RjE0M0I3NzkzRDIzQkE0RjhEQUM4NkVCOEQzRjVDQjcwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp9I3vOGqgCb++ONknJy7if+YM 2e6oNKe3cMpYceMzL/3+fkRdZxu/wcvY09PJcbmwDOfztzY9rZroeopy8D379Pjo A2rJKrwTBOQy1hKDhgtfhCOka5JjOtxHKBVjMsg1BsabIyzPHcSyvh5HocFGEgCR IazWgVzLmf6/3GY840V4LlyMOOzblVXTaJqcKg5JKgwMk5/PnHZGR9PHDRaWiGSm gdPCVWz+sz2UhED24Yj+MgB407ZsI7cmZz+SSb0KbTy7OEX8uAeP4YfMlDbxMhSv HJLjJUu1VK988YJ9RIOsHvyXvsDOgg7ErFtesYjUrBduoTTM2tJkV9vfm9alAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTdNfFDt3k9I7pPjayG640/XLcBQwHwYDVR0j BBgwFoAUIa/UQ16dh3gRGL0W+XrYHxGb+9YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQUE5NDkzQzFGNTk4NjBFNEFGMjEyMjQ1ODMyQkRDQ0E1 MDBCRTUxQjM5MTVCQjBCQ0ZDOEQzRDcyREFEOENGLzAvMjFBRkQ0NDM1RTlEODc3 ODExMThCRDE2Rjk3QUQ4MUYxMTlCRkJENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUFGRDQ0MzVFOUQ4Nzc4MTEx OEJEMTZGOTdBRDgxRjExOUJGQkQ2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREFBOTQ5M0MxRjU5ODYwRTRBRjIxMjI0NTgzMkJEQ0NBNTAwQkU1MUIz OTE1QkIwQkNGQzhEM0Q3MkRBRDhDRi8wLzIxQUZENDQzNUU5RDg3NzgxMTE4QkQx NkY5N0FEODFGMTE5QkZCRDYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ/oQ/Ujd9Bti3b/GcLYf3wxP+ +xexl/TVasvjNJVjCpmhPMWIB7VXelnUpXzniNqIbKhPFXTaqRt159u3BPPexYWO S2FNAg3GANaHliWlR1CPrDAONUvzfxurfYJd96/XPfXF+ZdFSxlgz/yHZ1GLlSvD A1eS5sbQ8/b2WGnEl3gjOxc+zLdk+Tyl/vCj0cmVd/I/aOr2AMMO+PbmMtYY/lo+ kstV0vI0GjWPuSdikR6whhDbCHA4sMQbXPkugF79YsAJORmNPtRxvQn3Qz1eLw+E hhbK3dpyDfI9C92a01sl5fyXFI51GzoLoar8xxfYp+DHfKI/bFCLYZq12/x6 -----END CERTIFICATE-----Generated at Sat Oct 31 06:24:14 2026 by rpki-client