$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft File: 5021716DB872AFEA302E881734C3D03B1DCE1384.mft (raw, json) Hash identifier: 0on1rD59Y24n7+EfzaapkUL2YjdV4MNUdH5KW01FJtE= Subject key identifier: 4A:21:E9:89:7D:DF:21:6A:DF:36:3A:F5:F2:66:B0:E8:F1:06:EF:9F Authority key identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84 Certificate issuer: /CN=5021716DB872AFEA302E881734C3D03B1DCE1384 Certificate serial: 2B100DB62420A80CE02213D47DD5AC39EF658514 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft Manifest number: 0199 Signing time: Tue 26 May 2026 06:25:30 +0000 Manifest this update: Tue 26 May 2026 06:20:30 +0000 Manifest next update: Sun 31 May 2026 19:33:30 +0000 Files and hashes: 1: 323830333a613339303a3a2f33322d3438203d3e20323733303135.roa (hash: Fu/SZhrr6Jw7DbYo5CUKcfKCtKHHVYuJggcFFClGvTs=) 2: 5021716DB872AFEA302E881734C3D03B1DCE1384.crl (hash: hfVfM4zv7JpIMKTGA1rqqC6HgvkXSwoRReFdm2S/SCM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 May 2026 19:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:10:0d:b6:24:20:a8:0c:e0:22:13:d4:7d:d5:ac:39:ef:65:85:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5021716DB872AFEA302E881734C3D03B1DCE1384 Validity Not Before: May 26 06:20:30 2026 GMT Not After : May 31 19:33:30 2026 GMT Subject: CN=4A21E9897DDF216ADF363AF5F266B0E8F106EF9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0a:13:31:73:62:32:ff:f6:38:a8:4d:b8:bd: ca:b5:44:52:d2:c3:50:e7:af:f5:7b:a0:6d:32:0f: 3d:03:03:9f:44:c7:12:94:e1:99:f4:2a:76:85:ec: 40:8a:f4:94:a9:c0:52:8a:58:a8:e7:ac:9e:20:e9: 5e:09:7a:bc:56:0a:b5:1d:1c:e2:df:0b:47:98:1b: fc:e0:aa:ed:c8:62:b4:a0:7a:17:b7:84:da:f4:9b: 3c:68:61:3e:b0:b2:b2:cd:a1:d3:47:3b:94:af:5d: a0:ef:0c:95:bf:82:4c:4e:ac:76:5a:d3:7e:8e:6f: a6:f9:5a:38:58:eb:8c:ca:1f:6f:f6:12:a3:91:e1: fc:75:82:91:3a:41:0f:ab:cf:bb:f9:24:45:c1:37: 24:54:e3:4a:0d:59:7d:d1:d8:61:7e:14:cb:c9:a3: 17:c3:5a:cc:43:13:07:c2:8b:da:9b:c5:52:2b:d5: 64:c1:92:f9:79:e2:18:1a:fd:25:36:05:aa:e4:e6: a8:c7:89:0a:62:40:37:30:7e:8f:f8:50:21:66:1f: 45:4b:33:a3:55:ef:db:b4:92:30:dd:e1:27:5f:73: b3:db:2f:b8:83:98:57:4f:d9:00:7e:5c:89:fc:e6: 25:df:63:3b:71:dd:5d:20:12:26:af:13:b2:5b:2b: c3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:E9:89:7D:DF:21:6A:DF:36:3A:F5:F2:66:B0:E8:F1:06:EF:9F X509v3 Authority Key Identifier: keyid:50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:03:bc:9a:44:be:7b:85:e1:67:ed:0e:35:07:bf:a7:21:81: 7d:8f:99:7b:00:b0:e5:35:f9:4d:89:e2:47:19:7b:34:78:15: 42:d3:e9:3e:00:c7:88:34:b4:65:6a:a5:d2:7f:80:c2:86:c1: 83:72:20:53:1e:97:f5:fa:51:54:7a:53:57:a7:38:0d:76:b7: db:ef:11:db:d2:16:d2:70:01:88:9b:d5:09:22:17:25:2a:05: e7:54:5c:c3:18:d5:c4:d9:80:5f:3f:42:a4:54:1e:b5:90:c3: d6:f8:7b:4f:f5:fe:a1:1a:b1:45:67:98:f2:9e:b0:c4:7f:da: 56:3a:f1:3d:57:fc:30:39:b8:74:73:7b:51:ec:74:eb:0c:0b: a1:45:cb:52:c0:1c:53:21:ac:a1:b8:81:e2:6b:64:cf:71:5a: 99:ba:f4:1f:e7:86:cf:20:f3:02:82:0c:6c:9d:06:ef:45:42: 8e:3d:ac:d2:22:65:c0:ca:1c:89:53:62:5a:76:74:83:42:d1: 7c:27:73:0f:59:95:b7:64:94:22:6e:35:9b:79:2b:16:5a:d5: dd:b9:81:14:72:c7:38:71:29:ba:08:57:4c:4e:8a:c0:fa:20: 0d:96:ff:ef:81:3d:e7:6d:1d:27:51:d5:a6:f0:da:73:70:a8: 02:7e:1a:6d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKxANtiQgqAzgIhPUfdWsOe9lhRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAyMTcxNkRCODcyQUZFQTMwMkU4ODE3MzRDM0QwM0Ix RENFMTM4NDAeFw0yNjA1MjYwNjIwMzBaFw0yNjA1MzExOTMzMzBaMDMxMTAvBgNV BAMTKDRBMjFFOTg5N0RERjIxNkFERjM2M0FGNUYyNjZCMEU4RjEwNkVGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnChMxc2Iy//Y4qE24vcq1RFLS w1Dnr/V7oG0yDz0DA59ExxKU4Zn0KnaF7ECK9JSpwFKKWKjnrJ4g6V4JerxWCrUd HOLfC0eYG/zgqu3IYrSgehe3hNr0mzxoYT6wsrLNodNHO5SvXaDvDJW/gkxOrHZa 036Ob6b5WjhY64zKH2/2EqOR4fx1gpE6QQ+rz7v5JEXBNyRU40oNWX3R2GF+FMvJ oxfDWsxDEwfCi9qbxVIr1WTBkvl54hga/SU2Bark5qjHiQpiQDcwfo/4UCFmH0VL M6NV79u0kjDd4Sdfc7PbL7iDmFdP2QB+XIn85iXfYztx3V0gEiavE7JbK8OnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSiHpiX3fIWrfNjr18maw6PEG758wHwYDVR0j BBgwFoAUUCFxbbhyr+owLogXNMPQOx3OE4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81Mjk3QjcwNzhGQjFCNTIxMDA2RDc1MUEzMkEyQUMzNUY2 MTQ2MTc1MjI0ODRGODg3RTVFNzdBMkNGQzc1MjU3LzAvNTAyMTcxNkRCODcyQUZF QTMwMkU4ODE3MzRDM0QwM0IxRENFMTM4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MDIxNzE2REI4NzJBRkVBMzAy RTg4MTczNEMzRDAzQjFEQ0UxMzg0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTI5N0I3MDc4RkIxQjUyMTAwNkQ3NTFBMzJBMkFDMzVGNjE0NjE3NTIy NDg0Rjg4N0U1RTc3QTJDRkM3NTI1Ny8wLzUwMjE3MTZEQjg3MkFGRUEzMDJFODgx NzM0QzNEMDNCMURDRTEzODQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9A7yaRL57heFn7Q41B7+nIYF9 j5l7ALDlNflNieJHGXs0eBVC0+k+AMeINLRlaqXSf4DChsGDciBTHpf1+lFUelNX pzgNdrfb7xHb0hbScAGIm9UJIhclKgXnVFzDGNXE2YBfP0KkVB61kMPW+HtP9f6h GrFFZ5jynrDEf9pWOvE9V/wwObh0c3tR7HTrDAuhRctSwBxTIayhuIHia2TPcVqZ uvQf54bPIPMCggxsnQbvRUKOPazSImXAyhyJU2JadnSDQtF8J3MPWZW3ZJQibjWb eSsWWtXduYEUcsc4cSm6CFdMTorA+iANlv/vgT3nbR0nUdWm8NpzcKgCfhpt -----END CERTIFICATE-----Generated at Thu May 28 17:34:17 2026 by rpki-client