$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft File: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft (raw, json) Hash identifier: mzu2KfWy9Lb1hpnPSiYgA/1pzf0fdGvljNm4PvZf9P0= Subject key identifier: 05:A0:56:0E:C4:86:4E:15:79:23:AC:B7:9A:79:D2:9C:76:91:C3:D3 Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D Certificate issuer: /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Certificate serial: 71ED9CBE79C2C17C243A4038E109C2E97A86583F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft Manifest number: 0198 Signing time: Sat 13 Jun 2026 05:05:48 +0000 Manifest this update: Sat 13 Jun 2026 05:00:47 +0000 Manifest next update: Thu 18 Jun 2026 23:31:47 +0000 Files and hashes: 1: 21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl (hash: JwZogzG9khgNO0Q5s9B3Ncmk7lezchmWlfISnpvNx/Y=) 2: 3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa (hash: RBMW8BZBcRejMtZPORmbrU0EOWH7r7J/shUtPpOr2Tw=) 3: 323830333a323231303a3a2f33322d3438203d3e20323731383936.roa (hash: adCs36QNzm3GUXnrmgFT4GEFYY5rriy/pu2JadFfnwA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Jun 2026 16:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ed:9c:be:79:c2:c1:7c:24:3a:40:38:e1:09:c2:e9:7a:86:58:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Validity Not Before: Jun 13 05:00:47 2026 GMT Not After : Jun 18 23:31:47 2026 GMT Subject: CN=05A0560EC4864E157923ACB79A79D29C7691C3D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:1c:4a:4d:28:be:e7:e2:81:23:52:a8:0f: fd:66:fc:63:1b:6a:93:d8:0e:46:58:0f:99:60:d3: 17:c7:ce:a8:0f:14:58:5d:4b:ca:d6:76:2e:e8:e3: 91:ab:04:cf:7c:c5:8f:a0:ce:f8:2e:15:43:c8:1f: d8:2b:5a:bb:76:6b:b9:48:4f:96:75:78:c5:60:0a: 50:04:53:92:c6:f0:65:73:33:43:4d:08:23:b7:65: ff:21:de:67:01:e1:ee:18:a7:c3:f0:60:5b:0d:2d: 5f:4f:e2:1c:de:de:d4:2c:fb:d6:02:e7:64:77:53: a0:14:7a:d8:ea:b7:90:77:79:3b:16:f0:05:0a:92: 6c:cf:63:a2:68:e1:b4:87:bb:18:7f:c1:d2:0a:75: b4:ae:74:69:b0:d7:26:fc:0e:d5:4d:5a:a8:f6:7b: 0d:5d:56:ae:09:a8:89:39:fc:83:76:3a:63:27:9b: 4a:af:55:6d:65:a3:75:b9:57:de:44:04:e6:d5:fd: 30:59:98:fc:58:7b:16:0a:3a:e9:ad:38:44:59:26: 34:db:75:e1:e4:03:f6:12:13:59:f5:59:16:f1:dc: 72:6b:be:62:0d:85:cb:ca:20:a5:21:16:ed:fc:9a: 57:7e:e6:eb:3f:ab:74:16:e2:44:4f:5c:f8:cd:59: dd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A0:56:0E:C4:86:4E:15:79:23:AC:B7:9A:79:D2:9C:76:91:C3:D3 X509v3 Authority Key Identifier: keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:90:2b:72:18:ce:a1:a1:ee:16:7b:85:64:18:dd:60:ec:c3: 80:86:06:49:63:8c:0b:68:88:b4:10:a5:da:e8:c1:3f:25:ba: 87:ac:a6:4f:66:30:88:00:b9:27:64:b8:a2:9e:1c:d7:c1:6b: 3f:e2:fe:05:13:85:09:7f:cf:45:5d:23:c5:57:c8:63:b9:08: 32:cf:2d:cc:5a:bc:a3:21:46:ed:b2:41:e0:0a:81:4e:2c:43: d5:b0:7c:cc:9d:a7:95:b3:10:64:cf:40:f8:89:b2:fc:af:1a: ab:f7:5f:c0:8f:06:3f:69:15:93:dd:c3:25:14:2f:c8:bc:eb: c9:4e:3a:8c:70:1c:81:61:d5:23:78:91:5d:b6:d3:2a:2b:1a: a1:ff:1e:22:0b:10:b9:f9:3c:c8:cc:2f:d9:01:84:19:79:5e: dc:47:b3:f5:63:b0:dd:c0:88:76:8f:18:da:c6:b2:aa:16:97: 40:dc:1b:04:e7:72:3a:b7:5e:20:b3:c0:c6:bf:9d:c8:3a:df: 7f:4a:21:c6:6c:dc:7f:5a:a0:46:f9:6e:3d:d1:5e:6b:b1:0e: ab:14:b6:48:b6:3a:c1:69:d9:84:44:40:23:38:39:4e:24:2b: aa:92:a0:4d:95:f3:6e:00:46:79:c0:48:ce:30:95:64:65:55: 28:92:13:4e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUce2cvnnCwXwkOkA44QnC6XqGWD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQzNFODRCMjJDQThEQkJFQjg0NTdGN0JGRTMwM0VD RkIzNTU3RDAeFw0yNjA2MTMwNTAwNDdaFw0yNjA2MTgyMzMxNDdaMDMxMTAvBgNV BAMTKDA1QTA1NjBFQzQ4NjRFMTU3OTIzQUNCNzlBNzlEMjlDNzY5MUMzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDrBxKTSi+5+KBI1KoD/1m/GMb apPYDkZYD5lg0xfHzqgPFFhdS8rWdi7o45GrBM98xY+gzvguFUPIH9grWrt2a7lI T5Z1eMVgClAEU5LG8GVzM0NNCCO3Zf8h3mcB4e4Yp8PwYFsNLV9P4hze3tQs+9YC 52R3U6AUetjqt5B3eTsW8AUKkmzPY6Jo4bSHuxh/wdIKdbSudGmw1yb8DtVNWqj2 ew1dVq4JqIk5/IN2OmMnm0qvVW1lo3W5V95EBObV/TBZmPxYexYKOumtOERZJjTb deHkA/YSE1n1WRbx3HJrvmINhcvKIKUhFu38mld+5us/q3QW4kRPXPjNWd1bAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUBaBWDsSGThV5I6y3mnnSnHaRw9MwHwYDVR0j BBgwFoAUIbw+hLIsqNu+uEV/e/4wPs+zVX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNjdDMUUyQkE2RTEzOTE0MkMxQ0Q1NEQ2M0E2MzVERDVG QzEyMzREQkZDM0YzRTdBMTc3QjA5MjNBQTg4Q0E0LzAvMjFCQzNFODRCMjJDQThE QkJFQjg0NTdGN0JGRTMwM0VDRkIzNTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUJDM0U4NEIyMkNBOERCQkVC ODQ1N0Y3QkZFMzAzRUNGQjM1NTdELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzY3QzFFMkJBNkUxMzkxNDJDMUNENTRENjNBNjM1REQ1RkMxMjM0REJG QzNGM0U3QTE3N0IwOTIzQUE4OENBNC8wLzIxQkMzRTg0QjIyQ0E4REJCRUI4NDU3 RjdCRkUzMDNFQ0ZCMzU1N0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDJkCtyGM6hoe4We4VkGN1g7MOA hgZJY4wLaIi0EKXa6ME/JbqHrKZPZjCIALknZLiinhzXwWs/4v4FE4UJf89FXSPF V8hjuQgyzy3MWryjIUbtskHgCoFOLEPVsHzMnaeVsxBkz0D4ibL8rxqr91/AjwY/ aRWT3cMlFC/IvOvJTjqMcByBYdUjeJFdttMqKxqh/x4iCxC5+TzIzC/ZAYQZeV7c R7P1Y7DdwIh2jxjaxrKqFpdA3BsE53I6t14gs8DGv53IOt9/SiHGbNx/WqBG+W49 0V5rsQ6rFLZItjrBadmEREAjODlOJCuqkqBNlfNuAEZ5wEjOMJVkZVUokhNO -----END CERTIFICATE-----Generated at Sun Jun 14 08:22:25 2026 by rpki-client