
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
File: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft (raw, json)
Hash identifier: sAPo/lhqERuGi1fHHWiTsBxo277F7cPTl+JY+sxU77A=
Subject key identifier: 4D:36:F8:C4:3C:CE:05:1D:8F:08:14:E6:31:2B:07:C5:DB:69:E9:8A
Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A
Certificate issuer: /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A
Certificate serial: 67046998FB5F60D82E1F4267289AF8E53AC07563
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
Manifest number: 01AB
Signing time: Mon 20 Jul 2026 04:00:41 +0000
Manifest this update: Mon 20 Jul 2026 03:55:41 +0000
Manifest next update: Sat 25 Jul 2026 13:49:41 +0000
Files and hashes: 1: 323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (hash: GRWJfDTtaNARRPhnsoXH5s1znecEwffl4EvgxQ5gNqs=)
2: 34352e3233362e3134382e302f32322d3234203d3e20323636383132.roa (hash: TuVSnaAy8zQaHRhySpU28Pxq0rPBVxYrvaRsQF2zS/c=)
3: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl (hash: 4OrjHAwWV1j3eWdAOBlYxwonHmfqy6n66iPdqJXvaGc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl
rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 05:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:04:69:98:fb:5f:60:d8:2e:1f:42:67:28:9a:f8:e5:3a:c0:75:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A
Validity
Not Before: Jul 20 03:55:41 2026 GMT
Not After : Jul 25 13:49:41 2026 GMT
Subject: CN=4D36F8C43CCE051D8F0814E6312B07C5DB69E98A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:63:f8:ee:2c:d8:66:c3:fe:9f:73:ee:91:
57:f9:14:63:79:39:86:8c:e3:eb:db:ee:05:bd:93:
0a:2c:dd:c9:9a:bf:be:98:89:4b:15:5a:57:b1:3e:
f5:fc:63:66:6a:41:d3:59:34:90:53:e8:17:15:ce:
7c:cc:72:72:ef:37:1c:40:8d:80:93:35:b5:79:f1:
e8:25:44:fb:d7:67:a7:b9:99:1e:2d:1c:78:50:b0:
61:20:eb:85:41:3e:2c:a5:b6:6d:37:df:21:14:1a:
61:b1:14:96:fe:9d:6a:33:8c:66:21:d4:da:1e:4d:
55:95:38:0e:71:f6:34:79:21:eb:31:e1:36:e5:02:
56:05:5f:e7:20:e4:fd:85:60:2f:7d:6c:d2:ab:d9:
3b:2d:a1:8c:16:f2:a1:98:c9:5c:9e:ac:68:51:97:
31:6e:1c:99:8d:87:1d:61:a8:38:bc:4d:e6:c0:a2:
03:20:b8:11:9f:4c:69:d3:b5:21:c1:3d:58:61:00:
0f:ef:58:44:86:7c:a6:3a:11:80:55:67:c0:7e:de:
59:9d:1b:3f:88:25:37:92:3c:20:06:b4:1b:b9:f1:
ae:35:d2:0d:29:b0:a6:72:3c:97:7a:fd:81:23:22:
85:76:ac:7a:ca:60:e8:53:e8:8d:21:84:3f:e2:ff:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:36:F8:C4:3C:CE:05:1D:8F:08:14:E6:31:2B:07:C5:DB:69:E9:8A
X509v3 Authority Key Identifier:
keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:55:c4:34:80:44:76:98:03:d9:e5:1e:65:8a:66:53:c1:59:
c5:ee:df:98:3d:fb:87:92:3b:4d:c7:db:5b:e2:5d:5d:06:26:
25:2e:9b:c1:2d:75:d0:03:4d:bd:b0:42:35:28:98:42:b9:73:
1e:07:c4:58:72:85:86:a9:1f:8c:13:cf:91:41:49:bf:1f:73:
3e:d3:ba:91:0d:30:80:9a:9c:29:4c:08:25:d2:c3:27:35:48:
bd:8b:5d:2c:cf:cd:51:16:05:f7:ec:26:62:ca:11:9c:cf:dd:
35:62:aa:67:47:4b:f6:7b:c0:83:20:8a:f4:4a:ef:6d:8b:bf:
ad:02:69:28:c7:6f:3f:0f:a8:73:92:fd:b8:76:6f:32:46:fe:
2c:a8:2f:0d:21:d0:ee:c0:95:db:77:fd:0f:4a:b1:44:bd:d8:
3d:13:2e:08:5b:17:f1:61:fe:aa:15:e2:55:59:a7:32:ea:48:
5d:01:30:26:e6:83:52:a0:52:10:d8:75:79:c1:f1:bb:b0:63:
37:9a:dd:dd:67:ab:fd:bd:96:66:42:85:14:9f:d6:96:08:9f:
22:8b:f5:37:1b:7a:64:f6:92:39:9f:8f:19:bf:c6:6d:62:30:
ac:ca:ff:07:33:62:fa:02:47:b6:4c:15:2b:0e:04:75:2f:b3:
22:eb:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:30:51 2026 by rpki-client