
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
File: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft (raw, json)
Hash identifier: b7Rdd6X4Cur0Q02ZIIl4l1ZUuEh+PdvmOCIoZzNmRK0=
Subject key identifier: 87:DD:61:48:9C:35:66:6B:37:B3:F3:4B:A4:42:B9:56:38:93:3F:ED
Authority key identifier: 2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
Certificate issuer: /CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Certificate serial: 675835D3B0026B2E7D7755B746BEA8330EE096BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
Manifest number: 0189
Signing time: Tue 07 Apr 2026 09:35:20 +0000
Manifest this update: Tue 07 Apr 2026 09:30:20 +0000
Manifest next update: Sun 12 Apr 2026 08:58:20 +0000
Files and hashes: 1: 34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa (hash: 4r/Ycb2It+axZdCPW4Gpw/M49d95d7cextIQ5hDQMwg=)
2: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl (hash: N7t/Dr6qvCglGBNPYnGHci3pRUbjxd+1cvTYTd2M5xE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 12 Apr 2026 05:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:58:35:d3:b0:02:6b:2e:7d:77:55:b7:46:be:a8:33:0e:e0:96:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Validity
Not Before: Apr 7 09:30:20 2026 GMT
Not After : Apr 12 08:58:20 2026 GMT
Subject: CN=87DD61489C35666B37B3F34BA442B95638933FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:47:75:fb:bb:22:9a:f3:2b:3c:71:08:ea:
c7:35:07:37:63:69:de:b2:b2:9f:f1:ab:c3:8c:5f:
9e:7d:20:26:88:9b:18:91:a4:40:a7:36:02:20:c2:
7a:07:18:f7:cd:48:3c:64:9c:ae:b0:00:8d:37:21:
f1:a7:4e:12:e7:23:4c:0d:90:30:2a:11:b8:6c:ad:
d0:24:e0:54:d2:3e:86:d5:4c:90:14:b8:9f:b5:7d:
e7:d4:05:a2:f1:c0:b8:e6:4e:b4:88:b9:6c:8f:ac:
63:a3:da:bd:21:13:34:70:9e:58:96:43:f2:3d:d6:
47:d7:fe:af:bf:b4:26:39:03:ee:ac:9e:d0:a6:d3:
40:90:ee:6a:8e:e0:48:70:9d:77:ae:4b:c6:bf:87:
4f:d8:32:39:93:7d:64:aa:44:41:ab:20:e3:a3:19:
cb:00:d3:5d:d8:c3:b7:f9:6e:da:68:5d:9a:3e:d8:
c8:b7:b2:75:98:15:cc:de:60:c7:2a:df:e9:4d:55:
1a:d0:5d:9a:3a:6e:7f:c1:43:4c:a8:4b:aa:17:15:
b4:bf:cc:5c:d1:40:f1:30:4f:18:13:88:24:90:11:
cb:f2:4a:11:b7:f0:52:f8:83:47:a0:eb:6d:82:92:
32:ff:6a:54:3d:44:f3:fe:6c:52:52:35:f4:e8:14:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DD:61:48:9C:35:66:6B:37:B3:F3:4B:A4:42:B9:56:38:93:3F:ED
X509v3 Authority Key Identifier:
keyid:2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:17:c4:10:ac:be:87:e5:64:d5:64:0b:af:8c:4c:16:43:b3:
01:1f:36:18:4b:a5:fe:2a:e0:e3:05:4a:48:2f:f4:b5:ba:41:
35:72:93:54:b1:41:bf:7e:c6:49:41:ef:6e:6d:5f:8e:6f:47:
5b:86:de:90:4d:f8:64:68:a8:80:a2:b3:6f:73:94:cd:8a:3e:
e8:7d:39:6d:57:95:39:84:6b:4c:ed:2a:0f:48:fa:be:5c:b8:
c6:f3:62:f2:65:d8:cc:8b:03:5b:92:08:3f:bf:5e:0c:f5:8a:
58:c7:ab:6c:97:d1:77:78:d5:97:f3:e8:2e:c8:61:cb:bb:57:
c1:aa:3f:8f:3f:1d:48:ea:ec:26:3b:cf:eb:d1:49:29:1d:5e:
74:40:72:8a:b4:26:e7:61:00:15:a5:25:e7:3d:f1:f3:0d:5e:
bd:5d:f5:8d:94:98:7d:ab:7b:b8:2e:39:36:67:1d:e6:93:f1:
57:7d:fc:e3:71:70:35:31:19:e7:cb:58:8b:0c:cc:9f:bc:c2:
bf:0e:61:27:57:a1:88:a3:24:e1:5a:c6:75:c9:c4:a5:2d:36:
b4:8e:f0:9a:86:37:df:f2:4e:4a:e8:93:d1:33:56:d0:c1:cb:
74:2c:6a:ef:f9:36:c3:60:ab:46:e2:62:61:e6:95:d5:d2:15:
ce:18:9a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:43:30 2026 by rpki-client