
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
File: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft (raw, json)
Hash identifier: tNTpbtyYU7fGPQvHlfzfKYjKBI0/iuzayrfWMVqJ3WM=
Subject key identifier: A5:2C:75:26:23:C5:65:3B:B9:A2:87:51:2A:4A:AD:1C:FC:3C:10:F5
Authority key identifier: 2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
Certificate issuer: /CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Certificate serial: 2DFC8EDA6CF5942697CF186F935191618798C431
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
Manifest number: 01A2
Signing time: Wed 27 May 2026 13:59:46 +0000
Manifest this update: Wed 27 May 2026 13:54:46 +0000
Manifest next update: Tue 02 Jun 2026 04:54:46 +0000
Files and hashes: 1: 34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa (hash: 4r/Ycb2It+axZdCPW4Gpw/M49d95d7cextIQ5hDQMwg=)
2: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl (hash: glnyOHw7EAYHKFlwm0fvfiJ554QYJ36SezVW0/m+JAs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 02 Jun 2026 04:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fc:8e:da:6c:f5:94:26:97:cf:18:6f:93:51:91:61:87:98:c4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Validity
Not Before: May 27 13:54:46 2026 GMT
Not After : Jun 2 04:54:46 2026 GMT
Subject: CN=A52C752623C5653BB9A287512A4AAD1CFC3C10F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:06:65:78:04:b3:bd:a5:ff:92:76:3d:c0:
ae:0c:10:05:0d:26:0a:7e:83:4e:cf:71:b9:9c:07:
83:f4:e2:0d:42:2d:48:26:b8:57:87:da:f0:12:19:
3e:32:6a:ef:92:b8:7e:b4:b7:9b:56:a5:fd:78:c6:
37:60:f4:68:e2:02:d3:ba:a0:f8:d1:c6:88:67:94:
4f:5d:ae:a0:db:2d:24:24:e4:79:8b:7f:03:1d:e8:
88:73:e3:84:bf:05:0a:33:3d:98:12:60:79:53:7b:
17:23:0e:91:cf:48:8a:66:74:7d:64:dd:cf:33:98:
0e:04:52:00:d7:7a:de:f7:52:b0:1e:d1:4f:71:37:
4f:12:56:cf:84:b0:19:88:a2:e5:67:75:de:5b:c5:
0c:83:76:b1:fb:6c:b7:5e:3d:82:8f:b8:d4:c6:63:
ad:1c:54:a8:47:4f:b8:1c:9c:fb:c8:b3:f4:55:ad:
71:ee:1a:59:d1:cc:22:77:7d:4e:51:cb:26:3e:97:
f0:0e:eb:c0:3a:f6:8b:3a:96:a5:bc:45:b6:9b:c8:
8d:eb:5e:36:ea:c6:9b:45:f5:2d:6f:40:e1:cc:60:
1d:1a:12:91:95:8f:d1:4a:6b:d7:4c:3a:f4:e2:62:
de:a9:a3:ae:2a:72:98:e5:48:fb:a5:a1:30:a1:13:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2C:75:26:23:C5:65:3B:B9:A2:87:51:2A:4A:AD:1C:FC:3C:10:F5
X509v3 Authority Key Identifier:
keyid:2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:20:d5:aa:e7:79:98:8f:55:51:44:5d:19:1e:65:7a:a0:98:
4c:ee:6f:1a:53:6b:d2:7e:ac:7c:aa:83:69:08:fd:7e:98:b5:
63:d4:53:b0:df:8b:32:98:aa:33:63:9f:23:52:9d:8c:a4:23:
68:07:25:ab:89:d6:23:88:4f:a4:4a:02:8b:27:e3:98:df:db:
c1:6d:01:8d:27:89:4f:d5:2b:4e:5b:66:24:20:b8:e6:82:20:
b5:11:27:3b:c8:8b:df:22:80:67:29:1a:eb:fa:07:55:a4:cc:
20:aa:34:64:5a:99:58:e0:0c:ff:b3:31:18:a1:b4:f7:24:2c:
4c:7b:0a:67:c3:a8:84:ce:32:2a:5a:16:2e:50:c8:02:7e:09:
d3:4e:23:f8:1a:ad:ce:f7:09:47:c0:ec:fa:e7:f7:7f:58:af:
10:b7:0b:e1:6c:ac:76:ba:ec:f9:db:fb:13:5f:1f:6b:2d:90:
fc:9c:07:a3:a5:b9:54:e0:cb:4a:8c:a4:3e:a5:8b:f1:7e:75:
2e:c6:b5:b1:e7:08:8b:23:35:23:04:c2:bb:27:79:b6:44:c1:
7e:07:e2:1f:7b:ff:81:56:f6:7c:af:30:e0:fe:90:b3:46:91:
88:b9:81:fc:fe:f8:02:90:bc:6b:a4:a3:40:05:c1:b4:b7:53:
aa:cb:ee:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:11:40 2026 by rpki-client