
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
File: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft (raw, json)
Hash identifier: ZdT/lwFycD7dQJsrJtN1yfNaU58p0lpOK2DEEbvWBDg=
Subject key identifier: 45:42:BA:21:B9:60:0A:A8:C6:39:E1:6E:89:E0:94:04:76:32:6D:E8
Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Certificate serial: 5BAB800CEDAC921D305DEADBE5C3B7DEA4E7E4E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
Manifest number: 019D
Signing time: Thu 28 May 2026 18:47:17 +0000
Manifest this update: Thu 28 May 2026 18:42:17 +0000
Manifest next update: Tue 02 Jun 2026 11:26:17 +0000
Files and hashes: 1: 3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (hash: 5q596PM+UMqbzlUZpIqKCrSaY2zt4Z8whA1r356WEBE=)
2: 3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa (hash: /0Y/XVN9pkW+s3yM7K0FHkRnkMxilXQxG9LBKBIWu4w=)
3: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (hash: yID5IXtt+1VWbbRYBNze5PWYtWy1MT88oh9ww7MrBWs=)
4: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl (hash: QfZo7p9pxHNYIRqzdD9u1nqBoxLGM1gfjpAhoaCMhss=)
5: 3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (hash: e4W3CYwq0H9Su+5FogKI0sugsWizWF/fcb5QNdAcrTY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 02 Jun 2026 11:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ab:80:0c:ed:ac:92:1d:30:5d:ea:db:e5:c3:b7:de:a4:e7:e4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Validity
Not Before: May 28 18:42:17 2026 GMT
Not After : Jun 2 11:26:17 2026 GMT
Subject: CN=4542BA21B9600AA8C639E16E89E0940476326DE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:c5:3d:a9:52:c4:63:0d:1e:36:a6:78:65:
bd:1b:3c:a3:9e:c3:f3:22:56:da:13:0a:93:e2:af:
29:da:4e:ed:f2:c7:80:38:86:d8:25:89:0e:1c:99:
ed:f7:29:f6:af:86:b3:8c:b5:79:d3:05:ce:8e:51:
40:2a:3e:f6:96:d3:fa:14:3d:85:a3:8b:6e:9d:bc:
ca:e4:69:ac:f7:90:f2:43:6d:c5:6e:f0:23:8c:c9:
b4:33:b6:99:c6:dd:2d:66:11:4b:69:53:e1:41:41:
45:64:b6:e0:b0:8e:86:04:80:a5:02:67:9f:6e:8b:
bd:97:a9:f5:83:ab:a6:52:95:2d:55:be:da:58:7a:
ec:5a:7b:db:80:ea:f6:02:b2:25:c8:89:1c:a7:60:
b1:7a:18:ed:57:e5:6c:91:c3:42:59:56:e6:03:19:
9c:11:c9:3b:7d:5e:1b:d7:ef:da:3b:3c:8d:c1:89:
50:1b:de:20:b5:09:25:d5:c1:96:75:d4:02:b5:e5:
04:33:62:7b:5d:98:34:6f:24:1a:2d:38:e5:07:f1:
b4:ac:ec:7d:a1:6e:c2:cf:d4:8a:42:d0:cf:19:ee:
2e:ac:5d:93:56:95:82:47:e0:ae:33:15:81:de:72:
93:9d:d2:69:fc:07:82:b2:21:7c:68:3a:31:7d:4d:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:42:BA:21:B9:60:0A:A8:C6:39:E1:6E:89:E0:94:04:76:32:6D:E8
X509v3 Authority Key Identifier:
keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:87:df:f8:c4:29:d8:92:bd:3f:28:44:cd:4a:4e:14:e9:50:
d4:44:db:65:aa:61:d5:f4:09:e5:84:f4:1b:18:5f:bd:bd:ec:
40:2f:31:33:00:53:a8:98:5e:dd:32:34:08:be:7c:62:ff:7b:
02:d9:01:63:43:e7:c1:51:d9:3e:d2:13:e7:7b:0a:fd:77:5c:
2b:9e:48:45:09:49:1a:fb:7f:8a:0e:ed:8b:c8:64:a1:5b:de:
81:59:ba:ec:3a:11:57:15:97:76:af:ff:32:b7:2f:23:06:3d:
fe:84:5e:15:94:a2:84:35:f7:8c:4a:d5:4c:b6:2a:22:98:f4:
8a:9d:cd:e8:fd:2d:31:b7:60:9d:32:8e:ab:fa:f9:4e:dd:a1:
7a:ea:7d:9f:3a:4e:5a:cc:7a:87:a6:06:d7:b8:6d:43:7b:ce:
2b:d1:ba:53:1d:e3:f4:9a:99:f4:a1:27:4c:70:25:30:c8:8c:
e7:73:22:de:7c:42:e4:11:f9:4c:98:35:95:93:87:39:b6:c5:
d0:8f:20:95:79:d5:6f:16:4d:f8:e2:9c:e5:66:77:1a:1c:b3:
3f:fe:9c:ca:ae:fd:7e:67:29:fd:49:9b:e7:bc:5a:e4:ca:91:
71:a2:cb:7d:2a:fa:e1:a3:ad:29:2f:61:f3:4d:78:46:ee:49:
44:bf:1c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:18:20 2026 by rpki-client