
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
File: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft (raw, json)
Hash identifier: sly8Ifx+0BlDgxRdBYaIqVVp28DGhyDQKRGQ4NyrWs4=
Subject key identifier: 32:17:04:65:E0:20:81:65:C3:91:F2:63:A5:76:D0:FD:C6:09:28:9F
Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Certificate serial: 246BA4C9BE06DDB1810BCA4E90B5EA7FFF1D1F80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
Manifest number: 01D0
Signing time: Sat 05 Sep 2026 10:24:47 +0000
Manifest this update: Sat 05 Sep 2026 10:19:47 +0000
Manifest next update: Wed 09 Sep 2026 19:29:47 +0000
Files and hashes: 1: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (hash: yID5IXtt+1VWbbRYBNze5PWYtWy1MT88oh9ww7MrBWs=)
2: 3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (hash: 5q596PM+UMqbzlUZpIqKCrSaY2zt4Z8whA1r356WEBE=)
3: 3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (hash: e4W3CYwq0H9Su+5FogKI0sugsWizWF/fcb5QNdAcrTY=)
4: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl (hash: ZMBmBbi8gb4cm1aNALgIT3Sr8lishu96Pl+kcjN9gNU=)
5: 3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa (hash: /0Y/XVN9pkW+s3yM7K0FHkRnkMxilXQxG9LBKBIWu4w=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 09 Sep 2026 19:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6b:a4:c9:be:06:dd:b1:81:0b:ca:4e:90:b5:ea:7f:ff:1d:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Validity
Not Before: Sep 5 10:19:47 2026 GMT
Not After : Sep 9 19:29:47 2026 GMT
Subject: CN=32170465E0208165C391F263A576D0FDC609289F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:4c:9f:eb:7b:06:b5:67:71:1b:06:f0:bb:
a4:0a:c7:f3:15:5c:67:81:bf:bd:a2:01:ef:97:52:
d6:98:f4:3c:9a:18:d4:40:12:d8:7e:d4:9f:73:d0:
cd:bf:b0:5b:09:ee:04:ae:22:d7:9f:5b:1e:56:35:
53:00:8f:a2:39:7b:da:5d:e6:f4:47:5a:f7:a3:cb:
42:61:af:dd:12:35:a0:70:4c:f2:3c:a2:52:99:e1:
d1:84:40:ad:b9:56:fc:c1:2a:55:c1:f1:9f:1c:7d:
b7:29:40:78:a2:06:b5:70:a0:f7:75:55:42:60:0b:
6a:d0:16:22:7d:4f:b3:05:c6:50:75:c1:5f:f4:fc:
01:c6:dd:1f:b6:91:d8:8a:1a:dc:b2:b4:42:9c:d2:
a0:be:4d:a2:98:f7:95:f2:6b:c4:f6:1f:28:d7:8b:
7e:a0:be:51:a5:09:7f:9d:e7:a8:6f:b6:be:4a:e8:
91:98:30:59:06:ea:2a:ed:2b:b3:c9:48:f1:2b:3d:
fd:83:c9:f6:27:32:d9:42:66:a1:07:34:36:c2:b5:
c1:81:3e:e2:7d:8c:4c:f2:4a:ca:56:27:33:d3:1f:
15:5e:37:28:4a:a7:8c:94:44:93:85:b4:0c:5a:d3:
d0:db:87:e4:aa:aa:d0:a4:a0:57:c6:08:da:65:c3:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:04:65:E0:20:81:65:C3:91:F2:63:A5:76:D0:FD:C6:09:28:9F
X509v3 Authority Key Identifier:
keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:99:67:ec:a2:cf:6e:13:4f:44:9e:74:1e:c9:6d:23:d7:65:
46:e6:24:b2:42:b5:13:a9:a2:43:c5:c6:aa:fc:22:46:e6:1d:
28:ee:73:c5:4b:ed:36:f3:96:b9:4d:34:8c:d7:34:9c:11:59:
bd:b5:6f:6a:49:17:e1:23:c8:86:37:1f:dc:9a:85:81:65:51:
6e:35:81:7a:56:71:7b:8f:7b:00:81:60:28:c8:aa:a0:d1:1d:
6f:3c:84:1a:bc:66:a7:4f:bd:07:f1:78:0f:4b:41:45:1d:cb:
27:5c:03:5f:99:e9:1b:a1:a2:6e:3a:b7:3c:77:f9:26:b1:5a:
61:fd:3b:68:96:f8:e1:d7:68:c8:bd:2b:c6:5d:12:9b:bf:fd:
1a:4a:66:3f:13:8d:e1:62:30:41:0c:54:5d:e3:30:1b:d3:86:
d1:63:73:a7:f7:f8:40:ca:68:cf:2e:c1:7d:14:1a:ae:4f:6d:
a9:48:75:40:50:f9:3a:6f:d9:68:18:d4:80:5c:ba:de:09:03:
0d:57:1f:54:ba:92:0d:b7:79:ac:d7:d4:49:71:90:35:85:e1:
2a:56:ed:81:83:63:c2:c5:84:e4:14:99:ac:cd:1e:b1:92:07:
e2:64:05:63:43:ef:dc:a6:20:1f:3a:90:c7:d9:43:76:18:ee:
f0:e6:22:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:47:31 2026 by rpki-client