
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
File: C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft (raw, json)
Hash identifier: ll4sCuVOtzWBOTlDKmiTH1XfTvu7FFCwdl32Z+Q20RQ=
Subject key identifier: D7:7B:30:44:8F:C9:93:77:3A:29:5E:6A:6C:82:28:92:8B:F5:66:52
Authority key identifier: C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8
Certificate issuer: /CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8
Certificate serial: 7763D1065C631613C0355E1530C8D9E3C239C01A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
Manifest number: 01C2
Signing time: Tue 28 Jul 2026 14:46:53 +0000
Manifest this update: Tue 28 Jul 2026 14:41:53 +0000
Manifest next update: Sun 02 Aug 2026 01:09:53 +0000
Files and hashes: 1: 323830313a3137323a323a3a2f34382d3438203d3e203237393531.roa (hash: u+tjSFQ1DIGRzfNcak3CCaZNM0nmD+50A2MCYEmTf8A=)
2: C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl (hash: dcuUJtCzAvLZT4gAl87DJT0tD0jtIV7a5bgC0ND+UEw=)
3: 323830313a3137323a3a2f34382d3438203d3e203134303830.roa (hash: 3iHCqauAeMjtJGWiZakwgham8iFO0SSJiD+UMe5IIR0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl
rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 02 Aug 2026 01:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:63:d1:06:5c:63:16:13:c0:35:5e:15:30:c8:d9:e3:c2:39:c0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8
Validity
Not Before: Jul 28 14:41:53 2026 GMT
Not After : Aug 2 01:09:53 2026 GMT
Subject: CN=D77B30448FC993773A295E6A6C8228928BF56652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:f1:46:cc:9a:d1:98:13:d6:47:1d:8a:3a:
27:06:f9:93:61:fb:f3:2c:93:37:d1:15:2c:86:72:
16:ef:b8:42:a7:9f:68:50:70:25:4e:82:b3:61:7d:
a9:46:6b:a7:83:f2:4d:c9:db:ac:67:0c:28:bd:3a:
c2:1a:20:e0:3d:30:44:c3:a1:5c:db:26:87:72:91:
d7:2a:7f:bd:27:77:b6:c8:8d:70:f0:84:ff:6f:3c:
d6:e6:3b:ec:c6:23:f4:a8:22:e2:22:75:c0:e3:23:
d0:35:21:8a:65:72:c2:83:43:2c:11:53:c2:49:32:
62:ab:f1:4b:03:c7:1a:70:09:ac:9b:b5:09:ba:75:
43:b4:18:dc:bf:d4:80:70:51:c3:51:3a:79:83:d2:
67:18:01:40:04:1d:b7:b7:64:78:e2:34:d6:b9:65:
52:1b:d7:3d:c0:21:84:df:68:21:bf:cf:dc:2c:de:
46:18:f5:11:b6:53:c8:eb:33:91:00:24:25:79:3a:
a7:24:40:99:4c:35:ef:2b:20:56:78:b6:9a:af:f7:
06:3b:0b:80:ff:a0:55:cd:a7:b5:3b:1c:52:7e:c0:
c0:51:7e:92:4f:fd:a0:03:77:86:9d:d0:42:a0:85:
c6:6c:3b:31:2b:56:92:54:85:78:1b:53:b7:31:66:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7B:30:44:8F:C9:93:77:3A:29:5E:6A:6C:82:28:92:8B:F5:66:52
X509v3 Authority Key Identifier:
keyid:C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:65:73:13:07:aa:d8:18:39:1d:49:26:c4:2f:44:26:ab:9a:
6c:36:bf:4c:d5:06:98:c1:55:6a:2f:b7:d5:a7:e4:4e:fd:66:
e1:8f:ff:49:bc:87:2e:94:cc:e0:59:af:94:44:d8:ca:a9:2d:
da:c7:42:3e:1a:e6:cc:7c:8f:b8:f5:1c:9f:32:75:96:d1:d3:
9c:f9:b8:14:5b:6c:2d:5e:a9:85:2b:a9:47:9d:c2:42:13:cb:
d5:70:08:f8:0e:a4:41:d8:e3:d6:6b:1e:0c:f0:f0:c7:9c:61:
d7:09:a5:2d:2a:f9:9a:8c:3f:35:94:72:fa:ff:f9:5a:d2:27:
51:22:3d:fc:aa:f0:3a:05:14:97:f5:0a:f8:5e:eb:1e:2b:1d:
ea:cc:ac:4a:a4:aa:9a:80:ba:e5:57:6e:6b:c3:a2:a5:ee:ad:
07:46:9f:41:10:c6:c8:18:68:c2:03:da:b7:51:02:5e:e6:cf:
4e:81:1c:bb:e1:0a:a0:65:8f:6b:7d:ba:70:dd:c1:57:eb:4d:
1e:51:c9:8d:9a:d9:db:61:0b:37:26:d7:1b:cb:ec:7b:75:e4:
e2:9f:fa:79:c9:ba:31:26:2b:32:13:c7:0b:4c:1e:fc:55:f8:
da:ea:04:0f:5c:90:a5:c9:7f:1f:76:e7:fe:63:a7:54:df:3b:
10:01:2c:2e
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUd2PRBlxjFhPANV4VMMjZ48I5wBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRCOTVGRTNDRThDRDYxNDM3ODkzMjRGODlEMjc5MURB
QkJCNUFEODAeFw0yNjA3MjgxNDQxNTNaFw0yNjA4MDIwMTA5NTNaMDMxMTAvBgNV
BAMTKEQ3N0IzMDQ0OEZDOTkzNzczQTI5NUU2QTZDODIyODkyOEJGNTY2NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVvFGzJrRmBPWRx2KOicG+ZNh
+/MskzfRFSyGchbvuEKnn2hQcCVOgrNhfalGa6eD8k3J26xnDCi9OsIaIOA9METD
oVzbJodykdcqf70nd7bIjXDwhP9vPNbmO+zGI/SoIuIidcDjI9A1IYplcsKDQywR
U8JJMmKr8UsDxxpwCaybtQm6dUO0GNy/1IBwUcNROnmD0mcYAUAEHbe3ZHjiNNa5
ZVIb1z3AIYTfaCG/z9ws3kYY9RG2U8jrM5EAJCV5OqckQJlMNe8rIFZ4tpqv9wY7
C4D/oFXNp7U7HFJ+wMBRfpJP/aADd4ad0EKghcZsOzErVpJUhXgbU7cxZtFRAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU13swRI/Jk3c6KV5qbIIokov1ZlIwHwYDVR0j
BBgwFoAUxLlf486M1hQ3iTJPidJ5Hau7WtgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjUzQ0Y3MjI0MjQ0RDczODg1RTM0QjYyQTgwNTREMzFC
NTIzMzQwRjVBNjMwQzVGRDY5OUYyOTlBRkYyQ0QzLzAvQzRCOTVGRTNDRThDRDYx
NDM3ODkzMjRGODlEMjc5MURBQkJCNUFEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEI5NUZFM0NFOENENjE0Mzc4
OTMyNEY4OUQyNzkxREFCQkI1QUQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDY1M0NGNzIyNDI0NEQ3Mzg4NUUzNEI2MkE4MDU0RDMxQjUyMzM0MEY1
QTYzMEM1RkQ2OTlGMjk5QUZGMkNEMy8wL0M0Qjk1RkUzQ0U4Q0Q2MTQzNzg5MzI0
Rjg5RDI3OTFEQUJCQjVBRDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqZXMTB6rYGDkdSSbEL0Qmq5ps
Nr9M1QaYwVVqL7fVp+RO/Wbhj/9JvIculMzgWa+URNjKqS3ax0I+GubMfI+49Ryf
MnWW0dOc+bgUW2wtXqmFK6lHncJCE8vVcAj4DqRB2OPWax4M8PDHnGHXCaUtKvma
jD81lHL6//la0idRIj38qvA6BRSX9Qr4XuseKx3qzKxKpKqagLrlV25rw6Kl7q0H
Rp9BEMbIGGjCA9q3UQJe5s9OgRy74QqgZY9rfbpw3cFX600eUcmNmtnbYQs3Jtcb
y+x7deTin/p5yboxJisyE8cLTB78Vfja6gQPXJClyX8fduf+Y6dU3zsQASwu
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:58:47 2026 by rpki-client