
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
File: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft (raw, json)
Hash identifier: 00wNHlEvxQ5ddST7pBdYsx7Cmzro51HjpISwjrQm4Hs=
Subject key identifier: 85:3F:CD:2B:10:67:DF:38:98:11:D8:29:4E:F3:75:17:19:5F:A0:17
Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A
Certificate issuer: /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A
Certificate serial: 38C7B0E420AF99BFB14C81898023744AA0539334
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
Manifest number: 01C9
Signing time: Fri 18 Sep 2026 08:39:40 +0000
Manifest this update: Fri 18 Sep 2026 08:34:40 +0000
Manifest next update: Wed 23 Sep 2026 14:24:40 +0000
Files and hashes: 1: 323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (hash: GRWJfDTtaNARRPhnsoXH5s1znecEwffl4EvgxQ5gNqs=)
2: 34352e3233362e3134382e302f32322d3234203d3e20323636383132.roa (hash: TuVSnaAy8zQaHRhySpU28Pxq0rPBVxYrvaRsQF2zS/c=)
3: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl (hash: 6ZXTUIUeg4GcZ/xBaYPSLu7y8myeVtYhN58n+clbGIs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl
rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 08:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c7:b0:e4:20:af:99:bf:b1:4c:81:89:80:23:74:4a:a0:53:93:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A
Validity
Not Before: Sep 18 08:34:40 2026 GMT
Not After : Sep 23 14:24:40 2026 GMT
Subject: CN=853FCD2B1067DF389811D8294EF37517195FA017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:43:d1:35:89:7a:80:e1:00:fe:87:1c:73:
f7:fc:29:7f:27:cc:f6:dc:d6:0b:ae:00:2b:dd:ad:
35:52:30:c8:f1:b6:47:2d:1a:ff:74:0e:bd:d4:2d:
ad:e8:e1:c2:1f:3c:a4:69:ed:5d:b4:84:35:f4:a4:
de:02:d3:66:67:94:6d:44:e4:51:6d:03:e7:c9:76:
4c:ec:6b:1d:ce:6d:96:86:6e:1c:8c:ce:4a:b9:c1:
0f:f2:cc:30:32:1f:2a:08:ce:96:74:66:29:0f:3c:
c6:b3:88:ad:5a:f9:58:25:f2:9d:70:71:94:c1:20:
2e:92:8d:75:c9:54:da:b2:29:30:3b:cf:be:ee:20:
7f:30:96:67:f7:67:28:35:6b:5b:27:ad:a4:07:c0:
6a:92:f0:85:63:26:5d:39:8d:45:c9:39:f8:66:1f:
1a:1b:c3:1d:40:20:7c:8b:89:90:cb:1e:4c:69:8d:
de:84:af:df:1d:8e:7c:4f:0c:8b:ed:23:c3:e3:1a:
b9:06:7a:d6:6a:50:a2:a1:c9:1d:ca:64:24:e3:f3:
de:7d:79:10:77:24:b4:25:bc:e2:be:8c:6f:d9:1c:
c3:c0:ed:94:40:35:ff:43:9a:ff:42:61:3d:da:90:
3e:7a:90:68:a4:a0:f6:e2:da:cd:a2:c0:25:d2:47:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:CD:2B:10:67:DF:38:98:11:D8:29:4E:F3:75:17:19:5F:A0:17
X509v3 Authority Key Identifier:
keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9c:a0:56:07:12:9e:a5:6b:1d:74:fe:a0:a5:b4:13:ba:24:
f4:ad:2b:f9:8d:f3:d5:94:bd:3e:23:a5:bb:f8:6b:05:a9:62:
07:6a:b5:6e:85:cb:57:f4:72:ec:bb:4e:0f:b0:71:89:a6:15:
36:f2:b3:04:f3:6c:06:20:96:a1:c5:a0:37:b8:55:af:16:87:
a5:3b:52:be:9c:47:49:e3:44:f0:40:42:29:c5:60:e0:b3:2c:
ca:20:3d:9b:fa:7e:cb:0c:d5:b6:96:e8:12:cc:6a:28:80:4d:
73:45:01:a9:48:89:36:56:aa:da:1a:8d:09:fa:be:76:8c:f0:
43:b4:8e:7f:69:8e:04:88:2e:bc:20:0f:53:73:69:8a:2c:a1:
26:10:25:c7:d4:51:92:38:ea:44:4d:b5:0c:08:29:d4:18:fd:
f2:d9:17:5f:24:73:77:68:5e:cc:e8:a4:f4:a5:aa:0a:5f:2a:
0f:8d:b0:19:56:f4:e1:93:ed:63:29:1c:85:f9:a8:da:7e:e5:
bc:43:12:90:58:5b:c4:95:21:f5:26:25:6e:ae:72:f9:e4:f5:
44:6b:1b:ca:ed:d1:a7:e6:e4:1a:a7:fb:0e:a4:7a:1e:d8:f5:
13:d2:82:30:70:cf:6a:4e:6a:6a:f0:b6:ff:39:77:b6:e4:07:
2e:22:ee:97
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUOMew5CCvmb+xTIGJgCN0SqBTkzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBQjk5QTUxRjZDNjk4MUE1NThDRDBCNDhBQ0Y0Q0RD
QkE5NTM2QTAeFw0yNjA5MTgwODM0NDBaFw0yNjA5MjMxNDI0NDBaMDMxMTAvBgNV
BAMTKDg1M0ZDRDJCMTA2N0RGMzg5ODExRDgyOTRFRjM3NTE3MTk1RkEwMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi20PRNYl6gOEA/occc/f8KX8n
zPbc1guuACvdrTVSMMjxtkctGv90Dr3ULa3o4cIfPKRp7V20hDX0pN4C02ZnlG1E
5FFtA+fJdkzsax3ObZaGbhyMzkq5wQ/yzDAyHyoIzpZ0ZikPPMaziK1a+Vgl8p1w
cZTBIC6SjXXJVNqyKTA7z77uIH8wlmf3Zyg1a1snraQHwGqS8IVjJl05jUXJOfhm
Hxobwx1AIHyLiZDLHkxpjd6Er98djnxPDIvtI8PjGrkGetZqUKKhyR3KZCTj8959
eRB3JLQlvOK+jG/ZHMPA7ZRANf9Dmv9CYT3akD56kGikoPbi2s2iwCXSRxiRAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUhT/NKxBn3ziYEdgpTvN1FxlfoBcwHwYDVR0j
BBgwFoAUKKuZpR9saYGlWM0LSKz0zcupU2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTFEMDkyQTZEQTYzRjgyOTk3N0NGODBFQTVFQUQyMjZC
Qzg3MzMyMTRFMjBBRDI0Mjg3QTU4MUZDQ0Q4MTQ2LzAvMjhBQjk5QTUxRjZDNjk4
MUE1NThDRDBCNDhBQ0Y0Q0RDQkE5NTM2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEFCOTlBNTFGNkM2OTgxQTU1
OENEMEI0OEFDRjRDRENCQTk1MzZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTExRDA5MkE2REE2M0Y4Mjk5NzdDRjgwRUE1RUFEMjI2QkM4NzMzMjE0
RTIwQUQyNDI4N0E1ODFGQ0NEODE0Ni8wLzI4QUI5OUE1MUY2QzY5ODFBNTU4Q0Qw
QjQ4QUNGNENEQ0JBOTUzNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNnKBWBxKepWsddP6gpbQTuiT0
rSv5jfPVlL0+I6W7+GsFqWIHarVuhctX9HLsu04PsHGJphU28rME82wGIJahxaA3
uFWvFoelO1K+nEdJ40TwQEIpxWDgsyzKID2b+n7LDNW2lugSzGoogE1zRQGpSIk2
VqraGo0J+r52jPBDtI5/aY4EiC68IA9Tc2mKLKEmECXH1FGSOOpETbUMCCnUGP3y
2RdfJHN3aF7M6KT0paoKXyoPjbAZVvThk+1jKRyF+ajafuW8QxKQWFvElSH1JiVu
rnL55PVEaxvK7dGn5uQap/sOpHoe2PUT0oIwcM9qTmpq8Lb/OXe25AcuIu6X
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:30:44 2026 by rpki-client