
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
File: 4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft (raw, json)
Hash identifier: K4Lhn3mV3DaZUHXJ+pY/8gwW+EgNxT2BJydoTMse7a8=
Subject key identifier: 49:07:BC:9B:40:B4:92:9D:FC:0E:30:8B:03:92:1D:E7:4B:DE:DD:4B
Authority key identifier: 4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2
Certificate issuer: /CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
Certificate serial: 1D88CD5134810D667EF0694D3376639E57E4578D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
Manifest number: 01BA
Signing time: Mon 27 Jul 2026 16:13:05 +0000
Manifest this update: Mon 27 Jul 2026 16:08:05 +0000
Manifest next update: Sun 02 Aug 2026 12:36:05 +0000
Files and hashes: 1: 3134332e3230382e36342e302f32322d3234203d3e203332303334.roa (hash: 4JHwdM0VD3xlxk+MeB+4Ilz6APnfX885Xqdb9T3OFiQ=)
2: 4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl (hash: V5WxDD1fG/FUpZlHyH5LJu1Em52GI10XESxOI4Y1fwg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl
rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 02 Aug 2026 12:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:88:cd:51:34:81:0d:66:7e:f0:69:4d:33:76:63:9e:57:e4:57:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
Validity
Not Before: Jul 27 16:08:05 2026 GMT
Not After : Aug 2 12:36:05 2026 GMT
Subject: CN=4907BC9B40B4929DFC0E308B03921DE74BDEDD4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:dc:1e:96:8e:8c:a2:0a:34:f8:6e:8e:2c:
f7:0a:ce:e0:ad:b1:5a:00:a2:ea:42:e1:da:bd:ce:
39:e4:3c:0a:53:5a:bf:76:ad:83:d2:b2:c0:1d:0d:
33:d5:30:47:d6:c0:0e:56:37:e5:db:49:5f:3c:d7:
21:3e:79:8d:6b:ff:05:6b:9c:d8:26:0f:ec:d1:36:
b2:71:1d:ae:cc:f8:b6:44:61:e7:04:52:a0:e9:62:
96:93:61:90:93:ea:b5:d1:c0:4f:a7:7f:d6:25:51:
a1:0e:d8:16:d5:ba:97:aa:1d:5c:40:3c:df:cb:bf:
0c:c0:98:4c:47:48:f5:c5:3d:15:25:2e:47:a9:17:
61:4d:78:fe:73:bc:7f:d8:58:31:ec:b1:53:4f:43:
bd:da:7e:87:5a:31:a4:36:9a:84:86:58:8c:f3:5c:
9c:0a:c5:5d:fa:ae:e3:08:b7:be:10:f4:ae:62:f5:
56:21:43:8c:86:84:cf:b2:63:db:3f:88:31:1f:3c:
c2:42:fc:92:90:45:df:6e:11:bc:39:cf:bb:53:61:
46:ac:17:3c:3c:bc:69:38:2d:cd:20:1b:68:1d:9b:
cb:b1:04:92:c7:0e:7b:5e:8f:9f:cb:58:1c:e2:9f:
59:f0:34:ac:9b:23:24:9d:84:74:13:2b:65:30:e0:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:07:BC:9B:40:B4:92:9D:FC:0E:30:8B:03:92:1D:E7:4B:DE:DD:4B
X509v3 Authority Key Identifier:
keyid:4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b5:44:48:9e:b4:f1:36:11:4f:8d:60:6a:8e:dc:31:40:0d:
93:9a:8e:42:e6:ec:5d:f8:88:b8:57:b3:e4:a3:ed:f1:83:ef:
bf:8b:34:c2:a4:34:65:b6:6e:89:69:2f:80:0a:92:00:62:38:
12:bf:68:d9:9a:c4:aa:7f:63:86:74:1d:26:74:4a:7f:18:91:
9c:5b:81:b1:27:65:e8:1b:58:e0:7b:25:54:ea:fa:b9:a4:39:
64:df:4e:90:ac:e6:ff:07:58:03:99:31:bb:2d:e2:44:67:c7:
fa:99:95:1d:be:bf:46:8c:7c:2a:14:e0:08:af:a5:fe:69:66:
5b:c1:49:d0:de:7a:05:6b:03:a5:98:6b:61:e1:62:ab:4f:3a:
77:0b:b9:17:0c:6d:e6:a6:b8:d7:47:3e:c0:a3:f2:25:93:97:
37:42:fe:06:8a:d5:1f:55:3b:1c:4b:04:0e:e2:77:71:a8:01:
f6:76:68:e3:f7:8d:ed:0d:da:eb:8b:3f:2c:a4:83:19:13:4a:
2d:ac:90:ba:06:fc:37:b4:fe:e2:48:bb:7c:ba:22:95:c6:70:
66:32:fc:5b:2a:72:d4:92:28:48:e6:8c:af:53:c2:5c:36:97:
cf:ae:bc:62:0f:fd:13:f8:39:d6:62:10:0a:68:a2:e6:40:90:
04:7a:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:45 2026 by rpki-client