
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
File: C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft (raw, json)
Hash identifier: qk+f3VFYQaU1lqOv8WRSHse6NkjCH8Hi/6HgJkxD7D8=
Subject key identifier: A9:77:BE:EA:69:3C:B5:BE:16:08:11:C2:5C:71:1C:CE:BE:B9:3D:66
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Certificate issuer: /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial: 6829B0D83E230E47B92B285AD5F9CB904CFC4C66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
Manifest number: 01DD
Signing time: Sat 26 Sep 2026 15:33:38 +0000
Manifest this update: Sat 26 Sep 2026 15:28:38 +0000
Manifest next update: Thu 01 Oct 2026 15:15:38 +0000
Files and hashes: 1: 3138392e35312e3136382e302f32342d3234203d3e20323730313131.roa (hash: 7PZeGG7HfbjhVEVNSL3UWhftv/Zb8Yv2WZSMnXWjqVE=)
2: 323830363a3362323a3930313a3a2f34382d3438203d3e20323730313131.roa (hash: wpXnoT7LAOCKwqNQIpR9rwInQUskTq/nzdLZsDGuy44=)
3: C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl (hash: CJ4y9FbvGbNL738Ah/+9uaZvtn19r47oFRn9PcCHTcc=)
4: 323830363a3362323a3a2f33322d3332203d3e20323730313131.roa (hash: /6soVP1CSMdy+aVwQQ2VtaIn0D29HJEmDD9ZB2b0WCY=)
5: 3138392e35312e3136392e302f32342d3234203d3e20323730313131.roa (hash: iN4wwyUpmAvEQqNra2qp2P+WKNjlU68lla4aIgPog/c=)
6: 3138392e35312e3136382e302f32322d3232203d3e20323730313131.roa (hash: jqCf+iJEfVXvWvu6KfjbNTpV/7xMIhBVMqaQfgOTaRE=)
7: 3138392e35312e3137302e302f32342d3234203d3e20323734343532.roa (hash: gPi0kvfZVhFjxcsRmfHMciQpYiIQ/cAoJXI9f5FMJno=)
8: 3138392e35312e3137312e302f32342d3234203d3e20323730313131.roa (hash: YbEnKisdtawQw4tMXgtTIouAQQD9Gj/tMwgDwNjxU3c=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 30 Sep 2026 17:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:29:b0:d8:3e:23:0e:47:b9:2b:28:5a:d5:f9:cb:90:4c:fc:4c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Validity
Not Before: Sep 26 15:28:38 2026 GMT
Not After : Oct 1 15:15:38 2026 GMT
Subject: CN=A977BEEA693CB5BE160811C25C711CCEBEB93D66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:97:f1:0e:87:ef:1a:fb:1c:a1:44:e8:9f:
10:d5:86:a9:f7:1b:44:c6:c5:e0:ec:80:58:2a:91:
74:d9:af:67:be:9c:61:20:c1:7b:77:fc:33:fe:8b:
0d:b9:e1:7b:cb:1a:8f:8d:99:08:19:5e:e3:d5:b8:
c1:28:1a:7a:19:c0:39:36:89:df:36:2a:20:c5:ff:
62:e4:8e:34:c2:6b:03:2a:80:f6:b8:38:e4:8c:81:
f9:12:18:66:04:3e:fd:aa:5c:ed:59:54:50:21:a2:
63:3c:ff:f3:eb:3a:01:26:23:24:27:cb:aa:5a:9b:
9c:97:a9:b1:d9:ff:56:ae:41:56:e2:e4:25:bb:c0:
7d:cc:30:e3:c9:4d:26:ac:13:63:a1:ee:94:f3:d9:
c5:be:ef:d6:93:08:89:0c:95:ab:7c:37:b2:84:ed:
37:bf:22:fc:f9:0d:97:fa:e0:8b:f1:d8:1c:23:20:
60:d1:88:96:31:af:2e:cd:f4:20:cc:72:d0:27:d4:
aa:b1:a2:93:60:66:ed:57:86:6f:56:cf:f7:9e:22:
c8:42:d4:11:77:f9:42:84:05:85:c0:6f:3e:af:2e:
58:53:81:57:44:18:f4:c5:7e:3d:82:30:28:cb:d6:
6d:1e:cd:2f:52:f9:9c:31:ab:c5:51:b6:9c:35:47:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:77:BE:EA:69:3C:B5:BE:16:08:11:C2:5C:71:1C:CE:BE:B9:3D:66
X509v3 Authority Key Identifier:
keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:83:9c:09:d5:f1:cb:01:cb:b6:af:ee:af:3a:9d:a2:0f:47:
f8:32:de:01:10:b3:80:cc:6b:b6:26:7d:1b:e9:72:72:4e:71:
a7:3b:ac:53:73:25:b7:7d:00:3c:bf:be:69:d5:30:d5:fc:3f:
7a:95:1a:09:56:cb:f1:4b:c3:ed:53:92:b2:c7:ad:51:cc:ec:
ba:8f:69:8d:e3:72:2f:23:5a:a8:51:31:6d:56:ac:1a:5a:45:
b4:29:44:e5:02:d4:c1:86:ef:5a:38:38:4f:ca:b9:bc:df:43:
81:e3:19:50:2c:f8:9a:94:b8:fc:64:ed:20:1d:9e:b0:f8:ad:
70:d3:3c:17:5f:73:99:a1:a7:9a:bc:1a:64:72:6f:e9:c0:f1:
e0:a5:59:8b:c9:22:7b:a2:33:06:13:63:85:4c:9f:87:68:ed:
98:e3:5b:52:0a:51:05:f0:f5:ae:c4:79:d5:7c:1c:c7:0b:09:
2a:85:f3:d0:a1:af:e1:fb:27:35:cb:d0:6d:f9:33:fa:30:90:
9e:a8:89:2b:92:ad:7c:db:c1:24:07:78:4d:65:43:6f:55:08:
9c:50:ef:37:da:7a:d1:91:2d:be:ca:17:45:7a:94:11:f4:34:
25:8f:e5:46:48:83:9d:d3:e1:15:2c:9b:38:21:3b:34:66:52:
2f:39:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:13:09 2026 by rpki-client