
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
File: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft (raw, json)
Hash identifier: 94ivL+cGKSMheGEeEyFRgazSCCYRzBBzn7UwxkSw3WI=
Subject key identifier: 46:F2:54:B3:0F:6C:C6:80:6E:D5:09:59:DB:5F:C9:4B:74:DC:B3:D9
Authority key identifier: 2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
Certificate issuer: /CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Certificate serial: 24F05710927A90984CD02DFAD6243098219D32D2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
Manifest number: 01DB
Signing time: Wed 16 Sep 2026 14:59:34 +0000
Manifest this update: Wed 16 Sep 2026 14:54:34 +0000
Manifest next update: Mon 21 Sep 2026 13:42:34 +0000
Files and hashes: 1: 34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa (hash: 4r/Ycb2It+axZdCPW4Gpw/M49d95d7cextIQ5hDQMwg=)
2: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl (hash: 0FtAdvYcJyTEv0w0CztgxykUsEO+m8RbsQ/39IHMBs0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 21 Sep 2026 13:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f0:57:10:92:7a:90:98:4c:d0:2d:fa:d6:24:30:98:21:9d:32:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Validity
Not Before: Sep 16 14:54:34 2026 GMT
Not After : Sep 21 13:42:34 2026 GMT
Subject: CN=46F254B30F6CC6806ED50959DB5FC94B74DCB3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:bd:a5:27:4c:87:ba:14:78:6d:2b:b8:3d:
5c:57:aa:4f:a4:24:84:19:c8:19:1b:cb:93:44:2d:
fa:45:78:01:cc:3d:10:0c:ed:ed:29:9d:cc:77:3d:
1d:7c:a1:92:35:31:d1:0b:09:a0:03:e7:3a:f8:31:
a6:16:79:b2:6d:7c:80:2d:39:b4:59:7d:8c:23:f3:
ae:7b:7c:b8:2d:c4:ac:e9:2d:a1:7d:8f:1e:91:fe:
58:f8:73:b4:2d:54:43:25:96:25:20:cc:e0:da:6c:
e2:23:77:c2:02:8a:bc:a5:ce:8a:60:fb:11:f0:3a:
34:aa:20:8d:90:84:59:fa:8c:22:c0:36:a9:75:be:
e8:96:61:07:26:4b:47:f7:f8:66:6d:05:fa:c0:87:
53:3c:e8:84:94:ca:98:76:2c:f1:27:ce:de:f8:ae:
3c:a9:d8:c4:39:23:d5:7f:5b:6a:54:1b:8e:94:bd:
03:12:37:cc:06:e2:08:17:ab:d1:9e:69:d9:09:05:
4b:34:3b:94:38:07:2d:08:d3:ed:b7:aa:57:98:84:
18:cf:1d:0a:0d:e6:e1:08:8c:58:24:36:2e:1b:8b:
10:12:5d:07:f7:95:00:3e:01:03:e4:1b:5d:db:89:
56:4e:59:ec:a6:45:00:50:26:dc:4e:9c:90:37:4e:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F2:54:B3:0F:6C:C6:80:6E:D5:09:59:DB:5F:C9:4B:74:DC:B3:D9
X509v3 Authority Key Identifier:
keyid:2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:42:8e:0a:d5:d3:34:96:42:ec:75:94:97:13:40:17:7e:42:
4c:d6:be:b4:df:a4:f6:d7:43:c0:5d:3e:e6:8f:14:17:7a:e8:
43:14:87:b5:24:1a:88:af:4f:5c:ef:53:f3:3e:62:d3:aa:da:
0b:9d:52:dd:6e:83:eb:97:1a:b0:50:24:f8:47:3b:9d:9e:cc:
35:c7:9c:f0:4a:be:40:60:f8:59:cf:a4:4f:c4:f0:94:b3:be:
db:7d:c1:b2:fb:a3:35:a5:a0:ec:58:90:f8:d0:24:b2:35:02:
7d:9f:37:29:84:a1:27:01:75:6f:26:e4:e1:76:46:8a:5f:d7:
f8:95:17:b1:49:58:51:4c:57:08:2c:96:89:3e:c7:3e:33:b5:
75:a6:97:84:f9:2d:8b:b5:65:1e:6e:e6:a6:b9:8c:4e:6d:7f:
dc:18:15:42:29:e2:6e:84:3a:8d:2a:4a:b0:cf:63:c9:f7:c5:
de:07:a6:a7:83:e8:d4:68:eb:f4:f7:a4:ff:ea:36:d8:1b:77:
e5:8a:84:66:e6:71:44:af:60:0e:44:3e:ea:8b:cc:11:d8:6b:
62:ea:98:2a:77:4e:21:2a:19:a1:7d:e5:1b:0f:e0:b8:28:0d:
03:e0:b1:3d:00:09:9e:ee:2c:29:3e:d9:3f:d5:43:f8:13:4b:
92:c6:77:99
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUJPBXEJJ6kJhM0C361iQwmCGdMtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNEMEEwOEUwN0M1QzFFREVBNkJDM0RDRkQwRkRGMkQ1
MjE4OEFCRDAeFw0yNjA5MTYxNDU0MzRaFw0yNjA5MjExMzQyMzRaMDMxMTAvBgNV
BAMTKDQ2RjI1NEIzMEY2Q0M2ODA2RUQ1MDk1OURCNUZDOTRCNzREQ0IzRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmzb2lJ0yHuhR4bSu4PVxXqk+k
JIQZyBkby5NELfpFeAHMPRAM7e0pncx3PR18oZI1MdELCaAD5zr4MaYWebJtfIAt
ObRZfYwj8657fLgtxKzpLaF9jx6R/lj4c7QtVEMlliUgzODabOIjd8ICirylzopg
+xHwOjSqII2QhFn6jCLANql1vuiWYQcmS0f3+GZtBfrAh1M86ISUyph2LPEnzt74
rjyp2MQ5I9V/W2pUG46UvQMSN8wG4ggXq9GeadkJBUs0O5Q4By0I0+23qleYhBjP
HQoN5uEIjFgkNi4bixASXQf3lQA+AQPkG13biVZOWeymRQBQJtxOnJA3Tr7DAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQURvJUsw9sxoBu1QlZ21/JS3Tcs9kwHwYDVR0j
BBgwFoAULNCgjgfFwe3qa8Pc/Q/fLVIYir0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80ODkzQkE0M0JCNzY0RTQzMDQwQjk1QjUzRUEwNUQ5OTk4
QkY4MTMwQThBNEUwMTRFMkNBNDJFMDI2RTg2OUU4LzAvMkNEMEEwOEUwN0M1QzFF
REVBNkJDM0RDRkQwRkRGMkQ1MjE4OEFCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQ0QwQTA4RTA3QzVDMUVERUE2
QkMzRENGRDBGREYyRDUyMTg4QUJELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDg5M0JBNDNCQjc2NEU0MzA0MEI5NUI1M0VBMDVEOTk5OEJGODEzMEE4
QTRFMDE0RTJDQTQyRTAyNkU4NjlFOC8wLzJDRDBBMDhFMDdDNUMxRURFQTZCQzNE
Q0ZEMEZERjJENTIxODhBQkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwQo4K1dM0lkLsdZSXE0AXfkJM
1r6036T210PAXT7mjxQXeuhDFIe1JBqIr09c71PzPmLTqtoLnVLdboPrlxqwUCT4
Rzudnsw1x5zwSr5AYPhZz6RPxPCUs77bfcGy+6M1paDsWJD40CSyNQJ9nzcphKEn
AXVvJuThdkaKX9f4lRexSVhRTFcILJaJPsc+M7V1ppeE+S2LtWUebuamuYxObX/c
GBVCKeJuhDqNKkqwz2PJ98XeB6ang+jUaOv096T/6jbYG3flioRm5nFEr2AORD7q
i8wR2Gti6pgqd04hKhmhfeUbD+C4KA0D4LE9AAme7iwpPtk/1UP4E0uSxneZ
-----END CERTIFICATE-----
Generated at Thu Sep 17 19:22:26 2026 by rpki-client