
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
File: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft (raw, json)
Hash identifier: obA69B70fswMnmpTFMTRgw+yFM/NcJq0spgjAfaTjwM=
Subject key identifier: A2:A7:3E:EB:D2:88:43:4E:4F:51:5E:42:B7:AE:17:4A:0B:64:CB:64
Authority key identifier: CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C
Certificate issuer: /CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C
Certificate serial: 74735CE0EB5BCE271E738694B28B62070FCFA778
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
Manifest number: 01BA
Signing time: Fri 21 Aug 2026 07:31:14 +0000
Manifest this update: Fri 21 Aug 2026 07:26:14 +0000
Manifest next update: Thu 27 Aug 2026 01:53:14 +0000
Files and hashes: 1: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl (hash: xF4alNYLJAIU+XSB5nbuMD8hLFhk6XVEW7zegZm1xfQ=)
2: 3136342e3136332e3132302e302f32332d3234203d3e20323635383334.roa (hash: 65dDwQR3/485/Li38nVpENuQzlQQNyWYVOTLzeuFNFE=)
3: 3136342e3136332e3132322e302f32332d3234203d3e20323734323837.roa (hash: pzH8ChjyGM8irvisCLOMRVfFg2o+/iOBhQZU0VAmYyg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl
rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:73:5c:e0:eb:5b:ce:27:1e:73:86:94:b2:8b:62:07:0f:cf:a7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C
Validity
Not Before: Aug 21 07:26:14 2026 GMT
Not After : Aug 27 01:53:14 2026 GMT
Subject: CN=A2A73EEBD288434E4F515E42B7AE174A0B64CB64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:fc:d2:59:7e:d8:ae:53:62:03:bb:4c:39:
95:11:d0:09:78:78:8e:c2:33:5e:ce:6c:ff:d6:87:
fa:6c:a6:eb:c8:40:7d:77:55:b9:8b:94:c4:25:39:
95:88:9e:cd:eb:40:f9:6e:9d:93:98:10:73:25:36:
7c:8b:a0:a0:11:bf:c4:08:54:c2:1d:14:a4:19:07:
27:6f:0f:fa:2d:75:2c:ba:72:00:d2:a4:d4:3d:07:
00:76:85:be:e6:30:a5:8b:94:fe:48:69:0d:8c:ca:
f7:49:5f:4d:b7:22:80:b8:c7:db:79:9c:97:72:1f:
19:b0:da:9e:7a:3a:f5:91:4a:78:f3:e0:3e:49:ff:
84:5f:05:20:70:76:a7:a3:76:ca:88:8c:0b:b4:3a:
9c:c5:ca:c3:4e:c7:93:1c:f5:99:7d:8c:f1:9e:93:
1c:12:39:aa:9c:0b:2e:05:c2:cb:ef:6b:c7:59:1e:
05:d1:08:af:d0:90:fc:be:8e:92:4c:13:a3:5f:ee:
8f:29:e0:9a:52:d6:1a:d4:ca:0b:5c:29:30:66:c0:
ac:ab:ec:09:de:aa:b5:79:95:5f:97:c2:a8:cd:db:
2c:41:75:f3:35:80:3e:58:04:18:51:1d:11:16:a0:
0f:4b:57:76:be:ae:52:d4:11:ca:8b:ae:35:53:5e:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:3E:EB:D2:88:43:4E:4F:51:5E:42:B7:AE:17:4A:0B:64:CB:64
X509v3 Authority Key Identifier:
keyid:CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:74:9c:75:2c:f1:fa:37:90:d4:c0:1e:c6:5d:b8:df:29:13:
fc:73:db:45:59:a8:f3:75:d8:9d:33:54:73:af:4f:65:5c:b5:
55:ee:8e:b6:7e:d2:b7:4b:a7:5a:19:83:ec:11:7a:48:28:86:
aa:26:ae:1e:7c:28:f9:f0:d7:6c:a4:bb:3e:7c:00:06:bf:88:
28:5e:f7:65:50:53:32:8f:46:66:39:4a:b7:6d:1a:cc:36:0d:
23:bc:dd:ff:9c:33:60:e7:8d:20:25:57:84:92:96:48:97:d9:
13:76:e8:d5:e7:03:b5:59:bc:82:e2:4e:f9:38:e2:97:7b:cc:
30:35:fe:f3:6d:58:2c:2e:3e:e6:87:1f:6d:24:92:a5:30:12:
46:2d:5b:88:81:22:be:59:73:cf:9d:da:53:c3:f0:42:d8:d9:
91:1e:ba:1b:ed:f6:22:7d:d1:77:cc:dd:26:37:ab:3b:f9:a0:
ad:2c:df:a7:70:40:10:74:7a:ab:49:aa:a5:ab:2d:8f:ba:9f:
e0:64:02:11:5d:e0:a5:58:ca:a5:e7:6d:35:f4:fe:fe:b3:83:
73:53:b1:a7:0d:01:84:06:c9:d5:c0:3d:5c:f5:1e:30:0e:de:
49:38:73:6d:73:27:b0:14:d9:96:15:3f:54:44:c6:6c:7b:77:
6f:32:52:a7
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUdHNc4Otbzicec4aUsotiBw/Pp3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDMDE5OENENEM2NTZDNEFEQ0VDNzM3MEQ2OUY2MUM0
QUJFREIxQzAeFw0yNjA4MjEwNzI2MTRaFw0yNjA4MjcwMTUzMTRaMDMxMTAvBgNV
BAMTKEEyQTczRUVCRDI4ODQzNEU0RjUxNUU0MkI3QUUxNzRBMEI2NENCNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23PzSWX7YrlNiA7tMOZUR0Al4
eI7CM17ObP/Wh/pspuvIQH13VbmLlMQlOZWIns3rQPlunZOYEHMlNnyLoKARv8QI
VMIdFKQZBydvD/otdSy6cgDSpNQ9BwB2hb7mMKWLlP5IaQ2MyvdJX023IoC4x9t5
nJdyHxmw2p56OvWRSnjz4D5J/4RfBSBwdqejdsqIjAu0OpzFysNOx5Mc9Zl9jPGe
kxwSOaqcCy4Fwsvva8dZHgXRCK/QkPy+jpJME6Nf7o8p4JpS1hrUygtcKTBmwKyr
7AneqrV5lV+XwqjN2yxBdfM1gD5YBBhRHREWoA9LV3a+rlLUEcqLrjVTXnM3AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUoqc+69KIQ05PUV5Ct64XSgtky2QwHwYDVR0j
BBgwFoAUzcAZjNTGVsStzsc3DWn2HEq+2xwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTU5RTUyMTk1QUI3Nzk0MkQzODE4NzE4ODM4QjU2ODJC
RjBDM0E4NDE4NURFQTU5M0MyNUNCMkVCNTcyM0NFLzAvQ0RDMDE5OENENEM2NTZD
NEFEQ0VDNzM3MEQ2OUY2MUM0QUJFREIxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREMwMTk4Q0Q0QzY1NkM0QURD
RUM3MzcwRDY5RjYxQzRBQkVEQjFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDk1OUU1MjE5NUFCNzc5NDJEMzgxODcxODgzOEI1NjgyQkYwQzNBODQx
ODVERUE1OTNDMjVDQjJFQjU3MjNDRS8wL0NEQzAxOThDRDRDNjU2QzRBRENFQzcz
NzBENjlGNjFDNEFCRURCMUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0dJx1LPH6N5DUwB7GXbjfKRP8
c9tFWajzddidM1Rzr09lXLVV7o62ftK3S6daGYPsEXpIKIaqJq4efCj58NdspLs+
fAAGv4goXvdlUFMyj0ZmOUq3bRrMNg0jvN3/nDNg540gJVeEkpZIl9kTdujV5wO1
WbyC4k75OOKXe8wwNf7zbVgsLj7mhx9tJJKlMBJGLVuIgSK+WXPPndpTw/BC2NmR
Hrob7fYifdF3zN0mN6s7+aCtLN+ncEAQdHqrSaqlqy2Pup/gZAIRXeClWMql5201
9P7+s4NzU7GnDQGEBsnVwD1c9R4wDt5JOHNtcyewFNmWFT9URMZse3dvMlKn
-----END CERTIFICATE-----
Generated at Sat Aug 22 11:24:10 2026 by rpki-client