
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft
File: 2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft (raw, json)
Hash identifier: SqfKntkfScVFivy4MvwgMUjZM9UmFWQyx8JVNuGxnRw=
Subject key identifier: 58:A4:9E:8F:26:2C:18:9A:94:AC:C3:2E:00:DF:F4:09:75:69:3D:0F
Authority key identifier: 2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E
Certificate issuer: /CN=2BA10E6D7C0328E5364BF4041104D52624FF2C2E
Certificate serial: 485862113C43B77AA60E6E3B137371AA2CC60C5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft
Manifest number: 01A2
Signing time: Sun 28 Jun 2026 02:48:16 +0000
Manifest this update: Sun 28 Jun 2026 02:43:16 +0000
Manifest next update: Fri 03 Jul 2026 22:07:16 +0000
Files and hashes: 1: 3137392e302e3230302e302f32332d3234203d3e20323732303337.roa (hash: gRVanbZTN+fRktdlFIZLaEaQxrHPraPbkmyQtDzLXpQ=)
2: 323830313a31373a633030303a3a2f34342d3634203d3e20323732303337.roa (hash: /2OiOcxwLz9GXQEVWHKuQhCi2u7WUOgw8tiZNJ4ZZi0=)
3: 2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl (hash: m5L0TuQa1DG6YL3XfxTq5TvuFVmRa/BO8af0Dj9l8HE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl
rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 03 Jul 2026 22:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:58:62:11:3c:43:b7:7a:a6:0e:6e:3b:13:73:71:aa:2c:c6:0c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BA10E6D7C0328E5364BF4041104D52624FF2C2E
Validity
Not Before: Jun 28 02:43:16 2026 GMT
Not After : Jul 3 22:07:16 2026 GMT
Subject: CN=58A49E8F262C189A94ACC32E00DFF40975693D0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:4d:e3:fb:c4:6f:a0:bf:91:12:2e:d8:41:
ae:30:8e:e5:2c:3e:25:8e:df:1d:a3:ac:8f:c7:7f:
96:28:cb:49:78:eb:b3:4a:f4:14:b0:d7:22:b2:f8:
0e:7e:ba:88:43:1a:57:eb:b7:5e:09:72:eb:98:1d:
5f:6e:e6:80:16:e6:bf:d9:bf:ab:6a:03:e6:8a:6f:
d7:6d:cf:66:71:37:c1:3f:44:2e:b5:97:4d:04:6d:
82:ff:f6:3b:01:7e:65:03:65:6d:26:38:ff:2f:a4:
6f:6b:6d:13:a4:1a:7d:52:6c:f3:03:e2:fa:9e:e6:
41:34:9d:9b:a1:79:45:ee:ea:82:47:19:2b:2f:9f:
a3:e3:8a:89:7b:a6:01:0c:f4:17:f9:0c:a8:ca:39:
ac:34:20:76:b4:e1:fb:5b:c1:d0:6f:7c:ef:8b:25:
f4:1b:39:6c:85:ea:d5:f6:37:67:dd:a9:87:51:91:
99:d1:ee:72:c9:dd:8b:05:5f:aa:89:bd:3f:f1:77:
97:17:de:b3:ff:5a:56:6d:6d:1d:32:5b:71:6f:45:
bb:c3:e7:1c:95:40:af:39:e3:2b:a1:37:b2:2f:2c:
07:35:13:fd:2d:22:2b:19:01:cf:6f:17:47:31:87:
55:af:d5:05:11:9a:93:ef:ad:93:53:4b:59:d5:08:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A4:9E:8F:26:2C:18:9A:94:AC:C3:2E:00:DF:F4:09:75:69:3D:0F
X509v3 Authority Key Identifier:
keyid:2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f2:22:cf:ce:41:91:16:55:ea:f4:4d:a5:4e:13:9e:c2:86:
cb:4d:c1:b1:4d:eb:72:34:e8:09:b0:75:3e:65:7a:cb:8b:65:
aa:23:79:68:65:0f:d2:94:7d:4f:7b:53:6a:81:9e:00:81:b8:
54:7e:e2:26:68:9d:96:a2:f5:6c:79:b2:d8:ac:73:b5:48:70:
26:30:e4:ad:9d:18:d0:0d:01:24:70:99:a9:7e:0a:21:d9:99:
75:2f:ad:47:51:a7:0c:f1:fe:43:95:00:f1:4d:da:17:62:2c:
b6:56:38:9f:c8:45:b9:6c:80:d7:32:7e:68:13:9e:c5:77:88:
fe:68:07:1d:8e:d2:42:1c:1f:b9:f8:67:2c:7a:29:1b:eb:64:
c1:c6:40:c2:a0:3e:ed:01:33:43:d4:55:93:dd:7b:16:2f:82:
ca:28:df:c3:da:67:11:3c:f4:6c:24:80:2f:ff:d6:8a:fc:c2:
80:dd:30:10:a5:74:81:06:6d:76:b7:d5:bf:f3:8d:72:0f:02:
a9:d2:ee:4e:aa:03:04:d2:17:b7:0c:48:fa:09:00:21:95:44:
b6:6c:ad:5a:95:01:9d:44:18:87:fc:17:41:d7:03:8a:78:23:
69:73:ad:44:70:c2:5c:66:8b:39:e1:61:a9:7c:fb:24:3e:1b:
c8:ba:2d:59
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUSFhiETxDt3qmDm47E3NxqizGDF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJBMTBFNkQ3QzAzMjhFNTM2NEJGNDA0MTEwNEQ1MjYy
NEZGMkMyRTAeFw0yNjA2MjgwMjQzMTZaFw0yNjA3MDMyMjA3MTZaMDMxMTAvBgNV
BAMTKDU4QTQ5RThGMjYyQzE4OUE5NEFDQzMyRTAwREZGNDA5NzU2OTNEMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Dk3j+8RvoL+REi7YQa4wjuUs
PiWO3x2jrI/Hf5Yoy0l467NK9BSw1yKy+A5+uohDGlfrt14JcuuYHV9u5oAW5r/Z
v6tqA+aKb9dtz2ZxN8E/RC61l00EbYL/9jsBfmUDZW0mOP8vpG9rbROkGn1SbPMD
4vqe5kE0nZuheUXu6oJHGSsvn6Pjiol7pgEM9Bf5DKjKOaw0IHa04ftbwdBvfO+L
JfQbOWyF6tX2N2fdqYdRkZnR7nLJ3YsFX6qJvT/xd5cX3rP/WlZtbR0yW3FvRbvD
5xyVQK854yuhN7IvLAc1E/0tIisZAc9vF0cxh1Wv1QURmpPvrZNTS1nVCNMjAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUWKSejyYsGJqUrMMuAN/0CXVpPQ8wHwYDVR0j
BBgwFoAUK6EObXwDKOU2S/QEEQTVJiT/LC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QzBDODQzM0U3NzBCMUJEMjJGRkE0QTc2NjE1NTZCNEM3
OTU2MTE2QjA3MjBBMjc2RTA2RDFDODFEODlBNTg4LzAvMkJBMTBFNkQ3QzAzMjhF
NTM2NEJGNDA0MTEwNEQ1MjYyNEZGMkMyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQkExMEU2RDdDMDMyOEU1MzY0
QkY0MDQxMTA0RDUyNjI0RkYyQzJFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEMwQzg0MzNFNzcwQjFCRDIyRkZBNEE3NjYxNTU2QjRDNzk1NjExNkIw
NzIwQTI3NkUwNkQxQzgxRDg5QTU4OC8wLzJCQTEwRTZEN0MwMzI4RTUzNjRCRjQw
NDExMDRENTI2MjRGRjJDMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCB8iLPzkGRFlXq9E2lThOewobL
TcGxTetyNOgJsHU+ZXrLi2WqI3loZQ/SlH1Pe1NqgZ4AgbhUfuImaJ2WovVsebLY
rHO1SHAmMOStnRjQDQEkcJmpfgoh2Zl1L61HUacM8f5DlQDxTdoXYiy2VjifyEW5
bIDXMn5oE57Fd4j+aAcdjtJCHB+5+Gcseikb62TBxkDCoD7tATND1FWT3XsWL4LK
KN/D2mcRPPRsJIAv/9aK/MKA3TAQpXSBBm12t9W/841yDwKp0u5OqgME0he3DEj6
CQAhlUS2bK1alQGdRBiH/BdB1wOKeCNpc61EcMJcZos54WGpfPskPhvIui1Z
-----END CERTIFICATE-----
Generated at Tue Jun 30 10:22:26 2026 by rpki-client