
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
File: CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft (raw, json)
Hash identifier: SZD/4aqg+2pOJnijLjmqS638HExtMsINegcL7pW0DeU=
Subject key identifier: 98:2C:4F:ED:DE:B9:8B:7E:2B:D5:BB:19:81:F1:7C:38:8E:73:DD:04
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Certificate issuer: /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial: 6D4C3C1ADEC9AC39389E1ACBB8227532E5D7E4F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
Manifest number: 01A8
Signing time: Thu 11 Jun 2026 21:44:57 +0000
Manifest this update: Thu 11 Jun 2026 21:39:57 +0000
Manifest next update: Tue 16 Jun 2026 15:39:57 +0000
Files and hashes: 1: 3138352e37342e31382e302f32342d3234203d3e203336343534.roa (hash: /s6vyPqjFsCBzbl7k2i7VjFnyweu8raSTCp18y5qPow=)
2: CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl (hash: hn9UcMx9DDI5VmsSCmKaBmhZC/AR43qHuZuVI+/rPYI=)
3: 3138352e37342e31392e302f32342d3234203d3e203532333335.roa (hash: ExF9bS2S5c/xNWzt0eiAgaV0pJ2Sqw1dX/0cJOz/5OA=)
4: 3138352e37342e31362e302f32332d3234203d3e203336343534.roa (hash: 5hN2NJOMlsMqgRJfpQa/xPxQxH45stlb9cVIjWuo9mE=)
5: 3139302e382e3137362e302f32322d3232203d3e203532333335.roa (hash: PUV3ZWY9JqupoTlTWIW6Pr4IJdO4qZf2zIgqjCY+ti4=)
6: 3138352e37342e31362e302f32332d3233203d3e203532333335.roa (hash: k8hGd3QOuAZg603pGFJqGI/lZvvWK4caG63hHAMuDMU=)
7: 3139302e382e3137362e302f32322d3234203d3e203336343534.roa (hash: dt9vy/6Dk0cotHocklt24/PtvbvoPUWM/O1eCtF+zH4=)
8: 3138352e37342e31382e302f32342d3234203d3e203532333335.roa (hash: A9ubWd6zXRextJ/B+1lIfmXt9WeNTj1eBcTgamTQDXo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 15 Jun 2026 17:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:4c:3c:1a:de:c9:ac:39:38:9e:1a:cb:b8:22:75:32:e5:d7:e4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Validity
Not Before: Jun 11 21:39:57 2026 GMT
Not After : Jun 16 15:39:57 2026 GMT
Subject: CN=982C4FEDDEB98B7E2BD5BB1981F17C388E73DD04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:b6:ed:90:51:a1:c1:dd:9f:de:a5:a6:78:
cd:ba:86:52:dc:33:92:ae:dc:e4:c4:e3:97:71:a9:
69:47:6b:96:53:4d:3c:83:e7:42:d9:9f:c9:0d:6f:
82:38:bc:aa:be:fa:da:a1:9c:a8:4a:ef:29:5f:55:
1b:e9:42:b7:6c:89:4d:e9:c3:71:ad:19:b4:bf:c2:
a1:c0:d8:c6:d5:d8:a4:8e:05:2a:78:7d:8f:e4:c9:
fe:f5:c3:fa:a8:54:1d:16:a2:3f:2e:f8:3e:0c:e3:
3b:ca:da:af:a2:53:6e:8c:22:15:4e:3b:e9:d8:8c:
b2:e9:fc:18:7f:6a:53:da:47:f6:91:0e:19:cf:74:
53:42:a9:0f:48:df:dd:34:44:8b:97:7c:12:95:50:
f5:4e:87:7b:42:9d:6b:63:f1:df:6e:2d:39:26:eb:
c2:31:bb:38:b2:25:8b:c2:b3:c6:46:04:fb:f5:c4:
70:cd:3f:8c:5b:d8:7f:7e:c7:8f:3d:58:af:5f:8d:
fe:0e:66:a8:b3:12:75:90:c7:a3:45:93:cb:85:8c:
c8:b6:32:00:1e:9d:dd:7b:81:a6:2c:b3:ce:ea:84:
17:8a:a9:cd:91:f1:1e:e2:2e:3b:aa:76:3b:e5:16:
68:62:6a:fa:c1:2f:88:d5:a3:3e:77:ad:31:e6:bd:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2C:4F:ED:DE:B9:8B:7E:2B:D5:BB:19:81:F1:7C:38:8E:73:DD:04
X509v3 Authority Key Identifier:
keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5a:4b:ee:72:32:c1:51:56:f2:c3:72:b2:33:15:78:36:5d:
e8:77:ce:57:33:eb:8f:8a:68:f7:c0:49:32:ae:82:72:97:24:
c1:f4:bf:7a:75:61:7c:77:20:02:52:d7:36:03:65:13:16:19:
c1:7d:f8:d6:11:eb:ca:a5:85:02:ee:d5:94:cd:cd:64:02:03:
e2:fa:1d:0d:ea:2b:8e:b5:9d:df:25:1d:5a:ae:66:53:fb:eb:
22:db:eb:38:4e:ae:20:31:26:38:ce:5c:a5:fa:7d:88:05:3d:
d0:b1:d6:a0:a5:6c:42:a8:7f:25:fa:91:ae:4a:e0:6a:61:05:
08:d8:b7:74:8f:65:be:44:9f:ce:e3:d2:80:1c:9a:8a:70:82:
dd:88:13:ee:e8:2e:21:20:84:23:ab:a4:de:0a:66:5e:c7:cc:
bc:32:22:a4:38:57:d1:42:c1:89:26:f2:b3:8d:38:9d:68:74:
44:48:c3:f5:98:1b:d0:51:79:4c:91:0b:a6:49:17:96:40:d9:
b5:9e:f6:27:d3:c5:0c:10:62:63:99:bf:92:08:b1:d1:69:04:
5d:cf:ea:9f:88:ec:06:34:b2:01:6f:4d:7f:b0:4b:97:19:ef:
ea:06:0a:64:71:69:2e:0e:e8:79:3e:df:4c:73:cb:9f:ab:04:
97:a0:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:11:47 2026 by rpki-client