
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
File: 5021716DB872AFEA302E881734C3D03B1DCE1384.mft (raw, json)
Hash identifier: zz2L81SUPjxZQsRI7BONK5fE2aWpWfPTzauzxLbf6ps=
Subject key identifier: 1A:9E:D2:2F:A9:27:DC:BE:5D:B5:F7:D4:E5:CD:10:BF:0B:9D:C7:D0
Authority key identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84
Certificate issuer: /CN=5021716DB872AFEA302E881734C3D03B1DCE1384
Certificate serial: 3126EF8AF487A32813E352E92228B8CC8F40BEAE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
Manifest number: 01EC
Signing time: Sat 31 Oct 2026 02:58:31 +0000
Manifest this update: Sat 31 Oct 2026 02:53:31 +0000
Manifest next update: Thu 05 Nov 2026 05:51:31 +0000
Files and hashes: 1: 323830333a613339303a3a2f33322d3438203d3e20323733303135.roa (hash: Fu/SZhrr6Jw7DbYo5CUKcfKCtKHHVYuJggcFFClGvTs=)
2: 5021716DB872AFEA302E881734C3D03B1DCE1384.crl (hash: tLy1LAA8ioF3tv67XnX3LF4Fw5Xkj8xMQaV1q59AwJ4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl
rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 04 Nov 2026 02:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:26:ef:8a:f4:87:a3:28:13:e3:52:e9:22:28:b8:cc:8f:40:be:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5021716DB872AFEA302E881734C3D03B1DCE1384
Validity
Not Before: Oct 31 02:53:31 2026 GMT
Not After : Nov 5 05:51:31 2026 GMT
Subject: CN=1A9ED22FA927DCBE5DB5F7D4E5CD10BF0B9DC7D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:38:e5:84:35:8a:cb:19:24:e3:23:c7:84:
55:59:2b:33:35:34:d1:1e:4f:a0:ad:96:b4:f4:8e:
94:ef:bf:6a:7e:28:8a:43:c5:67:62:59:04:69:39:
87:93:ab:73:4a:7e:ad:f2:bf:ac:dc:2c:22:4f:4f:
7b:b2:8f:72:12:9c:ba:f6:8c:af:5a:af:9f:50:ab:
cd:2c:35:db:59:c1:b8:cd:2f:f1:ff:9f:f1:a6:cc:
62:39:60:7c:14:08:7f:f0:89:4d:df:55:ed:84:8f:
e1:d6:d3:f6:f9:8a:2a:47:c5:f0:b4:c7:e0:f6:3a:
1d:58:8e:e9:e8:f6:e8:b4:8c:3a:db:f1:da:2a:0a:
4b:cb:ac:3f:f3:21:2f:0f:61:e2:e7:f3:a1:86:95:
50:d0:17:14:47:6d:5f:98:54:e4:af:c1:21:bb:60:
4d:12:9b:f0:88:42:2e:18:9e:bd:d8:f2:e3:fa:35:
b2:6d:06:00:89:17:96:f9:d4:35:11:27:20:f4:8c:
20:e1:70:1f:28:08:02:59:9a:e9:d8:7f:c6:00:db:
a8:67:62:0b:df:63:87:40:04:aa:57:fb:4e:e5:13:
9a:1c:75:d5:aa:69:ae:b9:b2:31:90:ab:a1:ee:88:
02:42:18:38:88:7e:f0:58:c0:21:6e:07:54:52:3e:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9E:D2:2F:A9:27:DC:BE:5D:B5:F7:D4:E5:CD:10:BF:0B:9D:C7:D0
X509v3 Authority Key Identifier:
keyid:50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bf:2b:f0:27:17:f9:78:b6:0b:23:86:45:b9:29:8e:5b:4d:
6f:22:e6:40:f8:23:ef:23:c6:1e:e9:89:dd:1f:2d:fc:2c:09:
bb:35:b6:4f:17:57:38:89:f4:82:4a:8f:2d:eb:00:66:0d:36:
85:38:52:60:bc:00:6b:41:8a:b4:d2:0a:39:45:8b:83:36:5e:
cc:51:bf:ce:c7:6a:a0:9f:40:9b:52:ac:09:17:a2:63:03:6e:
43:38:3d:a9:0f:98:6e:04:63:10:92:ee:1b:8e:a1:5c:03:21:
16:3b:d7:9e:70:c6:dc:01:e1:7d:6d:2c:b1:63:30:19:80:20:
01:f5:fd:98:ae:ae:e8:a7:d7:9e:46:80:a8:9f:cf:90:2c:0f:
8c:19:c7:eb:25:f2:9e:30:6a:62:0f:64:6d:66:de:b2:1e:c9:
59:5e:2c:9c:a7:49:72:ea:ec:63:8f:1a:46:10:c4:8f:be:6f:
83:e6:c3:38:ea:a4:2c:3c:11:91:4c:49:05:44:b5:3a:39:69:
6c:ec:41:ad:a8:47:51:55:e0:e9:45:9d:d6:b2:d2:32:80:2b:
4e:8a:25:c5:0c:12:43:e8:7e:8f:11:3d:57:61:74:36:53:4a:
fb:cb:9e:13:bb:3e:e6:c2:8e:80:86:19:67:58:a2:03:33:14:
c3:9e:82:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:38:44 2026 by rpki-client