
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft
File: 525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft (raw, json)
Hash identifier: jhoPG8V7D/jpKZhCwijNN6p+gUl23M2T9rqZdTNiL6c=
Subject key identifier: 4F:B0:E3:E9:DE:41:13:A1:3B:D8:09:4F:19:92:81:8E:AC:79:86:7E
Authority key identifier: 52:5D:28:6D:D2:85:74:DE:DF:2E:1C:9E:1A:2E:E6:BC:BA:59:04:0C
Certificate issuer: /CN=525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C
Certificate serial: 33857AF04B3635D7115D3E48F62326CA9EB415D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft
Manifest number: 4C
Signing time: Wed 16 Sep 2026 02:25:33 +0000
Manifest this update: Wed 16 Sep 2026 02:20:33 +0000
Manifest next update: Mon 21 Sep 2026 15:11:33 +0000
Files and hashes: 1: 323830333a636533303a3a2f33322d3438203d3e20323734393033.roa (hash: 9xqxvrW8nSVjy4FiJTCh+xFdQWf2ZSEBDG91qUqZ/RU=)
2: 525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.crl (hash: fvF0M1XptrFfd+K0qXWcUk0QlyViBnuDr+Cbd5r+zLg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.crl
rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 21 Sep 2026 15:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:85:7a:f0:4b:36:35:d7:11:5d:3e:48:f6:23:26:ca:9e:b4:15:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C
Validity
Not Before: Sep 16 02:20:33 2026 GMT
Not After : Sep 21 15:11:33 2026 GMT
Subject: CN=4FB0E3E9DE4113A13BD8094F1992818EAC79867E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:63:c5:68:dd:5d:ce:36:5d:91:9e:e6:9c:
65:d3:c4:d7:79:da:4d:26:43:bd:61:7c:92:13:4f:
fa:dd:62:11:1a:eb:0a:80:e1:07:6c:b1:5a:4f:74:
ff:e2:70:f0:ab:26:33:42:ef:4a:99:82:9b:f4:db:
63:ce:35:c5:4b:7c:17:2e:c3:0f:a6:26:da:5c:1b:
89:b7:51:b1:13:c7:ed:8f:6d:83:94:e2:70:f4:e4:
af:46:8c:3f:ce:6f:25:e3:aa:28:1f:c8:69:81:8e:
de:64:b3:37:12:91:45:5a:d8:e1:88:4d:1c:cf:f3:
f9:49:e5:eb:bc:ec:d9:3c:6b:1b:c7:f3:49:5b:d0:
f2:6c:17:e2:8f:3c:74:ee:ff:90:ce:25:dc:f8:d2:
76:66:8b:76:45:37:e3:e0:3a:b8:5d:f1:09:71:cb:
45:8a:06:f5:99:ab:48:eb:77:5a:62:b5:7e:04:42:
c1:dd:c8:d0:cf:1d:4a:5c:43:ce:c8:55:e4:4c:1d:
df:f8:31:54:5d:48:70:9e:f2:f9:aa:1a:26:9a:a1:
84:ee:b5:19:a8:09:34:0e:01:3d:8a:05:4d:2d:d6:
8b:0e:65:6d:3f:1f:56:df:1b:4b:57:d2:43:15:48:
03:5a:bc:5d:1e:26:b2:c3:5e:52:87:65:df:82:6d:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B0:E3:E9:DE:41:13:A1:3B:D8:09:4F:19:92:81:8E:AC:79:86:7E
X509v3 Authority Key Identifier:
keyid:52:5D:28:6D:D2:85:74:DE:DF:2E:1C:9E:1A:2E:E6:BC:BA:59:04:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0a:dd:8d:dc:f3:a6:66:e0:9d:bd:3b:54:4a:bd:e7:99:cf:
0c:ee:8a:79:51:a7:86:0d:58:fe:51:7f:4b:aa:f3:56:76:d8:
a4:90:59:d8:15:21:97:4b:02:bd:00:b1:c9:bf:92:18:28:db:
b8:67:0f:58:83:7b:76:e6:3e:2f:2a:76:ee:b3:2a:0a:32:c2:
fc:44:aa:23:87:cf:4b:de:6f:55:2e:cc:91:a9:1c:69:5b:32:
87:c9:eb:e8:1a:18:47:3d:77:49:2c:b1:7f:0b:bf:c8:fa:b9:
e9:a5:e3:3b:f4:1b:39:20:3c:71:5b:db:ea:c0:42:98:9f:a2:
58:fc:a5:2a:e7:0a:f6:35:bb:13:d3:fe:97:34:a2:bd:42:37:
86:70:a8:ea:92:be:80:be:2d:42:30:0b:e3:60:47:6a:99:40:
12:e9:22:9f:4b:0a:cd:eb:50:0e:70:ab:ae:ba:29:12:c6:29:
95:f3:22:a8:15:46:a5:fc:e4:29:6c:ac:15:f8:13:f0:f4:8c:
e5:b0:7c:fe:ff:d9:94:15:b0:b6:d9:54:aa:c5:f5:12:37:5f:
f5:6c:a1:2a:4b:cf:9b:c5:d2:fe:17:33:a7:70:81:1c:8e:59:
d8:df:52:bf:46:2e:5c:d8:80:5a:97:60:71:91:09:c4:9c:6e:
09:32:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:19:13 2026 by rpki-client