
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.mft
File: A853EF126CD190D84D3EDE920D3FEB6D1F743E95.mft (raw, json)
Hash identifier: cJQkl/HACRmejMrTDRf6IvoYaDnk8BWzZyWStEMs5kM=
Subject key identifier: 99:87:38:88:0E:E9:8D:F4:D6:2B:AE:61:D8:93:5B:6D:9C:37:1A:92
Authority key identifier: A8:53:EF:12:6C:D1:90:D8:4D:3E:DE:92:0D:3F:EB:6D:1F:74:3E:95
Certificate issuer: /CN=A853EF126CD190D84D3EDE920D3FEB6D1F743E95
Certificate serial: 4D2B7A2BA5DAE78E8FB0B8087C7B90BB7D4DDC9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.mft
Manifest number: 22
Signing time: Tue 28 Apr 2026 07:27:48 +0000
Manifest this update: Tue 28 Apr 2026 07:22:48 +0000
Manifest next update: Sun 03 May 2026 11:53:48 +0000
Files and hashes: 1: A853EF126CD190D84D3EDE920D3FEB6D1F743E95.crl (hash: cJArSZRMtxbS3E8XEhE8GtlZWGZLz05M0KBEhCjtpyA=)
2: 323830333a386333303a3a2f33322d3430203d3e20323734333138.roa (hash: X2iQXiVqEdu2FXINcQzfX92zaFQrMjm4lfTemdRdc1E=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.crl
rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 03 May 2026 11:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:2b:7a:2b:a5:da:e7:8e:8f:b0:b8:08:7c:7b:90:bb:7d:4d:dc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A853EF126CD190D84D3EDE920D3FEB6D1F743E95
Validity
Not Before: Apr 28 07:22:48 2026 GMT
Not After : May 3 11:53:48 2026 GMT
Subject: CN=998738880EE98DF4D62BAE61D8935B6D9C371A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:5d:f1:c8:24:e6:d3:19:72:60:ae:24:d2:
58:c7:ec:26:77:bb:4d:ec:a4:5c:3e:ff:87:e2:d4:
82:9a:1e:16:3b:e4:42:d7:ea:73:6e:64:d6:a3:b3:
1a:0d:f1:1f:ff:f4:b9:07:1b:ec:b7:5f:31:c1:8f:
5f:5b:07:c4:22:a7:29:55:df:19:3a:56:b8:3a:1c:
8f:9c:a1:a8:c2:7d:3a:69:c7:b6:98:16:87:dc:cb:
c2:55:51:2b:6a:00:a2:a5:e6:5c:20:9a:00:6e:09:
23:4b:6f:83:8d:60:2c:84:86:2e:47:5b:fa:76:b3:
77:bf:65:72:a0:41:af:89:8d:a7:18:68:c6:f2:0b:
32:2c:50:39:6c:c5:42:cd:c8:ad:6f:24:f9:4f:d8:
6d:17:fb:3c:35:2e:1b:fe:2a:26:d7:73:11:f9:11:
8b:88:a8:66:70:67:8f:d8:f2:93:26:fb:86:cb:95:
25:03:08:bf:b7:f4:1f:1f:84:fa:4d:3c:3c:84:23:
59:c9:b7:e5:bc:51:e3:7e:7a:17:1d:15:b7:3b:db:
b1:24:03:2d:2f:a1:bb:a2:db:ba:d8:9b:ca:a6:1b:
32:84:67:64:33:41:dc:03:42:c0:1c:1e:d6:35:7b:
f8:be:cf:1a:de:d6:0d:b6:91:51:e9:bf:b4:6f:19:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:87:38:88:0E:E9:8D:F4:D6:2B:AE:61:D8:93:5B:6D:9C:37:1A:92
X509v3 Authority Key Identifier:
keyid:A8:53:EF:12:6C:D1:90:D8:4D:3E:DE:92:0D:3F:EB:6D:1F:74:3E:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f5:50:a5:02:a0:72:bd:07:4a:ac:aa:bd:df:37:bb:f8:fe:
22:6b:9f:b1:ad:cb:4c:ac:9b:00:a7:ba:0e:f8:6f:06:ae:c4:
55:04:b1:fb:b4:8e:29:3b:ce:46:14:bc:88:19:00:9e:10:50:
df:84:be:cf:5a:4a:92:6a:1f:34:2e:98:f3:87:9f:0b:fa:5b:
19:87:9b:66:93:5d:40:09:02:b9:60:ec:ea:94:1f:ea:9c:8e:
9b:a8:4c:2b:2f:c5:f4:b8:2a:62:62:ac:f1:00:c5:3e:3c:52:
22:d1:e2:cf:21:b3:68:80:00:30:99:fa:0c:f7:3b:c2:14:22:
08:47:7d:67:88:ba:d2:1a:0c:79:9a:ec:dc:17:a9:6c:40:4d:
01:ba:8e:16:05:cf:93:f1:2d:c2:50:5b:2a:08:cd:3f:58:6c:
45:43:cf:7e:7e:3a:3d:02:39:0a:33:cc:a7:ba:6f:2d:06:9a:
65:3d:0f:0b:89:0b:bc:65:61:85:a8:12:b7:c6:78:b6:51:ff:
e5:66:f5:7a:fb:ac:40:74:c0:c6:0a:ba:b2:2d:3f:02:10:8a:
02:6b:3c:5d:e9:19:36:62:ab:07:bf:99:ed:be:d9:db:bf:62:
6c:fb:7b:bc:e9:3d:d2:97:9f:05:42:9b:c0:34:40:b5:f4:bc:
11:4e:d7:c9
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUTSt6K6Xa546PsLgIfHuQu31N3JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTg1M0VGMTI2Q0QxOTBEODREM0VERTkyMEQzRkVCNkQx
Rjc0M0U5NTAeFw0yNjA0MjgwNzIyNDhaFw0yNjA1MDMxMTUzNDhaMDMxMTAvBgNV
BAMTKDk5ODczODg4MEVFOThERjRENjJCQUU2MUQ4OTM1QjZEOUMzNzFBOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj2l3xyCTm0xlyYK4k0ljH7CZ3
u03spFw+/4fi1IKaHhY75ELX6nNuZNajsxoN8R//9LkHG+y3XzHBj19bB8QipylV
3xk6Vrg6HI+coajCfTppx7aYFofcy8JVUStqAKKl5lwgmgBuCSNLb4ONYCyEhi5H
W/p2s3e/ZXKgQa+JjacYaMbyCzIsUDlsxULNyK1vJPlP2G0X+zw1Lhv+KibXcxH5
EYuIqGZwZ4/Y8pMm+4bLlSUDCL+39B8fhPpNPDyEI1nJt+W8UeN+ehcdFbc727Ek
Ay0vobui27rYm8qmGzKEZ2QzQdwDQsAcHtY1e/i+zxre1g22kVHpv7RvGVsdAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUmYc4iA7pjfTWK65h2JNbbZw3GpIwHwYDVR0j
BBgwFoAUqFPvEmzRkNhNPt6SDT/rbR90PpUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUY5Q0E3OTA5NEU3REFGNkRCREEwQkY2MzdFM0M5QjA2
RDJBOEYyM0VDMzE0MDY3REU3M0I2MjJFREZCQjlFLzAvQTg1M0VGMTI2Q0QxOTBE
ODREM0VERTkyMEQzRkVCNkQxRjc0M0U5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODUzRUYxMjZDRDE5MEQ4NEQz
RURFOTIwRDNGRUI2RDFGNzQzRTk1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFGOUNBNzkwOTRFN0RBRjZEQkRBMEJGNjM3RTNDOUIwNkQyQThGMjNF
QzMxNDA2N0RFNzNCNjIyRURGQkI5RS8wL0E4NTNFRjEyNkNEMTkwRDg0RDNFREU5
MjBEM0ZFQjZEMUY3NDNFOTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBV9VClAqByvQdKrKq93ze7+P4i
a5+xrctMrJsAp7oO+G8GrsRVBLH7tI4pO85GFLyIGQCeEFDfhL7PWkqSah80Lpjz
h58L+lsZh5tmk11ACQK5YOzqlB/qnI6bqEwrL8X0uCpiYqzxAMU+PFIi0eLPIbNo
gAAwmfoM9zvCFCIIR31niLrSGgx5muzcF6lsQE0Buo4WBc+T8S3CUFsqCM0/WGxF
Q89+fjo9AjkKM8ynum8tBpplPQ8LiQu8ZWGFqBK3xni2Uf/lZvV6+6xAdMDGCrqy
LT8CEIoCazxd6Rk2YqsHv5ntvtnbv2Js+3u86T3Sl58FQpvANEC19LwRTtfJ
-----END CERTIFICATE-----
Generated at Thu Apr 30 05:50:23 2026 by rpki-client