
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft
File: 28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft (raw, json)
Hash identifier: KcRY0+t28cKRfL1y2InOSA3sQNB2Tb4ytL1ElWly8sY=
Subject key identifier: A1:19:D2:36:3C:E7:51:4A:91:3C:2E:80:2A:99:BA:B2:FF:62:FC:E3
Authority key identifier: 28:D3:87:F6:3A:EA:E0:AA:9E:95:54:1B:C0:B6:AF:1F:11:CE:54:76
Certificate issuer: /CN=28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476
Certificate serial: 617060C87F3E533DAE3B05C2295213E5905D420F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft
Manifest number: 12
Signing time: Wed 29 Jul 2026 08:01:36 +0000
Manifest this update: Wed 29 Jul 2026 07:56:36 +0000
Manifest next update: Mon 03 Aug 2026 10:42:36 +0000
Files and hashes: 1: 323830333a323933303a3a2f33322d3438203d3e20323734393435.roa (hash: MVqLtzm/kEO+r6vqyMAnOk87BLBVTGDz8flj0sRHAFo=)
2: 28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.crl (hash: uqjwgpRquWGS40lb+4DHSlDMjV43ptSRJYdz2qoSwqs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.crl
rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 02 Aug 2026 21:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:70:60:c8:7f:3e:53:3d:ae:3b:05:c2:29:52:13:e5:90:5d:42:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476
Validity
Not Before: Jul 29 07:56:36 2026 GMT
Not After : Aug 3 10:42:36 2026 GMT
Subject: CN=A119D2363CE7514A913C2E802A99BAB2FF62FCE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:d3:ac:99:05:27:84:86:06:f6:0b:59:3f:
4f:54:3c:92:07:df:7a:c1:50:90:7c:5a:fc:64:32:
80:b7:c7:03:f5:a7:16:12:c5:e2:5c:4a:c4:b1:fb:
ac:fb:8f:6f:1b:20:d1:fb:4c:da:3c:00:30:9e:10:
f7:7e:01:86:5b:9c:55:14:45:17:73:03:56:bf:dc:
d2:30:ae:f1:49:1f:4e:d2:5e:56:a7:6e:3f:0d:cd:
64:de:1c:e7:e4:ce:96:3a:ab:e0:03:33:e7:a5:0b:
14:5c:dd:e4:99:f4:84:8a:1e:61:0e:ce:f1:08:6f:
86:b6:34:3f:50:c2:fa:7f:74:0c:8e:bd:ff:5d:f0:
96:bd:3d:53:d6:94:7e:a9:5d:d2:49:c5:b8:44:84:
a7:48:ad:fc:85:f4:8b:6e:35:05:f8:af:cf:92:25:
73:1f:ef:2b:4e:8f:11:7f:c8:d9:d9:bb:e7:29:ae:
e4:b0:3a:0f:2a:c3:3d:dc:5d:4a:80:34:c6:53:cb:
91:b2:21:6b:4b:a8:ab:9c:95:b5:0b:60:2c:80:3f:
d3:46:f4:40:9a:48:64:7f:0d:9c:05:9a:93:22:ec:
83:8b:88:93:98:00:2b:51:85:46:09:55:7b:51:1e:
ed:b9:15:7e:21:ff:b5:c3:b5:08:f3:9b:45:ec:01:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:19:D2:36:3C:E7:51:4A:91:3C:2E:80:2A:99:BA:B2:FF:62:FC:E3
X509v3 Authority Key Identifier:
keyid:28:D3:87:F6:3A:EA:E0:AA:9E:95:54:1B:C0:B6:AF:1F:11:CE:54:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ec:d5:e4:39:5b:36:30:77:7f:aa:ee:f7:51:01:04:01:34:
e4:c4:2d:cb:40:f7:ad:d6:c8:7d:95:c8:d1:fa:bc:3a:ef:4d:
8b:a5:21:26:83:92:6d:5a:e8:f8:66:c4:23:f8:b4:5b:9e:19:
fa:8d:db:3e:b2:33:d8:0f:bb:7e:aa:9b:aa:2f:04:d0:fa:65:
4e:eb:a6:10:3c:6a:51:c3:5d:11:eb:80:10:03:cc:fd:02:82:
92:c1:73:0e:2a:f3:a9:a9:a3:5d:b9:d2:42:33:d1:71:89:bd:
11:df:16:81:24:67:9e:dd:c9:94:41:ea:05:e4:95:86:33:1c:
34:7b:19:51:32:b8:c9:cb:fd:bc:d1:2c:76:20:98:b2:19:99:
88:1d:f3:a0:7e:1a:1f:9d:d4:6d:0c:b0:dd:e8:14:85:01:a6:
28:d3:2a:bb:20:54:d8:1b:56:60:e3:bf:ad:84:e5:5f:d1:78:
ca:f3:35:c2:1e:d7:76:f6:52:d4:1a:22:22:07:ae:e7:97:2d:
6b:40:c7:a3:25:01:26:7f:67:10:38:6f:e6:fe:5e:e5:ac:89:
04:c9:98:b3:b0:b8:70:d7:da:2d:e8:41:63:bc:0f:c1:f9:ef:
ad:df:69:1b:29:75:4d:a4:57:7a:c3:0e:78:7e:53:6c:3e:f4:
9e:01:c3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:48:43 2026 by rpki-client