
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json)
Hash identifier: XKobmQ2vpjwRrG/EaniNUFChj5tWw4ZuJEI7gpAU7yc=
Subject key identifier: 10:71:EC:A8:89:6B:3C:68:93:9F:3E:A8:01:1A:3D:25:08:20:86:20
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial: 69621C9C389096ECBFB6358D4E86F4DAF0B07102
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
Manifest number: 01A2
Signing time: Fri 29 May 2026 18:06:03 +0000
Manifest this update: Fri 29 May 2026 18:01:03 +0000
Manifest next update: Wed 03 Jun 2026 11:19:03 +0000
Files and hashes: 1: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: dbTjuGS3PzrURh7F2dZU8q1IyUt3ByHVC9cX7x0Huss=)
2: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: kgjgwHarhaMs6Iouvoz80koNaPks3R7U+aIkHqr9IWM=)
3: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: TDNaloFksvCDvMAFQ3/FEFyLh3P6ZrIML35T5ZcPUpo=)
4: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: L57VWgacj/zmSjf7yEB+iUGkpSFTYzflOQWN6Q62GvI=)
5: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: XE2awn9T+5ggVHcwpgRTfWKLa6eNnQYDkphDSuamOgQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 02 Jun 2026 13:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:62:1c:9c:38:90:96:ec:bf:b6:35:8d:4e:86:f4:da:f0:b0:71:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Validity
Not Before: May 29 18:01:03 2026 GMT
Not After : Jun 3 11:19:03 2026 GMT
Subject: CN=1071ECA8896B3C68939F3EA8011A3D2508208620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:1a:16:b9:45:5a:91:ba:b6:23:b6:08:5f:
4e:f9:05:1c:60:36:9e:69:3c:78:d6:a4:54:18:f2:
81:5a:64:a8:1e:a9:f5:ca:72:40:93:37:ff:b9:df:
79:96:97:7c:4f:be:d8:12:20:ca:16:d1:96:81:c7:
c7:fa:2b:d2:98:43:39:10:13:5a:b8:54:00:5e:57:
a1:6a:ce:38:a7:9b:b2:96:7d:19:a7:e3:1e:a9:65:
24:82:f7:7c:b7:8f:60:77:9d:d1:c5:24:cc:00:e3:
cc:fc:66:53:18:1e:0b:99:74:37:fb:9f:cf:eb:e7:
de:6f:50:93:3d:b3:82:d4:ec:70:3d:db:2c:cd:97:
d5:82:85:7b:17:b2:d3:10:cd:0f:ca:55:ff:13:27:
f1:8e:38:01:59:02:c8:53:a7:1f:e1:70:05:dc:9e:
a7:b8:76:41:1a:86:32:a2:59:70:80:f7:fc:d4:15:
96:ed:bf:39:45:8e:96:be:3e:37:aa:69:c0:97:40:
3b:7c:ff:df:96:88:93:43:7a:de:27:67:fe:2c:b3:
17:d4:c2:a1:1a:8e:16:fd:37:95:5d:84:25:20:c4:
20:86:e3:10:1e:e9:5e:44:2b:84:5f:4a:9c:0a:1e:
a7:b9:56:7f:a0:c3:2c:a7:a6:9d:25:40:09:f7:3f:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:71:EC:A8:89:6B:3C:68:93:9F:3E:A8:01:1A:3D:25:08:20:86:20
X509v3 Authority Key Identifier:
keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:75:5c:4a:22:f8:c1:3e:28:26:6f:9d:0b:cd:cb:d3:1e:98:
f3:8e:eb:b3:62:b1:b2:e9:80:76:29:b8:fd:2d:f5:f9:f3:f1:
1f:7c:1c:79:2e:c8:d4:78:84:03:62:a9:14:5f:f9:07:c9:00:
a6:0b:bb:f0:71:44:06:2c:5f:65:59:c9:08:1f:57:83:fd:38:
b3:81:84:c8:62:3e:45:57:db:a0:59:49:2f:30:e7:24:42:c1:
33:cd:f3:02:05:dd:c6:2f:64:3b:08:3d:70:3e:c8:d2:74:41:
a8:c7:88:f5:ef:85:09:49:f2:a9:4a:c3:56:97:87:df:24:79:
ba:21:89:19:9b:2e:1b:81:01:54:a7:a4:0f:ed:de:c2:cc:71:
aa:55:44:5a:8e:02:db:07:13:4a:d8:0c:d4:07:42:a2:99:85:
92:85:f1:9d:e4:d2:27:56:26:ce:f8:20:99:0a:40:59:3b:92:
93:22:24:52:51:09:62:90:13:b7:09:47:7d:1c:1d:3e:bf:70:
2d:b9:f4:9b:10:96:fc:6d:fc:57:d5:b2:c3:0e:b9:5a:22:f5:
4e:91:b8:ab:84:30:34:71:78:1c:b7:0b:dc:53:b4:95:03:ab:
a6:5a:6f:ef:cd:41:6f:38:6d:bf:d7:48:32:73:6c:01:91:2f:
45:5e:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 12:49:45 2026 by rpki-client