
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json)
Hash identifier: oohDBC5uue2ZaWPHdKW0maUEDMf38ZOIhKgGI8o3Q8Q=
Subject key identifier: 20:D2:7B:34:FC:82:97:13:67:53:68:21:CC:D8:63:35:E6:A6:2E:E1
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial: 291C1687BA920E36456ABDDAF718359D6D57DBEF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
Manifest number: 01BC
Signing time: Thu 23 Jul 2026 01:50:40 +0000
Manifest this update: Thu 23 Jul 2026 01:45:40 +0000
Manifest next update: Mon 27 Jul 2026 14:48:40 +0000
Files and hashes: 1: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: L57VWgacj/zmSjf7yEB+iUGkpSFTYzflOQWN6Q62GvI=)
2: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: dbTjuGS3PzrURh7F2dZU8q1IyUt3ByHVC9cX7x0Huss=)
3: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: XE2awn9T+5ggVHcwpgRTfWKLa6eNnQYDkphDSuamOgQ=)
4: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: F5dvq5D0Nx9ksvmIIOKI2BbyY2nS/IhBB8Hd/dLpK4M=)
5: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: kgjgwHarhaMs6Iouvoz80koNaPks3R7U+aIkHqr9IWM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 27 Jul 2026 14:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1c:16:87:ba:92:0e:36:45:6a:bd:da:f7:18:35:9d:6d:57:db:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Validity
Not Before: Jul 23 01:45:40 2026 GMT
Not After : Jul 27 14:48:40 2026 GMT
Subject: CN=20D27B34FC82971367536821CCD86335E6A62EE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:53:9b:e1:19:18:bd:fc:af:4b:d6:c4:86:
b9:7b:db:a6:2d:3b:39:89:52:e8:ec:ef:5e:27:d6:
c3:44:7c:60:0b:52:1b:21:8f:ce:2b:96:76:2c:02:
6c:ca:28:75:56:1d:e2:2d:61:f0:5a:ac:a3:58:00:
0a:6f:17:7a:fc:23:10:ff:53:56:d7:6b:84:91:85:
09:42:05:bd:9c:df:11:7f:9b:13:88:a2:3a:7c:5f:
50:42:70:ec:11:0b:c5:6e:e9:cc:f9:a2:17:5a:c5:
cd:c4:29:dd:dc:32:bb:a4:e4:d6:56:b4:df:c7:3c:
b0:ee:09:e0:4d:e2:3d:0d:b0:e6:de:87:bf:f2:ff:
c6:c5:1e:c1:10:23:e5:12:2e:0d:2e:0b:72:8f:17:
60:79:22:96:14:5a:67:d2:d9:02:6c:10:20:d5:41:
e9:f5:81:70:a7:d4:c9:b2:4f:d9:6b:5e:06:d7:c7:
ac:52:2f:b5:81:10:d5:92:20:50:11:54:49:ca:ea:
d8:1a:46:7c:b4:a0:e9:a3:7a:c8:66:17:7a:52:3f:
21:d4:34:af:fd:e1:a5:f3:f2:88:d9:e8:cb:01:70:
28:1b:41:32:4e:d8:91:d6:23:77:1b:ea:b1:19:e9:
f9:14:8e:96:26:66:10:47:7d:c3:29:cf:fe:d0:1a:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D2:7B:34:FC:82:97:13:67:53:68:21:CC:D8:63:35:E6:A6:2E:E1
X509v3 Authority Key Identifier:
keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f5:d7:9d:e0:c8:f2:f8:7d:d9:00:94:8a:15:bd:49:79:d5:
44:c0:ff:38:a3:bf:2c:83:ef:81:10:52:0b:f0:d1:b3:4b:6e:
32:75:ed:f3:96:49:25:2e:73:d5:89:92:95:cd:38:69:8c:23:
b6:01:17:98:99:89:7b:e0:38:05:69:87:95:17:28:1c:b3:72:
81:4c:c1:1f:6f:df:8c:b3:d0:c3:8f:01:d3:97:0c:d0:ff:f7:
85:25:96:ef:dc:30:9b:b4:2b:9c:86:35:81:91:2a:f6:2b:2b:
5a:de:26:75:ec:9e:e8:d2:27:55:51:32:f1:80:63:52:cb:cb:
24:e8:c5:53:a9:bc:4b:6c:88:03:b3:d4:89:80:a4:0a:57:5f:
bd:c4:75:7c:97:41:1b:13:0f:c3:51:22:b2:ef:e4:43:9e:f9:
ec:74:a1:a2:d4:d1:7d:a3:10:22:ef:26:88:e6:67:7a:74:6c:
9d:1d:13:6a:c9:18:6e:8e:2d:95:c8:1a:8a:24:a0:a4:51:03:
fc:3b:d1:39:ea:6a:91:f4:28:f0:10:cf:9c:83:70:fe:05:19:
46:91:f4:22:e4:2d:ca:22:22:38:fc:95:d9:f3:e5:a3:ca:d1:
06:e5:2d:eb:f9:fa:d3:23:90:11:62:32:d0:6f:96:0c:32:a3:
0c:0c:b8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:51:46 2026 by rpki-client