
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json)
Hash identifier: L7XCA5Gx30I3OiV96qwM0xghAPJ8lCNkUOs4SlPgL8M=
Subject key identifier: E6:C8:30:F1:88:0A:9A:2D:64:40:89:D8:49:78:E3:AE:F3:2D:A4:21
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial: 450A601ED71BBF3CC3E6267B1DC7A9D2E3AB16BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
Manifest number: 01E3
Signing time: Mon 12 Oct 2026 17:17:09 +0000
Manifest this update: Mon 12 Oct 2026 17:12:09 +0000
Manifest next update: Sat 17 Oct 2026 15:21:09 +0000
Files and hashes: 1: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: L57VWgacj/zmSjf7yEB+iUGkpSFTYzflOQWN6Q62GvI=)
2: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: 23sPLzdK1yYJE5LtPSjnAPndTR7sE3T/WZpVKJYs6Zg=)
3: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: dbTjuGS3PzrURh7F2dZU8q1IyUt3ByHVC9cX7x0Huss=)
4: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: kgjgwHarhaMs6Iouvoz80koNaPks3R7U+aIkHqr9IWM=)
5: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: XE2awn9T+5ggVHcwpgRTfWKLa6eNnQYDkphDSuamOgQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 09:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0a:60:1e:d7:1b:bf:3c:c3:e6:26:7b:1d:c7:a9:d2:e3:ab:16:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Validity
Not Before: Oct 12 17:12:09 2026 GMT
Not After : Oct 17 15:21:09 2026 GMT
Subject: CN=E6C830F1880A9A2D644089D84978E3AEF32DA421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:24:08:0e:2a:15:02:96:e2:98:f7:30:c6:
c5:9c:fc:41:5d:8a:83:20:17:53:79:04:a9:08:5c:
cc:cf:6b:bc:6e:a9:e6:7a:8b:f2:1f:0a:9e:b2:16:
5a:a8:59:5e:c9:b9:1c:5c:9e:ef:59:58:a8:da:6f:
ba:11:72:a7:75:55:3c:4e:c2:e0:73:e4:bd:60:a7:
bf:b2:12:38:26:88:ca:dd:b9:86:b1:8c:e6:64:f5:
42:74:f2:bb:66:8a:56:61:8e:f9:1b:b4:02:cd:48:
66:93:90:9e:3f:26:44:cb:5d:9d:57:93:17:e9:c4:
b0:a1:64:d2:95:0b:08:03:cc:d9:6f:e7:fb:90:35:
36:7a:40:8d:e8:5b:d3:4b:6f:f7:db:0d:76:0e:da:
82:da:de:5b:a0:25:c8:d9:6b:0f:86:89:53:06:65:
b5:0e:23:14:c0:00:f3:a9:44:ef:83:80:9f:b5:ba:
61:c1:cb:69:74:0a:ff:80:3f:6b:6f:0f:39:e4:fa:
2d:24:e6:5b:90:c3:f1:61:3d:a2:7a:21:c3:d5:da:
3d:23:38:7c:8b:09:19:77:26:8e:dd:45:b0:b2:5d:
9a:1b:dd:b7:dd:0a:0c:b2:aa:22:90:3d:8d:d1:e8:
91:6a:0b:c9:e6:b4:6c:b4:2f:9a:42:fb:1b:57:2b:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C8:30:F1:88:0A:9A:2D:64:40:89:D8:49:78:E3:AE:F3:2D:A4:21
X509v3 Authority Key Identifier:
keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:12:38:66:0b:0c:25:74:81:8b:39:cb:c6:fc:d0:1f:74:e3:
76:f0:f2:2a:12:cd:38:50:58:eb:0a:7b:ab:43:15:3e:7d:91:
1f:c5:81:9f:63:dc:9b:1d:91:33:87:63:aa:8f:65:97:45:34:
cf:0b:70:ec:3c:19:0b:e3:de:8b:2b:a4:e5:b0:29:41:a0:5c:
42:43:e2:35:48:37:bf:e0:bb:ce:15:cf:38:01:31:a6:97:d1:
cc:61:4c:72:de:22:2f:33:f4:4f:44:81:98:24:b7:17:13:b5:
8a:11:e2:21:24:21:1c:01:9d:7e:b5:df:01:cf:b7:82:c4:51:
ee:8f:ee:3c:ee:de:2e:2d:51:14:49:2e:b4:6c:12:10:2c:a7:
29:a0:3a:70:44:05:f6:d1:22:cc:2d:ef:d0:75:a3:56:ea:04:
24:a5:ef:5c:73:7b:d8:41:8d:79:c0:9e:92:51:4a:bd:3f:5d:
eb:a5:a6:cc:6a:92:bf:25:f7:f9:bd:b2:a1:7b:c9:84:1a:b4:
91:49:00:d0:89:a7:1e:98:8e:7a:e6:64:a3:eb:77:2a:51:5b:
4a:61:83:31:47:d8:bc:9b:8f:88:03:d2:7c:9f:4d:f3:26:38:
80:02:c8:6b:e6:52:ab:f7:28:3a:e8:ae:11:81:cd:84:5f:4f:
07:9a:2b:2e
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIURQpgHtcbvzzD5iZ7Hcep0uOrFrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JCMzBGQ0EyN0I4
RkJFOERBOTAeFw0yNjEwMTIxNzEyMDlaFw0yNjEwMTcxNTIxMDlaMDMxMTAvBgNV
BAMTKEU2QzgzMEYxODgwQTlBMkQ2NDQwODlEODQ5NzhFM0FFRjMyREE0MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcfiQIDioVApbimPcwxsWc/EFd
ioMgF1N5BKkIXMzPa7xuqeZ6i/IfCp6yFlqoWV7JuRxcnu9ZWKjab7oRcqd1VTxO
wuBz5L1gp7+yEjgmiMrduYaxjOZk9UJ08rtmilZhjvkbtALNSGaTkJ4/JkTLXZ1X
kxfpxLChZNKVCwgDzNlv5/uQNTZ6QI3oW9NLb/fbDXYO2oLa3lugJcjZaw+GiVMG
ZbUOIxTAAPOpRO+DgJ+1umHBy2l0Cv+AP2tvDznk+i0k5luQw/FhPaJ6IcPV2j0j
OHyLCRl3Jo7dRbCyXZob3bfdCgyyqiKQPY3R6JFqC8nmtGy0L5pC+xtXK6SlAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU5sgw8YgKmi1kQInYSXjjrvMtpCEwHwYDVR0j
BBgwFoAUyjJcdYvZWuIzjTe7MPyie4++jakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZF
MkVCNEQxOTVCQTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFF
MjMzOEQzN0JCMzBGQ0EyN0I4RkJFOERBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTMyNUM3NThCRDk1QUUyMzM4
RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzA5MjdENEUxOEY3N0VGQjYwMkFFMjFENTYxMUI4OUM2RTJFQjREMTk1
QkExODQ4REQ5OTYxRjg0QTBFRDJCMi8wL0NBMzI1Qzc1OEJEOTVBRTIzMzhEMzdC
QjMwRkNBMjdCOEZCRThEQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEEjhmCwwldIGLOcvG/NAfdON2
8PIqEs04UFjrCnurQxU+fZEfxYGfY9ybHZEzh2Oqj2WXRTTPC3DsPBkL496LK6Tl
sClBoFxCQ+I1SDe/4LvOFc84ATGml9HMYUxy3iIvM/RPRIGYJLcXE7WKEeIhJCEc
AZ1+td8Bz7eCxFHuj+487t4uLVEUSS60bBIQLKcpoDpwRAX20SLMLe/QdaNW6gQk
pe9cc3vYQY15wJ6SUUq9P13rpabMapK/Jff5vbKhe8mEGrSRSQDQiacemI565mSj
63cqUVtKYYMxR9i8m4+IA9J8n03zJjiAAshr5lKr9yg66K4Rgc2EX08Hmisu
-----END CERTIFICATE-----
Generated at Mon Oct 12 23:08:59 2026 by rpki-client