
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json)
Hash identifier: 1Zfyyd6gkHdErNnK+tqce/SliW+kRp4PskSdu6hJGos=
Subject key identifier: 6D:D2:55:25:D5:09:E3:35:11:67:4B:D1:C2:9A:66:BA:8A:81:FA:70
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial: 4E596E25A8D66E9547231C6BA85EA66178787D65
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
Manifest number: 01DD
Signing time: Sun 27 Sep 2026 12:07:42 +0000
Manifest this update: Sun 27 Sep 2026 12:02:42 +0000
Manifest next update: Sat 03 Oct 2026 02:03:42 +0000
Files and hashes: 1: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: XE2awn9T+5ggVHcwpgRTfWKLa6eNnQYDkphDSuamOgQ=)
2: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: dbTjuGS3PzrURh7F2dZU8q1IyUt3ByHVC9cX7x0Huss=)
3: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: qP2Rk8Ukc7iCC0yzFOG0PGgQOfDxcCcIwocIeaUvrBY=)
4: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: L57VWgacj/zmSjf7yEB+iUGkpSFTYzflOQWN6Q62GvI=)
5: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: kgjgwHarhaMs6Iouvoz80koNaPks3R7U+aIkHqr9IWM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 01 Oct 2026 19:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:59:6e:25:a8:d6:6e:95:47:23:1c:6b:a8:5e:a6:61:78:78:7d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Validity
Not Before: Sep 27 12:02:42 2026 GMT
Not After : Oct 3 02:03:42 2026 GMT
Subject: CN=6DD25525D509E33511674BD1C29A66BA8A81FA70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:3b:57:0f:74:39:52:00:32:94:42:96:c2:
50:38:fa:32:e9:60:09:79:84:63:af:10:35:36:4b:
9e:f3:0d:1d:cc:cc:67:ee:c5:0f:8d:fa:04:ee:87:
b9:a8:c6:12:77:e5:c1:ff:3f:d1:23:f8:1d:e0:31:
2a:52:7a:1b:f0:97:12:00:da:10:29:be:36:58:1a:
eb:1d:64:e0:32:c2:a6:75:1c:88:1c:ad:90:40:6c:
91:39:6c:12:8e:46:d9:e0:54:ea:31:28:3a:13:b6:
cb:c3:d6:3a:a4:ef:00:4e:a2:fc:e1:ee:cb:70:e8:
c8:58:7f:c0:35:4b:13:bd:2a:7e:a8:23:aa:ae:37:
fb:1e:a7:61:72:ea:96:72:0c:6c:35:b3:1d:87:91:
a6:5a:f5:d9:e1:30:ca:2f:a9:09:3a:f3:5d:7d:bb:
af:c2:ee:b3:50:66:6c:fc:50:a5:e7:b6:b3:65:20:
2e:89:70:c2:43:f5:4f:33:ad:f0:cd:4c:10:9d:11:
85:26:d4:fd:4d:52:ae:a4:24:84:4c:3b:46:f0:d6:
85:82:d0:ee:68:eb:dd:36:62:d5:97:42:5d:bf:be:
65:71:07:64:f1:c8:ff:ce:76:32:fc:ec:4a:fd:df:
a0:47:b2:68:40:a1:2f:98:2e:b7:9b:90:f6:90:ea:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D2:55:25:D5:09:E3:35:11:67:4B:D1:C2:9A:66:BA:8A:81:FA:70
X509v3 Authority Key Identifier:
keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0d:a0:96:4d:4c:a3:f9:30:27:80:2a:e5:66:e5:7f:58:78:
6f:da:ca:87:34:82:5d:9f:7e:05:83:90:4d:13:3c:2a:d8:46:
cb:bc:4b:db:e7:1c:44:2c:e2:93:bc:f4:2a:90:d5:fe:d1:81:
91:79:4f:7c:e5:26:c5:20:e3:05:d0:92:15:68:67:16:69:a5:
03:26:d9:ac:19:40:8c:72:b7:2e:89:e8:71:cb:a1:d8:38:65:
4d:b0:ce:06:02:10:76:31:0f:7e:08:f2:f9:96:60:bc:64:01:
1d:45:5d:dd:59:28:07:3a:0d:a0:99:e3:2c:38:fd:f7:63:9d:
b3:13:b0:7f:e0:85:58:f5:2b:0a:3e:d6:c3:f5:69:93:28:60:
ce:ad:dc:ec:99:6d:5c:fa:87:bd:ef:cb:5e:33:93:5b:68:ce:
1e:33:f3:68:e1:9f:1f:28:a5:96:38:9e:a9:7a:3f:3f:fe:ab:
af:17:a6:40:0e:fc:ca:a1:3f:79:63:31:f6:53:29:b8:e4:e4:
44:33:1d:6d:61:34:76:79:b7:4a:2a:45:f5:6c:0f:e8:fe:59:
69:73:e5:cc:d4:1e:72:2a:4e:5a:20:a1:d8:72:a0:36:e8:fd:
f1:78:a3:21:5c:8f:75:4e:31:d8:d8:e2:7a:48:52:d5:83:76:
a7:0c:87:ad
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUTlluJajWbpVHIxxrqF6mYXh4fWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JCMzBGQ0EyN0I4
RkJFOERBOTAeFw0yNjA5MjcxMjAyNDJaFw0yNjEwMDMwMjAzNDJaMDMxMTAvBgNV
BAMTKDZERDI1NTI1RDUwOUUzMzUxMTY3NEJEMUMyOUE2NkJBOEE4MUZBNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01jtXD3Q5UgAylEKWwlA4+jLp
YAl5hGOvEDU2S57zDR3MzGfuxQ+N+gTuh7moxhJ35cH/P9Ej+B3gMSpSehvwlxIA
2hApvjZYGusdZOAywqZ1HIgcrZBAbJE5bBKORtngVOoxKDoTtsvD1jqk7wBOovzh
7stw6MhYf8A1SxO9Kn6oI6quN/sep2Fy6pZyDGw1sx2HkaZa9dnhMMovqQk68119
u6/C7rNQZmz8UKXntrNlIC6JcMJD9U8zrfDNTBCdEYUm1P1NUq6kJIRMO0bw1oWC
0O5o6902YtWXQl2/vmVxB2TxyP/OdjL87Er936BHsmhAoS+YLrebkPaQ6vodAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUbdJVJdUJ4zURZ0vRwppmuoqB+nAwHwYDVR0j
BBgwFoAUyjJcdYvZWuIzjTe7MPyie4++jakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZF
MkVCNEQxOTVCQTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFF
MjMzOEQzN0JCMzBGQ0EyN0I4RkJFOERBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTMyNUM3NThCRDk1QUUyMzM4
RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzA5MjdENEUxOEY3N0VGQjYwMkFFMjFENTYxMUI4OUM2RTJFQjREMTk1
QkExODQ4REQ5OTYxRjg0QTBFRDJCMi8wL0NBMzI1Qzc1OEJEOTVBRTIzMzhEMzdC
QjMwRkNBMjdCOEZCRThEQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbDaCWTUyj+TAngCrlZuV/WHhv
2sqHNIJdn34Fg5BNEzwq2EbLvEvb5xxELOKTvPQqkNX+0YGReU985SbFIOMF0JIV
aGcWaaUDJtmsGUCMcrcuiehxy6HYOGVNsM4GAhB2MQ9+CPL5lmC8ZAEdRV3dWSgH
Og2gmeMsOP33Y52zE7B/4IVY9SsKPtbD9WmTKGDOrdzsmW1c+oe978teM5NbaM4e
M/No4Z8fKKWWOJ6pej8//quvF6ZADvzKoT95YzH2Uym45OREMx1tYTR2ebdKKkX1
bA/o/llpc+XM1B5yKk5aIKHYcqA26P3xeKMhXI91TjHY2OJ6SFLVg3anDIet
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:42:12 2026 by rpki-client