
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft
File: 4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft (raw, json)
Hash identifier: QqsldBSJCPnFgXRLQl9qpfgYSUyL08lmkpdF2VIExI8=
Subject key identifier: 69:BD:D6:25:8A:0F:7B:BB:B2:EA:36:65:AA:98:50:7C:4B:19:0B:20
Authority key identifier: 4E:D2:92:1D:1B:30:A3:E0:F6:9A:B2:E1:A0:F9:7B:02:BA:59:07:20
Certificate issuer: /CN=4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720
Certificate serial: 558D016C2C3F7AFE1CEF760DDC197D99EFB099C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft
Manifest number: 0122
Signing time: Sun 15 Mar 2026 16:23:28 +0000
Manifest this update: Sun 15 Mar 2026 16:18:28 +0000
Manifest next update: Fri 20 Mar 2026 12:16:28 +0000
Files and hashes: 1: 323830363a3331613a3a2f33322d3438203d3e203238333934.roa (hash: LYae6E4+xuGKXOOpNU0GbfgI22Vew+Y88jUqdMgpQhE=)
2: 4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.crl (hash: pZNmn3Fjg3CxzMKt10uwnYwFAZrw/20hmj9CwKQ4TrY=)
3: 34352e3136382e3233322e302f32322d3234203d3e203238333934.roa (hash: 6FAzLTO0RSqkT6qWQ+0JBJCN1N4/qhas8EPvVvsICpg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.crl
rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 19 Mar 2026 05:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:8d:01:6c:2c:3f:7a:fe:1c:ef:76:0d:dc:19:7d:99:ef:b0:99:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720
Validity
Not Before: Mar 15 16:18:28 2026 GMT
Not After : Mar 20 12:16:28 2026 GMT
Subject: CN=69BDD6258A0F7BBBB2EA3665AA98507C4B190B20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:cb:e9:47:f9:b3:18:bb:a5:e7:03:32:32:
0a:fe:af:1a:b1:4b:06:fc:cf:b6:14:d6:79:7e:b3:
24:80:02:7d:cb:7c:40:7e:55:ff:0a:91:8b:f6:a5:
07:fc:6e:ac:89:04:93:69:ee:17:96:ee:c3:de:80:
7c:8a:b3:d4:e9:69:38:d8:fd:ac:ec:d2:85:c2:75:
0a:f8:eb:5f:16:eb:e8:9d:2e:1d:80:14:d6:9c:db:
cd:67:fd:26:38:ac:c5:db:6d:ed:d0:c6:e2:53:cd:
14:7b:25:37:a8:73:1b:a0:f2:af:b5:80:39:b0:08:
a6:86:f1:a6:f9:52:d1:ad:96:45:a3:c4:43:ac:61:
0c:53:00:e3:84:f2:2f:92:40:ce:22:d7:a1:f5:bc:
e3:44:96:9e:01:24:e3:a2:03:d4:ed:a9:a4:cf:c1:
ed:d3:b1:1e:8d:fe:2f:c5:bf:0a:82:4d:20:a4:2e:
6b:47:22:d1:8c:b9:bc:ab:0c:e9:e0:ca:61:41:ac:
d2:3e:80:01:a6:a7:e0:28:dd:4b:71:d6:fe:b9:15:
d9:90:81:56:ca:63:e3:8f:ef:18:59:b9:63:e7:2d:
84:c8:3c:9b:98:69:be:8b:b3:eb:74:e9:cb:2b:44:
01:30:18:72:82:5e:bc:1a:ab:b0:ef:01:c1:4c:7f:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BD:D6:25:8A:0F:7B:BB:B2:EA:36:65:AA:98:50:7C:4B:19:0B:20
X509v3 Authority Key Identifier:
keyid:4E:D2:92:1D:1B:30:A3:E0:F6:9A:B2:E1:A0:F9:7B:02:BA:59:07:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:93:fb:a9:dd:7c:76:98:35:ab:8b:a2:50:4a:4b:b7:f6:ed:
d6:a0:b0:15:5e:d3:07:d6:b3:53:6c:96:08:03:6a:44:b2:3c:
47:fe:ff:82:64:f2:9f:cf:26:f4:1c:66:da:98:2c:21:8d:15:
de:9c:fd:b3:0f:fe:72:24:3c:4b:99:04:80:b7:e2:ec:2d:f3:
80:bd:39:64:d2:69:da:f7:4e:17:8f:50:74:cd:cd:76:47:22:
90:33:5d:ef:8e:74:2a:28:e0:3c:9d:80:b6:3c:1e:44:e9:e7:
0c:43:2d:7c:31:f2:8f:ec:38:00:79:b7:1b:47:ea:25:24:a7:
e5:34:d2:aa:80:a6:11:91:f3:3b:a4:70:bb:5a:25:92:8e:9c:
5b:50:a6:ad:f4:45:c3:1e:22:49:0f:e6:2c:66:5c:25:33:e4:
09:37:09:63:c9:52:62:00:8f:62:50:fc:82:5f:f6:c7:a1:27:
0a:97:72:fa:3c:6d:a4:d4:ac:98:cb:5f:bc:52:f4:a6:6b:75:
c4:15:48:4f:a9:19:ff:c3:30:2a:28:43:15:3e:0f:e9:cc:7b:
50:b3:90:90:63:91:87:93:72:17:f3:b2:14:a4:84:45:90:b5:
12:d6:44:bc:c7:ff:b1:61:16:c8:be:c5:bb:f2:77:13:9b:29:
8e:f6:8c:62
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUVY0BbCw/ev4c73YN3Bl9me+wmcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVEMjkyMUQxQjMwQTNFMEY2OUFCMkUxQTBGOTdCMDJC
QTU5MDcyMDAeFw0yNjAzMTUxNjE4MjhaFw0yNjAzMjAxMjE2MjhaMDMxMTAvBgNV
BAMTKDY5QkRENjI1OEEwRjdCQkJCMkVBMzY2NUFBOTg1MDdDNEIxOTBCMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcGMvpR/mzGLul5wMyMgr+rxqx
Swb8z7YU1nl+sySAAn3LfEB+Vf8KkYv2pQf8bqyJBJNp7heW7sPegHyKs9TpaTjY
/azs0oXCdQr4618W6+idLh2AFNac281n/SY4rMXbbe3QxuJTzRR7JTeocxug8q+1
gDmwCKaG8ab5UtGtlkWjxEOsYQxTAOOE8i+SQM4i16H1vONElp4BJOOiA9TtqaTP
we3TsR6N/i/FvwqCTSCkLmtHItGMubyrDOngymFBrNI+gAGmp+Ao3Utx1v65FdmQ
gVbKY+OP7xhZuWPnLYTIPJuYab6Ls+t06csrRAEwGHKCXrwaq7DvAcFMf/urAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUab3WJYoPe7uy6jZlqphQfEsZCyAwHwYDVR0j
BBgwFoAUTtKSHRswo+D2mrLhoPl7ArpZByAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRTk2M0E3NEFDMUQyNDFFOEUxRTk3NUI4QzlDMUNCRTNG
QkFCRkMxMTMzNjMyMTgxRUQ4NTRFOUVCREFBOTQwLzAvNEVEMjkyMUQxQjMwQTNF
MEY2OUFCMkUxQTBGOTdCMDJCQTU5MDcyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RUQyOTIxRDFCMzBBM0UwRjY5
QUIyRTFBMEY5N0IwMkJBNTkwNzIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0U5NjNBNzRBQzFEMjQxRThFMUU5NzVCOEM5QzFDQkUzRkJBQkZDMTEz
MzYzMjE4MUVEODU0RTlFQkRBQTk0MC8wLzRFRDI5MjFEMUIzMEEzRTBGNjlBQjJF
MUEwRjk3QjAyQkE1OTA3MjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGk/up3Xx2mDWri6JQSku39u3W
oLAVXtMH1rNTbJYIA2pEsjxH/v+CZPKfzyb0HGbamCwhjRXenP2zD/5yJDxLmQSA
t+LsLfOAvTlk0mna904Xj1B0zc12RyKQM13vjnQqKOA8nYC2PB5E6ecMQy18MfKP
7DgAebcbR+olJKflNNKqgKYRkfM7pHC7WiWSjpxbUKat9EXDHiJJD+YsZlwlM+QJ
NwljyVJiAI9iUPyCX/bHoScKl3L6PG2k1KyYy1+8UvSma3XEFUhPqRn/wzAqKEMV
Pg/pzHtQs5CQY5GHk3IX87IUpIRFkLUS1kS8x/+xYRbIvsW78ncTmymO9oxi
-----END CERTIFICATE-----
Generated at Mon Mar 16 07:08:47 2026 by rpki-client