
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft
File: 42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft (raw, json)
Hash identifier: 23k3TQiYxmLng5gSd/8aCWiYJtq7JMMPdDYd/QNKD34=
Subject key identifier: 21:F0:F6:6D:3B:D3:9E:5D:0F:E1:D6:41:24:A2:B7:DD:59:4A:FF:20
Authority key identifier: 42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1
Certificate issuer: /CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1
Certificate serial: 70D138DB6CC5908ADE8761B8B19FCEB220473186
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft
Manifest number: 01A7
Signing time: Sun 14 Jun 2026 09:44:55 +0000
Manifest this update: Sun 14 Jun 2026 09:39:55 +0000
Manifest next update: Fri 19 Jun 2026 08:51:55 +0000
Files and hashes: 1: 323830333a333465303a3a2f33322d3438203d3e20323639383938.roa (hash: WAzAnbr9S14GzNl3GgXUDVDlduF3NPAShgF8DUA5MjA=)
2: 42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl (hash: gcJE+LIumyseSRwSSiAriuOyMTaj97AYhHOKt6WdF2o=)
3: 34352e3139312e3139362e302f32322d3235203d3e20323639383938.roa (hash: h9VkJVKOwxnHxywfjNhgKEUtChy/BBwPh376Aogkyrc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl
rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Jun 2026 08:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d1:38:db:6c:c5:90:8a:de:87:61:b8:b1:9f:ce:b2:20:47:31:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1
Validity
Not Before: Jun 14 09:39:55 2026 GMT
Not After : Jun 19 08:51:55 2026 GMT
Subject: CN=21F0F66D3BD39E5D0FE1D64124A2B7DD594AFF20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:c7:0d:a3:a4:5e:bb:18:2c:a6:ac:f3:1d:
f1:b2:c0:d0:5e:ac:53:35:16:9d:e9:b8:aa:7c:62:
7c:04:d0:5f:ee:11:b9:bc:ac:ed:02:ac:48:79:8a:
65:35:f7:de:fa:e4:f6:09:11:72:82:98:25:69:94:
98:d3:4a:b0:89:bf:4f:ae:1e:9f:fb:e7:bd:5f:ad:
21:2b:16:dd:f9:2b:4f:d9:82:3a:ad:e0:14:83:74:
0d:4a:9f:6c:21:01:61:91:28:a8:f1:ec:87:48:51:
f1:38:91:fb:8c:a9:2d:9b:72:ac:8c:be:f9:3f:3f:
ed:7a:cb:62:20:cb:ae:14:f4:8c:e6:bd:00:03:7e:
0e:1b:b2:47:3f:70:6d:e3:c2:c0:d6:c0:b2:07:f4:
f2:f7:18:99:48:03:58:41:5e:df:13:e1:66:2e:ee:
95:1a:08:9e:84:1c:b3:67:aa:8c:15:06:ea:11:e5:
f9:16:cc:75:76:12:ae:48:c9:c1:2d:84:2f:4c:44:
8e:22:e1:b3:e3:c8:56:3f:94:67:fd:e3:f2:87:69:
05:01:51:d0:42:91:01:48:27:12:bd:86:50:0a:49:
24:3d:cc:26:a0:36:83:cf:fe:18:bb:5a:7b:35:9f:
9d:c2:95:b4:15:7c:51:d9:31:01:e6:b7:a3:70:b3:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:F6:6D:3B:D3:9E:5D:0F:E1:D6:41:24:A2:B7:DD:59:4A:FF:20
X509v3 Authority Key Identifier:
keyid:42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5f:0d:cb:c7:aa:6e:5f:cf:1c:dc:4f:37:9b:f6:af:85:db:
53:8a:c0:86:74:50:62:99:e0:84:07:9d:1c:66:af:f7:d8:f2:
b5:18:bc:94:ad:6e:2e:a4:89:7f:ad:dd:ae:9e:4b:04:20:9f:
4a:0f:e7:4e:65:7c:04:2d:1e:af:ae:d3:47:57:6f:e9:51:82:
c0:06:ee:fe:20:a7:27:05:c9:b9:68:b2:05:1e:de:5f:8f:50:
ec:8f:0f:6f:42:b1:8c:38:9d:ee:c9:45:65:4e:bf:67:06:4f:
b9:0c:e4:cb:71:4b:53:4e:8d:eb:2a:3b:42:6f:ff:af:99:de:
e3:aa:f0:6e:c6:0d:f0:10:cd:e9:0e:01:81:59:a1:45:77:6d:
b9:cd:36:58:60:34:66:9b:89:4f:34:e0:67:17:da:2f:27:ef:
08:d5:bf:d7:7c:fb:02:89:ef:21:ca:53:75:5d:70:6e:59:91:
42:40:28:26:c1:3b:93:87:49:7b:d6:79:94:60:92:de:27:bf:
4e:65:30:22:a1:e1:37:16:f9:56:fd:03:b6:cd:b9:ac:51:ca:
98:cc:7d:af:77:af:89:81:21:de:1e:76:35:6c:ea:ad:e3:36:
fa:c1:4c:4a:9a:85:a1:2a:2b:f1:31:e3:77:12:5b:f3:f3:a1:
cd:5d:a5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 08:06:00 2026 by rpki-client