
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft
File: 4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft (raw, json)
Hash identifier: OIMKqQFE4BwnTqwF/j/ruGgIIaW6Ic2NBfq9Z93CURY=
Subject key identifier: 2A:F3:61:B9:D8:1F:54:68:06:45:91:61:16:F5:E3:41:77:44:C9:DD
Authority key identifier: 4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE
Certificate issuer: /CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE
Certificate serial: 3A2A594D4849465EFCAA03423378D542BE9829BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft
Manifest number: 01DB
Signing time: Sun 01 Nov 2026 10:39:26 +0000
Manifest this update: Sun 01 Nov 2026 10:34:26 +0000
Manifest next update: Sat 07 Nov 2026 02:43:26 +0000
Files and hashes: 1: 323830333a6536303a3a2f33322d3334203d3e20323637393133.roa (hash: 4a5y+5cIu8HpyNfMmPy+zVDjFR0VRxV3BHVaP8ZMP/E=)
2: 34352e3137392e39322e302f32322d3234203d3e20323637393133.roa (hash: Zhx4w7q3b76P43TUty03e9cZBQ52Og/4LKtdyYtiVRk=)
3: 4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl (hash: 0Ha0oKl/XdgjO35ArbPYNUFVLNqMkNfxHgNR8x9/aeg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl
rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Nov 2026 18:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:2a:59:4d:48:49:46:5e:fc:aa:03:42:33:78:d5:42:be:98:29:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE
Validity
Not Before: Nov 1 10:34:26 2026 GMT
Not After : Nov 7 02:43:26 2026 GMT
Subject: CN=2AF361B9D81F54680645916116F5E3417744C9DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:f4:84:c1:f7:2c:e4:f3:05:84:e5:66:a3:
0a:fa:11:b4:e5:9b:71:b3:34:e5:67:44:ca:99:1b:
2a:fa:2c:a6:f5:87:5d:da:59:31:85:48:0b:fa:68:
0e:24:21:3c:de:21:12:33:d3:15:7b:02:98:4b:aa:
2b:ba:6d:88:ff:21:7f:09:3a:ab:52:0c:15:88:8f:
4b:3d:a6:96:52:ce:82:9a:2a:68:1d:ee:6c:c1:97:
b0:0b:d4:de:90:e6:80:ee:40:cd:bf:c2:b5:63:37:
ae:fa:35:c3:e5:3e:0b:a0:db:59:b2:fa:cf:a3:e3:
18:24:68:98:08:ff:e8:6d:5e:a4:70:97:49:b8:05:
7c:6a:79:01:4a:6d:b5:52:16:9a:42:95:af:52:0d:
57:08:8e:70:34:f6:45:bb:e6:9b:85:f0:8d:09:00:
8d:81:bc:51:1f:ad:e2:8e:fc:e7:65:4f:50:be:82:
04:c2:e8:ce:e7:a0:72:fc:02:49:93:9d:a8:8f:a9:
ef:76:aa:2e:b7:ea:3e:3a:c9:d5:cf:7a:68:bb:14:
a0:2b:cc:b1:2b:f6:d0:7a:77:5c:81:19:44:75:5a:
ed:8e:62:8f:7b:4a:c7:e6:19:c2:84:80:ef:b5:43:
6b:62:bf:0d:d1:5b:40:c5:9e:bc:75:b6:e5:74:95:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F3:61:B9:D8:1F:54:68:06:45:91:61:16:F5:E3:41:77:44:C9:DD
X509v3 Authority Key Identifier:
keyid:4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9c:40:47:d8:1e:7d:1e:91:76:c1:e7:7b:29:0e:35:b2:86:
8f:37:92:79:2a:9e:e2:b5:20:13:b6:88:bb:88:24:ac:72:9c:
2c:20:ce:4a:d8:f2:c4:28:39:78:36:4c:72:37:92:94:11:88:
f5:24:28:97:7d:45:b0:1d:a9:d7:6e:c4:3e:0d:bd:7e:a6:c8:
a7:eb:51:6d:ed:59:49:11:8f:08:55:9a:0a:a4:02:60:87:87:
19:ec:5a:29:d7:37:b1:7c:e5:03:04:0c:61:28:b6:df:6b:00:
52:41:5a:10:0e:16:f9:68:8e:43:83:2f:64:3a:f9:6c:13:98:
cc:49:f2:ce:65:4f:26:1d:39:38:57:eb:4a:24:6a:16:3d:c7:
c7:be:b0:eb:c7:87:d7:d8:75:0a:26:c2:76:32:fe:9b:3f:a6:
d5:7c:0a:3d:28:fd:04:c7:b2:00:b9:04:3b:82:e9:23:05:b6:
fe:a6:d6:2b:a2:2d:d7:b0:22:d3:02:cc:2d:0e:fe:a4:f8:f5:
24:ea:b2:07:d5:6d:f2:92:52:56:7b:38:2c:20:27:7e:ea:9c:
28:ef:62:9f:ae:cc:a2:c5:db:21:d2:e3:49:21:6e:e6:3c:e7:
b4:9f:3d:20:db:76:cd:fc:3a:56:3f:8a:b2:65:e9:38:3a:57:
e5:47:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:52:38 2026 by rpki-client