
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft
File: 4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft (raw, json)
Hash identifier: ESNm2pt/t/BDm6Uco1fElrYtQ3KUN+X9S2vRW9YSqFw=
Subject key identifier: 30:C6:A7:5E:50:32:69:3D:57:EB:54:21:94:41:7B:47:F2:C8:91:12
Authority key identifier: 4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE
Certificate issuer: /CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE
Certificate serial: 25A8124311164D986229B6806C13E9566697F1A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft
Manifest number: 017F
Signing time: Thu 16 Apr 2026 09:39:47 +0000
Manifest this update: Thu 16 Apr 2026 09:34:47 +0000
Manifest next update: Tue 21 Apr 2026 01:44:47 +0000
Files and hashes: 1: 34352e3137392e39322e302f32322d3234203d3e20323637393133.roa (hash: Zhx4w7q3b76P43TUty03e9cZBQ52Og/4LKtdyYtiVRk=)
2: 323830333a6536303a3a2f33322d3334203d3e20323637393133.roa (hash: 4a5y+5cIu8HpyNfMmPy+zVDjFR0VRxV3BHVaP8ZMP/E=)
3: 4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl (hash: YxnB1N3IDQfyfMgM17AHkzdD8OnTBQEdZ5Tn0dQvUmU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl
rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 01:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a8:12:43:11:16:4d:98:62:29:b6:80:6c:13:e9:56:66:97:f1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE
Validity
Not Before: Apr 16 09:34:47 2026 GMT
Not After : Apr 21 01:44:47 2026 GMT
Subject: CN=30C6A75E5032693D57EB542194417B47F2C89112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:96:b3:3d:51:a3:68:76:71:a9:23:d1:cb:
d9:0b:3b:9b:0f:ad:be:8c:18:68:47:cf:08:a0:cb:
1f:3f:2b:19:37:41:41:31:c7:08:50:4c:82:30:fe:
20:07:60:88:a8:f7:a6:ef:cc:04:c9:65:c6:4f:d2:
ad:b7:3c:cf:c1:5e:93:6c:e7:b0:f4:97:a9:87:6e:
aa:2a:43:2a:ca:cb:c0:82:eb:aa:11:9c:50:aa:4a:
8b:cd:1a:b9:44:96:67:36:23:9f:a2:c8:44:bc:d2:
3f:e3:a5:56:c1:99:23:4f:e1:d8:01:52:ab:0b:e1:
f7:d1:0c:98:59:c4:de:55:5d:27:e0:71:56:34:c1:
46:2e:b5:7f:7a:90:93:6d:df:63:eb:09:d0:8c:fc:
eb:45:45:14:e6:2a:29:20:22:ed:75:9a:f5:4a:d1:
9a:47:aa:ab:06:a8:2d:77:4d:4c:0e:46:84:21:cb:
e7:71:b0:74:6c:90:3a:7b:73:ee:bf:65:5b:d1:c8:
a8:37:94:dc:21:2c:7d:88:b6:3d:2f:e5:75:aa:c4:
cb:f4:d7:09:96:e9:59:11:c6:87:75:40:fa:10:f4:
fe:18:a8:14:28:09:46:55:2f:79:b8:dd:86:ea:bd:
72:65:54:10:5e:28:43:48:a9:62:34:00:50:7e:d5:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C6:A7:5E:50:32:69:3D:57:EB:54:21:94:41:7B:47:F2:C8:91:12
X509v3 Authority Key Identifier:
keyid:4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:32:5c:fa:b1:db:08:52:be:96:58:fe:1e:43:b3:0b:56:20:
c6:c5:a7:b8:a2:7b:9b:d8:bf:27:d7:48:5a:b3:29:5c:88:0d:
2c:ee:7e:2f:dc:a9:10:e8:94:fe:a6:e1:40:0e:e4:45:54:28:
f3:d6:fc:de:be:18:4e:14:03:c2:3b:a5:d1:a5:87:c4:fd:e5:
f5:d4:8f:ef:a8:e3:f3:9b:2a:dd:d9:48:4d:ed:f6:53:75:2f:
c3:c3:96:3a:35:2c:3c:06:d8:76:9d:43:73:9a:00:8e:55:95:
30:a8:b8:72:2b:ec:fb:9b:73:de:10:02:e0:d7:4a:88:42:3d:
bc:f5:61:5f:a6:b0:e8:30:ab:ab:b6:9b:6e:46:14:4f:40:fa:
4b:b6:f5:e3:06:3b:28:be:95:94:99:0e:b4:b7:87:5a:4f:6e:
57:b2:32:34:70:65:b6:ce:80:56:2b:df:0e:2a:ea:47:dd:df:
c8:16:71:d5:4a:1f:c6:d8:36:4d:69:56:63:34:89:e2:0b:ff:
6d:9b:24:d5:5e:0c:20:ea:59:98:36:5f:ed:c3:83:48:61:42:
9b:40:e0:8a:44:6f:99:68:58:93:3d:17:d0:ba:86:15:ef:05:
cc:ad:2b:ac:83:b4:ed:3b:96:26:08:a6:bd:08:dc:87:cc:36:
98:3b:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:45:35 2026 by rpki-client