
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
File: 4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft (raw, json)
Hash identifier: G1SNyPmdLlQM2fhiRwTBSg7xcfPVqFON9uX45E3QhyA=
Subject key identifier: D3:9A:1D:E2:DA:05:68:B0:94:E1:92:95:10:E7:B7:83:10:D7:00:A9
Authority key identifier: 4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2
Certificate issuer: /CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
Certificate serial: 71F67A670BADFFC379008427C6C97F627E5F4378
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
Manifest number: 0186
Signing time: Fri 17 Apr 2026 15:13:03 +0000
Manifest this update: Fri 17 Apr 2026 15:08:03 +0000
Manifest next update: Wed 22 Apr 2026 18:50:03 +0000
Files and hashes: 1: 3134332e3230382e36342e302f32322d3232203d3e203332303334.roa (hash: kfkQCaTxorNFWswaaTRSTf0wMkkIV57VsqLm35Sie2k=)
2: 4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl (hash: WWkQNQiWJbLqNCZNOLZ82oFRnzZJo1Jpfi6FNi1/1oU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl
rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 22 Apr 2026 04:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f6:7a:67:0b:ad:ff:c3:79:00:84:27:c6:c9:7f:62:7e:5f:43:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
Validity
Not Before: Apr 17 15:08:03 2026 GMT
Not After : Apr 22 18:50:03 2026 GMT
Subject: CN=D39A1DE2DA0568B094E1929510E7B78310D700A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:15:65:c4:12:35:06:11:9c:29:f2:0a:dd:
55:19:56:ac:36:88:1e:e7:04:70:cc:6a:d6:d6:e4:
87:b3:9b:90:22:8a:bc:2c:ae:b2:d0:47:9f:38:b0:
f6:24:40:c9:ba:5e:9a:c2:9e:15:56:70:22:d1:97:
91:2c:bd:53:eb:f6:67:d9:80:4c:24:5c:0c:b8:09:
be:77:0a:46:96:1c:0f:04:f4:33:9b:98:68:af:43:
db:2d:f5:57:9f:ce:8f:a4:74:2c:c2:36:60:37:ab:
30:ef:18:27:4a:8c:f6:a1:f9:11:46:8c:ac:48:e7:
66:32:d8:17:b4:cb:d8:5a:b7:57:06:e4:94:75:e6:
eb:3e:00:a9:31:8b:31:57:10:2b:27:37:3a:0e:b6:
bd:5b:af:2a:62:14:d0:a6:47:e2:ff:96:af:5a:79:
22:02:73:5f:3b:05:39:37:45:d3:05:2f:1e:4b:d3:
29:bc:7e:14:1e:bd:1d:10:a4:ab:bd:a5:25:ea:0d:
78:40:cd:33:a8:3a:8a:40:7a:bf:28:35:f5:18:43:
7d:0c:cb:bd:ea:8a:bf:ba:e8:66:d6:be:b4:41:a8:
ef:c3:ce:90:14:46:01:48:93:c1:1d:a2:a2:94:50:
78:ec:28:21:b9:ee:5a:d9:08:e1:4a:28:95:59:0e:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9A:1D:E2:DA:05:68:B0:94:E1:92:95:10:E7:B7:83:10:D7:00:A9
X509v3 Authority Key Identifier:
keyid:4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a0:a2:ca:f8:0c:73:4c:91:98:33:25:42:60:23:b0:69:39:
9d:06:9a:7e:9a:cf:a3:25:9f:e4:30:80:06:2d:26:25:1e:51:
4e:7e:6a:53:15:3c:d1:04:ef:9b:bf:20:ee:09:fc:49:21:60:
fc:e9:89:f2:87:05:2a:cf:e4:08:89:35:79:a7:fe:42:5f:e1:
94:45:8b:7b:7d:c8:64:77:2b:71:e3:52:85:f0:ee:4f:d4:5c:
39:b1:44:7e:6d:e0:df:8b:2b:b1:33:c1:36:d1:ad:54:82:68:
76:50:66:43:c7:bf:9c:bf:08:5a:c3:7b:d9:21:10:e5:77:c0:
3d:ed:9d:91:18:6b:42:8a:70:a0:74:6e:32:ba:d7:9d:08:3d:
61:b7:c8:e2:ff:5e:f4:0c:01:9b:71:f4:43:57:fc:8b:a8:61:
61:2c:7b:98:3a:f7:3b:53:e4:da:48:81:f0:c8:42:02:59:d3:
47:0e:9d:04:ff:a2:47:ed:ad:8b:27:01:f2:18:46:ae:3f:68:
d2:b9:43:7e:f6:03:4d:52:4f:73:96:e7:78:9d:17:f1:ea:73:
95:61:ce:f0:cc:38:86:88:18:46:e5:f3:2d:87:7d:40:1e:ab:
da:f1:1e:84:4a:23:2c:df:df:d6:2e:ef:92:68:0c:96:28:5b:
de:f9:75:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:08:31 2026 by rpki-client