
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
File: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft (raw, json)
Hash identifier: yppOgyYdDQ6E+pK+nSMd1xsA4yCQ7KyEZ8b0PS3/sQg=
Subject key identifier: E4:14:04:6A:D8:64:7B:F7:BF:93:66:BD:AC:A3:64:6E:85:FA:87:2E
Authority key identifier: AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B
Certificate issuer: /CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
Certificate serial: 5CC7A3F45D00BCEE6E1F73BD58220E134CB10ABF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
Manifest number: 0189
Signing time: Fri 17 Apr 2026 21:16:23 +0000
Manifest this update: Fri 17 Apr 2026 21:11:23 +0000
Manifest next update: Wed 22 Apr 2026 10:39:23 +0000
Files and hashes: 1: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl (hash: Kjt2mDkb0t42a0g2yyKr7I6NPEHtx9VVkMi/JCPZOKs=)
2: 3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa (hash: xOt5MgbMcs/Gu2Sz180hCjy9JznRqG+a2o1Y8PTCEjI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl
rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 22 Apr 2026 04:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c7:a3:f4:5d:00:bc:ee:6e:1f:73:bd:58:22:0e:13:4c:b1:0a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
Validity
Not Before: Apr 17 21:11:23 2026 GMT
Not After : Apr 22 10:39:23 2026 GMT
Subject: CN=E414046AD8647BF7BF9366BDACA3646E85FA872E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:b7:33:f4:06:81:63:a9:8b:ac:bf:cd:83:
61:a4:57:51:61:ef:c1:a6:cc:67:ee:17:5f:0b:eb:
1e:61:6e:41:5e:d5:50:0b:1f:62:3c:39:b4:f7:03:
eb:ad:75:e6:fe:20:fd:63:a6:a6:f2:e3:7e:fb:96:
6d:e9:5e:67:30:76:70:25:2f:e7:f5:1d:15:b3:66:
69:a9:e4:3f:1d:cb:1b:af:3a:b5:88:89:d0:a3:c5:
fc:7f:7a:8b:52:6d:e3:cf:08:50:cb:09:93:df:01:
0d:88:0c:40:26:ee:91:c6:9b:6d:f0:b0:41:37:d6:
f4:c8:c8:94:c9:9f:f6:da:d3:1a:b9:3d:42:a8:70:
25:7a:0b:b0:7e:7d:c8:8c:ee:26:f4:f0:3b:08:97:
e2:a5:b5:dd:a9:15:6c:e4:93:6b:2f:68:c1:12:e9:
19:b4:db:ca:d1:03:d7:fc:ca:2b:8a:3d:c3:7d:7a:
c1:ac:fb:87:f9:51:be:76:ea:0f:a3:5e:f9:eb:17:
e9:21:32:10:f6:00:0b:5c:81:da:8a:b0:8f:ce:19:
26:34:ea:8c:8f:ba:fc:ab:ec:5e:dd:49:2b:89:3a:
fa:9c:4d:ae:c7:63:22:27:99:45:29:cb:37:c5:9c:
33:46:01:76:b2:9d:e3:8f:5e:c5:40:aa:33:32:0d:
68:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:14:04:6A:D8:64:7B:F7:BF:93:66:BD:AC:A3:64:6E:85:FA:87:2E
X509v3 Authority Key Identifier:
keyid:AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d6:9d:41:d4:a9:fc:3c:1b:9d:90:2c:a9:1f:8d:18:aa:d2:
fa:76:9d:4a:41:8a:5f:81:3f:ee:a7:c9:ff:7b:3e:35:b5:a6:
0f:99:3b:cf:3f:5a:f5:80:41:63:29:4d:b5:e0:56:d2:06:76:
bc:c9:f4:4e:c3:e9:07:f5:25:d0:fc:a1:b3:b3:10:d4:71:da:
d2:46:60:4a:b6:d3:24:bc:5d:e8:f1:14:3b:f1:04:6f:73:88:
60:c1:28:df:94:91:b2:be:63:fa:5e:41:f1:84:24:b5:c7:41:
f0:4c:e7:a6:b5:b0:69:dd:c8:eb:9e:e6:f9:c7:6a:77:67:87:
25:73:5f:7c:fb:f6:45:e5:61:3a:22:d2:f0:c4:c2:00:64:c8:
c7:de:87:2a:17:1f:8a:dd:5d:e7:29:81:3e:20:a6:4d:14:73:
88:2f:e2:e5:63:af:72:b0:ee:76:aa:8f:66:e3:37:83:51:05:
22:7e:2a:83:bc:3b:05:a4:c2:39:8a:27:b6:e2:bc:b1:1b:a4:
e2:85:5e:04:13:00:4d:f2:ed:61:77:39:f6:a8:9e:0d:44:0a:
bc:07:e3:dd:71:fd:5c:38:76:14:fd:cf:4a:83:69:4e:9a:2b:
ce:4f:02:18:2e:cb:f9:88:eb:d6:e2:6e:12:ae:51:0e:c2:e4:
87:4e:12:49
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUXMej9F0AvO5uH3O9WCIOE0yxCr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE0NTk4RDgzREJDMTQyQTE2NEFENzJGNUREOTAzNkFB
RURCMEExQjAeFw0yNjA0MTcyMTExMjNaFw0yNjA0MjIxMDM5MjNaMDMxMTAvBgNV
BAMTKEU0MTQwNDZBRDg2NDdCRjdCRjkzNjZCREFDQTM2NDZFODVGQTg3MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHLcz9AaBY6mLrL/Ng2GkV1Fh
78GmzGfuF18L6x5hbkFe1VALH2I8ObT3A+utdeb+IP1jpqby4377lm3pXmcwdnAl
L+f1HRWzZmmp5D8dyxuvOrWIidCjxfx/eotSbePPCFDLCZPfAQ2IDEAm7pHGm23w
sEE31vTIyJTJn/ba0xq5PUKocCV6C7B+fciM7ib08DsIl+Kltd2pFWzkk2svaMES
6Rm028rRA9f8yiuKPcN9esGs+4f5Ub526g+jXvnrF+khMhD2AAtcgdqKsI/OGSY0
6oyPuvyr7F7dSSuJOvqcTa7HYyInmUUpyzfFnDNGAXayneOPXsVAqjMyDWirAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU5BQEathke/e/k2a9rKNkboX6hy4wHwYDVR0j
BBgwFoAUqkWY2D28FCoWStcvXdkDaq7bChswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTM3MjExN0I2MUYzMTcxRTM3OTdBOUY2ODQwREZCNDE1
NTREMTM0NUNDQTgyN0MxNEZFODhCQkY0MkZGNjZDLzAvQUE0NTk4RDgzREJDMTQy
QTE2NEFENzJGNUREOTAzNkFBRURCMEExQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTQ1OThEODNEQkMxNDJBMTY0
QUQ3MkY1REQ5MDM2QUFFREIwQTFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkUzNzIxMTdCNjFGMzE3MUUzNzk3QTlGNjg0MERGQjQxNTU0RDEzNDVD
Q0E4MjdDMTRGRTg4QkJGNDJGRjY2Qy8wL0FBNDU5OEQ4M0RCQzE0MkExNjRBRDcy
RjVERDkwMzZBQUVEQjBBMUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBG1p1B1Kn8PBudkCypH40YqtL6
dp1KQYpfgT/up8n/ez41taYPmTvPP1r1gEFjKU214FbSBna8yfROw+kH9SXQ/KGz
sxDUcdrSRmBKttMkvF3o8RQ78QRvc4hgwSjflJGyvmP6XkHxhCS1x0HwTOemtbBp
3cjrnub5x2p3Z4clc198+/ZF5WE6ItLwxMIAZMjH3ocqFx+K3V3nKYE+IKZNFHOI
L+LlY69ysO52qo9m4zeDUQUifiqDvDsFpMI5iie24ryxG6TihV4EEwBN8u1hdzn2
qJ4NRAq8B+Pdcf1cOHYU/c9Kg2lOmivOTwIYLsv5iOvW4m4SrlEOwuSHThJJ
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:48:49 2026 by rpki-client