
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft
File: BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft (raw, json)
Hash identifier: sFCjP7JbmU4rODjI++uvaXCxdqCN9az5+qhn8ikbvHI=
Subject key identifier: 42:F5:2E:CD:0E:9D:B5:D0:70:D3:42:7B:E6:83:69:64:8A:11:93:C6
Authority key identifier: BA:FB:10:BE:93:E0:3D:E3:AD:70:11:08:0A:4B:6D:0B:EC:28:18:F2
Certificate issuer: /CN=BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2
Certificate serial: 4A4895E38A0906FFD03BA63CD3FA9FB12EB39BE6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft
Manifest number: 4C
Signing time: Sat 10 Oct 2026 04:53:50 +0000
Manifest this update: Sat 10 Oct 2026 04:48:50 +0000
Manifest next update: Thu 15 Oct 2026 15:57:50 +0000
Files and hashes: 1: BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.crl (hash: KvKEwa22PFSvhE62lpU10aLpj977SL42ho7wttFer58=)
2: 323830333a6235303a3a2f33322d3438203d3e20323733393033.roa (hash: cLm/sOtijv9tUxv0gNYeq+uzl28t20gf139GQKEZj0g=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.crl
rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 06:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:48:95:e3:8a:09:06:ff:d0:3b:a6:3c:d3:fa:9f:b1:2e:b3:9b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2
Validity
Not Before: Oct 10 04:48:50 2026 GMT
Not After : Oct 15 15:57:50 2026 GMT
Subject: CN=42F52ECD0E9DB5D070D3427BE68369648A1193C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:30:7c:da:47:a8:3d:5b:89:bb:f1:29:8b:
bc:1d:f0:14:06:59:9a:81:6b:6e:6c:69:d6:5b:de:
4a:47:47:9f:82:e9:bf:8a:c6:6c:00:19:75:a6:b1:
05:67:68:7e:f5:1f:22:77:b3:28:75:d4:90:67:dd:
09:2f:39:f2:f9:6b:c5:3a:9a:6e:0b:2a:58:08:8a:
58:0d:90:60:0b:b1:3d:36:47:6d:76:70:63:34:2a:
15:e5:61:f0:49:50:e3:60:a0:f8:40:9a:30:d2:5c:
e5:42:be:42:b3:5d:49:8f:23:9b:10:4a:ad:d8:36:
07:d9:e6:ed:54:a7:a8:84:5e:38:ba:cf:8d:25:d9:
8e:cf:3f:3e:d6:3f:53:6b:ec:22:1b:93:74:c0:cd:
f1:34:15:aa:99:27:30:37:66:bf:49:2d:a7:14:98:
26:e4:44:b3:97:af:c4:ba:3e:f6:7f:a9:88:f5:05:
47:c7:ba:e4:90:1d:45:19:c1:cf:01:18:2c:df:91:
5a:63:11:ec:2d:bd:43:96:27:49:75:3c:eb:bd:6e:
76:54:a6:f0:4e:0a:44:d1:c0:2f:88:b7:0d:6d:9b:
2f:fd:86:20:8b:34:d7:d7:b5:c0:a9:5a:d2:3a:22:
bc:e5:16:21:63:5d:c3:cf:f7:85:77:cf:35:c7:9d:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F5:2E:CD:0E:9D:B5:D0:70:D3:42:7B:E6:83:69:64:8A:11:93:C6
X509v3 Authority Key Identifier:
keyid:BA:FB:10:BE:93:E0:3D:E3:AD:70:11:08:0A:4B:6D:0B:EC:28:18:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:79:a2:79:79:f3:ec:01:45:50:8b:3b:f8:56:7e:69:97:02:
71:02:9d:8e:1e:b3:9b:1d:c1:d7:61:a8:3e:3c:b5:9f:16:d1:
e8:73:95:aa:f6:7b:af:5f:f4:fc:0d:b9:f8:ce:78:f4:dc:d7:
66:7b:b0:3f:18:d7:dd:7b:f1:d6:9e:0b:fe:7c:55:63:b1:b2:
97:ae:00:7b:62:75:58:d1:d5:4f:1d:a2:2e:2a:85:65:62:e6:
be:1a:9f:7a:19:42:52:d8:d8:27:73:bd:39:c7:46:5a:11:89:
14:aa:ff:75:f3:48:e7:0c:54:f3:1d:fe:10:fe:73:3a:c3:a9:
5c:3e:fd:bd:96:80:fd:0f:88:e0:cc:40:2e:b5:05:e1:f2:a5:
36:5c:3c:b9:9d:67:f7:29:51:72:3a:95:34:0c:d7:38:43:65:
33:a4:10:40:61:7c:df:c9:b1:4a:a1:78:61:fa:82:e1:c3:4a:
27:36:6f:63:64:71:bc:ad:22:98:7d:97:f4:9e:cf:da:97:59:
97:cc:b2:3e:7f:47:f8:47:cc:38:8c:cf:66:98:50:f1:20:b1:
ae:26:6a:42:cd:cd:84:ae:b4:fe:75:61:02:64:1e:ed:df:06:
25:8a:e7:6d:68:67:7b:db:09:c9:b3:cf:26:26:71:37:e7:d0:
30:26:b6:92
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUSkiV44oJBv/QO6Y80/qfsS6zm+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFGQjEwQkU5M0UwM0RFM0FENzAxMTA4MEE0QjZEMEJF
QzI4MThGMjAeFw0yNjEwMTAwNDQ4NTBaFw0yNjEwMTUxNTU3NTBaMDMxMTAvBgNV
BAMTKDQyRjUyRUNEMEU5REI1RDA3MEQzNDI3QkU2ODM2OTY0OEExMTkzQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AjB82keoPVuJu/Epi7wd8BQG
WZqBa25sadZb3kpHR5+C6b+KxmwAGXWmsQVnaH71HyJ3syh11JBn3QkvOfL5a8U6
mm4LKlgIilgNkGALsT02R212cGM0KhXlYfBJUONgoPhAmjDSXOVCvkKzXUmPI5sQ
Sq3YNgfZ5u1Up6iEXji6z40l2Y7PPz7WP1Nr7CIbk3TAzfE0FaqZJzA3Zr9JLacU
mCbkRLOXr8S6PvZ/qYj1BUfHuuSQHUUZwc8BGCzfkVpjEewtvUOWJ0l1POu9bnZU
pvBOCkTRwC+Itw1tmy/9hiCLNNfXtcCpWtI6IrzlFiFjXcPP94V3zzXHnZ27AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUQvUuzQ6dtdBw00J75oNpZIoRk8YwHwYDVR0j
BBgwFoAUuvsQvpPgPeOtcBEICkttC+woGPIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNjI0QTk5RkI5M0FDRUNDNzg4NUQ0REQ0REI2MURCNzM0
RDUyM0QzQURCNzY2RDM5NUQyNjAyODlCRUQ1RjZGLzAvQkFGQjEwQkU5M0UwM0RF
M0FENzAxMTA4MEE0QjZEMEJFQzI4MThGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQUZCMTBCRTkzRTAzREUzQUQ3
MDExMDgwQTRCNkQwQkVDMjgxOEYyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzYyNEE5OUZCOTNBQ0VDQzc4ODVENERENERCNjFEQjczNEQ1MjNEM0FE
Qjc2NkQzOTVEMjYwMjg5QkVENUY2Ri8wL0JBRkIxMEJFOTNFMDNERTNBRDcwMTEw
ODBBNEI2RDBCRUMyODE4RjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNeaJ5efPsAUVQizv4Vn5plwJx
Ap2OHrObHcHXYag+PLWfFtHoc5Wq9nuvX/T8Dbn4znj03Ndme7A/GNfde/HWngv+
fFVjsbKXrgB7YnVY0dVPHaIuKoVlYua+Gp96GUJS2Ngnc705x0ZaEYkUqv9180jn
DFTzHf4Q/nM6w6lcPv29loD9D4jgzEAutQXh8qU2XDy5nWf3KVFyOpU0DNc4Q2Uz
pBBAYXzfybFKoXhh+oLhw0onNm9jZHG8rSKYfZf0ns/al1mXzLI+f0f4R8w4jM9m
mFDxILGuJmpCzc2ErrT+dWECZB7t3wYliudtaGd72wnJs88mJnE359AwJraS
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:53:26 2026 by rpki-client