
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft
File: 2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft (raw, json)
Hash identifier: hTlBSAvTFfzPbVKQ4A+bMUHbROpU6ZdIZ+1fiK6r4U8=
Subject key identifier: DA:A5:29:43:F9:DC:1D:E8:57:F0:27:D8:A7:87:1B:89:62:83:13:C7
Authority key identifier: 2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78
Certificate issuer: /CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078
Certificate serial: 4BD0768D6B09DB5F05C6A5134E650F5FA7330FE6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft
Manifest number: 0189
Signing time: Sat 18 Apr 2026 01:38:45 +0000
Manifest this update: Sat 18 Apr 2026 01:33:45 +0000
Manifest next update: Wed 22 Apr 2026 01:42:45 +0000
Files and hashes: 1: 2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl (hash: iy6zaQjpNf3Cf/bG9StRd/kOjO96gI1JUDO1ZdXe35M=)
2: 323830333a393439303a3a2f33322d3438203d3e20323732383233.roa (hash: xr7qdp5RlAAtSHMfn+keb0e1GcHY4lZiz2YQT2CjRdQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl
rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 22 Apr 2026 01:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:d0:76:8d:6b:09:db:5f:05:c6:a5:13:4e:65:0f:5f:a7:33:0f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078
Validity
Not Before: Apr 18 01:33:45 2026 GMT
Not After : Apr 22 01:42:45 2026 GMT
Subject: CN=DAA52943F9DC1DE857F027D8A7871B89628313C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:c6:d7:d5:20:f0:0b:5b:33:88:ef:c4:98:
69:0b:7f:a3:11:4b:62:35:e5:8e:9e:8d:14:c8:3d:
97:41:70:97:42:78:02:14:25:8c:55:bc:29:31:ce:
8c:c8:82:88:80:d6:62:da:11:f1:e8:f2:73:91:99:
b9:c4:85:fb:d9:af:83:04:e8:f2:21:6f:25:91:a4:
ae:7e:31:93:5f:ed:7e:23:6a:6f:e3:b6:af:76:1f:
8c:d3:5a:33:c2:bc:88:55:a8:a4:48:3f:1b:17:52:
cd:08:83:3d:48:0e:c2:a5:54:7e:30:60:81:a0:78:
5b:25:08:30:36:de:b9:d5:23:af:5c:25:20:95:b4:
f4:d5:ff:cd:53:5a:69:cf:38:33:70:0f:dd:c9:45:
d1:5e:38:3e:fa:95:d0:26:7a:a8:96:48:df:94:6f:
be:6e:95:21:0e:3a:5b:bc:e9:7e:48:8f:f5:61:67:
e1:a9:13:da:1e:52:35:e7:b6:0a:c3:a6:e5:07:c2:
29:2b:0f:6c:94:c0:09:ec:39:c6:92:31:b0:c2:1a:
41:0f:30:f6:82:e4:ce:e9:49:1d:00:8c:8d:71:d9:
40:fe:25:75:d5:34:e3:fd:3c:be:74:f6:02:7a:82:
5b:af:ee:00:09:6c:d1:44:58:db:7f:cd:dd:d5:f5:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A5:29:43:F9:DC:1D:E8:57:F0:27:D8:A7:87:1B:89:62:83:13:C7
X509v3 Authority Key Identifier:
keyid:2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:01:83:a9:48:45:08:c5:6b:02:70:94:c9:aa:3e:8a:f2:b4:
cc:b7:24:7f:a6:22:33:6f:88:dc:62:7d:40:97:ab:c5:44:82:
12:1f:b5:9b:c0:15:2a:a0:12:82:00:b8:02:98:f7:89:30:7e:
25:e3:bf:ca:74:a6:0d:62:15:3a:8f:64:58:2d:ac:ea:75:4e:
8b:df:27:38:91:16:82:fa:6f:f6:ea:0e:f0:33:59:22:75:d5:
ef:ab:c3:4e:15:5f:71:e5:75:78:d2:2e:27:64:d7:79:ee:00:
33:d9:35:34:4b:4b:e8:54:da:b8:59:93:0d:3e:1c:b0:a4:3f:
24:85:70:6b:b5:de:d8:7e:34:0a:cc:b0:4a:55:a7:e3:e5:0a:
08:8a:15:b4:0a:48:10:48:19:99:b6:b1:98:91:66:1b:8b:0a:
61:30:b8:63:d5:27:6c:7d:57:2a:b4:fb:0b:4c:17:55:9b:fc:
c6:cd:21:02:98:87:d5:00:4e:2f:8c:94:91:a1:f3:ff:3e:87:
ba:3b:46:d6:57:57:3a:70:e5:ab:29:d3:37:79:37:1f:90:30:
4d:78:e0:ca:d1:34:be:ab:b9:77:2b:4d:0d:c4:1d:b1:3d:a7:
0b:11:56:2a:4d:10:0b:70:a5:8b:8d:68:e4:c7:19:ca:22:2d:
c6:a8:cf:b9
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUS9B2jWsJ218FxqUTTmUPX6czD+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFGRjE0MkFFNzhBN0Q5NjVGOEUyMjdERkFBNjU5RTJG
RUJERTA3ODAeFw0yNjA0MTgwMTMzNDVaFw0yNjA0MjIwMTQyNDVaMDMxMTAvBgNV
BAMTKERBQTUyOTQzRjlEQzFERTg1N0YwMjdEOEE3ODcxQjg5NjI4MzEzQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXI8bX1SDwC1sziO/EmGkLf6MR
S2I15Y6ejRTIPZdBcJdCeAIUJYxVvCkxzozIgoiA1mLaEfHo8nORmbnEhfvZr4ME
6PIhbyWRpK5+MZNf7X4jam/jtq92H4zTWjPCvIhVqKRIPxsXUs0Igz1IDsKlVH4w
YIGgeFslCDA23rnVI69cJSCVtPTV/81TWmnPODNwD93JRdFeOD76ldAmeqiWSN+U
b75ulSEOOlu86X5Ij/VhZ+GpE9oeUjXntgrDpuUHwikrD2yUwAnsOcaSMbDCGkEP
MPaC5M7pSR0AjI1x2UD+JXXVNOP9PL509gJ6gluv7gAJbNFEWNt/zd3V9YmrAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU2qUpQ/ncHehX8CfYp4cbiWKDE8cwHwYDVR0j
BBgwFoAUKv8UKueKfZZfjiJ9+qZZ4v694HgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MjQ0RjY4MzVFMjJCQTI2OTk5MjgyMDNCRkI4M0FEQjVE
MjQ0QTA5OUY1MzUyOEI1Rjc4RDIyOEQ2OTU5MzczLzAvMkFGRjE0MkFFNzhBN0Q5
NjVGOEUyMjdERkFBNjU5RTJGRUJERTA3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUZGMTQyQUU3OEE3RDk2NUY4
RTIyN0RGQUE2NTlFMkZFQkRFMDc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDI0NEY2ODM1RTIyQkEyNjk5OTI4MjAzQkZCODNBREI1RDI0NEEwOTlG
NTM1MjhCNUY3OEQyMjhENjk1OTM3My8wLzJBRkYxNDJBRTc4QTdEOTY1RjhFMjI3
REZBQTY1OUUyRkVCREUwNzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2AYOpSEUIxWsCcJTJqj6K8rTM
tyR/piIzb4jcYn1Al6vFRIISH7WbwBUqoBKCALgCmPeJMH4l47/KdKYNYhU6j2RY
LazqdU6L3yc4kRaC+m/26g7wM1kiddXvq8NOFV9x5XV40i4nZNd57gAz2TU0S0vo
VNq4WZMNPhywpD8khXBrtd7YfjQKzLBKVafj5QoIihW0CkgQSBmZtrGYkWYbiwph
MLhj1SdsfVcqtPsLTBdVm/zGzSECmIfVAE4vjJSRofP/Poe6O0bWV1c6cOWrKdM3
eTcfkDBNeODK0TS+q7l3K00NxB2xPacLEVYqTRALcKWLjWjkxxnKIi3GqM+5
-----END CERTIFICATE-----
Generated at Sat Apr 18 08:58:10 2026 by rpki-client