
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json)
Hash identifier: 7eVIv0ghaB/WosGv1p+hDn7bxyBqu4hDC9p8v5PSENo=
Subject key identifier: 4F:E6:07:E0:C9:37:43:C7:1B:EF:50:AE:CC:14:54:B7:D4:7E:22:1C
Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Certificate serial: 07308C36990D7690DE0187B06D9DB2935DE903A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
Manifest number: 019E
Signing time: Sat 13 Jun 2026 11:10:05 +0000
Manifest this update: Sat 13 Jun 2026 11:05:05 +0000
Manifest next update: Wed 17 Jun 2026 14:55:05 +0000
Files and hashes: 1: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: 4YT76mg5dITWNiH2hE5kgjyBgua4a3LhZgbWUTw9x8I=)
2: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: DB89buB4LZS1r6/pjfSRKuMRcgfGBOm6UWdDoiA2B8o=)
3: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl
rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 17 Jun 2026 14:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:30:8c:36:99:0d:76:90:de:01:87:b0:6d:9d:b2:93:5d:e9:03:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Validity
Not Before: Jun 13 11:05:05 2026 GMT
Not After : Jun 17 14:55:05 2026 GMT
Subject: CN=4FE607E0C93743C71BEF50AECC1454B7D47E221C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:e2:d6:52:c9:8f:00:81:60:f8:3c:a1:d5:
0e:67:29:4e:2d:df:78:2d:77:38:f7:e7:e4:8a:ca:
91:df:e8:9d:d2:26:31:0f:94:b2:86:6d:88:06:9d:
76:6e:0d:8e:c9:d8:5b:a9:06:ee:ea:d7:35:b8:60:
b8:60:2b:59:ac:93:87:a6:a0:02:28:69:b2:c7:02:
de:fe:54:2a:1c:6c:89:21:7c:38:84:0d:4a:2f:e4:
20:13:bf:3f:2b:83:11:ea:01:b1:bb:cf:31:1a:d9:
dc:eb:4a:a5:3d:c5:49:1e:7b:a8:c5:34:11:1c:a7:
2e:15:29:c3:2f:58:ef:d0:64:be:d1:29:a7:2e:23:
57:07:f9:b1:cb:53:d6:fb:2e:84:20:59:f1:75:8d:
c0:39:5e:94:e2:cf:01:38:47:f3:1f:e4:00:48:c4:
e2:cb:2b:78:c6:28:44:6f:e8:fd:b4:a0:c8:d1:ec:
57:ab:aa:32:55:cc:17:9f:42:82:bc:36:5e:58:80:
c5:12:dd:06:e2:9f:ec:eb:55:49:56:ab:60:56:4b:
3d:1d:f0:aa:73:ee:fa:0a:6a:85:4d:89:07:54:75:
31:10:ac:14:9c:7c:d7:6d:a2:03:3d:9f:03:2a:ed:
70:07:22:ea:49:ed:2f:89:dc:53:23:c1:0c:6f:fa:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E6:07:E0:C9:37:43:C7:1B:EF:50:AE:CC:14:54:B7:D4:7E:22:1C
X509v3 Authority Key Identifier:
keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ac:47:1c:ba:c1:21:76:39:da:2c:57:28:f7:3c:50:99:37:
d8:34:90:19:fc:f1:bd:14:94:c3:9b:85:ea:12:cc:1b:a4:42:
09:9f:7a:7a:5c:41:2e:51:b7:d1:f3:61:92:0e:4d:2e:96:e2:
cb:91:ff:e8:0f:74:92:c1:e8:7c:38:a0:0b:c5:26:71:98:a2:
d8:ad:48:4c:90:96:99:ea:ad:7f:f4:45:7a:3c:42:53:c2:ec:
81:c2:26:cb:db:26:4d:08:5e:74:78:c1:ca:f3:7f:79:a2:56:
cb:20:c1:c5:96:e4:8c:0a:2e:2f:e8:7f:d3:ba:55:93:4c:e9:
4c:04:a8:44:75:7a:e7:c3:0a:a5:fa:5d:ec:be:70:3d:9b:56:
7f:ad:95:be:51:02:a1:1d:8a:c0:e8:2a:9f:94:71:86:72:28:
b9:e4:78:7f:64:0b:6a:1c:b2:0e:ee:ab:89:51:3d:c7:f1:1a:
ad:58:9d:5d:17:29:08:ec:42:8e:4d:c7:c5:81:e0:b2:3e:de:
11:b3:d6:88:07:6e:d0:8f:f0:04:5d:0f:f5:ff:15:ec:05:d6:
cc:41:07:ad:6c:24:c4:10:9f:41:03:bb:c6:72:2b:0f:c7:3b:
50:0d:9c:41:04:9a:0d:5e:b0:ba:99:c5:f9:49:19:76:86:4d:
6e:86:cf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:13:16 2026 by rpki-client