
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
File: 5021716DB872AFEA302E881734C3D03B1DCE1384.mft (raw, json)
Hash identifier: ujz14nPC8jMQMieRSDVhJuYWdb2CziF8+6inKJuP6b8=
Subject key identifier: 2D:A2:B9:64:02:BE:69:F0:09:DA:32:C7:91:A6:25:52:81:E0:93:25
Authority key identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84
Certificate issuer: /CN=5021716DB872AFEA302E881734C3D03B1DCE1384
Certificate serial: 44914E4B923EF53D0CFB66EAF3DB6AB93A2D8CCB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
Manifest number: 0186
Signing time: Wed 15 Apr 2026 06:48:55 +0000
Manifest this update: Wed 15 Apr 2026 06:43:55 +0000
Manifest next update: Tue 21 Apr 2026 04:54:55 +0000
Files and hashes: 1: 5021716DB872AFEA302E881734C3D03B1DCE1384.crl (hash: xwv7jZGMSRn4KuFq3YS/Hrf1Ltg0855mcEtLziySsL8=)
2: 323830333a613339303a3a2f33322d3438203d3e20323733303135.roa (hash: Fu/SZhrr6Jw7DbYo5CUKcfKCtKHHVYuJggcFFClGvTs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl
rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 04:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:91:4e:4b:92:3e:f5:3d:0c:fb:66:ea:f3:db:6a:b9:3a:2d:8c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5021716DB872AFEA302E881734C3D03B1DCE1384
Validity
Not Before: Apr 15 06:43:55 2026 GMT
Not After : Apr 21 04:54:55 2026 GMT
Subject: CN=2DA2B96402BE69F009DA32C791A6255281E09325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:71:8d:34:3e:15:92:4a:1a:09:e3:bd:74:
1d:5c:ce:6f:1a:28:13:e6:ed:84:5e:49:96:b3:3a:
70:ca:72:33:6e:3d:c8:ef:85:9d:66:01:73:6f:01:
c2:b9:89:38:ea:2b:05:64:80:b9:47:a6:d4:5d:01:
eb:03:ad:d2:44:da:01:12:31:45:5c:4a:3f:11:21:
3d:3a:af:eb:81:72:68:ad:c6:c8:67:88:71:71:62:
62:e9:ef:d1:30:02:23:d7:0e:7e:ab:64:35:0d:53:
f3:ac:bb:00:c2:9d:83:3f:a8:a1:8c:8e:a6:d4:29:
5d:c0:11:56:ea:cd:6d:f5:13:b0:40:7d:55:57:1f:
36:a9:13:31:7a:01:26:6e:42:9d:fa:9a:44:ec:06:
2c:45:b4:a4:ef:13:0a:62:4c:ce:19:1d:6c:f8:53:
56:2c:49:ee:54:c0:69:e8:88:25:8d:c1:80:ce:40:
de:9f:53:65:14:50:4f:c2:70:44:3e:ec:5c:13:3f:
81:1d:55:5b:1f:ba:b4:5e:91:51:6c:fb:03:ee:b2:
3e:5c:37:92:e9:9d:0c:21:52:2c:f4:72:b3:e2:5c:
00:90:c5:3c:82:6a:52:50:cd:af:3b:22:2f:e9:f6:
29:57:df:30:4e:74:90:7b:7a:23:23:51:f0:f4:3e:
98:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A2:B9:64:02:BE:69:F0:09:DA:32:C7:91:A6:25:52:81:E0:93:25
X509v3 Authority Key Identifier:
keyid:50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ae:a0:26:6f:39:5f:ed:fc:5b:1b:a9:29:53:7f:0d:d2:49:
14:8a:7a:fd:82:a1:b4:b6:1e:7f:31:35:cf:13:b7:0a:ce:d8:
7b:30:70:c8:5e:72:88:aa:30:f0:22:12:be:07:21:7f:e8:40:
f5:77:c0:54:5d:e8:9a:ad:55:b9:89:88:d5:01:bb:b5:19:68:
25:d8:70:44:31:63:29:1a:b1:22:99:78:e1:b0:b4:e8:6a:7b:
1f:c4:07:d7:61:e5:0e:c7:a7:9e:9a:e6:ef:b4:63:78:bc:bd:
ca:81:93:cf:e8:e6:1f:e1:2e:32:bb:e0:19:a6:9b:5e:65:b3:
d4:ed:8b:54:9c:2f:dd:b4:95:80:65:e6:df:d3:ee:39:98:af:
42:58:3b:dc:4c:17:f7:5b:17:ba:bf:0a:87:25:cf:f3:15:96:
a3:ef:61:cc:b9:40:2a:b0:ce:de:a0:df:30:c3:69:53:21:39:
76:c2:96:d4:ea:c0:2b:7f:f2:23:74:a8:75:25:d5:d7:a1:17:
42:f4:a7:ac:36:f6:5c:0c:b9:10:ae:d2:d4:a3:b3:59:b3:da:
10:82:0a:89:83:5a:b6:36:47:9c:7f:50:42:07:74:29:a2:3b:
c8:f5:6e:d1:a2:b7:4b:af:d1:8e:a0:77:d3:5f:08:26:0a:f3:
bf:5a:ce:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:49:14 2026 by rpki-client