
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
File: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft (raw, json)
Hash identifier: e6vPHjh7DasjA6ozCTT+kGTzdtiz9/tGQgwegXKX4+Q=
Subject key identifier: 7E:D8:A7:2A:FF:B6:69:E0:BA:56:FD:0B:19:7D:AF:D7:22:B6:3A:96
Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Certificate serial: 58E0791CFF4F5ECC835F8EEABDE95A781C68D055
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
Manifest number: 01BD
Signing time: Tue 28 Jul 2026 08:53:38 +0000
Manifest this update: Tue 28 Jul 2026 08:48:38 +0000
Manifest next update: Sun 02 Aug 2026 15:11:38 +0000
Files and hashes: 1: 3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (hash: 5q596PM+UMqbzlUZpIqKCrSaY2zt4Z8whA1r356WEBE=)
2: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl (hash: Q9a7aHkONXToyJc5KyJctj/5rD6FebqlmiQls+AbL1k=)
3: 3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (hash: e4W3CYwq0H9Su+5FogKI0sugsWizWF/fcb5QNdAcrTY=)
4: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (hash: yID5IXtt+1VWbbRYBNze5PWYtWy1MT88oh9ww7MrBWs=)
5: 3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa (hash: /0Y/XVN9pkW+s3yM7K0FHkRnkMxilXQxG9LBKBIWu4w=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 02 Aug 2026 15:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e0:79:1c:ff:4f:5e:cc:83:5f:8e:ea:bd:e9:5a:78:1c:68:d0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Validity
Not Before: Jul 28 08:48:38 2026 GMT
Not After : Aug 2 15:11:38 2026 GMT
Subject: CN=7ED8A72AFFB669E0BA56FD0B197DAFD722B63A96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:99:0d:a0:51:06:d3:4c:7a:0c:e0:c5:f8:
87:28:4e:5e:b0:0e:57:d3:2d:1f:dc:bd:b9:71:79:
67:30:57:be:75:4a:72:b1:59:b3:32:8f:dd:27:3e:
f2:22:2b:ef:7d:1d:f0:e3:84:f7:52:41:e4:5f:65:
97:20:ea:53:e2:ee:06:03:d9:0d:90:06:bd:aa:42:
f8:87:3a:d5:70:22:11:36:f9:7b:0f:0f:a3:8f:e5:
8c:80:bf:13:0e:6d:10:60:04:36:f5:1f:11:8b:25:
a1:e9:92:83:42:ab:f2:a7:14:1a:2a:13:d1:fe:d7:
c6:51:e5:7c:f2:a3:da:1f:7d:3e:32:0c:81:32:84:
1e:31:a0:0c:a4:c6:46:6a:7e:d2:a3:ab:4b:10:db:
76:6d:a8:3b:76:2b:11:b8:b9:85:9b:27:e3:40:0d:
0c:22:af:2b:18:1c:41:dd:4b:c6:fd:90:01:f3:ec:
27:5b:3a:65:d5:60:94:bd:d3:0a:bc:38:f2:e3:90:
32:34:6d:49:fd:86:d6:5b:d6:44:4d:d6:d8:e5:6d:
0b:40:bb:51:fe:8b:93:d9:05:6d:ba:28:4b:6d:51:
66:b8:5e:72:6f:f4:b5:49:92:da:a4:f7:dd:23:ce:
ff:45:13:10:62:d3:47:bd:79:3f:16:e2:b4:56:ca:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D8:A7:2A:FF:B6:69:E0:BA:56:FD:0B:19:7D:AF:D7:22:B6:3A:96
X509v3 Authority Key Identifier:
keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b5:ac:b0:d4:a1:a5:24:ea:d2:ce:00:eb:fe:58:4d:35:d5:
f7:43:1a:18:8a:d4:0a:9a:bf:92:de:c2:4b:15:ec:9f:31:b8:
94:11:09:b9:09:97:be:4a:42:50:22:8e:dc:72:1d:53:65:b5:
d9:13:c8:5b:59:65:17:da:62:c1:dc:9e:5b:e4:c3:5d:2b:e5:
ac:fa:f8:bd:bf:ad:2c:9f:46:ac:53:7c:79:41:2e:56:00:8c:
99:94:48:c8:64:e3:84:02:00:bd:84:0f:23:6e:7e:f8:d5:4e:
59:d3:44:cb:54:a4:d6:f8:04:f3:49:ff:b7:68:0f:e5:da:89:
32:1a:fc:de:1e:d8:97:c0:75:8e:bd:2b:79:ce:13:38:92:93:
5d:15:80:7b:82:fc:38:d3:17:3f:ea:f7:5e:4f:9f:1b:4b:17:
00:52:48:f2:61:1b:0e:6e:e2:6a:e8:cc:a4:b1:3f:14:35:01:
2b:9f:6a:f4:5b:d5:48:a0:3d:38:4b:9b:2d:ec:f4:8d:bc:bf:
8f:f9:42:ee:08:68:74:2e:29:d3:16:86:ba:bf:8b:14:cc:3f:
7c:11:20:bb:70:42:4d:80:74:fe:08:21:23:f4:54:4a:c4:21:
77:b5:c7:de:3a:f1:6b:39:db:c0:30:ed:09:a6:f3:27:f5:8a:
1c:7d:66:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:44:48 2026 by rpki-client