
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
File: CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft (raw, json)
Hash identifier: 39BTXYuaMSDp45euOKYOXGgaY5monH6WxRCAzfKp+OQ=
Subject key identifier: D5:2A:92:A3:BE:13:D0:B2:E8:52:2C:76:76:40:85:EF:03:5C:10:EC
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Certificate issuer: /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial: 424A547C338E230F28C64A2E2653F215BE857EDA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
Manifest number: 01E5
Signing time: Wed 14 Oct 2026 12:07:04 +0000
Manifest this update: Wed 14 Oct 2026 12:02:04 +0000
Manifest next update: Tue 20 Oct 2026 05:19:04 +0000
Files and hashes: 1: AS52263.roa (hash: WKSQ3srn5JloSaKCXXsPqvBbre0xIncnu/ZyIWFMlbQ=)
2: CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl (hash: xpLgL4ZSdIlfXVQlRW/RDhwJaxu8rSpsIU0kG1mluG0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 19 Oct 2026 18:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4a:54:7c:33:8e:23:0f:28:c6:4a:2e:26:53:f2:15:be:85:7e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Validity
Not Before: Oct 14 12:02:04 2026 GMT
Not After : Oct 20 05:19:04 2026 GMT
Subject: CN=D52A92A3BE13D0B2E8522C76764085EF035C10EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:16:52:37:05:f0:94:dd:df:2a:4b:d2:da:
4a:95:b2:99:7c:52:c0:32:f8:35:7d:5b:22:9b:18:
74:6d:41:3d:41:23:6d:5b:72:f8:76:bc:4d:30:80:
6f:e2:c3:d0:d9:a3:34:b4:30:30:41:12:f7:f7:2c:
09:a9:91:0f:03:5f:f3:6d:d8:ce:0b:75:27:1a:a2:
30:3f:14:fd:8a:d3:68:f2:5e:67:7e:3f:5e:ce:2e:
f5:e7:6c:0e:f1:3c:03:19:a1:7a:29:37:87:98:e0:
a7:fe:d0:9d:c5:2d:7f:18:dc:a4:bc:19:92:be:06:
df:22:99:f4:b8:ff:82:94:ca:b6:11:50:5a:43:06:
dd:fc:59:1d:d6:a8:dc:dd:55:99:f8:8e:4f:2d:87:
6c:4a:4d:9b:24:7c:72:2c:dd:77:84:50:d1:61:69:
70:d2:9f:30:5d:ba:46:9e:25:29:76:e3:99:8a:38:
82:a5:bc:6f:c6:be:d6:d9:8e:6a:2c:2a:41:e9:c3:
82:a5:0e:02:1f:6d:89:09:8d:f1:d9:fb:b2:9c:d1:
99:df:2e:f0:22:29:37:3e:18:8c:16:1c:b2:a5:a2:
ff:d6:86:4d:ec:83:0b:36:e0:8d:2a:3a:32:62:fd:
55:6a:1a:52:05:9f:8f:b5:84:8e:4f:a0:2c:3a:03:
2e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2A:92:A3:BE:13:D0:B2:E8:52:2C:76:76:40:85:EF:03:5C:10:EC
X509v3 Authority Key Identifier:
keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:de:d3:54:f8:4a:ac:9f:e6:38:a1:a2:f2:db:5d:31:d9:30:
26:ce:97:f7:b4:c8:2a:cc:04:1d:0d:7b:1c:6a:b6:21:56:fe:
be:51:36:f5:5e:56:2d:07:e2:0c:7f:8c:37:69:44:0d:01:66:
c7:11:97:a2:e1:60:5f:7f:f9:e1:0e:fe:4e:ba:56:60:8e:65:
69:0e:c7:9e:0b:c3:5f:a7:1c:aa:4c:47:74:d9:12:8c:63:58:
d6:67:44:fc:5d:5f:ce:10:70:d0:51:df:3d:d9:a3:ab:4b:a2:
9d:29:30:a3:a8:c2:72:50:0d:c3:8c:7d:31:0c:0a:cb:aa:19:
51:f8:84:a7:1e:bb:82:61:25:0b:d2:5e:92:ed:8c:1a:df:c2:
a7:4d:e3:0e:3a:cb:4e:d9:01:b3:ec:23:99:60:52:b0:d0:22:
0a:98:8c:21:64:a7:8d:8b:39:c8:cb:b0:f1:d4:aa:f5:88:f1:
f4:9a:be:64:f7:eb:98:6b:db:a3:99:a0:18:1a:ac:ba:c9:b6:
57:bf:e1:09:6d:b4:e8:48:7f:58:9f:79:2c:7f:e5:83:32:1e:
29:64:ff:18:97:3e:97:86:d4:2f:9b:e5:86:e4:a0:9e:b2:d7:
17:47:e1:88:9c:30:60:c0:aa:ce:ac:61:37:fd:b2:63:b0:a7:
e7:e9:cf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 09:21:42 2026 by rpki-client