
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
File: 99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft (raw, json)
Hash identifier: XblQi7RTOMHG9DylOkjLfa+UHtplkEehGYGLp3/fZ7U=
Subject key identifier: 20:D7:DA:E5:12:09:90:02:3B:B3:FF:20:DB:E1:1F:0F:20:53:26:FA
Authority key identifier: 99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C
Certificate issuer: /CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
Certificate serial: 3CA9C32C41DE3C69E19C5BD1FF508C4A8CD66AC6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
Manifest number: 01EA
Signing time: Wed 28 Oct 2026 02:02:05 +0000
Manifest this update: Wed 28 Oct 2026 01:57:05 +0000
Manifest next update: Mon 02 Nov 2026 15:58:05 +0000
Files and hashes: 1: 3136382e3232372e32342e302f32322d3234203d3e20323634363833.roa (hash: pexBPv/qUstG7UyIUG4iuwpBQqe83rmFbZMquG1aRhw=)
2: 99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl (hash: hoydCjSxnIVgmcNMAr3uwedOtW2ClMHLbBqYHFWJMLo=)
3: 3230302e3132342e3137362e302f32312d3234203d3e203532333134.roa (hash: 2ItWd9rvbtCrp8hH/Zd1g8Uomb2z0JDeEBkspIMF8ns=)
4: 323830313a303a3134313a3a2f34382d3634203d3e20323634363833.roa (hash: 6i217i7/Ppv0Akx9YxdcPntd0RCCVY0wB9afvzgoLrA=)
5: 323830313a303a3134303a3a2f34382d3634203d3e203532333134.roa (hash: X8xJ6jDF4r7il6cmK3r2vt8jcj7jRzyeJTQRRFCivBQ=)
6: 3230302e31342e3131362e302f32342d3234203d3e203532333134.roa (hash: C6/YNk7oHEai0KKZNj1iGpqlO7tuEmzIaNJf2ahzzcM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl
rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 15:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a9:c3:2c:41:de:3c:69:e1:9c:5b:d1:ff:50:8c:4a:8c:d6:6a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
Validity
Not Before: Oct 28 01:57:05 2026 GMT
Not After : Nov 2 15:58:05 2026 GMT
Subject: CN=20D7DAE5120990023BB3FF20DBE11F0F205326FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:96:b1:73:65:b8:37:08:88:4e:f1:36:55:
d3:6a:51:ec:bf:f2:af:c3:f6:3f:6c:44:f5:49:44:
89:84:41:94:17:1f:14:f4:87:10:fb:a8:d7:6e:ab:
13:23:89:1c:ff:7d:a7:b6:90:ee:cd:f2:9a:6a:83:
73:03:da:c7:3f:29:8b:38:46:19:68:62:5b:85:85:
3e:f8:cd:80:b2:96:dc:71:bb:6d:6a:37:dd:3e:9c:
da:8e:06:6a:fb:da:77:b6:74:91:66:a8:9e:2c:5e:
e3:cf:25:05:19:9d:52:06:dd:fa:fb:9b:7e:c3:eb:
db:ed:a2:7f:3d:8a:3e:01:32:6e:02:84:93:aa:ad:
0e:1c:fe:bf:f2:9a:a0:68:c3:d9:4e:fc:b1:76:17:
83:8f:3a:b5:ce:c6:15:bf:d3:b5:8e:ec:23:25:d9:
1c:ad:39:0e:77:c7:97:0c:a7:78:30:ae:c6:ba:3e:
e5:50:0e:80:03:ee:2f:a7:55:32:3e:94:62:68:10:
a2:89:8e:70:ac:9e:05:48:a0:08:8e:9b:4e:2a:c3:
da:bb:9a:c3:d0:27:4e:c7:60:58:d9:84:6b:c4:e0:
8a:91:d9:7a:02:d8:28:4f:90:a7:54:92:3f:d1:18:
84:2c:e8:1b:d4:5b:91:80:87:7b:d2:69:d0:f0:35:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D7:DA:E5:12:09:90:02:3B:B3:FF:20:DB:E1:1F:0F:20:53:26:FA
X509v3 Authority Key Identifier:
keyid:99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:dd:57:c2:75:41:48:69:87:cc:08:95:61:3d:b1:87:e4:2c:
d8:96:29:db:cc:bd:3d:23:0f:14:0f:a5:fa:ed:93:8f:59:25:
0e:45:56:0a:db:2d:6b:fb:b6:e8:5a:c5:fe:b6:8e:36:a8:d2:
ee:35:04:7a:b8:17:53:6a:cf:62:d2:6b:a1:14:37:04:93:76:
35:d1:23:88:4f:8c:3a:7a:11:e0:b7:9f:cf:a7:6b:aa:82:0c:
c2:d4:36:a3:09:a8:3e:9f:96:99:e8:c4:7a:aa:78:e9:98:87:
a0:36:b7:94:e8:71:84:a0:7f:22:7b:3b:4f:9c:f4:e7:86:a9:
0e:04:57:8d:47:7a:43:9d:e4:5a:8f:d3:90:52:e8:3c:38:52:
ca:73:d5:f5:57:68:74:27:79:df:50:dd:ae:3a:70:7d:6e:4e:
d6:bc:ae:f0:a7:6d:3e:2f:c3:b2:21:4a:c3:57:dc:9d:1b:0e:
22:77:cf:cf:37:18:aa:e2:59:07:f9:24:c5:98:e5:d9:1c:64:
05:01:05:fe:f5:da:b0:dc:47:97:43:1e:8f:af:d5:d5:d4:41:
54:81:f6:ca:a7:c9:36:e7:17:5e:05:0a:ca:33:26:33:4d:a9:
70:48:6c:9f:15:ad:68:8c:fb:19:cc:97:d1:8f:1a:92:1e:77:
6f:62:90:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:26:49 2026 by rpki-client