
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.mft
File: 2B0017A06CE3896D3844578DCE7407C8DF7DCB07.mft (raw, json)
Hash identifier: kmQgNUPtCGZAi1q+U8/ysaPD99CLJvUJ7YGsuWW+Ue0=
Subject key identifier: 80:A8:DA:A4:75:7B:13:89:63:DB:E6:55:D2:EC:C3:45:8F:2C:08:D4
Authority key identifier: 2B:00:17:A0:6C:E3:89:6D:38:44:57:8D:CE:74:07:C8:DF:7D:CB:07
Certificate issuer: /CN=2B0017A06CE3896D3844578DCE7407C8DF7DCB07
Certificate serial: 6DBB60F0A8139EE61DBF99FED3BB40EE98168F19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.mft
Manifest number: 01DF
Signing time: Wed 28 Oct 2026 22:57:55 +0000
Manifest this update: Wed 28 Oct 2026 22:52:55 +0000
Manifest next update: Mon 02 Nov 2026 11:45:55 +0000
Files and hashes: 1: 3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa (hash: nCXTEoMdxiEOaPlFrIuLdigxFz0nxUQDKADC5ou4Ssk=)
2: 323830333a333730303a3a2f33322d3332203d3e20323637383533.roa (hash: 7AjkKYVFNOekroSErpN58IE9kDHhwvUf5nINifFjtks=)
3: 2B0017A06CE3896D3844578DCE7407C8DF7DCB07.crl (hash: 4tU6s/zwZ/EDBBvfMkzamQtDSfF23/FzMft6VvRHkIA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.crl
rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 15:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:bb:60:f0:a8:13:9e:e6:1d:bf:99:fe:d3:bb:40:ee:98:16:8f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0017A06CE3896D3844578DCE7407C8DF7DCB07
Validity
Not Before: Oct 28 22:52:55 2026 GMT
Not After : Nov 2 11:45:55 2026 GMT
Subject: CN=80A8DAA4757B138963DBE655D2ECC3458F2C08D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:94:a4:34:60:4e:7f:52:a7:8b:7c:ce:8d:
3e:e7:15:d6:ee:60:37:e9:50:51:fa:e6:96:09:a2:
90:f1:eb:1f:f0:b7:b2:f2:26:71:b2:67:f0:06:a7:
90:a7:c3:d1:e4:2c:97:6a:95:53:94:41:ea:6e:68:
43:1e:59:32:b6:30:29:4b:a7:d5:36:c6:3c:09:c9:
7c:8b:be:34:88:53:ff:19:36:05:7f:73:5c:48:f0:
1c:c5:01:f4:9a:2b:7f:f9:34:c0:cd:a6:18:8f:7a:
f3:1f:39:99:e9:30:88:76:1a:82:be:af:79:2b:bd:
91:0c:73:26:10:b8:47:36:16:ac:a0:c5:2f:3b:92:
55:30:7c:ff:d0:54:fb:89:77:38:c7:a5:58:ea:5a:
90:de:68:9c:1a:0f:4c:ef:f9:26:d4:ba:a2:22:36:
d7:a9:dd:9b:2d:68:0a:e7:bf:cb:9b:c3:24:af:53:
60:92:61:ef:47:8b:6d:ae:ea:31:5b:1d:c3:c4:91:
49:0d:22:39:4a:32:c0:ea:1e:63:f1:bb:13:81:e4:
e5:65:51:fe:cd:6f:5a:83:46:63:31:07:06:6d:06:
f6:6c:c4:2d:15:5f:1c:4f:d4:03:8d:4d:03:ce:12:
68:22:a3:6d:ee:ae:f2:fe:47:25:88:15:e7:62:a6:
d6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A8:DA:A4:75:7B:13:89:63:DB:E6:55:D2:EC:C3:45:8F:2C:08:D4
X509v3 Authority Key Identifier:
keyid:2B:00:17:A0:6C:E3:89:6D:38:44:57:8D:CE:74:07:C8:DF:7D:CB:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8d:83:c4:3a:9f:22:da:78:7d:28:56:c3:9c:a7:07:82:1a:
d3:be:08:f5:9a:68:63:6f:87:45:f5:8b:68:2e:40:71:8d:af:
f9:85:14:79:23:84:73:d1:62:35:74:d6:78:ca:dc:4c:b8:fa:
bd:22:30:36:00:23:02:d6:36:d8:29:72:14:57:9c:15:30:ac:
40:f8:43:85:a7:c1:4d:23:5f:84:6a:02:be:5a:7a:bd:44:22:
99:11:cc:51:2c:32:35:13:c3:2f:2a:77:a7:10:63:de:22:b9:
a5:64:cd:4c:c4:43:fd:d7:da:e8:91:48:91:27:90:b4:20:77:
67:d9:bf:a1:e8:ac:b5:95:b5:88:8a:7a:f7:c6:d7:65:7e:51:
15:2d:2c:af:44:6e:42:d2:ff:da:9a:00:8b:39:15:c6:15:9a:
62:06:75:8a:eb:6d:f0:f4:e4:16:a4:e0:a3:91:3e:76:dd:92:
c8:6a:04:18:ad:e2:38:30:b4:4e:65:b2:c1:fe:77:4c:d8:52:
ba:c1:e2:52:a7:ef:71:05:36:4b:69:ab:a3:c7:a0:f1:2f:61:
45:9b:8a:c2:3a:14:f5:e8:d8:c6:d0:d2:87:1d:ad:9e:25:93:
1c:ce:31:6d:2d:b7:1c:dd:ea:ec:cf:f2:47:b3:fd:5e:b1:3b:
9b:21:f8:e1
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUbbtg8KgTnuYdv5n+07tA7pgWjxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIwMDE3QTA2Q0UzODk2RDM4NDQ1NzhEQ0U3NDA3QzhE
RjdEQ0IwNzAeFw0yNjEwMjgyMjUyNTVaFw0yNjExMDIxMTQ1NTVaMDMxMTAvBgNV
BAMTKDgwQThEQUE0NzU3QjEzODk2M0RCRTY1NUQyRUNDMzQ1OEYyQzA4RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZMJSkNGBOf1Kni3zOjT7nFdbu
YDfpUFH65pYJopDx6x/wt7LyJnGyZ/AGp5Cnw9HkLJdqlVOUQepuaEMeWTK2MClL
p9U2xjwJyXyLvjSIU/8ZNgV/c1xI8BzFAfSaK3/5NMDNphiPevMfOZnpMIh2GoK+
r3krvZEMcyYQuEc2FqygxS87klUwfP/QVPuJdzjHpVjqWpDeaJwaD0zv+SbUuqIi
Ntep3ZstaArnv8ubwySvU2CSYe9Hi22u6jFbHcPEkUkNIjlKMsDqHmPxuxOB5OVl
Uf7Nb1qDRmMxBwZtBvZsxC0VXxxP1AONTQPOEmgio23urvL+RyWIFediptYTAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUgKjapHV7E4lj2+ZV0uzDRY8sCNQwHwYDVR0j
BBgwFoAUKwAXoGzjiW04RFeNznQHyN99ywcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjAzQzVGQ0M1N0E4NEIzMEUzMDUwRDcwQjE0Q0IyODcz
QzgxMkIzNDNERTcyNDFERDRCODU1NEY4OTQ5OEE1LzAvMkIwMDE3QTA2Q0UzODk2
RDM4NDQ1NzhEQ0U3NDA3QzhERjdEQ0IwNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjAwMTdBMDZDRTM4OTZEMzg0
NDU3OERDRTc0MDdDOERGN0RDQjA3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYwM0M1RkNDNTdBODRCMzBFMzA1MEQ3MEIxNENCMjg3M0M4MTJCMzQz
REU3MjQxREQ0Qjg1NTRGODk0OThBNS8wLzJCMDAxN0EwNkNFMzg5NkQzODQ0NTc4
RENFNzQwN0M4REY3RENCMDcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9jYPEOp8i2nh9KFbDnKcHghrT
vgj1mmhjb4dF9YtoLkBxja/5hRR5I4Rz0WI1dNZ4ytxMuPq9IjA2ACMC1jbYKXIU
V5wVMKxA+EOFp8FNI1+EagK+Wnq9RCKZEcxRLDI1E8MvKnenEGPeIrmlZM1MxEP9
19rokUiRJ5C0IHdn2b+h6Ky1lbWIinr3xtdlflEVLSyvRG5C0v/amgCLORXGFZpi
BnWK623w9OQWpOCjkT523ZLIagQYreI4MLROZbLB/ndM2FK6weJSp+9xBTZLaauj
x6DxL2FFm4rCOhT16NjG0NKHHa2eJZMczjFtLbcc3ersz/JHs/1esTubIfjh
-----END CERTIFICATE-----
Generated at Thu Oct 29 17:01:17 2026 by rpki-client