
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft
File: 4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft (raw, json)
Hash identifier: lm2+nFMzXqyM1yNSeaxLhi1yDYpH8c49r7bDEMvOPP4=
Subject key identifier: 2A:F7:2D:C6:AA:0B:06:CD:3F:46:1A:C1:EC:CD:BD:1D:A5:C2:3B:81
Authority key identifier: 4D:F8:3F:FE:47:E5:A1:25:AB:23:CD:0A:47:43:90:78:CA:9E:11:98
Certificate issuer: /CN=4DF83FFE47E5A125AB23CD0A47439078CA9E1198
Certificate serial: 608F79EB453ED8ACD9D9136B49ADE966B1283EB6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft
Manifest number: 01B2
Signing time: Fri 24 Jul 2026 10:38:51 +0000
Manifest this update: Fri 24 Jul 2026 10:33:51 +0000
Manifest next update: Tue 28 Jul 2026 15:18:51 +0000
Files and hashes: 1: 323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa (hash: hyktxDxPXCLpbT21Pt/njxlTl3p6dKqfWAAnpaPoteI=)
2: 4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl (hash: Hnredeb9EJsNRr7ml/OMmgMhP9ioZ9CrQ9XDwPtgtDU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl
rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:8f:79:eb:45:3e:d8:ac:d9:d9:13:6b:49:ad:e9:66:b1:28:3e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF83FFE47E5A125AB23CD0A47439078CA9E1198
Validity
Not Before: Jul 24 10:33:51 2026 GMT
Not After : Jul 28 15:18:51 2026 GMT
Subject: CN=2AF72DC6AA0B06CD3F461AC1ECCDBD1DA5C23B81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:47:63:05:ae:bb:58:47:27:66:c2:12:dc:
be:d4:51:dd:70:8d:a6:d6:6a:a2:e0:38:0b:70:95:
4c:32:f4:df:55:f7:f9:b0:e4:0f:cb:c0:f3:58:e4:
01:6c:d4:f5:37:84:aa:ac:ab:0f:a4:4d:b7:e7:f6:
ba:a5:17:13:1c:cc:30:47:1a:91:f5:34:9b:13:a7:
67:17:52:43:37:3f:55:d3:38:49:5b:d3:3d:27:bb:
c0:fc:66:ef:61:16:61:5c:e8:0f:97:9a:52:46:ff:
0d:12:7d:3b:db:90:41:ec:59:84:74:66:3e:67:ea:
65:42:c4:23:be:6b:55:b5:9a:f7:a2:c7:cd:a0:9d:
d6:63:a1:b4:2a:d7:0b:c0:87:76:9d:27:91:51:bb:
34:6f:05:f2:f3:b2:99:60:4e:18:6b:fb:7e:ff:6d:
ee:67:e6:5d:3a:58:bf:23:f6:36:3b:aa:f4:c1:9f:
b2:74:b7:8d:4a:8a:a8:02:57:e9:ff:82:9d:20:d3:
44:92:55:ae:b5:e2:23:59:a5:91:4f:e0:bc:87:df:
90:f9:f1:10:f1:a0:f1:d3:6e:1a:19:4d:bf:03:5e:
e7:88:1e:67:5e:22:3a:82:fb:67:b7:ea:17:0a:f2:
9c:84:af:31:df:46:8e:71:99:65:88:0f:91:ae:64:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F7:2D:C6:AA:0B:06:CD:3F:46:1A:C1:EC:CD:BD:1D:A5:C2:3B:81
X509v3 Authority Key Identifier:
keyid:4D:F8:3F:FE:47:E5:A1:25:AB:23:CD:0A:47:43:90:78:CA:9E:11:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dd:21:4e:b2:14:4e:88:e9:fd:1c:d8:65:1e:41:63:67:03:
d7:eb:20:6b:d7:11:e2:32:f5:de:0b:4e:03:dc:b9:d5:9a:70:
e9:74:18:b7:8a:5d:66:b1:fe:50:e4:c4:5b:02:40:16:e9:29:
66:ea:ed:47:d8:fd:d2:ea:36:11:5a:48:fc:ee:d4:50:1d:4a:
16:a9:79:9e:65:91:ee:08:ec:84:7d:30:85:fc:aa:28:8c:a5:
84:7b:df:27:49:bc:43:b4:20:c9:6e:a7:a3:03:3c:06:da:5d:
2e:8b:82:19:c0:f3:93:f7:fc:be:12:38:ad:b2:3e:3a:bf:32:
fe:3c:78:42:53:ef:e4:45:f4:62:42:e9:0d:57:fc:4d:7e:3f:
79:e3:ae:4a:cc:20:b7:17:ba:fb:73:89:58:3f:ce:c3:82:bd:
15:dd:fa:05:74:0a:11:ea:30:98:ff:19:97:5c:33:0c:04:d9:
45:c9:49:4a:d7:1c:8c:85:86:b8:a7:38:71:5c:fa:b4:b7:8b:
3b:17:53:41:17:55:d5:20:80:11:21:c1:93:3d:be:fd:0d:07:
3c:b2:1c:67:af:02:5e:4e:74:b7:3c:ee:c3:db:20:40:28:0f:
78:e1:45:19:31:9f:ac:73:fa:0c:9b:a0:65:1c:99:6d:f4:c0:
7a:b5:d4:b0
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUYI9560U+2KzZ2RNrSa3pZrEoPrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERGODNGRkU0N0U1QTEyNUFCMjNDRDBBNDc0MzkwNzhD
QTlFMTE5ODAeFw0yNjA3MjQxMDMzNTFaFw0yNjA3MjgxNTE4NTFaMDMxMTAvBgNV
BAMTKDJBRjcyREM2QUEwQjA2Q0QzRjQ2MUFDMUVDQ0RCRDFEQTVDMjNCODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYOUdjBa67WEcnZsIS3L7UUd1w
jabWaqLgOAtwlUwy9N9V9/mw5A/LwPNY5AFs1PU3hKqsqw+kTbfn9rqlFxMczDBH
GpH1NJsTp2cXUkM3P1XTOElb0z0nu8D8Zu9hFmFc6A+XmlJG/w0SfTvbkEHsWYR0
Zj5n6mVCxCO+a1W1mveix82gndZjobQq1wvAh3adJ5FRuzRvBfLzsplgThhr+37/
be5n5l06WL8j9jY7qvTBn7J0t41KiqgCV+n/gp0g00SSVa614iNZpZFP4LyH35D5
8RDxoPHTbhoZTb8DXueIHmdeIjqC+2e36hcK8pyErzHfRo5xmWWID5GuZL3FAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUKvctxqoLBs0/RhrB7M29HaXCO4EwHwYDVR0j
BBgwFoAUTfg//kfloSWrI80KR0OQeMqeEZgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRUZFM0IwQjU5M0NFOUYxQzcyNjYwMTc0NzMzNjk0NDVD
NTI5MDM2NEEyQjAxNjg1QjA3RUQxM0U3QkE2RDdCLzAvNERGODNGRkU0N0U1QTEy
NUFCMjNDRDBBNDc0MzkwNzhDQTlFMTE5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80REY4M0ZGRTQ3RTVBMTI1QUIy
M0NEMEE0NzQzOTA3OENBOUUxMTk4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkVGRTNCMEI1OTNDRTlGMUM3MjY2MDE3NDczMzY5NDQ1QzUyOTAzNjRB
MkIwMTY4NUIwN0VEMTNFN0JBNkQ3Qi8wLzRERjgzRkZFNDdFNUExMjVBQjIzQ0Qw
QTQ3NDM5MDc4Q0E5RTExOTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAB3SFOshROiOn9HNhlHkFjZwPX
6yBr1xHiMvXeC04D3LnVmnDpdBi3il1msf5Q5MRbAkAW6Slm6u1H2P3S6jYRWkj8
7tRQHUoWqXmeZZHuCOyEfTCF/KoojKWEe98nSbxDtCDJbqejAzwG2l0ui4IZwPOT
9/y+Ejitsj46vzL+PHhCU+/kRfRiQukNV/xNfj95465KzCC3F7r7c4lYP87Dgr0V
3foFdAoR6jCY/xmXXDMMBNlFyUlK1xyMhYa4pzhxXPq0t4s7F1NBF1XVIIARIcGT
Pb79DQc8shxnrwJeTnS3PO7D2yBAKA944UUZMZ+sc/oMm6BlHJlt9MB6tdSw
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:52:59 2026 by rpki-client