
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft
File: 2AC489AA343746243A2A3A97A473CEE27756EAA1.mft (raw, json)
Hash identifier: boxYQxkYUrpjvCSDUSQZQvUBFwUo4imNCp9VDuNCFjc=
Subject key identifier: AE:8B:98:D5:8E:C6:B7:2F:BE:03:B5:91:32:A4:46:8C:3B:21:EE:8F
Authority key identifier: 2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1
Certificate issuer: /CN=2AC489AA343746243A2A3A97A473CEE27756EAA1
Certificate serial: 74EA7962E588276CD16C33894952F21D4D89C768
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft
Manifest number: 01EE
Signing time: Thu 29 Oct 2026 01:41:35 +0000
Manifest this update: Thu 29 Oct 2026 01:36:35 +0000
Manifest next update: Tue 03 Nov 2026 04:04:35 +0000
Files and hashes: 1: 323830313a31393a313830303a3a2f34382d3438203d3e203237393531.roa (hash: +3LFBkldcZFSzCyJ9qgrLXIam/zMcbQQ+a9DKtTvgRk=)
2: 2AC489AA343746243A2A3A97A473CEE27756EAA1.crl (hash: gc6UqzCysSY+6OSKodRdoH/XEVZUC0lugaXtuJir1C8=)
3: 323830313a31393a313830303a3a2f34382d3438203d3e203134303830.roa (hash: qfafKCnP1ch87GPssFfC15yfXMW3naKDRsJseUvTbBg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl
rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 15:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ea:79:62:e5:88:27:6c:d1:6c:33:89:49:52:f2:1d:4d:89:c7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AC489AA343746243A2A3A97A473CEE27756EAA1
Validity
Not Before: Oct 29 01:36:35 2026 GMT
Not After : Nov 3 04:04:35 2026 GMT
Subject: CN=AE8B98D58EC6B72FBE03B59132A4468C3B21EE8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:dc:d9:0a:cd:c8:d9:c7:28:42:97:2d:99:
e3:88:b3:02:8f:28:09:96:14:17:22:6a:25:d2:16:
83:1d:e7:e7:90:4f:4a:16:5f:c7:7b:00:74:7a:0c:
15:5f:fc:44:18:d9:db:f4:a0:5e:72:c4:bd:8b:f4:
b0:0d:4a:3f:28:e4:90:64:b0:07:4b:1e:cc:ac:cf:
16:24:7b:32:e5:ae:89:da:c8:b3:46:82:10:69:a9:
ed:0f:5a:f5:1b:f8:1d:84:db:3c:a7:2a:87:ce:b5:
7c:fe:7d:a4:3b:43:1e:d3:1f:6b:82:de:ed:47:90:
7c:68:81:cb:99:d0:83:32:17:7d:a4:06:55:57:59:
c2:1d:b1:f7:a6:18:9d:d9:53:c5:68:ee:3e:18:dc:
81:4d:f5:88:c6:9f:bf:c8:24:bf:79:51:48:c2:31:
80:55:8a:d2:1b:43:c7:d5:c3:2a:5d:03:77:0f:c1:
16:84:4f:7a:c0:5a:5a:4a:8b:5e:37:6b:7e:c6:cb:
c9:a6:12:06:c5:32:87:a1:62:9d:24:b0:ac:a9:37:
63:46:21:c9:5f:a1:d0:b5:7a:0e:97:70:c3:ec:20:
96:5f:24:23:2d:f4:b5:f7:b7:c0:d9:3d:f9:6d:c5:
f2:b5:c3:dc:40:72:c8:34:00:b1:01:85:ee:15:52:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:98:D5:8E:C6:B7:2F:BE:03:B5:91:32:A4:46:8C:3B:21:EE:8F
X509v3 Authority Key Identifier:
keyid:2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:14:d8:b4:60:30:8e:e7:36:33:9d:ea:7f:44:a2:91:44:d1:
85:f5:a9:8d:fa:e1:f4:04:fd:f4:11:93:cf:be:5a:52:91:2e:
6b:37:a2:33:b9:d1:a2:67:da:6f:ba:43:a5:dd:2a:fe:b0:45:
4a:c7:90:ae:dd:75:22:1f:3d:f8:43:f4:24:68:03:00:d0:22:
b9:a7:47:a0:6c:44:a0:1b:08:13:cd:2f:c6:b9:18:44:95:e4:
11:9a:be:cb:88:71:af:20:44:57:f7:16:de:d4:e5:4f:03:0b:
b7:eb:0e:d3:c3:fc:b5:3a:45:17:35:95:89:ae:a0:5f:73:86:
d7:83:be:b5:d6:b5:82:df:14:70:ad:f3:51:0f:99:25:b5:b5:
70:bc:e0:3e:7c:ae:cc:4a:1f:80:b7:00:08:65:c3:6d:13:5c:
7d:49:db:3e:1d:a4:e3:23:28:61:45:cd:a3:ab:c3:68:9b:c9:
93:ec:6d:f7:c0:aa:b9:fd:3e:92:d2:e8:64:2e:99:d3:00:ce:
19:07:86:b4:11:03:9d:90:f9:a3:31:95:1e:b0:e7:c9:f6:c0:
73:84:ee:c8:0e:c0:57:54:f9:89:fa:6a:a9:a9:4d:54:83:c3:
d0:41:32:63:f0:fe:b5:22:b4:0e:ab:c7:68:53:bf:b5:3a:b9:
2b:f8:3f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:11:32 2026 by rpki-client