
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
File: 5021716DB872AFEA302E881734C3D03B1DCE1384.mft (raw, json)
Hash identifier: cGnct/B9B0rVVxUcsieCSShwkMH1Ly2wQjzMzL4JzIQ=
Subject key identifier: 1C:7D:BE:A0:EC:11:16:51:EF:3A:AB:1B:9B:93:11:76:3F:DB:05:37
Authority key identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84
Certificate issuer: /CN=5021716DB872AFEA302E881734C3D03B1DCE1384
Certificate serial: 511BDFF7873684CCCED88431A1A1F3CCCB70462D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
Manifest number: 01B8
Signing time: Fri 24 Jul 2026 09:22:52 +0000
Manifest this update: Fri 24 Jul 2026 09:17:52 +0000
Manifest next update: Thu 30 Jul 2026 04:21:52 +0000
Files and hashes: 1: 5021716DB872AFEA302E881734C3D03B1DCE1384.crl (hash: O/+gVsZZ9MeNkMaImOlsX3qIUr3sKAdaXcqH8s7mQqM=)
2: 323830333a613339303a3a2f33322d3438203d3e20323733303135.roa (hash: Fu/SZhrr6Jw7DbYo5CUKcfKCtKHHVYuJggcFFClGvTs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl
rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:1b:df:f7:87:36:84:cc:ce:d8:84:31:a1:a1:f3:cc:cb:70:46:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5021716DB872AFEA302E881734C3D03B1DCE1384
Validity
Not Before: Jul 24 09:17:52 2026 GMT
Not After : Jul 30 04:21:52 2026 GMT
Subject: CN=1C7DBEA0EC111651EF3AAB1B9B9311763FDB0537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:68:a7:dc:45:19:95:84:ee:45:fc:15:4b:
8a:81:b5:69:5f:a4:0d:65:7f:68:4d:6a:d8:a6:60:
79:e1:6e:99:2e:2c:03:2b:2d:f7:b9:00:d8:15:3d:
76:42:9b:c2:46:e1:fd:14:b4:62:07:c4:f8:03:1c:
80:c9:a6:da:6c:8d:13:bb:8e:bb:00:22:48:34:1f:
c7:f1:e8:1b:8d:be:a1:c5:75:ff:7e:88:56:a3:45:
af:47:37:f7:93:2e:bd:02:8b:20:2d:a7:c1:01:0a:
b7:33:92:c8:91:a8:d6:b5:18:2e:01:11:25:4b:aa:
c8:fa:ec:fc:8d:fc:a7:30:a9:47:e7:14:76:19:b4:
10:eb:f2:a7:da:0f:13:9b:71:bb:5b:6f:5e:9b:8c:
9b:88:76:fd:9e:cf:05:17:2d:b4:7b:b7:c6:0b:12:
db:b1:ce:4c:b5:7c:c4:c4:ab:a9:c4:e3:da:c1:70:
72:2d:91:33:78:c6:e9:82:36:00:90:15:76:07:08:
e0:43:ff:7f:2d:1f:d6:34:a4:02:25:a6:3b:10:a7:
3b:09:23:4c:a2:f4:ef:92:d9:86:02:6d:80:b3:e1:
1b:a0:2b:dd:29:85:a8:55:ea:52:e8:56:4a:eb:dd:
44:0d:9e:d2:3c:4f:ca:33:48:c2:74:ab:ce:29:f4:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7D:BE:A0:EC:11:16:51:EF:3A:AB:1B:9B:93:11:76:3F:DB:05:37
X509v3 Authority Key Identifier:
keyid:50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7c:a5:6e:b6:70:6b:7a:fe:f2:23:6c:79:f0:f5:20:91:bd:
34:4d:9e:13:11:9c:1d:fa:a1:d4:b6:f7:3e:e4:4b:11:79:51:
39:26:c2:e1:6c:bf:9f:d8:2c:0c:72:2d:26:cd:0e:03:cb:0a:
93:86:b6:b6:6c:8a:e1:00:5c:ad:ae:a6:e9:ac:d1:b5:6f:b9:
e9:b2:21:23:e3:b3:ba:ac:f6:9a:31:55:86:3f:e3:03:8f:22:
d0:2e:85:55:a6:7e:02:8d:b5:07:30:c4:11:23:8d:fd:6b:0c:
08:88:6e:71:72:7f:e0:b8:b1:de:2b:a3:1d:87:05:be:a8:8d:
a5:24:1d:91:c1:0a:b7:1b:1f:81:f3:f2:53:9a:d0:76:e1:7b:
87:67:8b:5f:28:b1:af:ab:f8:db:9b:a1:1c:60:42:ff:1f:76:
d4:a3:fb:58:b5:f2:bf:24:09:3c:7f:7d:b4:c1:60:fc:80:52:
24:a9:55:c3:ab:89:f4:7c:f5:ea:0d:27:f7:a4:d3:6f:50:6b:
de:3b:08:e9:0a:94:12:66:cc:41:cd:8e:44:73:bc:9f:0f:6e:
16:cf:f9:97:24:57:66:ff:ee:bb:1c:9d:78:6b:45:3c:87:12:
e6:1b:4b:68:3c:b8:a2:3e:b4:59:f4:0b:53:d5:c4:5a:f6:23:
29:d7:5f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:46:51 2026 by rpki-client