
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft
File: 21B9887060F924CDFF24C230D32A91B83A17CD97.mft (raw, json)
Hash identifier: oVxPRj33FFuUV2t+Au/SlYa4dHgaF+PMaKhGhVR+P2c=
Subject key identifier: 55:F3:4E:3E:F2:BA:B0:36:36:4A:EA:02:C0:88:5E:A0:9B:91:0C:96
Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
Certificate issuer: /CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Certificate serial: 40DD408B8B07F4E02DF7BA7BF0E670E9E06C7F4F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft
Manifest number: 01B8
Signing time: Thu 23 Jul 2026 01:15:05 +0000
Manifest this update: Thu 23 Jul 2026 01:10:05 +0000
Manifest next update: Tue 28 Jul 2026 00:20:05 +0000
Files and hashes: 1: 3230302e372e3132382e302f32302d3234203d3e203237373730.roa (hash: E1IQlK+SM6uZWwQ2NdtnO1wfKIzIa6EL9Yi8LlnCyVk=)
2: 21B9887060F924CDFF24C230D32A91B83A17CD97.crl (hash: 5mn0uXjnE/W4FDmBkjbkNo/3nYUxhiyK0mOeZb0/Rzc=)
3: 323830303a3163303a3a2f33322d3332203d3e203237373730.roa (hash: MUubDt5IC8e9ZqLi9sqOs+Ca8qWwhxWJNmf6EaFb96g=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl
rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 00:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:dd:40:8b:8b:07:f4:e0:2d:f7:ba:7b:f0:e6:70:e9:e0:6c:7f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Validity
Not Before: Jul 23 01:10:05 2026 GMT
Not After : Jul 28 00:20:05 2026 GMT
Subject: CN=55F34E3EF2BAB036364AEA02C0885EA09B910C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:ab:65:59:86:97:0d:f1:eb:f4:54:ba:79:
c3:97:10:19:34:59:89:74:dd:db:4e:02:ad:89:3b:
51:48:6f:5e:e0:a5:fe:88:d8:9e:70:cf:73:d6:f6:
8f:06:62:44:3e:6f:df:15:8c:f0:0c:dc:bc:b2:1a:
93:8c:f8:4c:1a:e1:45:8e:54:6b:1d:f5:44:e8:e5:
7f:2f:f8:4a:e4:66:3f:c7:4a:6c:d3:09:a7:b3:64:
45:cb:3a:ac:e2:48:8c:ac:3c:ed:04:4d:de:b9:99:
2b:46:2d:1f:ff:2f:ee:94:3b:7d:c6:d7:ba:a6:a9:
05:15:e2:8c:1b:3f:12:ee:7c:06:0d:98:49:54:ed:
ef:3a:71:fa:d7:56:63:2f:6b:54:d0:8f:19:d6:0d:
a9:fb:7f:f3:fa:fe:3b:f9:88:15:7e:27:26:4c:96:
e9:49:13:51:23:66:c8:b5:0c:7a:4b:5e:98:98:a2:
64:30:f5:6e:9a:08:ec:b2:8c:d5:ce:f6:04:ef:c7:
dd:2b:63:35:90:f0:b1:ed:61:eb:c5:06:dc:57:35:
0e:93:e1:99:96:74:25:1f:a2:f9:f2:b1:ec:c5:b8:
ab:5e:96:62:9a:d9:49:b9:b1:67:d1:45:b6:7b:4c:
bf:a0:28:3c:04:c7:6f:e4:4e:b7:a9:60:f8:52:92:
46:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F3:4E:3E:F2:BA:B0:36:36:4A:EA:02:C0:88:5E:A0:9B:91:0C:96
X509v3 Authority Key Identifier:
keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1d:02:b5:5e:a9:7c:3d:04:3f:51:99:28:1a:c3:1e:46:a6:
0e:d7:3e:27:3c:83:c6:70:86:06:6f:b0:c5:e8:54:e0:d5:7f:
84:be:fa:0a:3d:80:a6:04:b7:af:f0:40:80:70:fb:71:50:cc:
c6:97:ad:c7:6b:13:53:3a:47:d5:51:d4:1d:06:31:ff:f2:28:
96:26:6f:cc:2f:45:ee:79:6d:1d:63:82:4c:37:00:99:fa:37:
78:bf:aa:9b:80:e4:7f:fa:a2:a1:15:3d:18:7f:3c:ed:b2:20:
5a:4c:25:03:f6:47:28:c6:bd:71:24:b8:79:c7:8f:41:e0:03:
99:e0:7d:8f:6e:8e:d1:db:00:ab:42:d4:c8:a5:f2:56:21:52:
91:4e:0d:b7:be:a4:61:92:2e:39:18:da:03:d4:c1:73:9d:98:
8f:a1:d9:0c:4d:a6:74:c8:76:e7:cb:21:b7:65:fc:b9:6b:7c:
81:d9:6b:42:1a:20:02:db:89:14:69:72:1d:78:93:ad:e9:c0:
a2:fa:54:d9:0f:54:6a:dd:e4:68:36:cc:64:12:be:79:23:96:
37:f9:54:8c:e1:1f:8a:a2:bb:5c:c4:b4:85:9f:b2:89:58:58:
5e:6f:28:f9:d7:44:f5:82:04:49:fb:c9:c5:f2:6b:8f:72:d8:
5f:a3:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:27 2026 by rpki-client