
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
File: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft (raw, json)
Hash identifier: M1/PqdkcbuaqV/i4Pk9igB33z1Du6f/mNowoFAMsckQ=
Subject key identifier: D0:A1:33:5A:FA:50:70:F9:C6:16:F0:CB:42:EB:76:50:29:4F:AD:E1
Authority key identifier: BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7
Certificate issuer: /CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7
Certificate serial: 53B8B167E7DA54E7F6748765871CC61C7B5B16C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
Manifest number: 0195
Signing time: Tue 12 May 2026 18:12:54 +0000
Manifest this update: Tue 12 May 2026 18:07:54 +0000
Manifest next update: Sun 17 May 2026 02:12:54 +0000
Files and hashes: 1: 323830333a663539303a3a2f33322d3438203d3e20323732393836.roa (hash: qiV3mbSCleZeiH8P5cTiossyGGceGqDaRLKvcaFSDVc=)
2: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl (hash: WTRrCpFOrVFho+KvWV7+rq7E6/njSge7xH3iKzDYM9Y=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl
rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 17 May 2026 02:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b8:b1:67:e7:da:54:e7:f6:74:87:65:87:1c:c6:1c:7b:5b:16:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7
Validity
Not Before: May 12 18:07:54 2026 GMT
Not After : May 17 02:12:54 2026 GMT
Subject: CN=D0A1335AFA5070F9C616F0CB42EB7650294FADE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:9e:26:69:00:29:f4:af:51:7d:72:d6:01:
13:94:1b:f1:21:86:26:ae:f2:e2:23:e3:ed:80:8b:
5a:a8:b1:b5:49:21:18:be:41:7b:c8:b6:bb:69:3b:
44:63:b1:da:4e:df:7c:88:41:1b:5f:3d:1c:ef:90:
aa:b4:11:12:50:81:f2:64:3c:cb:58:61:5c:15:ba:
69:5d:61:38:5d:5d:7d:be:21:94:13:60:b6:11:ed:
f4:1c:99:71:4b:6b:d8:4c:50:4f:e8:3c:ea:84:99:
35:0a:be:30:63:dc:67:dc:9d:aa:ba:98:1e:12:d6:
e3:90:e9:5c:c8:3f:2d:9f:44:a6:41:94:9f:fc:0e:
88:b4:fd:b8:96:ae:b9:cf:15:34:f8:05:16:94:bc:
3d:d1:09:d6:17:9d:4b:cd:61:67:17:b7:c2:9e:6c:
88:bf:8a:58:ea:53:4e:e0:9b:63:b2:45:71:7b:d7:
c9:76:a1:ea:44:ab:27:03:68:ec:ee:67:27:63:c6:
db:dc:81:39:63:68:b8:23:ad:90:d3:1e:46:8a:83:
52:9a:5f:5a:4d:0c:c5:e9:2a:f3:27:aa:73:96:ce:
4b:f9:77:20:87:1e:cd:60:5d:8e:73:33:3a:3e:a1:
3a:c6:31:66:f1:ff:33:24:84:77:b4:3c:ec:cd:69:
0e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A1:33:5A:FA:50:70:F9:C6:16:F0:CB:42:EB:76:50:29:4F:AD:E1
X509v3 Authority Key Identifier:
keyid:BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:63:fb:f3:0b:f7:e4:45:3c:dd:6e:44:82:8f:25:72:af:d9:
2d:78:a6:9b:45:22:1d:05:58:eb:98:fd:6e:44:f2:d1:f6:46:
3b:73:87:f5:e1:86:56:52:a4:50:fb:5b:07:d1:4a:af:cf:40:
2b:4f:01:5d:3b:ce:94:e2:fe:3f:87:8c:6d:44:d8:87:0a:a9:
bd:c9:ba:de:54:a3:8b:60:a4:25:b8:c9:6c:ce:e1:45:2c:69:
69:70:80:84:b4:5e:7f:7c:28:c0:91:1a:6f:c2:09:a1:fa:15:
63:19:30:a4:45:8e:11:03:fe:c4:0c:04:43:a5:91:ac:36:3a:
87:61:23:db:4c:71:5a:1b:83:c8:25:bc:8b:37:0d:12:d2:ea:
0a:77:f5:7b:01:66:e5:59:aa:e7:23:35:f4:d8:e2:6b:5b:1b:
6e:5b:84:65:b1:27:97:ea:ce:05:60:30:37:2a:88:d0:aa:34:
0d:fe:b0:18:c7:27:fb:e3:41:e8:28:22:d9:7e:63:6b:fa:41:
ab:6e:86:28:39:56:17:4c:a6:15:0e:aa:7f:47:e7:6b:d9:06:
8b:19:92:14:d5:52:2f:d6:e6:67:19:d3:4a:db:45:48:59:60:
98:d9:28:6a:cd:68:6b:b8:5c:b9:6b:b6:17:ed:88:15:a0:8a:
03:43:65:07
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUU7ixZ+faVOf2dIdlhxzGHHtbFskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ5RDM5OEJBQ0UzOTBDMjZBMzJDRDRDNzc1OEFBMUZB
OUUzN0NDNzAeFw0yNjA1MTIxODA3NTRaFw0yNjA1MTcwMjEyNTRaMDMxMTAvBgNV
BAMTKEQwQTEzMzVBRkE1MDcwRjlDNjE2RjBDQjQyRUI3NjUwMjk0RkFERTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9Z4maQAp9K9RfXLWAROUG/Eh
hiau8uIj4+2Ai1qosbVJIRi+QXvItrtpO0RjsdpO33yIQRtfPRzvkKq0ERJQgfJk
PMtYYVwVumldYThdXX2+IZQTYLYR7fQcmXFLa9hMUE/oPOqEmTUKvjBj3Gfcnaq6
mB4S1uOQ6VzIPy2fRKZBlJ/8Doi0/biWrrnPFTT4BRaUvD3RCdYXnUvNYWcXt8Ke
bIi/iljqU07gm2OyRXF718l2oepEqycDaOzuZydjxtvcgTljaLgjrZDTHkaKg1Ka
X1pNDMXpKvMnqnOWzkv5dyCHHs1gXY5zMzo+oTrGMWbx/zMkhHe0POzNaQ6JAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU0KEzWvpQcPnGFvDLQut2UClPreEwHwYDVR0j
BBgwFoAUvZ05i6zjkMJqMs1Md1iqH6njfMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzdFQUQ3NjcyQzJCMUE1RTNEM0Y2OURGQ0I5NjRDODY2
RUQ0Q0E3QzlCMkZGN0RCMTMxRjc2RDY4QzRCQzA0LzAvQkQ5RDM5OEJBQ0UzOTBD
MjZBMzJDRDRDNzc1OEFBMUZBOUUzN0NDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDlEMzk4QkFDRTM5MEMyNkEz
MkNENEM3NzU4QUExRkE5RTM3Q0M3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjc3RUFENzY3MkMyQjFBNUUzRDNGNjlERkNCOTY0Qzg2NkVENENBN0M5
QjJGRjdEQjEzMUY3NkQ2OEM0QkMwNC8wL0JEOUQzOThCQUNFMzkwQzI2QTMyQ0Q0
Qzc3NThBQTFGQTlFMzdDQzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTY/vzC/fkRTzdbkSCjyVyr9kt
eKabRSIdBVjrmP1uRPLR9kY7c4f14YZWUqRQ+1sH0Uqvz0ArTwFdO86U4v4/h4xt
RNiHCqm9ybreVKOLYKQluMlszuFFLGlpcICEtF5/fCjAkRpvwgmh+hVjGTCkRY4R
A/7EDARDpZGsNjqHYSPbTHFaG4PIJbyLNw0S0uoKd/V7AWblWarnIzX02OJrWxtu
W4RlsSeX6s4FYDA3KojQqjQN/rAYxyf740HoKCLZfmNr+kGrboYoOVYXTKYVDqp/
R+dr2QaLGZIU1VIv1uZnGdNK20VIWWCY2ShqzWhruFy5a7YX7YgVoIoDQ2UH
-----END CERTIFICATE-----
Generated at Wed May 13 16:53:44 2026 by rpki-client