
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8869FB09D81228CD254977B906EEE0B16CF426BD5E30502531C3B8E72C78F85E/0/5B4CA929981D5367766E804B29B9FE6DD5D4B7DE.mft
File: 5B4CA929981D5367766E804B29B9FE6DD5D4B7DE.mft (raw, json)
Hash identifier: I8ebQTqeSI/wV0Zyq9Mg6pq0s+Xz/aBL0EYpIv7z1Rk=
Subject key identifier: DA:44:33:CA:32:B6:1F:37:8E:CD:C7:6A:68:82:DD:61:64:B5:1F:3E
Authority key identifier: 5B:4C:A9:29:98:1D:53:67:76:6E:80:4B:29:B9:FE:6D:D5:D4:B7:DE
Certificate issuer: /CN=5B4CA929981D5367766E804B29B9FE6DD5D4B7DE
Certificate serial: 404708ED5505E83E4D8BD30918402C50217C02B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B4CA929981D5367766E804B29B9FE6DD5D4B7DE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8869FB09D81228CD254977B906EEE0B16CF426BD5E30502531C3B8E72C78F85E/0/5B4CA929981D5367766E804B29B9FE6DD5D4B7DE.mft
Manifest number: 0140
Signing time: Wed 25 Mar 2026 21:24:58 +0000
Manifest this update: Wed 25 Mar 2026 21:19:58 +0000
Manifest next update: Tue 31 Mar 2026 21:09:58 +0000
Files and hashes: 1: 5B4CA929981D5367766E804B29B9FE6DD5D4B7DE.crl (hash: YBJBLLh8XCu2dzojBQ3DJs5E+Vy4Lqiz0e3FJ1jaGwI=)
2: 323830333a343935303a3a2f33322d3332203d3e20323733383333.roa (hash: UufDOYGiI0f7kpuu1HhnHwhk2uW2yPiQf1oxGiL0Il0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8869FB09D81228CD254977B906EEE0B16CF426BD5E30502531C3B8E72C78F85E/0/5B4CA929981D5367766E804B29B9FE6DD5D4B7DE.crl
rsync://repository.lacnic.net/rpki/lacnic/8869FB09D81228CD254977B906EEE0B16CF426BD5E30502531C3B8E72C78F85E/0/5B4CA929981D5367766E804B29B9FE6DD5D4B7DE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B4CA929981D5367766E804B29B9FE6DD5D4B7DE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:47:08:ed:55:05:e8:3e:4d:8b:d3:09:18:40:2c:50:21:7c:02:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B4CA929981D5367766E804B29B9FE6DD5D4B7DE
Validity
Not Before: Mar 25 21:19:58 2026 GMT
Not After : Mar 31 21:09:58 2026 GMT
Subject: CN=DA4433CA32B61F378ECDC76A6882DD6164B51F3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:fe:12:32:c4:a3:f9:65:ce:e4:33:ac:44:
0f:03:ca:a4:6b:85:23:8b:d7:0e:0a:cd:8a:99:f9:
c2:99:c3:04:df:11:6e:8a:c2:e2:f1:d6:f7:48:8e:
5c:88:8a:83:c8:34:4b:a9:c8:4a:4f:da:85:d0:9e:
71:09:9e:f7:ba:49:26:da:3f:02:ef:1a:4c:39:ce:
1d:af:02:10:9f:f1:b1:ab:54:5a:a7:46:ee:14:c2:
76:b6:bd:a8:c9:69:21:58:02:34:dc:45:4c:f4:23:
3b:56:f0:6f:a9:31:c1:b0:2a:99:c8:de:d7:c6:66:
62:05:d2:1b:f5:54:aa:9f:4c:d8:07:b6:42:5d:1b:
ca:cb:66:c5:27:9e:a5:c4:b5:43:fa:27:03:5b:9f:
a7:90:56:28:47:25:b2:7a:4e:89:f6:13:28:32:b4:
e3:ae:8b:d9:3a:c6:f4:cd:8c:2e:41:46:e0:c4:57:
c5:cf:74:86:69:d3:46:40:93:b9:b1:7f:6b:f7:e0:
29:71:38:b9:a4:28:fe:06:7c:5a:33:42:ad:a8:56:
bf:b0:d3:6b:95:35:30:fc:6e:9e:85:fb:93:fa:52:
34:a6:0f:39:08:05:3f:b7:cd:19:f3:7e:41:29:22:
79:e2:43:15:c6:7e:5b:70:93:c3:c2:3c:94:f6:8f:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:44:33:CA:32:B6:1F:37:8E:CD:C7:6A:68:82:DD:61:64:B5:1F:3E
X509v3 Authority Key Identifier:
keyid:5B:4C:A9:29:98:1D:53:67:76:6E:80:4B:29:B9:FE:6D:D5:D4:B7:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8869FB09D81228CD254977B906EEE0B16CF426BD5E30502531C3B8E72C78F85E/0/5B4CA929981D5367766E804B29B9FE6DD5D4B7DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B4CA929981D5367766E804B29B9FE6DD5D4B7DE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8869FB09D81228CD254977B906EEE0B16CF426BD5E30502531C3B8E72C78F85E/0/5B4CA929981D5367766E804B29B9FE6DD5D4B7DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e1:11:8f:31:3a:d0:d2:5b:7c:a4:d7:91:73:d8:dc:48:ee:
17:a7:1f:ff:f8:bf:59:c2:5b:64:62:28:c4:15:d3:9b:ba:69:
1b:55:92:34:7e:35:62:5c:7d:bb:72:24:4d:c6:9c:4a:fd:37:
36:fd:21:32:26:f9:14:fa:38:57:68:ca:6b:13:d5:79:eb:34:
52:0a:00:1a:78:72:53:d5:b1:ee:50:82:ed:aa:20:16:01:f8:
73:44:e2:f1:de:9e:01:50:25:19:5e:4f:17:e0:16:88:70:01:
cd:26:0c:cf:12:ce:81:97:19:99:ee:5a:73:b8:ce:cf:3f:fc:
c5:88:70:7e:4f:98:85:a2:62:06:3b:57:93:11:6d:92:54:bd:
6f:56:43:11:c8:f1:ad:b3:be:c2:6e:79:f0:e4:a0:23:b6:91:
7e:d2:64:c2:e1:73:97:e9:44:b1:9f:d1:e3:73:c5:cc:af:ee:
84:81:b2:96:5a:1f:e4:60:fa:7a:97:53:7c:da:f1:db:89:d0:
d4:84:bc:8f:a9:1d:dc:78:bf:62:a5:d5:c0:e5:60:94:89:38:
df:fa:3b:1e:56:e5:eb:2b:66:3f:9e:f3:d9:ec:f4:89:04:ae:
22:91:62:90:36:9e:26:ca:42:1f:97:be:59:ea:52:6b:a6:4a:
9c:21:b0:01
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUQEcI7VUF6D5Ni9MJGEAsUCF8ArcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI0Q0E5Mjk5ODFENTM2Nzc2NkU4MDRCMjlCOUZFNkRE
NUQ0QjdERTAeFw0yNjAzMjUyMTE5NThaFw0yNjAzMzEyMTA5NThaMDMxMTAvBgNV
BAMTKERBNDQzM0NBMzJCNjFGMzc4RUNEQzc2QTY4ODJERDYxNjRCNTFGM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYXf4SMsSj+WXO5DOsRA8DyqRr
hSOL1w4KzYqZ+cKZwwTfEW6KwuLx1vdIjlyIioPINEupyEpP2oXQnnEJnve6SSba
PwLvGkw5zh2vAhCf8bGrVFqnRu4Uwna2vajJaSFYAjTcRUz0IztW8G+pMcGwKpnI
3tfGZmIF0hv1VKqfTNgHtkJdG8rLZsUnnqXEtUP6JwNbn6eQVihHJbJ6Ton2Eygy
tOOui9k6xvTNjC5BRuDEV8XPdIZp00ZAk7mxf2v34ClxOLmkKP4GfFozQq2oVr+w
02uVNTD8bp6F+5P6UjSmDzkIBT+3zRnzfkEpInniQxXGfltwk8PCPJT2j/nPAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU2kQzyjK2HzeOzcdqaILdYWS1Hz4wHwYDVR0j
BBgwFoAUW0ypKZgdU2d2boBLKbn+bdXUt94wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84ODY5RkIwOUQ4MTIyOENEMjU0OTc3QjkwNkVFRTBCMTZD
RjQyNkJENUUzMDUwMjUzMUMzQjhFNzJDNzhGODVFLzAvNUI0Q0E5Mjk5ODFENTM2
Nzc2NkU4MDRCMjlCOUZFNkRENUQ0QjdERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QjRDQTkyOTk4MUQ1MzY3NzY2
RTgwNEIyOUI5RkU2REQ1RDRCN0RFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODg2OUZCMDlEODEyMjhDRDI1NDk3N0I5MDZFRUUwQjE2Q0Y0MjZCRDVF
MzA1MDI1MzFDM0I4RTcyQzc4Rjg1RS8wLzVCNENBOTI5OTgxRDUzNjc3NjZFODA0
QjI5QjlGRTZERDVENEI3REUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA44RGPMTrQ0lt8pNeRc9jcSO4X
px//+L9ZwltkYijEFdObumkbVZI0fjViXH27ciRNxpxK/Tc2/SEyJvkU+jhXaMpr
E9V56zRSCgAaeHJT1bHuUILtqiAWAfhzROLx3p4BUCUZXk8X4BaIcAHNJgzPEs6B
lxmZ7lpzuM7PP/zFiHB+T5iFomIGO1eTEW2SVL1vVkMRyPGts77Cbnnw5KAjtpF+
0mTC4XOX6USxn9Hjc8XMr+6EgbKWWh/kYPp6l1N82vHbidDUhLyPqR3ceL9ipdXA
5WCUiTjf+jseVuXrK2Y/nvPZ7PSJBK4ikWKQNp4mykIfl75Z6lJrpkqcIbAB
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:42:44 2026 by rpki-client