
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft
File: 38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft (raw, json)
Hash identifier: mXRm/VxTf2TYY20SXxzN85TW/8WlwRP5fKJBVgCEQxQ=
Subject key identifier: 57:EC:D1:CA:A1:67:C6:8B:31:7B:14:DA:CD:38:DF:BC:04:6C:3B:60
Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
Certificate issuer: /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Certificate serial: 10386466B88E7AC44E74EB3CA174C0E58BB4B639
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft
Manifest number: 01BA
Signing time: Wed 22 Jul 2026 10:12:54 +0000
Manifest this update: Wed 22 Jul 2026 10:07:54 +0000
Manifest next update: Mon 27 Jul 2026 10:30:54 +0000
Files and hashes: 1: 3134382e3232372e3136332e302f32342d3234203d3e20323732383839.roa (hash: WbVQpVlHYiDQv3ZJLhv6Jqqj2yFNEpaSufV/ZbtV/bI=)
2: 323830333a383639303a3a2f33322d3438203d3e20323732383839.roa (hash: C81tdhYwqkDUYOPZK4nYwNjKr0HdbT9/b8CNGFHV4eQ=)
3: 38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl (hash: +CyTOuX28FiWWF/1V7YARwqYEXailH+oadMqBnGFERU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 27 Jul 2026 10:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:38:64:66:b8:8e:7a:c4:4e:74:eb:3c:a1:74:c0:e5:8b:b4:b6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Validity
Not Before: Jul 22 10:07:54 2026 GMT
Not After : Jul 27 10:30:54 2026 GMT
Subject: CN=57ECD1CAA167C68B317B14DACD38DFBC046C3B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:23:3e:b2:4c:95:77:f8:e6:6c:4d:a4:62:
63:22:ef:a7:3c:bf:e3:e7:28:87:64:48:fc:35:cf:
32:35:fa:ea:18:94:d6:1a:cf:9c:12:27:60:bf:23:
9a:06:f6:e2:fe:be:91:01:63:78:5a:52:6e:dc:6a:
7e:c2:3b:8a:c1:5f:95:b5:d9:62:50:e2:81:51:24:
5b:cf:64:b1:10:73:b3:21:b2:ed:62:1e:70:e1:fb:
cc:86:4c:a0:76:a9:f5:5e:5b:28:2c:f2:2d:4a:ad:
28:f5:33:4b:67:b4:51:1a:0d:34:f2:ea:53:5f:60:
04:d7:8e:c0:6e:e0:61:12:d1:6f:cc:38:e8:ee:ea:
34:b0:af:5e:b6:4a:9e:69:a2:50:d6:2c:80:b4:a3:
47:26:80:72:a3:8b:fa:d5:8a:29:8b:47:de:ca:64:
b5:44:2f:5b:00:6c:77:c5:5c:dc:22:98:a0:49:62:
0b:6c:4c:21:0f:83:44:57:73:dd:e4:48:f3:39:54:
0a:fd:0a:64:c2:c0:90:18:56:dc:8e:0b:10:30:2a:
78:e9:a8:c5:02:b5:f4:9d:7d:8f:c1:44:6e:0b:08:
51:e2:02:46:04:d7:3d:05:31:44:04:16:31:c9:fa:
80:28:61:68:ba:14:77:14:cb:fb:17:a3:8a:a2:0f:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EC:D1:CA:A1:67:C6:8B:31:7B:14:DA:CD:38:DF:BC:04:6C:3B:60
X509v3 Authority Key Identifier:
keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:95:62:53:f9:0e:f4:51:11:3e:dc:16:6a:6f:51:81:9c:8d:
20:95:80:e7:e7:73:df:c3:6c:cc:a6:22:84:b6:32:00:9c:0f:
9f:40:75:1c:54:c1:c8:b6:a9:4f:1a:ee:70:3a:9c:b6:72:c9:
15:b7:46:a5:4b:07:cf:86:ba:70:3a:d5:5c:1a:d8:44:09:a9:
3c:9a:09:3b:32:f7:05:8f:e2:32:ae:b9:8b:84:1d:b6:07:f9:
55:5d:d9:b0:8e:58:8e:e1:b3:e3:c5:e5:98:ad:9a:2f:c0:48:
71:aa:6f:71:0d:d1:c1:82:6f:0e:6f:8f:04:60:cf:a7:d5:73:
b8:b8:5a:31:72:a7:0f:30:16:06:b9:5d:96:d1:d9:ea:98:36:
76:30:04:76:a6:81:66:b2:c4:51:b6:82:d0:2b:da:41:11:8b:
04:a5:2e:e2:8b:95:cc:ce:7b:30:25:66:09:e0:31:3f:df:fc:
10:44:ea:d8:aa:2f:5b:80:da:88:48:8b:76:bb:a2:7f:52:e0:
1d:f9:25:6a:ab:e8:f0:9c:43:95:29:21:de:ce:75:51:57:1e:
b0:b7:1d:f9:79:6f:8c:20:d0:30:dd:58:17:10:41:50:ec:ab:
71:ab:30:04:03:1a:11:e7:30:f1:a6:05:71:f4:87:0f:20:59:
b5:8c:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:38:33 2026 by rpki-client