
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft
File: 42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft (raw, json)
Hash identifier: GIAK/qGb3lFVh5TStClyuMFmTrOgoXuhcApD/zqIXeQ=
Subject key identifier: 53:4B:A7:0E:9E:70:13:4C:C7:BB:84:33:27:B6:BC:3A:7D:CA:9D:29
Authority key identifier: 42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1
Certificate issuer: /CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1
Certificate serial: 6785ED6D6BDDE4E7C0F4A7E142BE4E242A72AAA9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft
Manifest number: 0197
Signing time: Tue 12 May 2026 21:54:56 +0000
Manifest this update: Tue 12 May 2026 21:49:56 +0000
Manifest next update: Mon 18 May 2026 10:20:56 +0000
Files and hashes: 1: 42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl (hash: DSWkSrvSIgJGJpxIrhQ133yd747sE2/Y7RgBLzS+FCI=)
2: 34352e3139312e3139362e302f32322d3235203d3e20323639383938.roa (hash: h9VkJVKOwxnHxywfjNhgKEUtChy/BBwPh376Aogkyrc=)
3: 323830333a333465303a3a2f33322d3438203d3e20323639383938.roa (hash: WAzAnbr9S14GzNl3GgXUDVDlduF3NPAShgF8DUA5MjA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl
rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 17 May 2026 14:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:85:ed:6d:6b:dd:e4:e7:c0:f4:a7:e1:42:be:4e:24:2a:72:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1
Validity
Not Before: May 12 21:49:56 2026 GMT
Not After : May 18 10:20:56 2026 GMT
Subject: CN=534BA70E9E70134CC7BB843327B6BC3A7DCA9D29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:47:bf:49:4a:92:d1:8e:97:fb:5a:f3:33:
54:44:87:7c:85:cc:5e:45:30:41:54:42:3a:87:d2:
71:37:5c:1b:d9:23:6c:89:44:ce:25:7f:08:31:bc:
62:83:72:53:e1:64:fa:d6:6d:b6:d6:f7:70:ce:3c:
50:10:4b:f9:3d:b3:cb:4e:8b:2b:19:4c:9b:12:6f:
e5:ee:9a:0c:ab:bd:a2:f0:95:77:bf:89:15:cf:b9:
ce:3d:c5:b9:46:2e:e7:59:a9:55:68:0a:77:27:0f:
19:ad:0f:7a:1e:c6:60:9e:ba:4d:dc:2e:0d:e2:c0:
61:17:67:31:c8:25:ba:6a:32:94:da:a4:60:44:b9:
1f:7a:ac:99:67:67:46:07:2c:ec:ee:b0:13:34:ed:
4d:c5:f5:ab:8c:7c:f2:d6:84:d7:e5:ec:6f:00:27:
1b:9f:40:82:c6:1f:4a:ab:25:13:af:33:e0:7a:9a:
2c:5a:1e:d8:51:c8:52:f6:2c:d3:d3:a5:7b:99:4e:
a0:5f:3b:a8:02:42:32:6d:5d:57:9d:07:99:76:5c:
d5:4c:51:f9:d3:14:7d:b0:69:7c:ca:38:c7:78:57:
85:41:25:ae:2d:ce:51:8e:7c:0e:48:48:b1:94:82:
97:01:a3:aa:3b:b2:34:b1:d3:48:c4:02:87:f2:f9:
4b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4B:A7:0E:9E:70:13:4C:C7:BB:84:33:27:B6:BC:3A:7D:CA:9D:29
X509v3 Authority Key Identifier:
keyid:42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:42:8c:4e:39:9f:c1:12:3e:23:d0:97:e8:7b:e2:c2:96:14:
ea:29:d0:4a:b1:cf:a1:54:6a:8b:8a:56:9b:a2:d3:e5:e6:40:
56:2c:d2:19:ff:df:d4:d6:3d:23:bf:db:79:9a:fd:75:c4:9d:
9e:4e:da:cc:1c:fe:a9:16:c6:8b:54:c4:3b:53:24:48:6a:46:
19:34:65:83:ec:13:b9:6e:dc:38:fd:26:c7:40:a7:53:27:43:
57:f0:e8:27:ee:54:d0:1b:9a:5d:a0:e4:b9:3a:04:f7:d5:5d:
1b:92:92:f6:ab:29:3d:5d:07:16:38:1d:ca:de:55:55:55:b0:
1f:5a:69:85:c5:2a:cd:49:54:15:23:ec:3b:9b:70:9f:d0:34:
e2:df:34:09:02:26:53:8a:05:63:bd:9f:18:25:f2:5d:17:f7:
09:9f:da:ef:57:2d:0c:95:a8:fb:eb:59:c1:cb:49:40:c1:c4:
a7:ee:1d:2d:c5:a3:d4:9b:88:4b:4a:4d:61:73:a0:aa:f1:cb:
d8:20:a4:36:37:6b:52:40:a5:b6:00:2d:4f:61:9f:7c:38:a8:
71:2b:41:7e:4a:92:21:35:7f:12:11:a7:29:a1:bb:87:da:94:
f3:ad:1e:24:98:84:3b:01:51:00:4a:00:b0:f3:cf:8d:65:8d:
45:d0:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:48:46 2026 by rpki-client