
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft
File: 21711620AC4F377630443FF5BDD3C78255256F48.mft (raw, json)
Hash identifier: Q9D35qi0SqBpPxk2BMpE+DK1VgM3ueMwT8wSAekeTYQ=
Subject key identifier: D4:E6:57:BE:B8:3A:1D:4D:31:55:96:D0:D3:3B:5C:70:4D:A2:25:AE
Authority key identifier: 21:71:16:20:AC:4F:37:76:30:44:3F:F5:BD:D3:C7:82:55:25:6F:48
Certificate issuer: /CN=21711620AC4F377630443FF5BDD3C78255256F48
Certificate serial: 3A943E0D555B4D8506F96C2E9B0AB1F419DAA892
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft
Manifest number: 01DE
Signing time: Sun 11 Oct 2026 23:33:57 +0000
Manifest this update: Sun 11 Oct 2026 23:28:57 +0000
Manifest next update: Fri 16 Oct 2026 21:44:57 +0000
Files and hashes: 1: 323830333a633438303a3a2f33322d3634203d3e20323633313934.roa (hash: 8CN7DPX3JC+c5yeUmjxC0N0IPIVCtGtuQI5wu3Bt9no=)
2: 21711620AC4F377630443FF5BDD3C78255256F48.crl (hash: WLBrbvy8WPNc3lKtnRLVjsoSon03ZmyTaI8WonPOKSg=)
3: 3137392e34332e3130302e302f32322d3234203d3e20323633313934.roa (hash: 4G69JA73rKr/gxBvpHmI0//naGruUKIM8Ss1pNxOscI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.crl
rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 21:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:94:3e:0d:55:5b:4d:85:06:f9:6c:2e:9b:0a:b1:f4:19:da:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21711620AC4F377630443FF5BDD3C78255256F48
Validity
Not Before: Oct 11 23:28:57 2026 GMT
Not After : Oct 16 21:44:57 2026 GMT
Subject: CN=D4E657BEB83A1D4D315596D0D33B5C704DA225AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:1c:0c:4b:96:08:53:f0:0c:c1:44:d5:7b:
77:2c:2a:9a:b0:5e:68:d8:21:42:6d:87:49:0f:90:
9a:48:5c:48:49:1f:df:b4:aa:c3:8d:25:c4:d0:bf:
ac:a6:81:94:59:93:a9:af:8d:bd:c9:71:16:5a:46:
1e:15:c8:13:e6:76:c9:0d:20:8d:44:2f:32:0b:2a:
9b:95:0e:06:7e:99:60:76:9d:03:7d:cd:7d:ca:c6:
e2:a7:fb:29:af:3f:b1:81:d2:bc:3a:bb:7e:fb:24:
e8:92:18:9a:ed:15:bb:f1:15:61:c2:80:7b:04:d3:
a5:36:c5:12:aa:28:f8:0a:12:31:e0:51:2b:bc:3a:
5c:e2:17:aa:c6:dd:06:8f:9f:ce:2d:16:78:f8:42:
3d:5e:74:a4:5b:ae:9e:58:f5:ad:76:eb:6a:19:fe:
ae:f4:a5:6c:9a:bb:86:02:14:40:73:fb:f5:ba:69:
5a:c6:68:91:f4:e2:5a:6f:85:2a:08:63:91:05:5d:
3f:97:af:49:30:df:39:d0:71:9d:82:82:c4:76:a4:
cc:5e:4d:1f:9f:fe:3b:3f:b0:b3:89:1f:f7:d8:d3:
99:e2:a3:2b:d5:bc:fa:0a:b2:a1:45:e0:4f:89:82:
e3:89:30:d3:95:14:c6:7b:51:fe:6c:67:a2:e3:c1:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E6:57:BE:B8:3A:1D:4D:31:55:96:D0:D3:3B:5C:70:4D:A2:25:AE
X509v3 Authority Key Identifier:
keyid:21:71:16:20:AC:4F:37:76:30:44:3F:F5:BD:D3:C7:82:55:25:6F:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:56:c7:7e:24:fd:9d:f5:21:23:d5:52:ce:d7:cf:24:46:46:
45:5e:c5:d2:46:f3:48:ff:e7:b5:8b:f2:c1:b5:3f:75:a5:ce:
92:f3:18:43:7e:9f:d9:8e:42:1b:4f:f7:dd:80:65:e3:08:8b:
1f:cc:0e:65:92:3a:8a:80:ae:68:50:5d:ad:ac:1c:28:a9:c2:
21:b9:ee:64:6d:25:99:4e:b9:11:00:03:59:e7:eb:4b:c4:91:
ad:23:77:11:ca:8a:a0:17:e3:5e:e0:f0:6c:e8:04:77:c3:be:
38:c0:14:f9:82:0b:c2:00:89:e0:b8:d0:b2:23:68:16:88:49:
bd:86:ef:13:75:a2:e3:30:bf:36:86:70:d5:34:fa:0b:b5:91:
8a:7b:dc:be:56:a0:62:58:77:f4:9d:e7:f3:22:15:1a:8b:b4:
27:16:74:ca:2a:c0:a5:37:b5:85:98:2c:15:2d:cf:ab:9a:d7:
65:b0:e6:ee:75:eb:da:02:20:ba:66:b8:84:a6:41:85:51:4b:
fd:f5:df:35:b9:c1:7d:c3:18:33:6b:6b:04:60:d7:a3:ca:6f:
53:5c:73:07:ec:43:20:2b:e0:4d:fc:16:a0:6a:55:8a:21:a5:
74:36:4d:05:7c:82:f7:10:d7:21:ea:64:d4:fd:51:ba:85:f9:
93:25:ee:49
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUOpQ+DVVbTYUG+Wwumwqx9BnaqJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE3MTE2MjBBQzRGMzc3NjMwNDQzRkY1QkREM0M3ODI1
NTI1NkY0ODAeFw0yNjEwMTEyMzI4NTdaFw0yNjEwMTYyMTQ0NTdaMDMxMTAvBgNV
BAMTKEQ0RTY1N0JFQjgzQTFENEQzMTU1OTZEMEQzM0I1QzcwNERBMjI1QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vBwMS5YIU/AMwUTVe3csKpqw
XmjYIUJth0kPkJpIXEhJH9+0qsONJcTQv6ymgZRZk6mvjb3JcRZaRh4VyBPmdskN
II1ELzILKpuVDgZ+mWB2nQN9zX3KxuKn+ymvP7GB0rw6u377JOiSGJrtFbvxFWHC
gHsE06U2xRKqKPgKEjHgUSu8OlziF6rG3QaPn84tFnj4Qj1edKRbrp5Y9a1262oZ
/q70pWyau4YCFEBz+/W6aVrGaJH04lpvhSoIY5EFXT+Xr0kw3znQcZ2CgsR2pMxe
TR+f/js/sLOJH/fY05nioyvVvPoKsqFF4E+JguOJMNOVFMZ7Uf5sZ6Ljwd3ZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU1OZXvrg6HU0xVZbQ0ztccE2iJa4wHwYDVR0j
BBgwFoAUIXEWIKxPN3YwRD/1vdPHglUlb0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMDJCMEM2ODk1ODk0QjZCQ0EyMUQzRTdFMDlBOUQ3RDMw
NDg4Njk5OEEzRTMzMEY3RkNEMTY2NTU1MENERjIxLzAvMjE3MTE2MjBBQzRGMzc3
NjMwNDQzRkY1QkREM0M3ODI1NTI1NkY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTcxMTYyMEFDNEYzNzc2MzA0
NDNGRjVCREQzQzc4MjU1MjU2RjQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTAyQjBDNjg5NTg5NEI2QkNBMjFEM0U3RTA5QTlEN0QzMDQ4ODY5OThB
M0UzMzBGN0ZDRDE2NjU1NTBDREYyMS8wLzIxNzExNjIwQUM0RjM3NzYzMDQ0M0ZG
NUJERDNDNzgyNTUyNTZGNDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0Vsd+JP2d9SEj1VLO188kRkZF
XsXSRvNI/+e1i/LBtT91pc6S8xhDfp/ZjkIbT/fdgGXjCIsfzA5lkjqKgK5oUF2t
rBwoqcIhue5kbSWZTrkRAANZ5+tLxJGtI3cRyoqgF+Ne4PBs6AR3w744wBT5ggvC
AInguNCyI2gWiEm9hu8TdaLjML82hnDVNPoLtZGKe9y+VqBiWHf0nefzIhUai7Qn
FnTKKsClN7WFmCwVLc+rmtdlsObudevaAiC6ZriEpkGFUUv99d81ucF9wxgza2sE
YNejym9TXHMH7EMgK+BN/BagalWKIaV0Nk0FfIL3ENch6mTU/VG6hfmTJe5J
-----END CERTIFICATE-----
Generated at Mon Oct 12 22:50:47 2026 by rpki-client