
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft
File: BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft (raw, json)
Hash identifier: JKmbFLE4AN7Wa/M6LiKjEh0EFp1dMTaXhrVaPHn8kmE=
Subject key identifier: D8:AF:9C:E9:B1:FE:11:10:12:68:99:4B:DE:0E:BE:F2:7B:E3:71:4A
Authority key identifier: BA:6D:20:BA:A9:6B:C8:F1:7C:49:28:A4:ED:0F:18:86:73:9B:35:A6
Certificate issuer: /CN=BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6
Certificate serial: 4673951D4A81EEE8F1BF673F37F7331CB5518458
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft
Manifest number: 0197
Signing time: Mon 11 May 2026 11:59:16 +0000
Manifest this update: Mon 11 May 2026 11:54:16 +0000
Manifest next update: Sun 17 May 2026 08:32:16 +0000
Files and hashes: 1: BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.crl (hash: 1A4wwCHDSG1sEvH4hfDo1mC7+NG5AsJHBdA3a+M7+jE=)
2: 323830333a383361303a3a2f33322d3438203d3e20323637373435.roa (hash: O+0S8E+yLjMYBg3VdqLYDiemMG/MRrSDY7pf46zXLUY=)
3: 34352e3136392e3136332e302f32342d3234203d3e20323637373435.roa (hash: XBlxTGJp6aGaDgSRJknLau1c1C+OQFlfgVIYY4ko42Q=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.crl
rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 17 May 2026 08:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:73:95:1d:4a:81:ee:e8:f1:bf:67:3f:37:f7:33:1c:b5:51:84:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6
Validity
Not Before: May 11 11:54:16 2026 GMT
Not After : May 17 08:32:16 2026 GMT
Subject: CN=D8AF9CE9B1FE11101268994BDE0EBEF27BE3714A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:bc:d9:ba:34:d7:08:9d:a7:96:9f:c9:10:
21:20:4c:a8:d4:b0:84:22:e0:ec:ac:31:8d:7f:52:
76:af:e7:46:16:ac:e0:1e:f6:47:59:4e:62:12:d5:
42:ad:5a:67:7d:67:94:59:29:d6:2d:be:44:e3:d3:
ef:c7:5d:b8:cb:85:c1:dc:8f:fb:2f:40:be:19:ad:
eb:2c:35:3f:02:39:0a:ad:d8:c1:7f:fc:a9:c8:e9:
55:5f:48:d5:5a:87:77:f3:33:c7:02:e6:d8:98:38:
df:d1:82:37:88:a0:93:28:3a:d1:fe:ac:37:a0:fd:
40:cf:c8:33:6e:10:1a:f6:00:2e:78:ab:fe:c6:bd:
2e:19:a2:40:ae:87:9c:e2:de:c8:32:b7:6d:56:c5:
07:19:c0:f5:64:e0:aa:f2:d9:b3:e5:3c:e9:5e:c2:
fa:2c:5f:d9:66:0f:a0:08:0f:a7:d9:29:4f:8f:e4:
80:e8:1b:4d:2c:b8:a8:af:ec:c3:44:ec:12:3e:d9:
b6:24:03:9c:6c:64:d8:57:75:af:25:bb:ab:72:68:
d4:6f:9f:62:59:bd:30:3e:7f:cd:28:fc:32:33:ec:
e3:07:cd:a9:51:52:6d:87:34:7d:bd:18:dd:6e:8b:
79:b8:25:fb:c6:9b:b8:74:4f:61:d4:23:22:fb:4c:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AF:9C:E9:B1:FE:11:10:12:68:99:4B:DE:0E:BE:F2:7B:E3:71:4A
X509v3 Authority Key Identifier:
keyid:BA:6D:20:BA:A9:6B:C8:F1:7C:49:28:A4:ED:0F:18:86:73:9B:35:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:96:a6:9d:08:29:00:89:c8:18:3a:ee:bf:27:ce:3b:7a:50:
cf:f2:1d:57:4d:6e:c4:62:bb:f4:0a:17:f6:9d:52:a3:ec:6a:
49:2b:0e:a0:33:19:11:0e:a3:ad:b6:ea:10:18:44:6b:d0:66:
fa:2c:64:ae:0d:29:56:83:57:d4:fa:20:59:b6:6f:cb:44:09:
7b:17:7e:97:a0:dc:7a:7a:0a:be:34:a8:d5:cd:eb:26:61:3b:
db:44:8a:fe:bb:17:61:8c:2a:27:59:80:c6:d7:a2:f3:9c:c9:
74:92:7d:17:02:5a:f4:d8:ad:05:97:7b:61:de:6c:57:8a:5a:
6c:9f:1c:8b:bc:15:53:9c:96:22:6d:1b:16:31:aa:b8:76:e8:
59:c8:e3:14:eb:83:ce:9f:32:eb:0d:5a:72:67:78:81:24:d3:
f7:00:75:af:14:67:c0:65:5e:ba:05:3e:1c:38:37:f9:1a:38:
99:df:70:b8:c0:10:53:13:dc:57:8d:5a:d6:51:e9:e3:0d:74:
9c:1a:ef:ad:a7:59:e6:ef:f1:83:c1:4c:eb:1a:cb:94:8f:07:
52:9e:1b:74:4d:28:88:48:95:fd:25:73:62:8a:c4:ce:da:c0:
c4:44:cb:ee:40:2e:4e:b4:90:11:c4:bd:ca:d5:87:44:03:87:
15:7b:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:29:11 2026 by rpki-client