
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.mft
File: 2CF1E43493BF6D8C874D42F3C1C2E968854077DF.mft (raw, json)
Hash identifier: /FwV2GVcGp5448RtlGKwCUHbhR6fUYPTcL5L5PQI9V4=
Subject key identifier: 8D:C6:9C:E9:77:8A:87:92:EA:EC:AB:04:DF:88:67:31:35:F1:C1:BC
Authority key identifier: 2C:F1:E4:34:93:BF:6D:8C:87:4D:42:F3:C1:C2:E9:68:85:40:77:DF
Certificate issuer: /CN=2CF1E43493BF6D8C874D42F3C1C2E968854077DF
Certificate serial: 6C0D31933AFC0E4ADA2034C9F701C4CD0DEFBAE6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.mft
Manifest number: 18
Signing time: Wed 25 Mar 2026 08:27:37 +0000
Manifest this update: Wed 25 Mar 2026 08:22:37 +0000
Manifest next update: Tue 31 Mar 2026 07:00:37 +0000
Files and hashes: 1: 3230302e332e3139342e302f32342d3234203d3e203238303834.roa (hash: a1D1858i3vsaTVBpTh/YdCH58rW7bRMnPGx5ABK4PXM=)
2: 2CF1E43493BF6D8C874D42F3C1C2E968854077DF.crl (hash: KkFmCYUKmhGHsp0DbiWuc7AAsD75uXm7ZrgiFT8qwcY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.crl
rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:0d:31:93:3a:fc:0e:4a:da:20:34:c9:f7:01:c4:cd:0d:ef:ba:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CF1E43493BF6D8C874D42F3C1C2E968854077DF
Validity
Not Before: Mar 25 08:22:37 2026 GMT
Not After : Mar 31 07:00:37 2026 GMT
Subject: CN=8DC69CE9778A8792EAECAB04DF88673135F1C1BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:92:bd:61:67:6e:76:33:5e:ed:ce:41:0a:
e0:56:0e:02:4f:e2:69:29:86:d0:15:3d:6d:9b:70:
a8:d0:e8:dd:78:c7:8b:8e:75:af:32:61:69:4c:9b:
ed:0b:ee:22:7e:45:91:08:22:3d:23:42:62:21:3c:
9c:6f:de:9d:e2:3d:e7:9e:27:43:61:ae:f6:d6:e2:
bf:fb:0e:1f:e9:a0:99:13:c6:06:99:d2:45:1f:29:
1f:05:a0:29:34:01:dc:d6:2c:ae:c6:f4:dc:0c:3d:
c5:73:eb:aa:c0:7b:3b:70:f1:99:5e:4b:f3:9a:a2:
5b:15:d6:2b:61:4d:77:b1:c8:09:36:7d:11:9e:ba:
ba:f1:a2:e9:3c:fd:be:c8:9a:95:5c:42:29:03:cf:
41:d8:ff:36:9c:05:3f:27:1c:ec:5b:69:d9:b4:45:
e8:b1:7a:49:db:72:ed:ac:19:ac:68:a1:f6:5d:d3:
1f:b9:8f:d1:4d:5f:bc:e9:00:3a:f2:c3:fd:d0:96:
c1:dc:6c:f7:37:77:fa:ea:3f:da:5f:be:4f:b7:57:
55:2a:59:13:e3:8b:07:33:15:91:30:be:b0:af:72:
cf:8f:59:bb:4d:2f:2c:7f:64:a8:06:25:dd:3b:59:
8c:29:af:d3:c2:a1:42:ad:92:5d:76:d8:01:37:fa:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C6:9C:E9:77:8A:87:92:EA:EC:AB:04:DF:88:67:31:35:F1:C1:BC
X509v3 Authority Key Identifier:
keyid:2C:F1:E4:34:93:BF:6D:8C:87:4D:42:F3:C1:C2:E9:68:85:40:77:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:98:16:6d:9a:e0:10:64:58:76:a7:18:76:09:c0:fa:28:b7:
de:17:ab:a1:fc:68:73:0d:15:9a:a6:17:e1:13:ca:a7:3b:d7:
c8:82:89:2b:dc:1e:0b:81:ed:53:73:a8:b7:9f:75:70:90:36:
64:d8:de:ac:30:0d:c1:ac:18:9f:20:cb:69:a7:f4:17:83:9f:
e7:07:87:27:e0:61:a9:44:2a:a2:53:be:de:b5:b6:07:cd:16:
11:50:3d:f3:b8:c0:a3:93:6d:41:44:5d:08:92:10:2b:4d:68:
8e:bb:28:da:42:84:20:12:b1:76:d5:7f:a7:99:0b:d3:08:d5:
47:17:86:dd:bb:fd:1f:93:a7:67:9b:c5:03:f7:41:f8:d3:bd:
27:f4:fa:20:55:73:d7:ee:91:02:6f:e6:0c:25:03:09:d2:42:
b7:17:81:d2:2e:67:e5:f8:ae:9a:37:52:85:45:97:b0:a7:59:
6b:8a:c5:98:d0:5f:93:92:63:53:89:fe:5d:f6:37:29:e0:d5:
22:4e:91:1a:0b:92:7e:fa:5b:1e:3c:5d:51:22:36:1b:3e:3f:
0e:ba:fe:c5:9d:a1:e3:03:a7:19:80:d2:3a:15:b0:9b:f4:e8:
08:92:4f:90:c5:c8:11:65:dd:39:52:d4:96:de:c8:55:49:7c:
39:39:5e:36
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUbA0xkzr8DkraIDTJ9wHEzQ3vuuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNGMUU0MzQ5M0JGNkQ4Qzg3NEQ0MkYzQzFDMkU5Njg4
NTQwNzdERjAeFw0yNjAzMjUwODIyMzdaFw0yNjAzMzEwNzAwMzdaMDMxMTAvBgNV
BAMTKDhEQzY5Q0U5Nzc4QTg3OTJFQUVDQUIwNERGODg2NzMxMzVGMUMxQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80ZK9YWdudjNe7c5BCuBWDgJP
4mkphtAVPW2bcKjQ6N14x4uOda8yYWlMm+0L7iJ+RZEIIj0jQmIhPJxv3p3iPeee
J0NhrvbW4r/7Dh/poJkTxgaZ0kUfKR8FoCk0AdzWLK7G9NwMPcVz66rAeztw8Zle
S/OaolsV1ithTXexyAk2fRGeurrxouk8/b7ImpVcQikDz0HY/zacBT8nHOxbadm0
Reixeknbcu2sGaxoofZd0x+5j9FNX7zpADryw/3QlsHcbPc3d/rqP9pfvk+3V1Uq
WRPjiwczFZEwvrCvcs+PWbtNLyx/ZKgGJd07WYwpr9PCoUKtkl122AE3+i+xAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUjcac6XeKh5Lq7KsE34hnMTXxwbwwHwYDVR0j
BBgwFoAULPHkNJO/bYyHTULzwcLpaIVAd98wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRTA5MTVBOTY5NjRCNDlDNTMzN0UzMDhGNUM0QjIyOTUw
QzQyRUQzOTc5RDRBOEFDM0NFQjBGQjVBRjZERTExLzAvMkNGMUU0MzQ5M0JGNkQ4
Qzg3NEQ0MkYzQzFDMkU5Njg4NTQwNzdERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQ0YxRTQzNDkzQkY2RDhDODc0
RDQyRjNDMUMyRTk2ODg1NDA3N0RGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEUwOTE1QTk2OTY0QjQ5QzUzMzdFMzA4RjVDNEIyMjk1MEM0MkVEMzk3
OUQ0QThBQzNDRUIwRkI1QUY2REUxMS8wLzJDRjFFNDM0OTNCRjZEOEM4NzRENDJG
M0MxQzJFOTY4ODU0MDc3REYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvmBZtmuAQZFh2pxh2CcD6KLfe
F6uh/GhzDRWaphfhE8qnO9fIgokr3B4Lge1Tc6i3n3VwkDZk2N6sMA3BrBifIMtp
p/QXg5/nB4cn4GGpRCqiU77etbYHzRYRUD3zuMCjk21BRF0IkhArTWiOuyjaQoQg
ErF21X+nmQvTCNVHF4bdu/0fk6dnm8UD90H4070n9PogVXPX7pECb+YMJQMJ0kK3
F4HSLmfl+K6aN1KFRZewp1lrisWY0F+TkmNTif5d9jcp4NUiTpEaC5J++lsePF1R
IjYbPj8Ouv7FnaHjA6cZgNI6FbCb9OgIkk+QxcgRZd05UtSW3shVSXw5OV42
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:39:13 2026 by rpki-client