
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft
File: 298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft (raw, json)
Hash identifier: KVXceVQ9aScQRz1mdmkff/jN3mkcSgRxA9MTRV3wQhM=
Subject key identifier: 3A:B7:D2:B6:5B:9E:A3:2D:88:45:63:9C:CC:57:B9:83:84:18:A0:C7
Authority key identifier: 29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39
Certificate issuer: /CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39
Certificate serial: 6291514128A8C329977695C766D9E8667B32DA8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft
Manifest number: 017A
Signing time: Wed 25 Mar 2026 14:15:58 +0000
Manifest this update: Wed 25 Mar 2026 14:10:58 +0000
Manifest next update: Tue 31 Mar 2026 06:20:58 +0000
Files and hashes: 1: 298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl (hash: I4R+9dwVn0BtGxb8sOob/3ZnDsap67LcxrYOh+Mq24E=)
2: 34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa (hash: C3SeuOiJQiODCy4RvtWZf3srHrFSMSQy4kGCYri+Tss=)
3: 323830333a623836303a3a2f33322d3332203d3e20323637383238.roa (hash: VnmDSU6NTApr21V6Y2gj5T20g0Oljnkj5FUUqJ7fLjc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl
rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:91:51:41:28:a8:c3:29:97:76:95:c7:66:d9:e8:66:7b:32:da:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39
Validity
Not Before: Mar 25 14:10:58 2026 GMT
Not After : Mar 31 06:20:58 2026 GMT
Subject: CN=3AB7D2B65B9EA32D8845639CCC57B9838418A0C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:ad:56:5e:75:88:00:5a:92:8c:6e:21:08:
16:0f:42:38:b5:7b:c4:9a:aa:f5:86:d2:ee:cf:14:
29:b4:e5:02:9d:1b:22:ac:4d:dc:22:73:4a:e5:c2:
ba:a4:96:42:e2:82:9e:b5:39:11:6f:4b:8f:97:49:
1e:69:32:de:d5:22:09:3d:1d:a7:63:45:dd:86:bf:
09:4c:62:70:bc:b2:a4:6b:6c:86:cf:2c:3b:6a:b7:
e7:39:14:5e:67:82:93:cf:b8:02:9b:42:b9:4b:dd:
7b:e0:91:4b:d1:3a:f0:1b:a5:05:aa:2a:1b:4d:14:
c8:06:30:df:2d:78:6e:fe:3a:9f:d3:71:fe:1e:bc:
be:4f:51:1a:6e:0d:67:a1:bd:af:3d:32:26:2f:a3:
b9:b0:3f:a4:25:0f:22:be:f2:0e:a4:10:a0:aa:1d:
bc:01:59:f8:c0:46:f8:2c:31:98:da:c1:cf:41:f1:
e8:04:9a:12:59:34:24:a5:1f:7f:c9:03:a3:72:4c:
de:78:9a:ee:42:63:eb:69:2e:2e:a4:eb:58:1d:51:
b7:1a:4c:5c:08:7c:81:dc:75:88:75:cc:71:bf:e6:
73:ee:0c:c1:de:a6:8b:fa:bf:a3:12:71:a6:89:40:
7e:45:18:b3:e0:3f:c0:47:02:d7:21:e6:98:3e:97:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B7:D2:B6:5B:9E:A3:2D:88:45:63:9C:CC:57:B9:83:84:18:A0:C7
X509v3 Authority Key Identifier:
keyid:29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:67:63:ef:e5:d1:8d:1d:a1:b0:3f:37:4e:bd:fd:b5:e7:e0:
19:18:12:21:48:f0:04:2b:86:99:d6:0a:b5:04:d1:f2:77:71:
04:af:0e:f8:40:34:90:3c:d3:63:7b:c9:23:ad:d7:8f:77:8b:
e8:32:13:9e:8b:1f:21:51:75:12:b4:05:4d:93:44:84:a3:bf:
74:b2:c0:cc:13:42:c5:42:32:04:62:98:77:d9:90:16:d9:c0:
b0:68:d8:87:9a:57:0a:93:4f:7b:bd:5f:4f:3a:ed:e1:fa:85:
1f:20:c8:ee:67:61:d4:ba:3a:a9:5e:2a:de:3b:46:80:47:88:
23:b3:a1:89:4b:14:a0:b4:15:89:b1:a6:92:2a:ae:3d:cd:8c:
1f:2c:ef:3c:0b:9c:e7:51:cb:db:74:1a:c3:20:85:2f:dc:1a:
c7:57:e9:02:92:07:5c:d3:94:9a:16:72:44:49:54:d0:01:b3:
0d:63:dc:ce:a6:13:02:01:93:7f:bc:37:08:a0:1f:6a:0b:d6:
d8:14:bb:ba:fe:a0:0a:c7:6d:5b:27:1c:b9:f1:05:2c:7b:b6:
b8:87:5c:fa:d7:73:f8:b5:70:95:26:b7:5b:89:c5:80:bf:b0:
47:59:40:32:04:34:aa:1d:1c:01:89:91:72:3a:4f:b8:a9:34:
04:be:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:40:00 2026 by rpki-client