
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft
File: 4212A4C43151C156150D9BDED03D7236921BF9B8.mft (raw, json)
Hash identifier: Satg+8A++OuL9HStlnCjlezO9VbAKjoTAyjj2vfDch8=
Subject key identifier: D9:48:06:12:BB:1A:C2:FC:D8:E1:BC:6F:3B:E7:60:5E:72:BC:A3:22
Authority key identifier: 42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
Certificate issuer: /CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Certificate serial: 0259744DFBB73F0064AD0234BFD3243C387C6FD6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft
Manifest number: 0103
Signing time: Thu 26 Mar 2026 08:51:39 +0000
Manifest this update: Thu 26 Mar 2026 08:46:39 +0000
Manifest next update: Tue 31 Mar 2026 05:24:39 +0000
Files and hashes: 1: 3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa (hash: dkC8mqPWJaZAh71pFh6lhzs6FuM1DF4GOc7WdBTJMKs=)
2: 4212A4C43151C156150D9BDED03D7236921BF9B8.crl (hash: V/IwVcGnw19rkbg0/ZKafk0FQIHbcMGf7jWPzkKyEKY=)
3: 323830333a316265303a3a2f33322d3332203d3e20323733303635.roa (hash: EDnsk6Pe6w45gt7fELta4L5+EE/w3uMbDtLtTK8jGe8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl
rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:59:74:4d:fb:b7:3f:00:64:ad:02:34:bf:d3:24:3c:38:7c:6f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Validity
Not Before: Mar 26 08:46:39 2026 GMT
Not After : Mar 31 05:24:39 2026 GMT
Subject: CN=D9480612BB1AC2FCD8E1BC6F3BE7605E72BCA322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:76:1c:e5:6a:b4:e2:83:e7:44:29:ab:f9:
a6:9e:ae:ba:99:05:a6:de:a7:bf:e8:0c:72:ac:10:
9c:2c:32:cc:b2:cb:78:74:d0:67:6d:e9:30:c4:b3:
55:ad:c5:57:38:bc:f2:f4:38:d1:4a:58:ba:30:b8:
1d:a9:e9:b6:c8:63:98:57:76:1a:a9:b6:1e:ae:c4:
7a:68:46:c9:55:fd:f0:e1:9b:c9:b9:c7:23:49:e8:
f7:4f:8e:9f:63:c9:ab:02:22:d5:0f:ef:75:22:5c:
88:3e:ae:1d:b1:d2:97:a4:e3:e0:61:7e:64:30:f1:
5a:f0:76:c6:65:5d:06:04:66:03:8a:59:79:af:2a:
81:d9:24:ed:68:2d:b7:25:7e:d1:12:66:8c:5a:04:
f8:69:9a:6f:4d:ea:40:ae:02:ee:0b:05:fa:69:4b:
93:26:0c:f0:b8:ec:67:29:9d:b0:73:23:36:d0:76:
dc:54:00:be:ff:f4:d7:12:32:35:41:2f:e4:89:c2:
c9:e1:b5:1a:06:54:86:d8:ff:3b:b9:bf:fa:87:ff:
fe:08:19:cc:dc:c2:d2:d6:db:ef:4d:65:1c:25:e3:
ef:af:b3:d8:cc:37:8c:40:8a:20:ca:00:b8:2a:b4:
d9:b3:65:3e:ec:28:29:87:9f:1e:9b:75:08:ae:fa:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:48:06:12:BB:1A:C2:FC:D8:E1:BC:6F:3B:E7:60:5E:72:BC:A3:22
X509v3 Authority Key Identifier:
keyid:42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b1:05:e6:62:68:bc:3d:12:7a:ce:97:a6:cd:1e:80:c5:dd:
49:9e:50:91:75:81:2b:f4:57:72:02:6e:8e:f6:06:22:51:d9:
9b:13:82:bd:b2:22:76:50:4b:5d:cd:c6:20:dd:cb:26:80:25:
bd:91:82:1d:24:43:d5:b1:d5:c0:c7:8d:59:54:83:c5:6a:58:
c1:01:9d:6f:fc:74:b8:00:bf:89:e4:ae:f3:3f:10:0c:97:04:
d8:fa:91:bc:0c:36:a0:58:df:51:27:11:da:7c:b0:17:30:09:
53:91:51:4e:ed:0c:0f:ab:f2:af:a2:a7:55:29:83:08:d1:b5:
17:36:13:af:f7:9b:35:ba:e2:40:17:9e:f9:07:f5:54:c9:c6:
f8:cc:58:bf:f6:77:ec:9e:a2:c9:58:9c:ab:98:80:8c:fc:f2:
34:06:68:1d:7f:d8:ed:36:11:79:57:1c:e0:68:3f:da:42:f1:
17:0c:90:56:fb:5b:db:bb:51:5d:01:1a:71:8e:e7:f1:f7:80:
c5:c3:e9:33:a6:9c:e8:68:b2:59:0b:4e:f6:d4:86:37:76:13:
72:b2:f7:07:1d:23:96:16:6d:cd:e4:40:08:fd:35:46:91:81:
37:3c:8a:b7:f6:99:08:c9:16:b8:c0:fd:af:ca:67:45:f9:a7:
f8:1b:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:17:10 2026 by rpki-client