
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/AF6194751787595EA94DB6C60FC31E072349AB64.mft
File: AF6194751787595EA94DB6C60FC31E072349AB64.mft (raw, json)
Hash identifier: 7iXeH6dXLJ+wp3sxbAeWDDagyHhhg/MMM/F/3/w4Mw4=
Subject key identifier: D6:EE:E8:E3:08:32:15:22:3A:B7:14:1B:40:67:5A:BA:05:32:9F:B2
Authority key identifier: AF:61:94:75:17:87:59:5E:A9:4D:B6:C6:0F:C3:1E:07:23:49:AB:64
Certificate issuer: /CN=AF6194751787595EA94DB6C60FC31E072349AB64
Certificate serial: 21248E59C0E0C56859D941493FB5E36FD14389BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF6194751787595EA94DB6C60FC31E072349AB64.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/AF6194751787595EA94DB6C60FC31E072349AB64.mft
Manifest number: 0177
Signing time: Tue 24 Mar 2026 15:32:24 +0000
Manifest this update: Tue 24 Mar 2026 15:27:24 +0000
Manifest next update: Sun 29 Mar 2026 22:34:24 +0000
Files and hashes: 1: 323830313a3137393a313a3a2f34382d3438203d3e203139343239.roa (hash: RAWxHdFbwTdYTEU1UH7HzeC6PjBM63b9Nd5huhae2cE=)
2: 323830313a3137393a3a2f34342d3434203d3e203134303830.roa (hash: JEzvh21Rd1Qr0JJxWnLv9b1P3fRBpA1DprQ2gtx7R4U=)
3: AF6194751787595EA94DB6C60FC31E072349AB64.crl (hash: t86yUk9Je9IWnH9fmtOkmqexlXuHwBD7gmYvEmGzob4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/AF6194751787595EA94DB6C60FC31E072349AB64.crl
rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/AF6194751787595EA94DB6C60FC31E072349AB64.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF6194751787595EA94DB6C60FC31E072349AB64.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 22:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:24:8e:59:c0:e0:c5:68:59:d9:41:49:3f:b5:e3:6f:d1:43:89:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF6194751787595EA94DB6C60FC31E072349AB64
Validity
Not Before: Mar 24 15:27:24 2026 GMT
Not After : Mar 29 22:34:24 2026 GMT
Subject: CN=D6EEE8E3083215223AB7141B40675ABA05329FB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:e2:95:45:e1:7d:cb:97:2c:3d:17:c9:bd:
11:9e:82:23:09:ba:4a:25:57:4c:0a:d4:66:13:30:
05:d3:5b:e2:bc:13:80:f6:66:9a:c2:47:b1:ab:40:
6d:45:9b:9a:98:ab:b0:0a:97:18:28:ed:54:ab:fc:
2a:c4:f6:79:8a:42:14:bd:b1:20:2a:ed:99:60:e5:
ca:1e:e4:d2:9e:78:7f:2d:ad:0a:01:a7:46:12:ca:
4d:c1:dd:6d:f3:50:8c:5b:51:f1:af:e7:9c:63:d1:
9c:de:af:4e:2a:3a:c3:2f:bd:b5:75:c7:d6:d3:9a:
1a:7f:8a:7a:74:49:38:f9:d7:2e:6a:7a:d3:ec:2f:
9d:15:73:3b:04:bb:c6:92:44:08:ab:46:10:07:ff:
a7:80:47:97:1d:bb:3e:07:15:09:82:51:f6:46:21:
08:2f:1b:0f:20:43:5e:c3:ae:40:ec:ea:f5:93:9b:
07:ac:6e:be:6d:e9:bf:0a:c6:bf:a6:bf:0f:fd:61:
c8:ef:59:21:6f:6d:3c:a5:a8:ba:18:56:57:bd:1b:
35:5d:83:c3:15:35:1e:fc:71:4c:32:ff:bf:97:e5:
96:8d:7f:50:ad:39:77:90:45:08:01:67:ee:36:04:
4f:56:94:eb:0c:67:c4:25:0a:19:94:d9:88:31:56:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EE:E8:E3:08:32:15:22:3A:B7:14:1B:40:67:5A:BA:05:32:9F:B2
X509v3 Authority Key Identifier:
keyid:AF:61:94:75:17:87:59:5E:A9:4D:B6:C6:0F:C3:1E:07:23:49:AB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/AF6194751787595EA94DB6C60FC31E072349AB64.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF6194751787595EA94DB6C60FC31E072349AB64.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23CF7BCF3FD63282E1D70369DF92D59DA09BA872CB25EF30AAAD8D94B9FC4A0C/0/AF6194751787595EA94DB6C60FC31E072349AB64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2d:4f:4d:40:b9:ae:7c:f0:20:c3:4c:38:ff:c9:a4:d3:9d:
d9:59:a3:02:4c:bd:57:25:2f:60:9f:25:72:ae:69:ef:0b:e6:
32:97:34:c0:95:90:0f:5a:8a:ed:fd:a1:ec:69:df:15:f4:07:
7b:bd:0b:38:20:59:37:ae:2e:df:51:82:02:d5:93:75:10:87:
18:6f:ae:13:60:38:f3:c7:cb:29:ff:37:d8:46:ca:65:d0:8f:
29:b6:67:c4:1f:6b:ed:18:c4:e9:07:49:8f:db:84:7c:65:87:
60:b4:93:a8:b2:77:f4:b0:f0:47:d6:55:cc:48:8c:b0:1e:32:
b2:2b:36:24:c3:e2:00:6f:d2:47:e0:b2:48:63:3a:73:94:18:
55:a9:a5:f2:8c:b0:2d:e9:df:98:a1:a9:eb:09:91:f6:ce:9d:
81:b5:a2:c2:57:57:a3:05:c5:0a:e1:dc:cf:f2:96:7f:95:3d:
8a:2e:ae:ea:f3:a9:f8:4c:65:87:b2:e2:04:dc:ad:4b:78:67:
2b:85:59:64:25:60:d0:13:ae:5e:7a:84:f5:cd:8b:a7:48:87:
ef:d4:ea:58:63:d3:84:93:10:53:c3:16:c6:b6:87:47:26:04:
8a:12:a3:fb:47:93:6c:b5:de:29:c8:46:61:8d:4d:0d:56:ac:
05:57:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:33 2026 by rpki-client