
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
File: 4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft (raw, json)
Hash identifier: rRw6i/hmqftVTM5jEMp+WbtJVpz7QB+E0d0ygW0umno=
Subject key identifier: F3:FB:8C:96:C7:BD:D9:D0:E5:B2:C5:D6:91:BE:15:4C:88:1F:40:1C
Authority key identifier: 4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2
Certificate issuer: /CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
Certificate serial: 0753986B26282583F8725625521F44E2DF87B210
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
Manifest number: 017B
Signing time: Tue 24 Mar 2026 21:51:07 +0000
Manifest this update: Tue 24 Mar 2026 21:46:07 +0000
Manifest next update: Sun 29 Mar 2026 22:37:07 +0000
Files and hashes: 1: 4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl (hash: fDpgaJIf0xogQVC6cQZxTuXOrq6YSN5RvMF8nuGyfzI=)
2: 3134332e3230382e36342e302f32322d3232203d3e203332303334.roa (hash: kfkQCaTxorNFWswaaTRSTf0wMkkIV57VsqLm35Sie2k=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl
rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 13:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:53:98:6b:26:28:25:83:f8:72:56:25:52:1f:44:e2:df:87:b2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
Validity
Not Before: Mar 24 21:46:07 2026 GMT
Not After : Mar 29 22:37:07 2026 GMT
Subject: CN=F3FB8C96C7BDD9D0E5B2C5D691BE154C881F401C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:c3:ea:be:92:07:b7:8b:e4:0b:ee:e7:db:
73:e5:81:ba:a5:89:69:84:e1:7d:5f:1d:58:6a:91:
0e:dc:f0:8a:14:50:09:02:33:5d:c8:31:de:87:b1:
2b:5f:7e:11:e6:3e:1a:f9:68:ba:b2:f0:09:6c:b2:
0c:f2:a2:08:99:f9:2f:8f:fe:88:f5:90:7e:d7:b6:
3c:53:e9:5c:95:08:59:cc:ad:2d:b5:66:e2:b1:fb:
2f:52:46:44:88:cc:45:d9:b8:9e:73:26:cc:d0:56:
2e:9c:9a:74:a0:38:bc:01:41:61:33:ed:44:48:5b:
f1:07:fb:8e:43:df:0c:40:fc:67:de:ff:86:fa:a7:
0c:60:c4:df:f4:a7:57:ca:4c:eb:05:cb:57:ac:65:
0d:e3:ad:c1:72:64:df:b7:82:4e:d3:ab:18:70:c2:
c8:a1:56:62:22:f9:fe:bf:f8:08:f6:8b:c8:b0:79:
cf:86:f4:b8:b4:60:e7:31:4e:c4:b5:b7:bc:47:44:
b5:4a:7d:5f:d6:13:99:e6:37:4a:a2:56:31:32:d9:
32:89:53:95:61:90:d0:03:46:ec:a0:82:39:60:51:
80:00:9e:ca:5f:41:f9:5a:11:b6:0c:d2:1d:9c:c5:
54:37:7d:b7:2c:f4:5b:70:4d:89:20:68:ac:9c:51:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:8C:96:C7:BD:D9:D0:E5:B2:C5:D6:91:BE:15:4C:88:1F:40:1C
X509v3 Authority Key Identifier:
keyid:4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6b:38:74:75:74:a5:9d:a9:39:89:ea:73:df:eb:42:11:f3:
7b:a5:91:27:f4:86:1d:1f:05:32:53:c6:f7:4b:9e:d1:20:5a:
f9:82:5a:5a:cd:07:c6:eb:f0:a6:fa:e4:fe:c0:95:17:97:e6:
27:ad:94:b4:ee:ca:ba:56:81:0c:51:a9:c0:44:6a:e8:ce:66:
b6:56:26:68:17:14:f9:ec:63:d4:82:52:6b:ff:13:6d:fe:a1:
ed:db:85:75:df:74:3a:56:50:b7:bb:6d:ba:69:0d:15:a0:66:
99:ed:b3:23:d9:00:43:67:7a:b6:61:85:ac:7f:68:81:9b:9f:
6c:82:63:1d:7f:23:1f:c7:73:60:9c:e4:08:14:4e:f1:1e:87:
d9:94:09:62:1a:c7:33:51:d9:9e:b4:17:50:44:77:eb:da:16:
42:68:d4:14:b7:d2:fc:0a:e6:46:64:49:83:fe:e4:d3:a1:0d:
e4:70:bb:f8:1f:53:4c:18:36:8b:0f:87:02:00:e7:73:09:75:
30:65:2c:1a:ff:2e:52:7e:b6:1a:c7:f6:ed:3e:6d:a0:50:e7:
92:b9:51:8c:3a:d6:d3:f3:30:9f:22:7b:0d:a8:85:21:ab:c3:
28:84:76:69:6f:77:8f:73:85:d7:7b:3e:ae:5d:04:79:ca:27:
b1:b5:a0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:40 2026 by rpki-client