
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
File: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft (raw, json)
Hash identifier: 1I/NJtfUDAWdJ80384RmamtGJZiiuzqtSeWaGUtL6Ew=
Subject key identifier: C2:3C:3D:16:15:18:4C:96:0A:59:C4:F0:84:9B:3A:2C:E3:2C:42:D2
Authority key identifier: AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B
Certificate issuer: /CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
Certificate serial: 1731176427BEF68492EC1E5FFF65B2960D7285FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
Manifest number: 017D
Signing time: Thu 26 Mar 2026 06:05:06 +0000
Manifest this update: Thu 26 Mar 2026 06:00:06 +0000
Manifest next update: Mon 30 Mar 2026 17:54:06 +0000
Files and hashes: 1: 3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa (hash: xOt5MgbMcs/Gu2Sz180hCjy9JznRqG+a2o1Y8PTCEjI=)
2: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl (hash: y2fVuHf+jBoqCWEkqmLYlBLKyP4GJRDFckjXhWvOXR4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl
rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 17:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:31:17:64:27:be:f6:84:92:ec:1e:5f:ff:65:b2:96:0d:72:85:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
Validity
Not Before: Mar 26 06:00:06 2026 GMT
Not After : Mar 30 17:54:06 2026 GMT
Subject: CN=C23C3D1615184C960A59C4F0849B3A2CE32C42D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:df:f7:f8:2c:0f:18:eb:7b:9d:b9:b4:3b:
c2:5d:cf:97:c9:d2:22:a0:da:ce:28:34:04:0c:a8:
79:77:32:4f:cb:57:2a:54:14:34:8f:57:87:6a:cd:
5b:dc:b0:7c:76:a8:b1:01:2f:19:8b:22:e1:49:ff:
37:a5:86:f8:81:5c:87:3e:e7:32:02:ea:a0:11:8a:
63:17:2a:c4:dd:8f:47:9a:47:54:a5:db:4d:b7:73:
dc:3b:92:99:62:ff:8e:31:8b:10:03:a3:a1:1e:77:
76:65:39:86:ef:85:15:3e:63:ff:30:a1:9b:84:c8:
cc:1d:82:12:46:87:94:f0:a2:c0:cc:e3:90:e1:6c:
fe:c4:b8:48:8f:7f:52:3f:3a:86:92:de:92:87:eb:
dc:99:bc:60:5a:88:31:fb:54:a0:7f:eb:cb:05:76:
f1:fa:c6:78:c3:97:10:ba:42:3c:e6:b7:07:ab:7f:
31:24:69:80:10:da:34:f1:3b:2c:1b:0f:ed:39:52:
60:fc:9a:e1:24:fc:bb:e6:f2:4f:65:b6:64:2d:26:
29:0d:8d:fe:dc:0b:67:f7:50:9a:c7:df:2c:8d:4c:
e3:2e:06:53:89:93:3a:96:2c:f8:fe:31:9b:f4:02:
cb:44:39:34:55:43:2e:85:f8:7a:61:b3:a5:ff:d6:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3C:3D:16:15:18:4C:96:0A:59:C4:F0:84:9B:3A:2C:E3:2C:42:D2
X509v3 Authority Key Identifier:
keyid:AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c3:de:db:ef:d8:e5:c1:9b:3d:b9:ec:4e:01:a0:57:28:42:
2d:5b:25:9d:ac:e4:e5:7d:f5:f3:b0:18:3e:6e:ae:80:04:c2:
7d:a0:f9:78:28:68:34:f1:ee:0d:41:b1:2b:de:45:0e:51:1b:
2d:35:aa:64:39:d6:6f:79:0e:e9:43:92:75:34:df:52:72:c1:
16:37:08:b3:62:48:28:b2:8a:b5:be:e2:3d:e7:e7:6b:85:50:
16:15:97:c0:46:17:40:1b:77:ef:6f:45:70:39:2e:ca:4b:a9:
16:a6:f9:30:26:50:51:57:17:f5:49:00:aa:56:a4:8a:49:83:
df:0f:bd:72:de:8a:1b:14:1a:bb:84:df:39:3c:75:6a:ee:ad:
6d:98:d5:59:61:45:f4:c3:90:0a:6b:fe:41:bd:b6:1f:9d:7b:
e3:02:0d:af:00:de:9d:20:5e:97:0e:bf:6b:50:aa:d2:f5:d1:
70:a6:a4:6f:57:b6:70:db:c5:7e:4d:db:d8:83:e4:05:43:3e:
e4:1e:86:6f:8e:6e:15:de:69:20:56:fb:cd:68:4c:d8:43:6e:
ad:bb:4a:c8:69:5a:0e:33:3f:72:1e:d6:78:dd:f2:61:5c:c2:
d4:f2:63:48:ac:b4:14:f7:3e:bf:60:e6:4d:46:9a:7f:b3:bd:
91:14:c1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:08:10 2026 by rpki-client