
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft
File: 4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft (raw, json)
Hash identifier: JCDrBF2RAEpz2LJihPo9i+MTUpBbEm95oALNLx9wVs0=
Subject key identifier: F8:B7:E8:08:52:42:D6:CB:67:69:B0:2B:50:07:F5:45:38:95:8E:52
Authority key identifier: 4D:F8:3F:FE:47:E5:A1:25:AB:23:CD:0A:47:43:90:78:CA:9E:11:98
Certificate issuer: /CN=4DF83FFE47E5A125AB23CD0A47439078CA9E1198
Certificate serial: 5BDBCAD4EBA7FF75DABA2E280A685B5913C50CC8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft
Manifest number: 0172
Signing time: Wed 25 Mar 2026 10:08:35 +0000
Manifest this update: Wed 25 Mar 2026 10:03:35 +0000
Manifest next update: Mon 30 Mar 2026 09:25:35 +0000
Files and hashes: 1: 323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa (hash: hyktxDxPXCLpbT21Pt/njxlTl3p6dKqfWAAnpaPoteI=)
2: 4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl (hash: VsCH1thKL7P1D6y9zLCDvjYblY/DMqQRGWjxWBq6XH0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl
rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 09:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:db:ca:d4:eb:a7:ff:75:da:ba:2e:28:0a:68:5b:59:13:c5:0c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF83FFE47E5A125AB23CD0A47439078CA9E1198
Validity
Not Before: Mar 25 10:03:35 2026 GMT
Not After : Mar 30 09:25:35 2026 GMT
Subject: CN=F8B7E8085242D6CB6769B02B5007F54538958E52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:a2:ab:5f:ac:bd:91:d5:4e:61:68:31:d4:
05:57:23:93:ed:01:60:88:17:bc:8f:07:fe:38:03:
1a:32:e1:05:44:2b:c1:0d:2e:30:ea:8d:a5:94:fc:
a7:52:30:56:92:c9:1d:90:ff:4b:70:e4:f4:26:3a:
8f:69:49:4c:e0:af:17:2b:19:30:33:ad:0e:0f:bb:
c9:5a:19:ea:15:93:27:d7:70:f2:51:a3:10:70:81:
38:a9:38:70:c6:c2:d5:ae:19:65:7e:36:5f:3b:f8:
97:58:38:8d:b2:1f:91:0c:57:96:01:c2:ec:3a:13:
c9:92:3b:71:2f:ad:f9:98:cd:28:da:dd:b3:1e:da:
38:17:2a:2b:7f:d0:93:ee:fd:41:13:8c:5f:b6:6f:
60:dd:ba:31:32:ec:e1:a3:f8:cf:74:b0:ce:eb:02:
f0:cb:56:0d:25:9c:7e:d3:fa:61:2a:13:f8:2f:05:
d4:56:53:bc:5a:59:55:bb:16:e1:6f:ac:a0:94:a9:
a9:dc:d7:9d:df:ca:6f:fa:6b:9a:b8:32:be:27:02:
76:fb:72:e2:08:88:91:02:ab:eb:c6:a4:51:27:6a:
09:fe:4c:49:f1:0d:03:55:f6:46:11:77:75:e6:67:
98:00:0f:18:b1:11:bd:4c:49:32:8e:55:6b:5a:a0:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B7:E8:08:52:42:D6:CB:67:69:B0:2B:50:07:F5:45:38:95:8E:52
X509v3 Authority Key Identifier:
keyid:4D:F8:3F:FE:47:E5:A1:25:AB:23:CD:0A:47:43:90:78:CA:9E:11:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:60:66:cc:26:a6:26:3b:2d:4d:57:41:a9:88:6d:a0:f4:d5:
2e:bf:c4:d6:05:af:1c:40:6a:2f:4d:38:d5:64:a7:ba:19:9c:
8d:2b:63:a0:8d:fc:5c:80:06:cf:ce:7e:b9:bd:eb:9c:ff:34:
c1:95:a3:37:0c:5f:2c:fd:dd:f0:49:3e:88:cd:02:b7:4f:e3:
41:9c:2b:17:33:91:74:d8:a3:1d:6b:99:b2:74:73:0e:10:a9:
4b:01:5b:5a:23:7c:c4:5d:18:08:c4:fd:8e:36:5e:73:ab:48:
89:34:33:a7:6a:f6:2b:81:05:52:ce:fe:45:02:fe:ef:60:90:
5a:44:3a:a9:59:5b:77:65:1b:54:19:c0:12:da:e9:c5:93:ce:
77:6c:42:39:35:b4:26:33:26:17:49:85:80:90:f2:dd:45:70:
03:6b:95:61:4d:d5:33:59:27:09:e4:f0:19:40:4d:28:97:b3:
f5:25:ba:85:2c:68:d2:a7:fc:c7:cd:2d:97:b2:d4:0a:04:88:
4f:f7:0e:0a:f8:50:94:72:f0:2a:f4:33:f5:0e:18:47:f1:a5:
d6:bb:84:b0:23:0b:88:68:ba:5b:6f:83:d1:6d:42:15:5a:13:
19:22:e0:07:ab:ce:e5:36:15:e3:42:dc:d0:43:67:a0:6e:fa:
2a:b4:8e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:12:42 2026 by rpki-client