
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft
File: 9AFA60D4E92B5689530450825C9C35894D0EB152.mft (raw, json)
Hash identifier: g0ko36aLs/kepCRc42nhN2Q5ge/5l9idCJyNuDqYFZY=
Subject key identifier: 3D:D3:50:8B:06:FE:6D:91:07:FD:8D:7E:6A:91:54:11:9C:F1:B7:77
Authority key identifier: 9A:FA:60:D4:E9:2B:56:89:53:04:50:82:5C:9C:35:89:4D:0E:B1:52
Certificate issuer: /CN=9AFA60D4E92B5689530450825C9C35894D0EB152
Certificate serial: 2C768368649A2F3DA7B2423D4EDAB3D79BA0EE55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AFA60D4E92B5689530450825C9C35894D0EB152.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft
Manifest number: 0171
Signing time: Thu 26 Mar 2026 20:23:20 +0000
Manifest this update: Thu 26 Mar 2026 20:18:20 +0000
Manifest next update: Tue 31 Mar 2026 02:06:20 +0000
Files and hashes: 1: 9AFA60D4E92B5689530450825C9C35894D0EB152.crl (hash: UMFEw2/iNYY/00K6V0lV2+Md1UfEyu/gxVtRx6xhzzs=)
2: 323830333a386231303a3a2f33322d3332203d3e20323732303733.roa (hash: +SPzQGpSkMBhPc7K/wmZPSDjYcbc1wZoO967aWn00OI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.crl
rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AFA60D4E92B5689530450825C9C35894D0EB152.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:76:83:68:64:9a:2f:3d:a7:b2:42:3d:4e:da:b3:d7:9b:a0:ee:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AFA60D4E92B5689530450825C9C35894D0EB152
Validity
Not Before: Mar 26 20:18:20 2026 GMT
Not After : Mar 31 02:06:20 2026 GMT
Subject: CN=3DD3508B06FE6D9107FD8D7E6A9154119CF1B777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:4f:0f:4d:97:90:61:d0:46:3a:77:c2:3c:
59:96:e9:c8:b4:62:bc:2d:cc:aa:5e:75:d5:11:df:
88:52:39:01:08:18:da:81:c1:cc:5d:b0:fc:bd:f0:
32:42:27:7b:fc:e3:fa:28:a3:1f:f4:1d:5f:98:aa:
d0:d8:90:62:73:35:51:6b:9e:dc:c6:27:f6:d3:49:
ea:17:7c:22:53:9e:ab:b4:39:df:93:b3:f3:96:3a:
e2:f5:f2:97:b7:f9:f5:7c:b5:72:b4:3c:41:48:c5:
de:a5:34:0b:ae:6f:17:5f:00:5a:bc:58:8f:b3:00:
e7:4e:3b:ae:2d:87:7f:5d:85:02:d0:cd:80:c5:c0:
2d:08:39:fd:03:c4:01:fb:22:78:42:db:db:fb:36:
09:2d:4f:da:22:11:3e:8c:f3:f5:42:c2:eb:ee:fe:
63:e4:88:67:e5:6b:4b:43:24:85:f3:9a:3a:48:17:
58:08:20:53:c6:0c:29:28:a8:cf:0e:17:b8:29:7a:
b3:b8:c8:9d:d1:f5:ba:da:3b:29:f7:46:9b:7d:71:
e0:84:20:93:27:2b:2d:39:6e:f2:82:36:bb:e4:bc:
73:d2:1f:97:a4:2e:26:4c:a9:f2:3a:da:41:e7:77:
7d:e6:2d:74:54:a1:c5:3d:62:c0:f3:b8:de:dd:ca:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D3:50:8B:06:FE:6D:91:07:FD:8D:7E:6A:91:54:11:9C:F1:B7:77
X509v3 Authority Key Identifier:
keyid:9A:FA:60:D4:E9:2B:56:89:53:04:50:82:5C:9C:35:89:4D:0E:B1:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AFA60D4E92B5689530450825C9C35894D0EB152.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:23:74:eb:1e:32:75:e7:c9:3a:ad:c4:07:04:ed:b4:29:91:
a2:08:5e:67:81:7c:17:dc:f6:e7:bb:65:1f:18:b1:83:d5:a9:
35:1e:68:b9:22:b6:1f:b9:fb:b4:39:94:d2:62:77:3e:3c:df:
d2:61:27:70:29:0a:ad:7f:cf:03:38:ee:d3:b1:3d:71:0a:c4:
af:3c:d1:87:30:ba:a4:1f:89:5b:cf:7d:c5:c1:a5:b5:30:f7:
ca:87:d8:df:b6:60:c7:55:a3:93:d8:79:81:56:60:2c:e6:c9:
78:24:f9:2b:d2:ad:d0:96:bc:bc:3c:63:6b:46:eb:db:63:45:
59:38:03:47:65:13:2b:31:97:e1:32:38:ac:cd:e4:8f:b5:60:
47:62:f4:ed:3c:c1:0a:44:26:de:87:32:ec:30:56:1e:70:c0:
6d:66:bf:64:fc:af:6c:18:e3:d6:87:69:0c:86:e8:39:ff:dc:
2e:3f:77:79:bd:af:a5:e7:4c:7e:e5:15:a9:52:cc:0e:ba:c6:
f0:64:18:b5:7e:01:67:a1:f3:c8:2f:d2:03:9f:f7:66:2a:24:
14:52:a7:4b:27:83:5b:34:45:85:e9:28:11:d4:68:a7:53:b3:
fd:51:a8:91:e0:2b:a4:da:69:30:4b:64:e8:30:b2:e1:93:41:
92:cd:dc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:10:13 2026 by rpki-client