
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.mft
File: DB17AC52119D8F4E529903F396DBDF334E28EAB9.mft (raw, json)
Hash identifier: +L56kUjjLRWeDMmRW4zhZZFNE+aqo+h15N7m2E26ONc=
Subject key identifier: 58:B3:01:9A:84:3D:D3:ED:74:A4:5B:0A:E1:D5:07:A4:BA:BE:2F:29
Authority key identifier: DB:17:AC:52:11:9D:8F:4E:52:99:03:F3:96:DB:DF:33:4E:28:EA:B9
Certificate issuer: /CN=DB17AC52119D8F4E529903F396DBDF334E28EAB9
Certificate serial: 755E057A5EA6CC163A7D676502E25E4CFB933FFA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.mft
Manifest number: 25
Signing time: Thu 26 Mar 2026 12:18:39 +0000
Manifest this update: Thu 26 Mar 2026 12:13:39 +0000
Manifest next update: Wed 01 Apr 2026 09:20:39 +0000
Files and hashes: 1: DB17AC52119D8F4E529903F396DBDF334E28EAB9.crl (hash: nYpsp1K2jF5QiM77iDO1UEZP6L+LnZ7Z4logjC58dc8=)
2: 3230302e33342e33312e302f32342d3234203d3e2037303837.roa (hash: FgJ5QEe7GLgLQJ6/sfPgIsI1WTgELnJARdFsDYJMaUs=)
3: 3230302e33342e33302e302f32342d3234203d3e2037303837.roa (hash: lMUW4yXWwK0lw8TstGW4M0Qzy4bUKCc3URZ+Q5rH+bw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.crl
rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5e:05:7a:5e:a6:cc:16:3a:7d:67:65:02:e2:5e:4c:fb:93:3f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB17AC52119D8F4E529903F396DBDF334E28EAB9
Validity
Not Before: Mar 26 12:13:39 2026 GMT
Not After : Apr 1 09:20:39 2026 GMT
Subject: CN=58B3019A843DD3ED74A45B0AE1D507A4BABE2F29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:5b:2c:06:86:6b:58:fd:1f:26:26:32:44:
fa:73:7b:6f:c4:74:6f:17:cc:8f:35:d9:86:16:87:
bf:d2:4c:5d:6b:68:d9:83:02:81:70:74:2e:88:c4:
13:18:ec:66:da:a0:e3:0a:86:95:d3:f7:5f:25:a6:
fc:9a:00:53:f5:92:b9:6d:02:53:1e:d5:aa:31:b6:
a0:52:dc:3d:7a:ae:e6:bc:65:96:91:e3:cb:5b:df:
97:4e:ab:b1:3e:98:55:83:71:a3:27:5c:fd:5a:34:
98:35:5d:69:da:51:b9:4a:bd:97:86:89:9e:b1:aa:
92:ca:20:ca:c7:08:db:dd:f4:c2:fe:1d:b4:56:b9:
44:49:3b:f7:b6:e7:53:01:60:4f:8e:39:a2:8a:d7:
1d:21:20:cb:ed:90:b3:17:33:a6:80:ba:07:4f:c7:
3b:8e:f7:1f:b9:a3:95:4f:3f:02:ac:c4:02:fc:fd:
9d:ff:aa:2a:87:7d:bd:17:74:5e:94:2d:e0:3c:4d:
71:81:20:1d:6c:26:d7:b7:33:47:19:7a:8f:51:bd:
ee:e3:5c:ec:f1:2b:cd:85:91:57:7b:ce:cf:2d:1a:
0f:c0:1a:71:24:f4:96:90:1f:39:89:75:9c:de:03:
23:db:68:33:82:12:73:a3:b5:52:d6:55:44:bd:c3:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B3:01:9A:84:3D:D3:ED:74:A4:5B:0A:E1:D5:07:A4:BA:BE:2F:29
X509v3 Authority Key Identifier:
keyid:DB:17:AC:52:11:9D:8F:4E:52:99:03:F3:96:DB:DF:33:4E:28:EA:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4f:10:22:97:b0:a1:90:8b:18:4d:eb:b4:27:47:03:a5:48:
ec:d4:50:eb:69:a6:3b:67:8a:16:e1:b6:e5:05:15:d1:31:69:
8a:06:51:34:14:a0:69:15:af:e2:bf:bb:62:e5:f4:96:7f:9e:
c5:6e:62:49:af:54:d7:02:f3:44:bc:48:22:3e:a1:1a:9a:7f:
e0:73:c5:7b:75:07:84:6d:8d:cd:77:65:b6:0e:ad:ac:c7:40:
a7:09:c6:e3:2e:04:17:e9:5e:80:80:eb:fa:56:bc:14:a9:0f:
20:db:20:3e:df:91:d3:a6:ed:b9:d9:84:f6:e7:69:88:44:12:
7b:b5:be:d4:66:29:5d:41:57:f7:73:3a:45:c5:55:80:2b:a7:
7a:ee:1c:3a:eb:46:be:3d:84:cc:6a:c9:72:cc:bd:ed:ee:fa:
63:6f:63:4b:d9:b0:60:96:2c:51:cd:78:8a:64:ce:ff:79:74:
b6:d9:94:ce:d1:eb:e8:ac:6f:6d:4d:c9:b4:af:b1:a9:9a:28:
c6:03:d9:94:3b:4e:8d:13:16:cd:b2:e6:ca:28:80:f9:1d:08:
ac:b3:5b:58:5e:16:7a:cb:78:54:c3:7b:d6:79:97:64:60:c8:
48:1d:4d:c0:4c:35:e1:21:2f:f5:5d:62:d8:c7:54:61:bb:66:
fb:0e:3b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:52:52 2026 by rpki-client