
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/423A25E5C7D7AF9F1A4E12F58436170E1D775C073CE679FD4E8405860D9B1FD8/0/45A000CB7091C2067717C99065D8F7BDF14F630A.mft
File: 45A000CB7091C2067717C99065D8F7BDF14F630A.mft (raw, json)
Hash identifier: NvzRnGp7K8laGxJM4tyMRAqhmKl89WR4sSf2ucOeFY0=
Subject key identifier: 58:C5:1C:D5:E6:9C:8F:18:EE:19:9A:E8:01:42:BB:00:A4:82:21:4D
Authority key identifier: 45:A0:00:CB:70:91:C2:06:77:17:C9:90:65:D8:F7:BD:F1:4F:63:0A
Certificate issuer: /CN=45A000CB7091C2067717C99065D8F7BDF14F630A
Certificate serial: 4D6BB05C62C35CEFC451209F3EF14628F19B97AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A000CB7091C2067717C99065D8F7BDF14F630A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/423A25E5C7D7AF9F1A4E12F58436170E1D775C073CE679FD4E8405860D9B1FD8/0/45A000CB7091C2067717C99065D8F7BDF14F630A.mft
Manifest number: 97
Signing time: Wed 25 Mar 2026 11:39:25 +0000
Manifest this update: Wed 25 Mar 2026 11:34:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: 45A000CB7091C2067717C99065D8F7BDF14F630A.crl (hash: MA2a+opr8sHuo9Z+U3vA2GRAMjOaZSCtPVyaQ5FoYlw=)
2: 323830333a646564303a3a2f33322d3332203d3e20323734313138.roa (hash: pHwbJM8jtc6SAFv7tkDmiYGpqNatv/yhnlKUnd9L1KQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/423A25E5C7D7AF9F1A4E12F58436170E1D775C073CE679FD4E8405860D9B1FD8/0/45A000CB7091C2067717C99065D8F7BDF14F630A.crl
rsync://repository.lacnic.net/rpki/lacnic/423A25E5C7D7AF9F1A4E12F58436170E1D775C073CE679FD4E8405860D9B1FD8/0/45A000CB7091C2067717C99065D8F7BDF14F630A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A000CB7091C2067717C99065D8F7BDF14F630A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6b:b0:5c:62:c3:5c:ef:c4:51:20:9f:3e:f1:46:28:f1:9b:97:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45A000CB7091C2067717C99065D8F7BDF14F630A
Validity
Not Before: Mar 25 11:34:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=58C51CD5E69C8F18EE199AE80142BB00A482214D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:34:ce:9e:39:7b:71:26:0d:9b:d2:b9:fc:
a4:d9:d0:87:c3:63:c4:de:a7:57:4a:7f:fa:74:80:
e9:c7:8b:32:5e:84:a5:30:69:54:f9:30:ed:f1:56:
a5:60:98:33:de:ba:d6:72:ee:02:7f:dc:4f:31:f3:
ed:50:ad:2c:dd:1f:00:43:72:0a:16:b5:8e:3d:84:
2e:13:8a:e0:06:17:79:4d:c0:dd:19:7b:f9:d3:64:
d0:fb:08:6f:10:67:52:bb:62:6e:09:74:ef:24:34:
f5:7b:7d:03:ec:79:66:13:d7:81:91:47:91:4d:37:
86:63:c6:9e:06:04:4a:5e:c9:30:d6:3e:13:39:09:
b7:2b:86:07:e6:76:df:40:86:82:88:b6:3d:88:4c:
70:53:36:70:a8:8d:49:92:0f:cf:aa:71:f2:ac:5b:
68:f2:be:03:89:85:58:a3:dd:15:d7:bd:44:2b:9c:
f3:af:a4:38:97:1e:8d:70:f2:22:36:fa:eb:86:b6:
b9:87:d0:a0:27:aa:7c:f5:41:35:e7:e4:b8:4c:0d:
46:99:ef:df:ee:2a:14:20:fd:1f:31:8a:e5:95:36:
2d:d7:4b:6d:cf:92:95:af:d6:8a:67:98:42:86:0a:
45:11:5b:bc:5a:6d:b6:40:29:15:ac:f8:63:46:61:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C5:1C:D5:E6:9C:8F:18:EE:19:9A:E8:01:42:BB:00:A4:82:21:4D
X509v3 Authority Key Identifier:
keyid:45:A0:00:CB:70:91:C2:06:77:17:C9:90:65:D8:F7:BD:F1:4F:63:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/423A25E5C7D7AF9F1A4E12F58436170E1D775C073CE679FD4E8405860D9B1FD8/0/45A000CB7091C2067717C99065D8F7BDF14F630A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A000CB7091C2067717C99065D8F7BDF14F630A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/423A25E5C7D7AF9F1A4E12F58436170E1D775C073CE679FD4E8405860D9B1FD8/0/45A000CB7091C2067717C99065D8F7BDF14F630A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:51:d1:08:60:b9:c9:cc:76:b1:ef:80:93:1d:2d:65:4a:65:
18:75:32:e4:8b:b3:52:4b:3f:ae:c9:35:cc:b1:5f:e3:1c:14:
8d:ae:e4:a9:f1:3b:ae:a4:db:5d:7a:55:ca:51:23:97:4d:54:
13:f8:d4:65:25:30:72:7b:48:3b:22:39:9b:ce:3e:f0:77:d0:
bc:f9:ee:dc:fc:19:19:1c:91:78:86:2d:da:fa:51:04:7f:af:
ba:9e:12:8e:10:50:f3:cd:61:ed:af:97:bd:ab:a8:3d:d4:66:
06:0c:37:53:f8:e4:d2:4b:06:d7:46:5a:04:46:7d:fd:63:46:
d5:56:89:9c:43:52:ff:31:68:91:d8:ed:c0:fc:5e:d0:f7:c2:
9e:22:b3:1b:11:6e:02:ce:2b:a1:23:5a:b1:f3:14:bf:a2:93:
d3:11:22:05:a6:7c:a6:81:4a:f2:0a:65:b0:47:60:b6:d6:a8:
d7:5d:7c:6f:9c:34:f9:c5:0e:f0:f4:e6:a3:3a:89:c8:a0:cf:
f1:5f:fd:4b:a2:6a:2d:89:e9:c8:65:2d:d3:b6:61:8c:f9:27:
66:57:9c:45:c5:39:b4:8c:26:c4:84:20:45:60:e8:52:9e:b5:
c1:aa:6d:a1:4e:75:fe:5b:a1:67:aa:49:c0:f9:00:f9:79:51:
fa:a1:54:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:08 2026 by rpki-client