
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft
File: FA40F4074261959953C6B11359AE13D2C4B837D3.mft (raw, json)
Hash identifier: YHnWgT59BazlXyUBbG8sTo7km9cfirjnaydm7GAlp3Y=
Subject key identifier: 1D:22:E6:34:13:1B:07:D1:00:72:43:53:EB:5F:A6:5A:6B:0E:01:E0
Authority key identifier: FA:40:F4:07:42:61:95:99:53:C6:B1:13:59:AE:13:D2:C4:B8:37:D3
Certificate issuer: /CN=FA40F4074261959953C6B11359AE13D2C4B837D3
Certificate serial: 7C0D255B0CD5F53FA8BE81D3D6B6C8B223FDE3F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft
Manifest number: 017D
Signing time: Tue 24 Mar 2026 07:53:04 +0000
Manifest this update: Tue 24 Mar 2026 07:48:04 +0000
Manifest next update: Mon 30 Mar 2026 03:46:04 +0000
Files and hashes: 1: 323830363a3333323a3a2f33322d3438203d3e20323635353738.roa (hash: jy5uDbbD4h4ijOXJZoIvIDHLAv/HFzvHJbl+ECbKLcE=)
2: FA40F4074261959953C6B11359AE13D2C4B837D3.crl (hash: i6oPPk9f7hCMSbmPD2lKBRkCbtR4SPktVEnFMjiOiSo=)
3: 34352e3137342e3137342e302f32332d3234203d3e203238343335.roa (hash: GCk7Y3zwnSpl1jg9vGpVlxGF/2jcUM5Qdh8VmhzlZFM=)
4: 34352e3137342e3137322e302f32332d3234203d3e20323635353738.roa (hash: gaFz08cngNAgOlXufQVEUqSXu1xp8fiNuIt92ODg1NQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.crl
rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 17:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:0d:25:5b:0c:d5:f5:3f:a8:be:81:d3:d6:b6:c8:b2:23:fd:e3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA40F4074261959953C6B11359AE13D2C4B837D3
Validity
Not Before: Mar 24 07:48:04 2026 GMT
Not After : Mar 30 03:46:04 2026 GMT
Subject: CN=1D22E634131B07D100724353EB5FA65A6B0E01E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:94:b1:c4:10:32:f9:ce:01:01:db:be:61:
fc:b1:7a:fd:78:a6:6d:b6:e8:aa:01:09:28:22:32:
7a:2a:f7:4c:0b:7e:f5:61:64:db:4f:47:92:25:25:
7f:b2:f6:13:1b:00:f1:c4:52:c5:f7:4f:1b:82:1b:
c3:50:fe:a8:eb:61:1e:4c:b7:be:7e:f2:61:73:39:
63:a5:de:e1:19:0d:ae:af:81:87:45:d3:6d:b7:60:
86:8b:07:35:95:7d:5f:de:08:99:ad:81:6e:96:2e:
03:45:f0:da:83:77:59:1b:9e:25:f1:a8:31:a4:f5:
e1:ad:41:bf:1f:35:69:90:48:e7:3b:27:0e:3c:ed:
c6:84:3d:9e:5f:9d:fe:6a:23:03:78:bc:1e:d0:6a:
e3:5c:11:d9:19:ef:07:c4:9e:3a:f8:82:c2:39:01:
71:b8:35:f3:31:18:c3:8e:43:09:a5:d6:bf:fa:29:
1f:d6:f1:b3:23:00:e3:43:27:73:b4:e9:f4:10:d0:
35:b5:4d:50:9c:93:f6:7c:ea:dc:d1:8d:09:5e:3d:
e0:3c:2c:d0:f6:3d:d9:09:b1:09:d5:a4:ae:24:cd:
02:53:74:a2:78:c1:d1:b6:48:86:87:12:0a:67:98:
71:3e:71:91:08:37:df:5b:0d:d9:f2:b5:ca:12:c8:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:22:E6:34:13:1B:07:D1:00:72:43:53:EB:5F:A6:5A:6B:0E:01:E0
X509v3 Authority Key Identifier:
keyid:FA:40:F4:07:42:61:95:99:53:C6:B1:13:59:AE:13:D2:C4:B8:37:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2b:c5:93:5f:20:32:5c:25:60:7a:98:f6:e9:e8:87:6c:ec:
17:42:88:64:7d:15:2f:c7:9e:6c:a1:90:e9:5b:29:3e:e8:fe:
ab:d5:f7:94:c7:18:61:1c:68:57:ef:85:1a:b0:6a:03:fd:27:
8a:14:14:9e:66:cd:a4:08:56:b6:6d:75:74:74:76:1b:0d:ec:
ea:bf:59:2e:c0:55:7f:a2:30:c6:70:cd:e5:2b:53:60:58:68:
91:23:b9:f8:6f:a1:49:63:1d:1e:43:45:67:01:a3:6c:2e:7d:
e5:6f:cf:91:b6:9f:22:99:9d:4d:7d:36:c5:e9:71:88:fa:4c:
55:15:1f:2a:33:e4:54:6d:af:57:c0:5f:3e:f7:28:89:17:fd:
92:36:10:df:5f:08:97:ac:fa:ab:91:57:19:a5:f3:27:61:13:
92:b7:b5:4e:f5:fc:5c:79:76:a8:d6:09:2f:7b:61:e2:18:71:
db:a6:c5:46:b7:54:e3:05:6e:11:21:0c:fa:39:d0:ae:48:0a:
42:e6:d2:8b:2f:05:88:49:d1:9b:4e:3b:bd:64:2a:3a:92:62:
66:4d:e0:18:ff:5c:c5:88:51:25:38:cb:ea:eb:23:40:6f:24:
ea:53:e2:23:21:60:5f:10:bd:47:b8:a7:21:43:c3:04:5a:0e:
a4:dd:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:37:19 2026 by rpki-client