
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft
File: 2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft (raw, json)
Hash identifier: HgTVEXrv3MW1pXSlr97nJ2Ndo4j0bCeoJPTv24mij3g=
Subject key identifier: 9D:36:8F:8F:E2:57:A7:17:92:EC:B6:9F:C5:46:23:92:64:5B:2D:41
Authority key identifier: 2C:36:A6:70:C5:3A:27:F6:5B:8E:F7:F3:09:F0:70:97:DC:EF:7A:41
Certificate issuer: /CN=2C36A670C53A27F65B8EF7F309F07097DCEF7A41
Certificate serial: 1CAC1C64708088F3E3C015B04D2208E2536D1ADE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft
Manifest number: 7F
Signing time: Thu 26 Mar 2026 20:03:04 +0000
Manifest this update: Thu 26 Mar 2026 19:58:04 +0000
Manifest next update: Mon 30 Mar 2026 20:20:04 +0000
Files and hashes: 1: 323830333a393530303a3a2f33322d3438203d3e203532343330.roa (hash: U9Mq+Gi8Z8joOk/RSRP12pFseCixpikunYEFBOBCP8E=)
2: 3138362e36342e39362e302f32312d3234203d3e203532343330.roa (hash: odiDAQPXm/RSZtQYjFfcLTdCPZixdMRvDKgNO4nPIQI=)
3: 2C36A670C53A27F65B8EF7F309F07097DCEF7A41.crl (hash: hXtot+W25J5lbmXpjiRF1y+g8avAaE5e5DUnqFIeCQM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.crl
rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ac:1c:64:70:80:88:f3:e3:c0:15:b0:4d:22:08:e2:53:6d:1a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C36A670C53A27F65B8EF7F309F07097DCEF7A41
Validity
Not Before: Mar 26 19:58:04 2026 GMT
Not After : Mar 30 20:20:04 2026 GMT
Subject: CN=9D368F8FE257A71792ECB69FC5462392645B2D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:3c:e7:8b:4e:29:0d:d3:57:30:18:0a:eb:
14:96:c4:e3:4b:cb:c2:f8:4c:c1:d2:c9:44:67:5f:
fa:41:db:92:51:22:43:2a:0b:15:d5:50:57:ff:4d:
f8:6e:69:46:e2:ef:de:b5:31:87:a8:7b:ab:d3:aa:
87:db:94:e9:eb:94:d5:60:80:d3:de:ac:ed:db:c4:
7f:2c:54:6a:c2:49:f6:62:51:9d:b0:33:95:75:14:
c1:ba:c0:1f:d6:46:ea:ec:b6:ae:fe:b0:03:7d:47:
fd:32:a8:34:68:a3:3e:c5:02:66:32:75:27:8a:0d:
1c:5f:7e:cd:82:ec:d9:15:11:59:7d:5f:1a:72:9a:
fd:ea:c7:13:d3:af:8d:04:b2:e5:28:7c:fe:f4:9f:
a7:ff:af:4f:8f:48:e2:86:9d:95:54:56:f8:2b:f9:
27:55:fa:59:3b:40:46:47:15:71:8d:f5:fd:a1:15:
78:a7:66:f2:e7:1b:de:c8:a6:f2:af:05:f0:80:e7:
5d:be:81:91:fe:b5:51:79:71:9f:78:42:d7:c2:99:
ac:ef:7e:b6:1a:34:e5:88:7e:b2:f5:67:8f:96:51:
cb:55:e9:7c:23:20:b1:2a:65:85:73:82:76:b1:2a:
14:46:70:45:23:32:ac:b4:54:d3:cd:e9:75:d7:53:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:36:8F:8F:E2:57:A7:17:92:EC:B6:9F:C5:46:23:92:64:5B:2D:41
X509v3 Authority Key Identifier:
keyid:2C:36:A6:70:C5:3A:27:F6:5B:8E:F7:F3:09:F0:70:97:DC:EF:7A:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9d:b2:36:39:ed:2a:e7:f5:13:35:78:03:83:59:5b:f1:86:
28:72:a0:44:15:6c:9c:40:33:cc:ee:e6:71:c4:1b:e9:20:61:
72:31:4c:67:bf:35:ee:2d:f7:70:a1:83:d1:59:08:15:42:15:
a1:5a:c0:13:e0:d6:f8:96:03:cc:d6:33:96:8a:ed:a9:76:a8:
c9:32:6c:61:3b:b5:9b:32:18:2b:7f:e5:18:ea:cf:5c:fe:ca:
50:34:a2:54:08:ee:e9:00:cb:22:45:b5:c2:88:e8:1b:07:92:
06:f9:df:fe:4a:54:3d:27:94:2d:66:f0:3d:ab:46:2e:c4:f5:
68:54:c9:31:d2:30:99:a4:8f:17:0d:51:a6:17:93:a5:be:ee:
6a:96:f1:5a:37:ca:c6:30:b5:8c:a4:d6:09:08:a8:54:78:17:
37:28:7c:cb:f3:8b:1e:b8:0d:fc:8e:f6:f7:66:7a:7a:ee:3b:
c7:97:12:1c:4b:7f:e0:ae:36:5c:f0:5b:38:d4:d4:dd:30:57:
aa:b6:1c:5d:41:0c:ed:d5:be:74:c9:12:07:6a:b1:72:5f:28:
9b:e5:2a:23:d6:01:a2:28:00:8c:0a:87:93:fc:e1:12:16:5c:
54:f6:8a:95:a8:54:44:b3:fa:27:f1:d8:7b:87:c9:43:a2:28:
12:47:65:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:50:25 2026 by rpki-client