
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft
File: 648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft (raw, json)
Hash identifier: jxkUhOuwj8DC6aDqbE2E4BksuFCARXs+yyAZB36hB1E=
Subject key identifier: 40:20:0A:E7:13:BA:58:14:95:0E:90:A3:BC:80:D8:5B:74:32:13:BE
Authority key identifier: 64:8F:B5:35:ED:8D:F4:46:D0:27:D2:3B:A0:4E:6A:CF:6A:CB:FB:7C
Certificate issuer: /CN=648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C
Certificate serial: 1879C5246AB510C5BECC5B2FA71AA0C32C14848E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft
Manifest number: 3A
Signing time: Wed 25 Mar 2026 15:26:33 +0000
Manifest this update: Wed 25 Mar 2026 15:21:33 +0000
Manifest next update: Mon 30 Mar 2026 12:46:33 +0000
Files and hashes: 1: 648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl (hash: 84O7TGPQg4PIY9t4KdrZu2GxEquwmBJCHcND18H273k=)
2: 323830363a3432643a3a2f33322d3332203d3e20323732343039.roa (hash: uN6tty7mkQaQxkU5KfULDNMRU1kOAAd04903zpBkwZs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl
rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 12:46:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:79:c5:24:6a:b5:10:c5:be:cc:5b:2f:a7:1a:a0:c3:2c:14:84:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C
Validity
Not Before: Mar 25 15:21:33 2026 GMT
Not After : Mar 30 12:46:33 2026 GMT
Subject: CN=40200AE713BA5814950E90A3BC80D85B743213BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:9d:3b:71:f3:7c:a8:85:7a:d3:a4:cf:54:
9d:89:07:15:e3:77:db:4e:7f:38:b3:0f:e3:17:43:
18:f6:d8:54:83:22:28:73:d0:fd:15:e0:ee:5b:20:
11:56:89:0f:5d:21:51:ca:63:9f:f5:29:ec:69:9c:
be:3d:09:d4:ac:3c:21:e0:b8:17:4b:26:5b:9f:aa:
37:1e:66:a9:a5:4a:4a:a5:cf:04:72:08:b3:71:81:
b1:5b:48:e1:06:7e:f9:94:34:fa:3b:6a:81:25:ce:
b0:fb:46:ca:b9:22:23:4c:d3:34:ba:5b:95:6a:de:
ea:18:0f:29:d9:04:77:8a:7c:fd:73:cc:85:4a:73:
94:dc:5a:b8:29:2a:00:19:35:89:c8:f3:00:73:22:
73:fc:74:b8:da:67:d1:b6:38:15:a9:02:21:cc:5e:
3d:a9:19:c5:e8:2f:b9:fc:a7:95:d0:fd:7f:d2:e3:
79:53:c2:dc:8c:79:12:12:5a:6d:0b:40:7c:e7:8b:
4f:52:d2:4b:2e:29:be:64:5d:b8:5a:8a:c4:2c:c5:
66:de:67:b5:1f:ea:ba:01:51:d1:90:ec:00:7d:09:
95:bf:95:bb:ba:e0:36:87:89:79:34:87:ce:8f:70:
9b:d8:9f:33:cf:85:00:80:3c:be:88:ae:b6:29:91:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:20:0A:E7:13:BA:58:14:95:0E:90:A3:BC:80:D8:5B:74:32:13:BE
X509v3 Authority Key Identifier:
keyid:64:8F:B5:35:ED:8D:F4:46:D0:27:D2:3B:A0:4E:6A:CF:6A:CB:FB:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:41:68:f3:61:3a:65:0d:69:0f:e4:35:73:3f:9e:14:13:c0:
3d:44:e5:d2:24:c3:19:05:07:50:d9:1e:da:0b:52:ce:42:47:
4e:bd:a3:f1:bd:cb:bb:ff:c0:78:ff:3a:02:8f:c6:a9:ef:91:
7e:89:40:fa:99:01:40:5e:6e:e5:62:07:f3:60:d9:9a:5b:a5:
8e:fe:35:03:be:06:33:d1:ed:2d:39:e6:3f:3a:9e:bd:0d:f9:
62:de:4d:4f:1f:1c:d8:ca:4a:41:9b:54:93:ae:a3:0a:84:78:
f8:d2:08:99:f9:eb:70:c2:f6:db:b6:f0:98:55:02:c2:f7:bb:
6a:6c:78:32:b2:8b:bd:98:87:e9:bb:33:48:81:02:05:fa:ac:
32:14:96:d9:63:5d:85:5b:15:78:6e:df:66:8d:8c:b8:ac:be:
dd:07:01:91:e2:4e:0c:53:f0:2c:69:66:3e:21:00:c6:36:f7:
a3:36:5f:9f:77:8d:de:39:f9:78:7f:10:c5:f6:70:ec:e9:fe:
a9:03:8a:a8:d0:1d:ee:51:2e:d1:6d:a7:4b:c7:73:b4:8b:f2:
66:ae:ac:9d:78:e4:2d:74:b5:77:04:73:46:e4:f7:9d:a4:9d:
6f:5c:7e:f8:cb:bd:91:4b:9c:5f:ee:02:bc:1f:b5:b7:55:10:
11:c5:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:54:35 2026 by rpki-client