
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft
File: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft (raw, json)
Hash identifier: dErKPrPdPTJzg8yK3sYwdUmaj2QPjV8MFsKxtK9Kh4c=
Subject key identifier: 53:E5:6F:95:6D:2D:56:12:81:AC:48:65:4F:9A:36:AE:E0:00:7C:E5
Authority key identifier: 20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5
Certificate issuer: /CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5
Certificate serial: 399532177270364E6CD55A1B929CD51D40A184E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft
Manifest number: 0177
Signing time: Thu 26 Mar 2026 09:26:56 +0000
Manifest this update: Thu 26 Mar 2026 09:21:56 +0000
Manifest next update: Wed 01 Apr 2026 03:22:56 +0000
Files and hashes: 1: 34352e3232392e34342e302f32322d3234203d3e20323636363837.roa (hash: jkUz2LRhidEbU4cZ9OqVygXivj/1mOqgTzdGb3u/neI=)
2: 323830333a653532303a3a2f33322d3438203d3e20323636363837.roa (hash: Sg5aUxTkgP5x31Dcq+LB9EPB88pYSmdTEmweMOpi0BA=)
3: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl (hash: laDjj8iWYiAbO/SpcBLSoJ85sw6H2IFnUwOTbGDITig=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl
rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:95:32:17:72:70:36:4e:6c:d5:5a:1b:92:9c:d5:1d:40:a1:84:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5
Validity
Not Before: Mar 26 09:21:56 2026 GMT
Not After : Apr 1 03:22:56 2026 GMT
Subject: CN=53E56F956D2D561281AC48654F9A36AEE0007CE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:28:92:ec:73:4d:af:e5:c7:34:b0:bd:6f:
7b:83:30:ba:2e:a3:94:89:f6:c2:e3:b9:0d:94:01:
5d:b0:2b:ba:ea:ff:12:fd:49:24:68:61:90:44:61:
a5:5b:5c:78:ea:29:60:49:17:ac:4c:39:f9:06:24:
b7:b4:6f:06:e1:6a:70:e1:58:cd:64:8a:70:46:b5:
fe:37:d4:d0:27:72:7a:72:2a:08:dc:1e:d7:e6:8d:
91:e9:58:23:1b:c4:a5:16:d8:31:52:5f:d2:a7:e5:
0e:2b:38:b4:7d:33:26:c8:b5:e7:1c:ba:4d:6d:d1:
98:9e:40:2a:f1:31:51:00:51:f1:77:ab:c5:e6:94:
23:75:37:3b:92:b0:f1:9b:ea:c5:89:2b:f8:11:5a:
a1:a1:99:69:64:49:d4:24:7b:6d:c6:0e:a6:2a:e4:
48:af:c6:6e:75:9c:1c:a2:d5:39:1e:8f:34:13:80:
f3:35:0a:2f:b4:c6:7c:64:b5:65:54:7e:c1:8f:6e:
ab:af:e5:27:c8:c1:7e:f4:68:43:6f:34:dd:e0:c2:
bd:d0:7d:bb:78:6a:08:a6:b5:5d:1e:50:8a:9f:11:
e3:b4:9b:bb:18:35:5a:9a:f6:f2:3d:e9:ea:d2:e0:
c7:cf:89:bd:91:46:48:c0:92:68:65:80:55:fd:0b:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E5:6F:95:6D:2D:56:12:81:AC:48:65:4F:9A:36:AE:E0:00:7C:E5
X509v3 Authority Key Identifier:
keyid:20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:78:ab:1e:66:29:76:cf:e8:9b:58:aa:9b:47:a6:7c:17:29:
04:ab:c2:e4:e0:fb:50:5a:59:a3:10:9e:61:5b:13:e0:b0:34:
3c:ec:ce:38:45:37:22:a0:fc:5d:d4:6c:79:3c:83:2e:73:50:
70:57:cc:e4:d0:f8:de:61:63:73:3d:b4:a0:ec:bf:25:aa:eb:
bf:d9:af:6c:4c:15:e3:72:21:ae:36:1f:c1:2c:90:ed:63:e8:
86:c2:4f:2c:c4:27:57:89:36:e2:64:d9:b6:54:98:ce:de:bf:
c4:4f:51:55:45:c6:78:cd:ae:8f:0a:89:5e:5c:82:4e:03:53:
bd:9c:ab:2f:9d:f6:00:37:7f:f3:0a:33:d5:1f:50:b6:d4:27:
51:37:39:c2:47:e1:52:e9:24:66:e0:9d:1e:c4:2c:fb:20:f3:
a9:32:a8:38:cd:20:97:5a:10:fb:8e:a4:40:6c:cf:90:d5:02:
46:90:92:1b:68:b0:4c:b8:13:2f:d0:c7:54:ad:36:a0:9b:d9:
73:da:09:5e:e9:00:8d:74:42:96:c0:21:93:c3:87:06:18:b9:
a7:a5:f5:f5:2e:f0:27:d3:02:bd:9d:67:a2:41:2f:b7:b3:e4:
4e:33:8c:81:c2:bb:1a:5b:de:57:44:5a:e0:71:4d:8d:8a:bf:
a3:34:64:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:55:51 2026 by rpki-client