
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
File: AA2338B66632D823F77072125112B5BF1F721769.mft (raw, json)
Hash identifier: WFGLwMx0gFxKY0DQQcObVRJqMN676B+Pkm/uHXyVTtM=
Subject key identifier: 2D:2F:1F:F8:4C:FB:F0:92:EA:E0:9F:90:74:EA:C9:BD:51:5B:F9:FE
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Certificate issuer: /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial: 0618B444E6BDE9962565B9AFA8ACC5FDA213D829
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
Manifest number: 0177
Signing time: Wed 25 Mar 2026 18:28:19 +0000
Manifest this update: Wed 25 Mar 2026 18:23:19 +0000
Manifest next update: Tue 31 Mar 2026 00:04:19 +0000
Files and hashes: 1: 34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa (hash: LkCZxCyAuIrADNbDworLC+OdX9XvaBOSze8dj/27xsI=)
2: AA2338B66632D823F77072125112B5BF1F721769.crl (hash: T1FqxJnHcELoy/pbEXDKrRvTxpPzlShGBL8gTJR+GBc=)
3: 34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa (hash: KqEDgK6dPR5pezxaXmPeaJ8fMkW3dzyGrMJP0llK+Uc=)
4: 34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa (hash: SpfcZUQi77eBwB6czggXOfLrkFAYjmUxFOItmPslgf0=)
5: 34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (hash: E5eo8MMklIeYQBWAJkmTZjSBHIb80W4f0MfsVyxQVVo=)
6: 34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa (hash: r/2mVZsjY64qv+odHhZ1YzATnWCDhY1Z2dOYpA3mEoI=)
7: 34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (hash: KfCwacbp9eH9hJb9ZGCMfC5QzcFXtkIAZsp5iOIs0Ic=)
8: 34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa (hash: u2ZvMdhwZAssXBxw58EFni6m+O1DDLR6gZFw+/rCTeE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:18:b4:44:e6:bd:e9:96:25:65:b9:af:a8:ac:c5:fd:a2:13:d8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
Validity
Not Before: Mar 25 18:23:19 2026 GMT
Not After : Mar 31 00:04:19 2026 GMT
Subject: CN=2D2F1FF84CFBF092EAE09F9074EAC9BD515BF9FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:a6:49:63:05:dd:32:35:82:4d:86:9c:e6:
ff:12:69:b3:18:6c:23:45:88:27:f2:3e:22:52:55:
bf:7d:51:af:8a:8d:cd:c5:f3:37:47:1c:80:83:21:
38:f5:4b:03:be:5b:22:81:e9:3c:34:50:92:15:e4:
19:75:a6:3c:fb:a9:79:65:46:a5:58:9c:ab:7b:54:
ad:0b:2b:95:1d:4f:43:81:a1:f4:54:90:1b:fa:ea:
30:40:bc:05:28:f5:2c:f9:3b:29:32:4b:c8:42:00:
78:02:5d:ed:bb:4c:4a:2f:67:16:81:f6:6d:66:8c:
44:62:9f:32:e9:34:15:7b:9e:2c:d4:ec:9b:f6:16:
64:61:b2:e8:dc:82:e1:bf:23:b3:bf:21:4e:b0:28:
2c:0e:25:c5:0d:bc:8a:ee:1e:10:ef:22:53:0f:eb:
73:8d:dc:a8:03:dd:04:be:85:9d:e4:a0:f4:37:93:
42:5c:02:a4:25:7c:ff:66:0c:6a:3a:1d:bb:85:43:
9c:85:b2:62:48:52:f5:72:88:04:81:b3:9b:f4:94:
9c:8a:cd:45:ef:11:9c:49:14:f3:b5:99:7b:0f:0c:
2d:d1:ba:74:14:0a:58:d1:11:d7:4e:ba:2d:e7:e4:
34:e0:cf:ae:9a:9f:da:c0:44:ce:da:e1:5f:f8:c3:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:1F:F8:4C:FB:F0:92:EA:E0:9F:90:74:EA:C9:BD:51:5B:F9:FE
X509v3 Authority Key Identifier:
keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3e:cd:4f:24:bf:46:e1:72:b7:d0:3e:28:cc:88:e1:90:ae:
00:32:0f:f9:90:c2:03:04:90:a4:b6:53:a0:41:31:cb:e8:72:
88:e8:2e:93:1c:06:25:5e:46:a1:a3:0a:f8:50:77:08:a6:6a:
ed:c4:a6:7c:8c:e3:4a:ef:d4:51:0a:91:b5:7e:8d:b5:ea:fd:
c7:df:46:db:4f:06:d0:df:16:a4:02:bb:48:0c:83:07:f4:e0:
cd:8a:a1:fb:0e:5d:fe:eb:13:56:e5:14:d5:35:c9:80:fc:4c:
95:fe:98:76:95:a5:d2:95:2b:51:63:7f:07:1b:48:93:09:cc:
a8:f7:41:c7:2f:ab:c3:e3:9c:a0:40:9d:4c:08:f6:f9:17:fc:
61:8a:ec:78:dc:c5:67:dc:4c:e9:0e:e5:8d:ab:0e:14:33:f9:
61:d1:62:b8:87:7c:cf:59:f9:ca:f7:1c:a9:23:13:d1:b5:7f:
59:fa:cc:eb:2f:d4:57:a9:20:54:bb:2f:33:fd:ee:e0:59:25:
e5:37:18:b8:61:ea:25:12:b6:f9:33:79:9e:bf:6f:05:86:33:
66:48:a0:97:28:a4:c4:a9:fe:fe:d0:fb:01:aa:b5:71:5a:88:
13:51:5a:8f:a6:0a:bd:83:43:d3:b3:eb:2e:5f:e1:e5:f8:bd:
23:b8:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:42:22 2026 by rpki-client