
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8280F1138BB12C25B1E565C01B237DBA5899A102A210BBB29CC478A5DF2B1670/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.mft
File: 685416AC7C3F00493C429D1B5C4EDA5775D365FE.mft (raw, json)
Hash identifier: 4ycfMTNDW/lmoU/XKQ/dd5rCJbh3qwMPi/T2zeZy/5g=
Subject key identifier: 51:21:C0:4A:35:E9:FA:52:A6:F7:BD:F2:F3:96:65:C3:0E:54:10:FB
Authority key identifier: 68:54:16:AC:7C:3F:00:49:3C:42:9D:1B:5C:4E:DA:57:75:D3:65:FE
Certificate issuer: /CN=685416AC7C3F00493C429D1B5C4EDA5775D365FE
Certificate serial: 081446A435156ABCF7BC8B625F6F9B395B997AD6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8280F1138BB12C25B1E565C01B237DBA5899A102A210BBB29CC478A5DF2B1670/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.mft
Manifest number: 08
Signing time: Thu 26 Mar 2026 15:40:34 +0000
Manifest this update: Thu 26 Mar 2026 15:35:34 +0000
Manifest next update: Tue 31 Mar 2026 19:19:34 +0000
Files and hashes: 1: 34352e3233342e3136352e302f32342d3234203d3e203239383032.roa (hash: 8gcKOjx7c2CIu7sTbhuHiPfdeeP4oH4RVDcJn3t+R5I=)
2: 685416AC7C3F00493C429D1B5C4EDA5775D365FE.crl (hash: YgSOoXyY3Y64+OrBbhz99n8i3WzCB+tHeU/T4iq0ZJk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8280F1138BB12C25B1E565C01B237DBA5899A102A210BBB29CC478A5DF2B1670/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.crl
rsync://repository.lacnic.net/rpki/lacnic/8280F1138BB12C25B1E565C01B237DBA5899A102A210BBB29CC478A5DF2B1670/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 17:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:14:46:a4:35:15:6a:bc:f7:bc:8b:62:5f:6f:9b:39:5b:99:7a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=685416AC7C3F00493C429D1B5C4EDA5775D365FE
Validity
Not Before: Mar 26 15:35:34 2026 GMT
Not After : Mar 31 19:19:34 2026 GMT
Subject: CN=5121C04A35E9FA52A6F7BDF2F39665C30E5410FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:c3:45:98:1c:5b:05:31:d1:b0:8a:11:dc:
0d:a6:a5:af:9a:65:08:9f:e7:ec:7a:c2:6a:9e:a1:
f8:1d:c7:91:5e:f7:bb:48:dc:97:23:7b:c9:ac:68:
a1:1f:89:9d:69:cc:ee:6b:58:6a:b1:f3:99:c0:ce:
54:0a:eb:27:2c:b3:52:05:6e:69:32:c5:3e:41:6d:
8b:d2:08:8e:66:c8:30:5e:17:a3:b1:02:57:d9:1c:
0b:d2:a1:31:ab:8a:0e:82:d7:b9:01:af:34:59:96:
f2:5a:c8:31:e6:5c:e3:28:8b:8b:02:d5:55:f9:85:
20:a5:e9:9e:c5:4f:f8:7b:c0:0b:92:71:e9:f9:de:
25:06:8b:a3:a7:eb:57:a8:96:f8:20:cf:90:d7:f0:
13:56:17:c9:f0:ef:9d:f1:ad:33:58:6c:56:db:64:
6c:8a:cc:d4:30:52:23:f1:22:c5:cb:0b:c8:df:ee:
8f:73:a1:fd:f0:d8:9a:d9:ec:69:32:08:7e:68:3c:
3e:e2:f3:88:a1:58:6f:22:6c:f7:92:42:66:8e:5a:
ae:2f:67:d7:43:c7:63:fc:0c:f9:53:f5:a1:a0:8a:
49:e1:f1:b9:6c:a2:06:1e:c3:36:98:45:67:af:69:
c5:91:d7:50:7f:27:ab:dd:05:ae:b1:05:40:ce:50:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:21:C0:4A:35:E9:FA:52:A6:F7:BD:F2:F3:96:65:C3:0E:54:10:FB
X509v3 Authority Key Identifier:
keyid:68:54:16:AC:7C:3F:00:49:3C:42:9D:1B:5C:4E:DA:57:75:D3:65:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8280F1138BB12C25B1E565C01B237DBA5899A102A210BBB29CC478A5DF2B1670/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8280F1138BB12C25B1E565C01B237DBA5899A102A210BBB29CC478A5DF2B1670/0/685416AC7C3F00493C429D1B5C4EDA5775D365FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:06:52:e6:58:9d:3f:e6:45:d7:55:32:10:93:31:b7:4f:e8:
7c:0a:53:80:92:97:92:ea:08:a2:d8:a7:a8:53:38:ee:1c:6c:
05:68:53:80:ef:b0:8d:1e:ec:0d:bb:0a:df:dd:d9:c0:50:ef:
d1:df:69:b6:3d:e5:7c:b5:fa:48:ea:37:cf:39:bc:74:d0:23:
82:68:91:4b:fe:2a:2d:8d:36:35:64:3b:93:e1:c6:bc:5e:8f:
c1:8d:07:a3:c3:7e:00:10:c0:33:58:7c:f6:85:1b:0e:bb:21:
4c:c2:a7:33:8a:5d:c6:e3:b1:81:16:84:50:fe:fc:58:87:1d:
b0:21:7f:58:5e:d3:5f:af:00:9f:05:3f:22:b9:87:d0:0e:5f:
5b:39:a3:6f:82:f1:39:d2:5a:dd:42:5b:4f:ce:34:eb:20:a2:
8e:21:5c:4a:00:44:60:de:99:db:39:66:1f:b3:a2:df:f9:3d:
e4:dd:d0:49:f4:37:b5:81:36:12:ce:12:81:26:1b:e5:2c:65:
1f:bd:0a:1e:db:d2:41:0d:d5:b0:e8:3d:c9:b8:58:dc:d9:d2:
9d:1f:be:94:87:ff:cf:cd:a8:7c:ca:ed:a2:ef:ff:00:98:4c:
9a:c4:4a:a6:fe:a2:49:f5:d7:4c:76:c0:47:c1:37:dc:f0:11:
01:17:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:25 2026 by rpki-client