
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft
File: 949854C65FB68A162199F9EB159DEF051D92FBE6.mft (raw, json)
Hash identifier: b3MG+s0xtcL6+pTLCrAjMn0/SIyyaNYhoHds6EH7OiM=
Subject key identifier: 3F:C5:7A:92:38:EB:CB:D8:41:DE:60:7F:18:FB:79:A1:69:66:B2:BC
Authority key identifier: 94:98:54:C6:5F:B6:8A:16:21:99:F9:EB:15:9D:EF:05:1D:92:FB:E6
Certificate issuer: /CN=949854C65FB68A162199F9EB159DEF051D92FBE6
Certificate serial: 58C80A5A140164AA863CC77499245E630C39E238
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft
Manifest number: 0181
Signing time: Thu 26 Mar 2026 07:30:53 +0000
Manifest this update: Thu 26 Mar 2026 07:25:53 +0000
Manifest next update: Mon 30 Mar 2026 16:31:53 +0000
Files and hashes: 1: 34352e3137322e3232342e302f32322d3234203d3e20323637383330.roa (hash: 4o7x7R6UgGHmr45G+oDmN+Si7bAHtQ7JLwag00fkPnU=)
2: 949854C65FB68A162199F9EB159DEF051D92FBE6.crl (hash: 6Izx9ggYApb/A4uOAta0EAHY9lD8NLCF9fC7+iJlDas=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.crl
rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 16:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:c8:0a:5a:14:01:64:aa:86:3c:c7:74:99:24:5e:63:0c:39:e2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949854C65FB68A162199F9EB159DEF051D92FBE6
Validity
Not Before: Mar 26 07:25:53 2026 GMT
Not After : Mar 30 16:31:53 2026 GMT
Subject: CN=3FC57A9238EBCBD841DE607F18FB79A16966B2BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:bf:d4:76:17:0f:7d:e3:bf:18:29:ef:70:
25:f6:dd:71:d9:5c:42:ce:af:f8:ef:82:ec:3b:77:
4f:ae:5a:a5:93:3b:66:8a:3c:71:06:32:cc:e7:eb:
66:0a:6d:24:75:a3:6b:b6:f2:84:bc:8e:e2:eb:c1:
cb:66:ef:e5:12:d3:04:33:79:f0:bb:49:a2:f4:4f:
fc:2e:a5:0d:12:12:92:d5:4e:bf:6a:5a:0b:4b:11:
b5:fc:5a:d5:d4:cb:15:e4:6f:90:2e:df:fd:b0:c3:
5e:0c:5f:ee:89:b4:a5:25:83:61:ad:c0:61:26:ba:
5d:39:27:e6:c3:a8:ef:a5:1b:6d:ea:d3:d6:81:81:
ee:44:e4:0d:29:c4:5e:83:d5:d0:8c:16:c3:50:0c:
04:cb:dc:f0:84:a3:6e:49:74:dd:91:78:ba:e9:cf:
68:47:a9:b3:af:a4:9c:e8:70:74:3c:63:a0:9d:46:
cb:c2:8d:c2:d8:35:9a:fb:75:81:46:81:41:f6:73:
90:83:67:9c:3c:5a:df:05:8a:be:00:e9:3e:76:a0:
39:0c:a5:6f:83:48:e1:b4:dd:07:48:ad:cc:35:e4:
4a:e8:ca:7a:9b:f0:70:9e:73:8b:e0:9e:ba:d4:2d:
53:a1:db:0e:5c:c0:91:a2:0a:78:52:30:1f:f6:0a:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C5:7A:92:38:EB:CB:D8:41:DE:60:7F:18:FB:79:A1:69:66:B2:BC
X509v3 Authority Key Identifier:
keyid:94:98:54:C6:5F:B6:8A:16:21:99:F9:EB:15:9D:EF:05:1D:92:FB:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:10:cf:61:37:86:19:14:62:b3:69:80:c7:37:a8:84:af:e0:
7b:72:7a:09:19:d6:9b:d2:0e:3c:c8:a1:31:9b:88:ae:d5:5a:
df:fc:fe:43:bd:ab:9b:3d:f0:98:dc:59:73:93:c1:37:d5:d7:
04:00:a6:b8:b1:b7:14:ca:9b:d4:3b:de:a4:df:49:f0:7c:2c:
4a:5f:8c:1d:df:ce:89:a6:28:f1:a6:3b:5a:02:03:40:1e:fd:
22:98:26:eb:e6:83:74:a4:74:eb:7c:05:b6:ff:94:89:b1:5e:
5b:2f:dd:1d:1c:6b:80:b6:c9:ea:56:d6:39:10:08:08:53:c1:
7a:82:d3:10:de:ad:0c:92:4d:e8:57:91:83:50:85:47:9d:fc:
8c:9e:11:86:ec:89:fa:8f:d3:1b:d5:d1:fb:ef:bc:4e:c1:aa:
29:eb:03:d1:64:24:3d:eb:87:8f:68:61:8b:5c:fe:a1:47:9f:
5a:81:b1:f3:72:9f:34:f3:c2:f4:8d:fa:82:6d:10:eb:e0:cb:
80:18:8c:11:e0:68:51:c9:79:eb:1a:53:5b:a8:5d:2c:1a:a8:
dd:2c:ea:98:88:d2:28:4e:8d:74:b1:96:9c:39:71:23:13:ff:
be:c0:7c:79:53:09:2f:8c:5c:2f:24:89:bb:f4:42:57:fe:e5:
aa:a8:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:56:36 2026 by rpki-client