
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft
File: 5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft (raw, json)
Hash identifier: vSvHsioqOlekdqfmEVn9uRJCsHJ2V1fNH6n8cd5eez8=
Subject key identifier: 35:85:BA:E6:0C:B2:A4:E1:3C:9A:EF:07:29:4E:3F:36:79:0A:E9:5E
Authority key identifier: 5A:E0:C2:D0:4B:B5:BA:4F:90:E7:D5:91:C0:E7:59:62:4F:79:F7:D1
Certificate issuer: /CN=5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1
Certificate serial: 5CD071B626D5D2CEC5BB68D04CFE8097CC3F6A1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft
Manifest number: 017C
Signing time: Thu 26 Mar 2026 07:46:02 +0000
Manifest this update: Thu 26 Mar 2026 07:41:02 +0000
Manifest next update: Mon 30 Mar 2026 13:40:02 +0000
Files and hashes: 1: 3138372e37332e3137362e302f32322d3234203d3e20323639393930.roa (hash: QXIrsbPOb5/5aO7UqyGQRtX2rFpt2OL28orzPj8G+QU=)
2: 5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl (hash: Y0KkRa5DLfdKqbllp2/kL/0TMSM5fWTrbCCgYXEvNDY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl
rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 13:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d0:71:b6:26:d5:d2:ce:c5:bb:68:d0:4c:fe:80:97:cc:3f:6a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1
Validity
Not Before: Mar 26 07:41:02 2026 GMT
Not After : Mar 30 13:40:02 2026 GMT
Subject: CN=3585BAE60CB2A4E13C9AEF07294E3F36790AE95E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:8f:e2:dd:e3:f6:11:54:b6:e3:82:ff:d2:
87:bb:b3:a4:c1:5f:d1:33:80:30:ad:9d:df:24:07:
5e:b5:07:59:91:96:8d:34:61:e1:78:14:ac:06:16:
12:57:5c:09:36:13:4d:ce:4d:6a:07:19:c0:75:34:
ae:d3:b5:6d:e9:2f:fb:97:81:b2:3b:3d:35:90:32:
fa:25:bd:9e:95:fa:df:04:e0:0a:9d:73:b7:67:c9:
4d:e5:2f:d0:f0:46:4a:b7:fe:aa:1d:e5:b2:10:ab:
47:f9:84:9d:65:d1:aa:3c:aa:22:5a:5e:00:cd:53:
91:2b:03:dc:fe:00:47:dc:97:a8:10:19:5e:b8:7d:
b5:10:20:c5:65:67:cc:00:29:bb:13:36:88:77:cf:
60:01:ec:24:97:f4:60:5f:fc:cc:7d:cd:0f:a1:ce:
af:08:49:a0:0b:48:d4:5c:5f:a2:eb:39:5d:ad:ab:
f3:78:cc:4b:89:93:16:7d:c7:27:09:32:8f:94:18:
7a:c9:02:38:d7:8e:a4:84:f3:38:8d:de:1d:60:20:
12:10:d2:b0:45:c9:ee:e7:9d:3e:c1:3e:1d:c8:8a:
a3:a9:4e:90:1b:2e:ab:af:f9:85:34:ca:35:90:db:
d3:ce:ec:8d:f7:5b:93:fc:17:af:1d:4e:57:ec:d3:
f5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:85:BA:E6:0C:B2:A4:E1:3C:9A:EF:07:29:4E:3F:36:79:0A:E9:5E
X509v3 Authority Key Identifier:
keyid:5A:E0:C2:D0:4B:B5:BA:4F:90:E7:D5:91:C0:E7:59:62:4F:79:F7:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:25:2b:1a:42:6e:6c:33:6e:73:fe:ff:02:a7:26:98:c0:29:
62:ec:74:da:1b:92:be:63:ef:da:74:ea:ce:94:8c:60:a8:6d:
e1:e1:bb:dd:a5:bc:c4:e7:06:08:08:16:01:6b:05:75:84:4c:
ae:cf:e2:36:45:7f:ca:c2:f1:00:a3:68:7d:69:15:65:e7:0e:
ce:ab:83:91:fd:18:53:44:7d:04:52:e8:81:f0:dc:ac:3d:86:
55:a4:a1:03:03:de:52:7d:60:fb:08:c3:18:c9:da:d4:c9:fe:
73:4d:cb:c0:70:a9:4b:80:3c:74:cd:65:98:43:43:1c:57:8d:
85:35:0f:19:6e:38:90:bc:6f:6c:97:20:37:79:00:be:0c:c9:
2a:a8:2f:72:fa:ce:95:df:fd:dd:b5:04:49:97:bc:39:e4:8b:
ef:db:0f:08:b1:07:e2:78:82:25:0f:d2:32:a5:9c:be:c6:1e:
67:cf:74:0d:13:ec:e2:4a:b6:71:55:ca:74:ab:eb:69:23:1d:
5e:84:e2:14:4c:71:a5:5e:22:2f:da:fc:5e:20:2c:8c:6b:7f:
50:e9:6b:1a:c7:7f:aa:8a:78:43:d7:6e:1b:91:91:82:c9:68:
46:49:ff:c6:a2:47:2f:71:41:fe:7a:77:58:71:df:4e:8a:ca:
5d:dc:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:23:12 2026 by rpki-client