
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.mft
File: D4F1585FADC5386D18707CA8C82245CBAE06969F.mft (raw, json)
Hash identifier: ke/xcTQnswoQQhuB61ie2FK5AHW8+s9eF0Rw10DC7FY=
Subject key identifier: 36:F9:AC:68:14:94:1A:9A:C9:24:71:6D:F7:14:25:86:6F:60:5E:54
Authority key identifier: D4:F1:58:5F:AD:C5:38:6D:18:70:7C:A8:C8:22:45:CB:AE:06:96:9F
Certificate issuer: /CN=D4F1585FADC5386D18707CA8C82245CBAE06969F
Certificate serial: 5D61003E30535B98E952F8402814A62A785C9952
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.mft
Manifest number: 0174
Signing time: Wed 25 Mar 2026 09:13:05 +0000
Manifest this update: Wed 25 Mar 2026 09:08:05 +0000
Manifest next update: Tue 31 Mar 2026 04:38:05 +0000
Files and hashes: 1: 323830313a31343a623030303a3a2f34382d3438203d3e203532333138.roa (hash: 7fWqhJ7LRXsW7pHXlIkB5USwC4IELa8feBe7ssh5SVI=)
2: 3230302e31362e38392e302f32342d3234203d3e203532333138.roa (hash: GapnZaeX1TDPXz9i0JjQs53PAoPkCbYgpvfivDYpfzQ=)
3: D4F1585FADC5386D18707CA8C82245CBAE06969F.crl (hash: ihdNy4I6UZu84UD4U5fsd0/CYcrzyKVmNw5hZFAH7Ho=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.crl
rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:61:00:3e:30:53:5b:98:e9:52:f8:40:28:14:a6:2a:78:5c:99:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F1585FADC5386D18707CA8C82245CBAE06969F
Validity
Not Before: Mar 25 09:08:05 2026 GMT
Not After : Mar 31 04:38:05 2026 GMT
Subject: CN=36F9AC6814941A9AC924716DF71425866F605E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:ea:3a:f5:d4:1f:5b:bc:a8:9a:da:a1:6d:
ac:5b:70:80:9b:6c:c5:86:cb:e1:87:03:a9:8c:2e:
b5:9c:eb:d7:8e:29:d3:6f:03:5d:f1:6b:3e:a9:26:
c7:00:32:14:57:29:04:9f:05:e0:c3:b5:54:eb:de:
a1:51:68:af:67:69:06:c1:85:3f:27:b2:c6:cd:6b:
e7:5a:21:75:01:1a:61:2b:c2:7f:43:79:52:3c:80:
0e:db:eb:14:1b:6e:06:f6:c3:e5:71:7b:08:3c:92:
92:7a:44:7e:8f:c2:4f:e1:6b:0c:d8:30:c1:a0:d8:
4e:49:18:c6:25:28:14:f0:fb:e0:78:27:1d:f4:79:
e5:f4:db:b4:15:2c:52:0c:1a:e4:88:42:11:b0:09:
19:12:01:c8:0d:49:5a:9a:d1:cc:fb:9d:ef:30:84:
79:cd:38:db:75:6d:8a:a4:76:03:80:8f:06:8c:56:
33:9b:16:cd:24:78:b6:4c:8c:76:83:23:3c:9f:81:
09:9f:e3:64:9c:73:fc:a0:be:ad:08:d6:41:01:db:
db:91:c9:c1:04:4a:59:a5:6a:78:df:5a:ee:9b:68:
96:34:35:9c:b9:a1:88:81:f9:cb:c4:ec:a9:68:be:
e7:84:f1:17:de:68:cc:25:0d:32:2c:41:5a:ad:5a:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F9:AC:68:14:94:1A:9A:C9:24:71:6D:F7:14:25:86:6F:60:5E:54
X509v3 Authority Key Identifier:
keyid:D4:F1:58:5F:AD:C5:38:6D:18:70:7C:A8:C8:22:45:CB:AE:06:96:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:17:2b:be:77:6f:26:0e:8e:aa:30:27:91:77:da:95:ba:97:
5d:fb:19:88:0e:54:e0:f5:4f:75:30:4e:6b:a4:f5:97:6a:e0:
bd:53:c1:e7:63:e9:98:2a:04:e6:95:32:45:b3:24:af:20:b5:
88:d6:54:07:b2:ee:eb:66:4f:5e:b7:ab:96:94:87:8a:01:aa:
90:92:25:25:4b:21:92:0b:a2:72:a4:0f:f7:d0:bf:99:55:17:
d9:98:db:07:f9:ad:e3:b8:c8:57:e6:c7:92:5f:aa:30:0f:b4:
7d:35:ed:0a:f5:e2:1a:d4:b6:0a:01:fe:1f:1c:b9:72:d6:3f:
8f:07:0f:5a:71:90:6c:52:fb:c9:f5:2d:0b:6b:e1:3c:1d:c1:
59:f3:d8:4f:59:d4:51:d1:f5:17:f0:70:b6:a6:8d:ae:98:6a:
51:f1:7b:64:9a:7e:d4:fb:9e:cc:7c:8b:7e:4c:0d:58:65:0f:
ac:09:d4:4c:08:fb:64:a2:88:22:97:2f:56:df:4e:ca:2a:b6:
8a:35:be:b4:2a:61:3d:fe:cf:9d:8d:04:a6:c2:85:f1:f1:54:
68:2d:70:98:0d:f6:c1:b4:9b:00:a4:1b:2f:ae:00:a1:75:59:
27:f2:08:96:53:b0:e0:13:1d:97:ed:7c:6e:7c:08:6a:27:21:
4d:c4:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:45:55 2026 by rpki-client