
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.mft
File: 8438E7E6A61CE89232421B53643A3159B330CDFD.mft (raw, json)
Hash identifier: 4nnKcG+oZUR+1mw/CwQbhwkp2Octov35Mwz7EweBJc8=
Subject key identifier: FC:AA:8A:5A:D9:97:16:97:34:8B:9A:72:D0:CF:59:5E:46:7C:B4:31
Authority key identifier: 84:38:E7:E6:A6:1C:E8:92:32:42:1B:53:64:3A:31:59:B3:30:CD:FD
Certificate issuer: /CN=8438E7E6A61CE89232421B53643A3159B330CDFD
Certificate serial: 7599C48CBC2B4A0B1BF64BA3DB34A2FADF26FF70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8438E7E6A61CE89232421B53643A3159B330CDFD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.mft
Manifest number: 0177
Signing time: Wed 25 Mar 2026 14:51:13 +0000
Manifest this update: Wed 25 Mar 2026 14:46:13 +0000
Manifest next update: Mon 30 Mar 2026 08:47:13 +0000
Files and hashes: 1: 34352e372e3133362e302f32342d3234203d3e20323635353534.roa (hash: VI9JDqpXxLzrkkZoY4JPMUDYs5OiWwtIJp9iO4Ss9aU=)
2: 8438E7E6A61CE89232421B53643A3159B330CDFD.crl (hash: 8lGT/l4qvWwu5eBQzK4byPPTD/gDfU9sxdiSFTUTmHo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.crl
rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8438E7E6A61CE89232421B53643A3159B330CDFD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 08:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:99:c4:8c:bc:2b:4a:0b:1b:f6:4b:a3:db:34:a2:fa:df:26:ff:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8438E7E6A61CE89232421B53643A3159B330CDFD
Validity
Not Before: Mar 25 14:46:13 2026 GMT
Not After : Mar 30 08:47:13 2026 GMT
Subject: CN=FCAA8A5AD9971697348B9A72D0CF595E467CB431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:c1:78:4a:48:12:a4:26:93:e9:87:54:61:
86:63:4f:ba:af:cd:52:2d:94:33:45:69:e3:c2:68:
4a:84:95:52:9d:43:14:a8:e1:85:38:da:af:c6:80:
70:ec:3d:30:3a:4b:83:b5:44:bb:12:2d:8d:c7:f5:
26:d3:37:75:81:d9:fd:84:8a:80:a7:e2:5b:96:ba:
e3:38:5d:ad:56:77:4f:6d:db:29:c7:5c:9b:f9:03:
4c:8c:b5:22:90:28:f1:74:22:73:f6:11:8b:71:7d:
c5:10:26:fe:0a:5a:d2:6f:f7:7c:98:46:9a:a5:e8:
76:ad:85:83:96:ca:37:ba:a6:1f:2f:ba:1f:43:fa:
bb:b1:3c:bc:4c:ff:2e:20:57:c8:9f:58:04:5a:b8:
e7:a1:75:73:df:7b:f3:58:11:d4:21:e0:6f:b3:db:
29:19:c6:27:85:53:99:43:09:a8:4a:c3:1b:7d:b1:
c3:bc:93:3a:f3:90:35:16:fc:74:f4:67:57:ef:2e:
c0:6d:d3:48:7e:14:9a:ca:0a:f8:16:0a:9b:21:a1:
6c:5f:cf:aa:67:f3:81:3c:16:d8:86:05:c9:d8:bb:
5b:ec:a5:87:77:53:4b:03:bd:3c:02:b6:34:d1:81:
94:03:0f:5b:e0:1a:0d:d7:99:74:60:39:fb:fd:a3:
15:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AA:8A:5A:D9:97:16:97:34:8B:9A:72:D0:CF:59:5E:46:7C:B4:31
X509v3 Authority Key Identifier:
keyid:84:38:E7:E6:A6:1C:E8:92:32:42:1B:53:64:3A:31:59:B3:30:CD:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8438E7E6A61CE89232421B53643A3159B330CDFD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B4B9B3406536C4268A334023FB04D2B9C4ED8BD51ECCE5730DECFB083185B40/0/8438E7E6A61CE89232421B53643A3159B330CDFD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b5:9c:c7:16:6b:b0:07:72:f4:9c:62:f5:d9:76:a6:cb:39:
04:ee:22:a8:a6:f1:5d:0d:94:45:8f:2c:3a:ad:73:cd:bf:b8:
db:4f:c6:eb:97:12:ac:f7:64:51:0c:97:80:aa:07:e2:24:df:
32:be:4a:73:52:a0:21:e5:e8:17:f5:30:f6:a6:ae:ae:d5:f8:
a2:b5:8b:0b:39:9a:ee:b2:94:1f:8a:51:a2:bd:a7:ef:32:98:
ce:d2:19:3b:67:6e:8a:e5:ea:08:86:94:f2:d0:ed:3a:5c:2f:
12:05:1a:c2:6e:a0:21:5b:29:7f:30:e8:05:41:71:53:5c:c3:
07:8c:e9:59:24:6a:05:5c:7a:54:34:2d:8f:db:96:87:43:fc:
01:7f:a7:64:01:fc:bb:a5:d4:ba:01:40:40:00:ef:4d:ba:91:
82:97:ac:e6:cc:eb:a6:6f:0e:70:b7:23:fd:99:48:3d:a8:0a:
29:f6:61:20:8b:e0:50:d1:60:4a:75:a2:a5:de:a1:8d:14:4e:
b7:37:89:ce:86:ca:41:a3:df:76:d5:a4:d1:0d:f8:74:fc:1b:
ac:84:78:bd:44:98:44:a6:e6:27:42:2a:7c:56:9b:a9:10:cd:
b5:fa:71:08:fd:c5:7a:0f:36:7f:b8:74:57:0d:e8:44:34:e4:
91:61:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:55:41 2026 by rpki-client