
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
File: C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft (raw, json)
Hash identifier: wiU9fXfk7yEEPnrMJkpV1zR2zBQciJGWRVC/bLBj/Tg=
Subject key identifier: DD:4D:43:1D:67:B5:C3:9A:53:2B:06:53:EE:17:54:56:1C:38:B0:3F
Authority key identifier: C2:3C:6D:A8:7C:DE:76:54:CE:5B:5A:DD:EC:74:8B:19:EE:F5:EE:1A
Certificate issuer: /CN=C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A
Certificate serial: 0DA7FFC0521C361BB213FE76992782934A19B4EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
Manifest number: 42
Signing time: Thu 26 Mar 2026 01:37:18 +0000
Manifest this update: Thu 26 Mar 2026 01:32:18 +0000
Manifest next update: Mon 30 Mar 2026 22:32:18 +0000
Files and hashes: 1: C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl (hash: 19H7li4CW1JvRYlKPorVzuY3xjTA4tZuCAXIKZupvSg=)
2: 323830333a346631303a3a2f33322d3438203d3e20323732313138.roa (hash: cfqpMesVtTCJW/gXILlWyOfzQXanZJn3CLqfjz47nrA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl
rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a7:ff:c0:52:1c:36:1b:b2:13:fe:76:99:27:82:93:4a:19:b4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A
Validity
Not Before: Mar 26 01:32:18 2026 GMT
Not After : Mar 30 22:32:18 2026 GMT
Subject: CN=DD4D431D67B5C39A532B0653EE1754561C38B03F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:1a:8c:f3:8f:81:d9:f1:60:9b:05:69:af:
5b:d9:34:5c:a9:ed:b0:32:29:5a:a6:60:1b:87:b3:
c0:5b:b4:49:04:9c:f4:33:08:71:3f:2b:fc:ae:e2:
f3:05:e2:37:13:d0:9f:4b:22:22:0b:c4:1f:7d:b9:
c3:3b:34:cc:ee:04:0a:04:f5:ba:d1:ec:a8:24:ba:
0a:53:69:6a:8d:93:1b:b1:86:9a:65:25:21:fa:42:
f1:c2:7f:6b:21:f0:c4:1d:aa:d4:d1:85:cb:c9:c7:
e7:66:d5:ce:19:a4:a8:f1:ae:da:53:98:84:35:3b:
29:81:1e:e7:52:f5:51:49:8c:5a:cb:07:c5:b7:a6:
62:3c:f7:c4:6c:c2:39:2c:c3:6d:2c:92:a6:4b:c9:
c4:5f:7b:c7:4a:b9:e8:6b:92:0a:34:6a:d6:2c:30:
91:a1:a5:6a:d6:b8:4a:72:f2:6a:8f:01:2c:e0:dc:
73:7b:16:7f:aa:dd:a0:1f:38:16:65:7c:07:72:7d:
a8:af:66:9f:91:e8:ff:a8:db:72:7f:5e:27:db:c5:
92:34:d1:ae:17:5c:58:f8:6a:73:a8:91:26:fc:21:
a8:31:1e:f1:41:2e:cf:37:e4:29:f2:a3:e2:5b:ee:
f4:b0:fb:79:19:a6:3f:0d:a4:0d:24:d4:a5:7d:5f:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:43:1D:67:B5:C3:9A:53:2B:06:53:EE:17:54:56:1C:38:B0:3F
X509v3 Authority Key Identifier:
keyid:C2:3C:6D:A8:7C:DE:76:54:CE:5B:5A:DD:EC:74:8B:19:EE:F5:EE:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:41:ef:ed:2b:c3:00:a4:2d:59:ab:50:71:96:ef:29:6d:6e:
47:54:ce:84:33:3b:49:f2:50:fa:1a:cd:51:72:36:e3:7b:00:
44:0b:cf:03:76:a4:a3:e4:ce:d0:4b:e5:d8:29:c0:50:6b:ef:
af:4e:57:b5:9a:88:61:4a:91:5f:9e:38:c2:6e:e1:f8:bb:fd:
48:b4:8e:f4:c8:46:71:23:11:6c:44:51:09:9d:96:f2:2b:3b:
40:9a:58:1e:54:75:04:5b:89:c6:44:80:7a:6c:bb:c4:36:c5:
05:20:5e:a4:19:06:6f:81:f8:9a:9d:ae:61:cc:dd:cf:6f:f5:
94:c7:11:0f:0a:48:8c:96:a8:5d:93:f2:4b:0c:e0:2e:51:42:
e6:34:6e:3e:5f:8e:dd:73:f7:80:ef:32:55:dc:b0:b6:45:04:
5c:9a:be:38:df:ac:c3:ac:3b:d6:90:f0:8e:bb:02:ff:df:a9:
d7:12:0f:13:69:d9:91:7e:dd:28:0f:f4:00:71:1e:3d:41:6f:
f4:1a:e7:f7:43:15:43:82:8a:49:fb:1e:7e:a2:0a:0b:ed:2b:
40:a8:70:24:e6:4c:bb:de:49:34:38:c7:69:70:c4:c7:f5:ae:
bd:ba:0c:45:a8:96:72:28:ff:df:fd:5b:39:40:bb:81:dc:c6:
1c:95:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:10:08 2026 by rpki-client