
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft
File: BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft (raw, json)
Hash identifier: QS457zE3UNWzSFJIiyiVTOVV4/frOjaWpWzESEryRbQ=
Subject key identifier: 58:A5:4A:CD:AB:66:E3:CA:FC:F6:12:BF:32:F9:39:09:48:00:68:84
Authority key identifier: BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2
Certificate issuer: /CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2
Certificate serial: 7C8366EFD7AAE241893D6F6401B56ABCB9F881C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft
Manifest number: 0185
Signing time: Wed 25 Mar 2026 23:51:20 +0000
Manifest this update: Wed 25 Mar 2026 23:46:20 +0000
Manifest next update: Tue 31 Mar 2026 00:59:20 +0000
Files and hashes: 1: 34352e3233372e3137322e302f32322d3234203d3e20323636383233.roa (hash: mXKfpVXImAR8ceMyOkTO0D35LiaiSsu2Nz/ix/GsP/Y=)
2: BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl (hash: U1JFs0CYakmjOPsLnMjdCVfghsAVspYgQodjbdzIXdU=)
3: 323830333a323461303a3a2f33322d3438203d3e20323636383233.roa (hash: WV3Sc6/e9ASnOR19uOajKVNUzIq4fJ0IUG0LmjoTmkI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl
rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 17:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:83:66:ef:d7:aa:e2:41:89:3d:6f:64:01:b5:6a:bc:b9:f8:81:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2
Validity
Not Before: Mar 25 23:46:20 2026 GMT
Not After : Mar 31 00:59:20 2026 GMT
Subject: CN=58A54ACDAB66E3CAFCF612BF32F9390948006884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:72:6f:2c:7d:82:a5:76:b6:df:1c:ea:62:
06:51:d7:c1:f8:7b:62:40:17:0c:31:cf:db:5b:79:
30:12:9b:32:0e:ee:b6:ee:85:45:72:ca:e8:79:aa:
df:52:41:1b:9b:03:0c:50:9e:c6:ed:ca:cf:30:78:
5b:cf:bd:fa:a1:6b:b5:81:53:ee:8c:45:66:5e:25:
f3:ad:9f:1a:fc:55:96:b8:01:a9:c2:c8:8e:a3:d2:
bc:a0:1e:77:c4:21:33:11:8b:cf:b6:48:76:f3:93:
de:ad:b1:1d:0e:0c:ac:0f:5d:36:92:6f:98:21:53:
3a:4f:94:74:82:d9:a8:d8:f3:6c:fc:94:ee:b6:db:
4c:09:44:78:4f:52:18:85:11:d7:c7:88:5d:dc:82:
c8:99:a1:da:ad:3c:2c:29:d3:31:36:b3:6f:eb:d4:
63:03:e2:c2:39:5f:d8:84:8b:7a:4a:71:c4:bf:d2:
e2:fd:4d:ca:00:c1:c2:52:ce:a9:a8:ed:50:32:d4:
03:1d:72:a3:eb:df:73:e1:70:89:68:9c:3d:df:78:
51:f8:71:90:fc:af:be:bd:f3:d8:a7:41:ba:5b:19:
3d:b9:66:8c:d8:1d:95:72:34:4d:e4:99:31:4d:1d:
ea:29:b3:f0:19:e6:03:bc:91:e8:b4:69:d3:39:c2:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A5:4A:CD:AB:66:E3:CA:FC:F6:12:BF:32:F9:39:09:48:00:68:84
X509v3 Authority Key Identifier:
keyid:BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:84:5b:53:cb:d4:a7:77:8c:84:09:86:c3:95:75:fa:a0:3f:
f5:0b:fa:fb:05:33:02:c0:63:57:c8:d2:c6:a1:32:77:d1:30:
fc:c5:ea:0e:8a:78:d2:5a:15:ed:60:38:0e:04:c4:d5:65:f4:
ae:e2:46:00:52:e0:f0:36:cb:7a:a0:5e:7a:f2:3e:a3:d8:2e:
cb:e4:6f:6f:bd:af:13:32:1f:a3:8c:15:39:4f:c9:39:5a:02:
99:f8:fd:12:cd:ae:39:b0:f6:8c:10:25:b2:ce:c4:6b:dd:9b:
07:7e:f2:eb:87:f9:7c:81:ad:e1:16:16:08:91:b7:52:92:0b:
5e:41:31:2e:89:a2:48:1e:13:c9:46:5d:fb:a3:f9:0a:d6:10:
1c:ed:20:5a:ff:db:88:22:4a:bc:0f:dc:af:56:33:04:84:cb:
62:95:79:fb:60:83:e5:8c:46:be:05:d9:1e:06:38:67:68:d2:
9e:63:f1:42:34:a3:58:59:ae:a6:c9:66:a0:1c:9d:6b:87:05:
4f:69:7a:2b:bf:b3:9a:b6:9a:d5:39:b7:af:75:ff:47:ae:24:
34:12:e6:d4:b8:61:13:a0:a8:f1:c0:0f:1d:e6:65:67:1a:b3:
a8:b9:2c:ec:9a:a8:cc:2a:97:8f:fc:35:b2:50:fb:ea:e9:b2:
ab:d0:c1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:10:48 2026 by rpki-client