
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
File: 2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft (raw, json)
Hash identifier: fEbrY3GcufERS3UaMxQvoiw3RBEKOxOqKB2iqSWuYKI=
Subject key identifier: C3:85:14:7C:70:65:F0:50:F5:6F:02:82:C7:0F:FF:39:55:1F:A8:06
Authority key identifier: 2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B
Certificate issuer: /CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B
Certificate serial: 289628557296150D702BE9F5CA50B08377C74B60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
Manifest number: 017C
Signing time: Thu 26 Mar 2026 11:33:16 +0000
Manifest this update: Thu 26 Mar 2026 11:28:16 +0000
Manifest next update: Tue 31 Mar 2026 10:36:16 +0000
Files and hashes: 1: 323830313a31333a643830303a3a2f34382d3438203d3e203134303830.roa (hash: 7Hf7Z/72k0ftpWuAWkDcalztpHYmuZGHsGSX+Tk9J6U=)
2: 2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl (hash: +Wntmmt6sJ1tN2vWwOr67cjEIW6Mz0PwboT06fajd/U=)
3: 323830313a31333a643830383a3a2f34382d3438203d3e203139343239.roa (hash: ffeeqv3WcNoxodTffDesIFZELkA4gNhkaOZohA9CWSg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl
rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:96:28:55:72:96:15:0d:70:2b:e9:f5:ca:50:b0:83:77:c7:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B
Validity
Not Before: Mar 26 11:28:16 2026 GMT
Not After : Mar 31 10:36:16 2026 GMT
Subject: CN=C385147C7065F050F56F0282C70FFF39551FA806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:8a:e8:e4:e5:70:e2:26:f3:72:b1:b1:05:
2d:80:35:2d:4b:68:1c:fb:4d:22:6a:d9:c1:71:59:
c3:7e:63:3b:61:e6:d5:5b:eb:65:47:58:20:37:f3:
b0:72:7c:61:83:1a:91:b7:c8:24:2e:54:a1:04:55:
12:c9:b2:78:99:70:23:21:95:11:43:d7:36:7b:28:
6c:ca:f7:12:23:a8:af:56:65:64:7b:09:c6:6b:0f:
16:87:55:be:af:8b:83:09:2a:35:69:83:a7:56:d7:
4f:82:43:ff:0f:3a:42:90:a8:6c:f2:14:ba:33:bd:
2a:b0:b9:29:6f:73:00:16:55:fd:83:f4:37:b3:c4:
cf:e6:1a:3d:70:fb:30:15:f9:03:b5:b7:7b:d8:a9:
4a:66:08:a0:cf:36:08:61:76:1c:5c:e8:f9:7d:0e:
ad:0f:b4:71:9f:54:34:88:6d:93:5c:3c:a2:66:b4:
b0:88:c6:9c:07:44:c7:5a:3d:86:23:59:1f:14:80:
90:7e:1a:65:72:e8:a4:1d:ae:7e:61:46:1a:95:32:
5b:dd:08:78:98:f0:8d:90:47:0b:f2:51:71:d8:60:
9a:d5:52:e1:ff:43:e8:10:e0:52:9e:01:08:2f:e5:
ec:84:7a:08:06:b0:57:d0:0d:18:e0:4a:71:d5:87:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:85:14:7C:70:65:F0:50:F5:6F:02:82:C7:0F:FF:39:55:1F:A8:06
X509v3 Authority Key Identifier:
keyid:2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f7:09:b3:66:fb:a2:95:cc:5c:bc:c2:3a:c6:f3:32:23:a0:
bf:90:76:43:c6:8d:7e:79:0c:63:39:12:78:1d:86:2e:47:b1:
97:0d:db:51:dc:68:d7:a8:c7:09:49:f0:3e:51:d0:0c:5c:65:
27:0e:d9:23:17:ad:94:ad:09:43:56:f4:8a:5a:26:ce:0d:d6:
eb:95:be:ce:86:98:63:ce:e5:b1:97:f0:3d:98:9b:25:50:c5:
a4:54:25:02:80:c9:b0:40:56:3e:c0:8b:ad:fe:c9:95:57:ad:
76:be:c1:17:c9:4d:4f:38:32:a3:8e:8e:a6:34:84:79:e3:0d:
f6:81:39:4a:d3:fe:ca:6d:be:73:1e:4a:27:82:26:5d:45:22:
09:8a:03:8e:21:1f:9d:a9:d8:8c:e3:18:a9:65:7b:a3:df:9d:
b4:28:f9:3f:d4:e8:fe:ce:50:04:87:3c:b8:bc:81:50:3b:3e:
4d:f0:d5:c8:f0:29:16:f2:20:f8:2a:35:8d:df:66:cb:6f:3b:
3e:69:3e:ee:a4:f5:73:4f:9f:36:0a:5e:b3:99:21:d6:d0:cd:
4c:19:cb:52:3f:4e:d7:80:fc:2e:9c:1d:7e:02:c6:30:f1:9a:
ff:98:f5:ae:03:8f:a9:dc:8b:71:5b:59:66:ca:3a:f7:0d:24:
2a:c4:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:16:09 2026 by rpki-client