
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/AF9640C2202700AABA2DF54F969C8E24872E2892.mft
File: AF9640C2202700AABA2DF54F969C8E24872E2892.mft (raw, json)
Hash identifier: VmSrJ7JB4NaqXkFE+4c3QexJtzoUnq7slLlG0y9UnlY=
Subject key identifier: 7A:8E:AD:89:12:5C:A1:A0:40:4C:50:F9:F3:0C:79:70:A5:09:9B:03
Authority key identifier: AF:96:40:C2:20:27:00:AA:BA:2D:F5:4F:96:9C:8E:24:87:2E:28:92
Certificate issuer: /CN=AF9640C2202700AABA2DF54F969C8E24872E2892
Certificate serial: 11889D956345ED7755BF5785E9F72D353B14391D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9640C2202700AABA2DF54F969C8E24872E2892.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/AF9640C2202700AABA2DF54F969C8E24872E2892.mft
Manifest number: 4C
Signing time: Thu 26 Mar 2026 13:59:31 +0000
Manifest this update: Thu 26 Mar 2026 13:54:31 +0000
Manifest next update: Mon 30 Mar 2026 22:23:31 +0000
Files and hashes: 1: 323830333a363564303a3a2f33322d3438203d3e20323734313734.roa (hash: 1mOxrtNXCCGjjrLxOCjwvzAXy9f1i43BxhTanXByAao=)
2: AF9640C2202700AABA2DF54F969C8E24872E2892.crl (hash: Q9MwBVb7/iOXWhOarIQ2P+t1ikSDAAueU0u5ke0Xcis=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/AF9640C2202700AABA2DF54F969C8E24872E2892.crl
rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/AF9640C2202700AABA2DF54F969C8E24872E2892.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9640C2202700AABA2DF54F969C8E24872E2892.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:88:9d:95:63:45:ed:77:55:bf:57:85:e9:f7:2d:35:3b:14:39:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF9640C2202700AABA2DF54F969C8E24872E2892
Validity
Not Before: Mar 26 13:54:31 2026 GMT
Not After : Mar 30 22:23:31 2026 GMT
Subject: CN=7A8EAD89125CA1A0404C50F9F30C7970A5099B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:1f:9d:b1:53:52:5c:98:b7:3c:dd:32:c4:
15:99:26:36:07:54:74:f9:1b:57:9f:bc:bf:68:b1:
64:c1:7a:80:e5:f9:80:78:28:23:30:e5:85:c6:a0:
c3:49:69:8e:8f:29:27:4b:ae:97:93:6c:a0:b9:ac:
a8:bb:6a:9a:df:79:87:1b:ce:fd:42:9a:65:5c:2d:
30:1a:05:26:81:90:b9:02:55:c4:f8:1d:c4:fb:c0:
0d:7a:90:1e:2b:37:46:43:cb:30:9c:19:cb:f3:81:
66:f5:7a:03:dd:7f:8e:cc:27:a5:43:3f:70:7f:43:
2c:2d:72:d9:e0:37:6a:b1:38:2c:cd:e6:70:3a:55:
c8:08:48:6d:e6:62:01:72:c0:d5:d3:70:a5:56:5d:
86:8d:4e:42:8e:d4:d7:9b:5b:29:4c:30:8d:e9:1b:
35:85:f6:34:55:3e:40:ec:33:c5:41:5a:3b:34:bc:
87:63:9d:45:43:51:b9:da:c1:c4:5e:8f:56:1b:20:
fb:da:03:18:92:80:78:b7:b0:10:5d:99:b5:f3:c8:
10:77:b9:5a:84:bb:72:a1:e1:47:70:7b:a4:e2:db:
03:cd:f6:56:51:1d:07:54:8e:bf:81:37:17:e9:48:
0e:eb:84:cb:06:b6:c1:b3:4e:34:74:39:5a:40:36:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:AD:89:12:5C:A1:A0:40:4C:50:F9:F3:0C:79:70:A5:09:9B:03
X509v3 Authority Key Identifier:
keyid:AF:96:40:C2:20:27:00:AA:BA:2D:F5:4F:96:9C:8E:24:87:2E:28:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/AF9640C2202700AABA2DF54F969C8E24872E2892.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9640C2202700AABA2DF54F969C8E24872E2892.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/AF9640C2202700AABA2DF54F969C8E24872E2892.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fb:87:6d:02:64:c9:e0:82:0c:42:a5:f5:8a:8c:eb:8e:42:
8e:f6:83:49:48:82:e2:fd:31:ab:c5:88:4c:2d:c3:cb:35:e5:
1b:8f:b8:fd:e6:6e:ac:62:08:0a:bd:f1:c3:91:f6:52:5b:59:
75:2f:30:2a:98:2e:21:75:40:da:cd:f3:79:19:49:f1:60:ba:
9d:f8:b8:8e:20:a4:ed:3e:f5:a3:13:02:75:fc:4d:ad:42:f8:
98:73:9a:16:c4:10:33:18:7a:8f:c6:02:76:8e:e1:cc:f8:3e:
48:3d:21:5b:57:5a:1d:b4:6c:56:b4:3e:aa:c4:13:85:ac:bc:
c2:f6:55:e4:ed:70:7c:23:6b:ed:2c:4e:8f:a8:18:27:da:6c:
89:1d:90:9f:a9:1c:f2:a8:bb:a5:5d:75:e9:16:ae:0d:ec:f9:
f1:aa:1b:17:a1:74:65:ef:0b:f3:58:31:97:ae:6f:d1:55:a9:
bf:97:c7:a6:eb:16:e7:db:0f:55:b1:16:d8:80:d2:88:5e:98:
fd:ab:6c:09:68:8a:63:33:f3:06:16:c1:9a:ab:1a:5b:b3:8e:
aa:bf:42:15:e1:51:24:3a:ad:58:c7:a9:6f:7b:7b:b9:fb:0a:
56:bc:41:d3:0e:a3:0e:7e:88:61:d5:e2:db:7f:8a:b9:9c:e7:
54:4b:a1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:22:34 2026 by rpki-client