
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.mft
File: DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.mft (raw, json)
Hash identifier: Aricq5j2wa+WKZrfCI91GYFTG9/y2pDTU9YQL0GoQpE=
Subject key identifier: 37:21:FD:E8:1B:D4:84:F3:3F:84:05:76:E2:3F:7D:A6:06:03:07:35
Authority key identifier: DF:50:3A:52:EC:23:91:A3:76:A3:C3:C3:7D:AA:11:EE:2C:A9:24:A7
Certificate issuer: /CN=DF503A52EC2391A376A3C3C37DAA11EE2CA924A7
Certificate serial: 32E384D10CAEF7BA263332DF5CBCF461CC372643
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.mft
Manifest number: 0E
Signing time: Wed 25 Mar 2026 13:00:10 +0000
Manifest this update: Wed 25 Mar 2026 12:55:10 +0000
Manifest next update: Sun 29 Mar 2026 16:21:10 +0000
Files and hashes: 1: DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.crl (hash: 8JblOp0gwkgtQhj6iRLMDTohs/o4ozJjLjZmzjlFrsM=)
2: 34352e3138372e39302e302f32332d3233203d3e20323639383635.roa (hash: KXIh4c+tnF5yCoH/NymXFb1fdOXA4ScnFmmacUxd33A=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.crl
rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 16:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e3:84:d1:0c:ae:f7:ba:26:33:32:df:5c:bc:f4:61:cc:37:26:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF503A52EC2391A376A3C3C37DAA11EE2CA924A7
Validity
Not Before: Mar 25 12:55:10 2026 GMT
Not After : Mar 29 16:21:10 2026 GMT
Subject: CN=3721FDE81BD484F33F840576E23F7DA606030735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:b3:6b:27:ab:25:d8:49:d4:6e:e9:68:d4:
05:c5:31:43:d7:3a:c3:6b:f3:96:f1:65:37:4e:d4:
61:52:1c:42:78:00:1c:f4:3e:15:ad:62:16:81:40:
25:06:7c:18:3f:57:01:af:38:39:16:99:10:59:dd:
4e:64:ae:19:1d:99:db:16:de:25:38:72:bb:b8:e4:
79:a3:70:69:79:4b:60:4a:25:40:bf:a4:f6:cc:7d:
48:c6:c0:29:7d:ca:06:d4:9a:e2:9a:c5:95:84:48:
04:b6:4f:25:f5:51:db:8b:f6:46:6f:e3:62:07:6c:
59:49:b0:59:1c:5f:ef:a0:ce:55:0c:bd:39:33:04:
64:a8:86:4a:d4:ce:e2:68:d3:6d:48:af:1e:e0:4f:
30:13:fb:22:fd:0b:e4:24:b7:f8:b6:d8:01:59:84:
85:85:f6:a9:91:48:d5:25:af:8d:ba:bb:e7:7c:20:
59:4e:b2:ea:cd:b4:42:b6:99:4a:1d:c7:0e:53:3c:
6a:a9:6b:ac:a5:53:93:18:94:b4:4b:ff:64:3a:c4:
0f:67:da:5e:7a:29:84:44:95:9f:7e:df:a6:08:a9:
0e:0f:ce:ce:a0:71:44:46:39:4e:07:05:3c:6c:ac:
0e:48:cd:ae:40:c4:70:a6:54:af:8f:2f:31:df:f7:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:21:FD:E8:1B:D4:84:F3:3F:84:05:76:E2:3F:7D:A6:06:03:07:35
X509v3 Authority Key Identifier:
keyid:DF:50:3A:52:EC:23:91:A3:76:A3:C3:C3:7D:AA:11:EE:2C:A9:24:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d2:2d:c1:f6:cb:dc:34:1b:c5:66:24:68:e0:6b:78:19:bf:
a4:d5:4b:da:04:bc:65:8c:aa:dd:50:e4:5a:70:52:12:13:53:
d6:dc:30:8a:de:33:db:67:fc:9c:3f:0c:94:cc:ec:fd:b6:29:
ca:02:a7:06:f2:75:80:82:4d:1e:ef:e6:eb:3a:a9:de:e3:1f:
3d:ac:21:29:a1:4f:fa:11:19:03:74:b7:f6:ff:1b:58:95:8b:
1a:8b:02:cb:13:0b:15:f3:03:d5:25:47:f8:10:f2:69:01:6c:
92:a3:49:06:20:35:eb:b4:92:e9:6b:c9:2b:70:d9:f9:b3:a3:
f0:9e:9f:06:a6:2a:42:04:96:e2:94:53:89:e6:22:af:49:ae:
4a:45:e1:dd:67:39:a2:57:c7:9d:c4:df:d5:62:c6:32:dc:db:
8a:ea:56:3f:15:d8:34:e8:05:ea:89:a1:92:bf:ed:be:28:ea:
71:92:b5:db:99:0e:d5:4c:ea:82:72:c5:93:36:36:29:66:d0:
46:cc:e1:06:82:65:21:29:bd:d9:7e:2b:45:22:76:50:1d:b4:
7a:82:62:f4:ea:2e:a1:9b:6b:f0:99:52:73:9f:61:1a:9e:e8:
2f:56:fa:11:ed:ca:75:e8:d1:33:02:48:de:c0:dd:79:e5:6d:
e4:08:89:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:51:52 2026 by rpki-client