
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.mft
File: A853EF126CD190D84D3EDE920D3FEB6D1F743E95.mft (raw, json)
Hash identifier: NkUjCKX0u1xGCRfIhQb+L04MSLq47IHgEAnwSPTf770=
Subject key identifier: 80:13:0D:6E:17:A3:1A:83:32:96:A5:7B:3E:61:62:4E:E4:6F:40:39
Authority key identifier: A8:53:EF:12:6C:D1:90:D8:4D:3E:DE:92:0D:3F:EB:6D:1F:74:3E:95
Certificate issuer: /CN=A853EF126CD190D84D3EDE920D3FEB6D1F743E95
Certificate serial: 3D545C092630442F67C7C2D1A369CEDAA4111856
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.mft
Manifest number: 11
Signing time: Thu 26 Mar 2026 17:41:41 +0000
Manifest this update: Thu 26 Mar 2026 17:36:41 +0000
Manifest next update: Tue 31 Mar 2026 01:54:41 +0000
Files and hashes: 1: A853EF126CD190D84D3EDE920D3FEB6D1F743E95.crl (hash: k0HKfdFYhMRwCSGGfmGw/RmluxmWKcgNqjuoEzF3n9U=)
2: 323830333a386333303a3a2f33322d3430203d3e20323734333138.roa (hash: X2iQXiVqEdu2FXINcQzfX92zaFQrMjm4lfTemdRdc1E=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.crl
rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:54:5c:09:26:30:44:2f:67:c7:c2:d1:a3:69:ce:da:a4:11:18:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A853EF126CD190D84D3EDE920D3FEB6D1F743E95
Validity
Not Before: Mar 26 17:36:41 2026 GMT
Not After : Mar 31 01:54:41 2026 GMT
Subject: CN=80130D6E17A31A833296A57B3E61624EE46F4039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:a3:f1:50:a7:82:50:94:94:23:7d:75:31:
6f:e7:ec:f1:bc:6a:3e:67:d6:4e:49:bb:11:5a:e5:
1e:30:4b:56:bf:a6:ef:35:4e:2a:78:d0:63:6e:ca:
0f:9f:ab:0e:ec:3b:b4:c7:e7:e7:74:eb:5f:07:af:
7d:e4:44:15:91:25:2a:97:e3:5e:63:7b:24:66:27:
3b:a6:42:34:7d:99:9c:61:98:fe:1c:ba:b8:a3:18:
95:d2:b6:c3:3a:00:d0:39:cf:06:8e:71:d7:14:9b:
1f:c4:55:9c:5f:21:8c:e1:0e:83:8a:82:bb:72:56:
e7:8e:2b:9e:2f:e7:36:65:a9:0e:ea:1a:49:55:c2:
0e:bb:33:d4:ca:14:75:a0:af:29:c2:a1:59:38:64:
d9:dc:25:6d:29:16:9e:d7:3b:1f:79:15:1a:bb:94:
fa:e9:71:70:52:0f:57:ab:99:eb:15:c7:95:fb:5a:
fb:1c:67:a6:b5:fc:e4:bf:73:a3:a7:5d:9d:5b:4d:
66:7e:02:b5:c6:43:0f:ed:75:7e:a3:10:f1:18:66:
03:0b:5e:29:24:db:ed:48:36:4d:2c:29:ae:a7:43:
ea:b0:fc:26:fa:1b:2e:d5:32:05:6f:d4:f1:ea:2f:
94:bb:95:9c:32:00:08:20:ce:23:eb:cb:05:55:08:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:13:0D:6E:17:A3:1A:83:32:96:A5:7B:3E:61:62:4E:E4:6F:40:39
X509v3 Authority Key Identifier:
keyid:A8:53:EF:12:6C:D1:90:D8:4D:3E:DE:92:0D:3F:EB:6D:1F:74:3E:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e8:43:03:a7:9c:fb:8c:bb:79:dc:e4:85:e4:aa:76:24:8a:
31:b5:0f:6f:a6:d3:7c:88:75:dd:49:ff:a0:72:40:86:7b:23:
63:35:b4:62:ad:7a:d6:de:ff:5b:0c:af:be:2f:2f:b7:27:48:
05:12:7f:49:dd:95:cd:f3:29:4b:57:87:ff:20:11:4d:68:39:
64:11:ca:de:47:7c:2b:7d:b9:6f:1e:56:d7:25:b4:39:01:e7:
3b:42:d5:15:7a:dc:9d:ac:59:4c:c7:c5:9c:7f:06:7b:4f:d3:
5e:f8:59:e5:ff:ee:36:45:a8:e4:b8:ee:d6:17:53:30:8d:91:
1f:e8:95:14:20:e1:7c:37:13:52:6d:50:d9:00:a9:8f:a7:16:
f4:92:a4:8b:18:8b:4d:46:f6:ce:0e:94:f6:1b:17:47:ad:fe:
43:64:ab:38:0d:7b:b9:4d:8d:5c:8c:38:ac:52:df:b6:db:7d:
82:48:88:36:e7:a9:68:21:41:55:bf:92:fc:8d:39:c3:74:9a:
cb:e3:91:aa:90:86:f6:82:e2:db:80:18:ad:9a:52:0b:8e:55:
5e:a7:07:cf:f7:a2:22:6d:a3:70:68:d9:fa:82:8b:a3:49:cb:
2b:0f:b2:62:da:84:eb:08:81:80:fe:0d:fa:61:94:2c:43:14:
1d:60:63:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:48:23 2026 by rpki-client