
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
File: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft (raw, json)
Hash identifier: XSsjnu54m7olV/rjIGnIj1Nnja4hgIYB22aJPAiQnyk=
Subject key identifier: E4:EF:4B:66:BC:C6:58:00:E8:E8:6C:89:A8:6B:E2:6C:3E:0B:3E:58
Authority key identifier: 0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98
Certificate issuer: /CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
Certificate serial: 2B62DA55E52313F22E7BC7AA1CCF95A16C563436
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
Manifest number: 017D
Signing time: Thu 26 Mar 2026 20:33:26 +0000
Manifest this update: Thu 26 Mar 2026 20:28:26 +0000
Manifest next update: Wed 01 Apr 2026 17:13:26 +0000
Files and hashes: 1: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl (hash: /xwV+IoDmNHO94BCzsYRed/p9lGtE/fAbxPQqzmZY3M=)
2: 3133322e3235352e372e302f32342d3234203d3e20323633373236.roa (hash: d7HCNtMUJSDBU0MNo6D8oMi5dElo7qdJ0fXrO1yj6Hc=)
3: 3133322e3235352e362e302f32342d3234203d3e20323633363937.roa (hash: H9+XRzLm621808CLXrjIM1PpTIS2n26Arwi0YDC79+Y=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl
rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:62:da:55:e5:23:13:f2:2e:7b:c7:aa:1c:cf:95:a1:6c:56:34:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
Validity
Not Before: Mar 26 20:28:26 2026 GMT
Not After : Apr 1 17:13:26 2026 GMT
Subject: CN=E4EF4B66BCC65800E8E86C89A86BE26C3E0B3E58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:d5:f0:1d:df:f9:3e:cd:bf:a4:4a:23:4e:
6e:bc:27:c3:76:d7:e9:ef:af:68:84:ec:b5:9b:28:
e9:12:c4:df:aa:ea:98:54:20:7c:e8:35:83:47:df:
bb:f5:ee:b7:de:82:f6:80:29:95:4c:b3:20:36:30:
95:12:ab:b6:de:7a:58:a2:f8:16:18:a9:c7:ea:5c:
cb:30:2f:7d:2b:79:df:9b:dd:b4:a2:01:3e:c5:38:
fd:67:d4:a9:a4:24:85:d3:53:07:b1:ff:35:85:6e:
18:38:3d:2f:c3:7f:be:91:9f:eb:9e:db:cf:11:1a:
6a:a2:35:17:24:71:ef:65:95:9a:8c:ac:1e:fd:fb:
f0:ce:50:91:f9:21:6d:fe:11:ed:5d:f2:5c:6e:36:
bc:75:ec:63:67:45:db:7e:03:4e:f7:43:df:34:54:
77:60:3a:bf:e0:cb:89:59:5c:ff:67:43:96:f0:3e:
5a:f3:9d:d4:a6:88:7f:a9:35:25:55:b0:96:a3:29:
06:f7:ac:6a:e2:24:9c:ff:6a:b2:6c:9a:07:93:42:
a7:f2:6b:04:42:4c:89:78:b4:46:d9:3f:45:b0:2d:
0d:a8:44:96:36:91:13:05:e3:f6:da:f1:18:99:1d:
16:23:fd:98:23:0d:a9:23:56:c9:b9:74:67:23:3a:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EF:4B:66:BC:C6:58:00:E8:E8:6C:89:A8:6B:E2:6C:3E:0B:3E:58
X509v3 Authority Key Identifier:
keyid:0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d4:17:06:7e:32:46:a0:90:51:64:a6:d9:ec:d9:5a:c8:ae:
60:7f:54:c7:07:67:78:c6:08:fd:e7:84:c0:92:33:41:c3:bd:
8c:cd:42:c0:a8:2c:73:3f:87:16:ae:fb:b0:87:c1:7e:1a:cf:
c5:a6:eb:9c:26:c7:1e:c9:b3:ef:a6:d0:74:f4:57:d3:6b:9f:
76:4f:2e:61:b0:f9:64:b3:38:82:75:44:61:43:d2:59:2c:0f:
fd:a8:47:25:26:32:02:83:f7:0f:42:00:e8:f8:a4:4c:a7:3f:
cb:85:9a:1f:f9:73:c0:b6:e5:3d:44:1c:93:2f:a1:87:06:db:
6d:4d:75:4f:be:34:73:b4:6e:01:b7:5f:7d:69:70:24:c2:22:
4d:9b:f4:dd:fc:2c:0e:d8:33:d3:8c:9c:a6:56:3a:2c:54:7b:
95:c8:c7:ea:8b:3c:fe:41:48:4b:44:92:71:a4:a0:92:12:dd:
4b:aa:00:57:a9:23:17:95:b1:f7:d5:b1:2c:a1:71:5b:55:bd:
d6:aa:47:88:44:2c:7f:85:bf:8d:59:90:2c:12:af:43:18:e0:
8d:6f:73:fd:35:b3:7b:12:1d:fe:c3:75:c0:85:10:59:d5:1d:
1c:4e:4c:ee:c2:5d:ca:73:cd:b9:a6:3d:6d:e0:b6:71:ff:95:
7d:d3:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:17:01 2026 by rpki-client