
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
File: CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft (raw, json)
Hash identifier: lv+Yow6zgPqulgSl2g0wZX9qfExBTPVA/sGJAXucU8o=
Subject key identifier: 03:63:B1:1A:8C:47:4C:48:E7:27:27:55:8A:AF:D0:83:D0:C8:6A:2B
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Certificate issuer: /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial: 3EEB3B2CE4A69F768F926E0F5F59FE84736842D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
Manifest number: 017E
Signing time: Tue 24 Mar 2026 17:58:56 +0000
Manifest this update: Tue 24 Mar 2026 17:53:56 +0000
Manifest next update: Mon 30 Mar 2026 12:54:56 +0000
Files and hashes: 1: CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl (hash: V2FNvR6wGk/eKSew/QpIB1gyYictSbsVV3dU68G+jH4=)
2: 3139312e39372e31362e302f32322d3234203d3e20323634383434.roa (hash: Yuf5XFzKCIo2d0epsdNAai1Ql9jRbdyDY/wpCpQorNA=)
3: 323830333a383238303a3a2f33322d3332203d3e20323634383434.roa (hash: kMz8Zk/AWDRwAVGLJFvvyvYKJjpACmuyP6pcjkl4MGA=)
4: 3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa (hash: EqsSaCt8bWlKbQxBJ4+VRsUziVKjMJDVV+4mGez7uEE=)
5: 3139312e39372e31372e302f32342d3234203d3e20323732383635.roa (hash: 8JFBRRJPMn+8eQeCdhdOgi4iQs4rzxptXxCUEWx1+Q0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 12:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:eb:3b:2c:e4:a6:9f:76:8f:92:6e:0f:5f:59:fe:84:73:68:42:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Validity
Not Before: Mar 24 17:53:56 2026 GMT
Not After : Mar 30 12:54:56 2026 GMT
Subject: CN=0363B11A8C474C48E72727558AAFD083D0C86A2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:94:b4:e3:51:a5:a6:92:1d:70:db:88:4c:
a9:04:9f:8f:d7:fd:2d:64:fd:4a:93:b5:81:1e:e9:
7a:6e:58:ab:e5:1d:00:00:59:52:92:a0:31:b9:37:
8f:1b:e0:a5:b1:59:83:4d:e8:9e:73:0d:1b:71:98:
43:c5:c1:22:78:5b:7e:3c:ac:5f:34:19:7b:d2:e4:
3a:9e:85:31:f7:44:61:a2:dd:54:fb:3c:7b:da:84:
1b:74:21:53:aa:75:6b:ce:34:a2:45:d9:69:4d:93:
7a:8d:53:95:37:9e:7b:ab:14:b6:41:43:29:f2:fd:
3a:47:c7:9a:bf:ed:33:40:76:1f:16:1a:21:82:85:
e5:78:e6:42:da:8b:10:99:fc:a9:8a:92:3e:d9:e6:
dd:00:5f:9d:5b:4f:81:68:b7:7e:57:05:4f:e1:e1:
5d:c7:88:4e:35:30:ae:2b:f1:5b:4a:ad:d3:f7:78:
82:33:52:8a:b7:66:2e:78:2b:3a:43:21:db:ce:e2:
72:a2:63:d0:16:77:d2:87:0b:84:59:66:4e:ae:0b:
f5:7c:0b:96:04:ee:b1:fa:fb:54:1a:65:f1:e0:e2:
6a:45:29:fd:11:4b:ed:69:78:42:87:89:e9:a4:fd:
1c:af:b6:8e:48:d7:e9:da:22:73:33:79:e7:d2:94:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:63:B1:1A:8C:47:4C:48:E7:27:27:55:8A:AF:D0:83:D0:C8:6A:2B
X509v3 Authority Key Identifier:
keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a5:f2:e9:75:9c:9a:9a:86:77:66:3a:48:6d:c1:f0:75:23:
7e:16:c9:a7:ab:f5:8c:fa:0c:72:1d:46:f2:a9:aa:1f:49:16:
96:57:23:97:c2:5d:26:1b:c0:88:94:72:ee:e0:08:1f:1c:25:
c3:5a:47:fc:1e:0d:f4:d7:5b:6d:53:e8:91:ed:d2:04:54:94:
cd:6b:44:f0:db:3a:de:e8:1e:ad:f2:04:6b:22:b1:d9:88:19:
0a:f2:5c:6b:cb:ca:07:c0:e5:3e:43:45:15:6d:33:4f:48:aa:
20:89:cf:86:22:75:72:ef:8f:bb:a0:0b:d8:16:c8:1d:1b:7e:
b7:ed:ee:9f:f2:8c:02:b0:fb:7c:ea:00:12:e7:e0:07:5b:ff:
96:fd:14:9d:47:ab:82:ec:f6:9f:cd:a0:0d:2b:77:07:fe:c4:
e1:6b:0f:30:be:7a:02:7f:03:cc:a4:6a:97:e8:14:04:59:19:
26:0f:6f:7e:ed:84:33:70:0c:ef:8c:8c:7d:0f:bd:a8:b3:a3:
1c:b1:10:3f:ff:a9:74:3e:54:33:08:71:34:bd:5b:6f:b5:e4:
0d:c4:be:0b:c2:a5:1e:c8:f9:97:0f:53:b8:97:10:84:5f:d6:
4e:4b:9f:fb:b7:d8:2a:50:a3:ce:45:cf:7b:c4:cf:6a:20:a5:
de:4a:77:4d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPus7LOSmn3aPkm4PX1n+hHNoQtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGRjU4NTA3QUYxQTA2QUVGREE2N0REOEQ2NTEyNUMz
NjRBNERFQzAeFw0yNjAzMjQxNzUzNTZaFw0yNjAzMzAxMjU0NTZaMDMxMTAvBgNV
BAMTKDAzNjNCMTFBOEM0NzRDNDhFNzI3Mjc1NThBQUZEMDgzRDBDODZBMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhZS041GlppIdcNuITKkEn4/X
/S1k/UqTtYEe6XpuWKvlHQAAWVKSoDG5N48b4KWxWYNN6J5zDRtxmEPFwSJ4W348
rF80GXvS5DqehTH3RGGi3VT7PHvahBt0IVOqdWvONKJF2WlNk3qNU5U3nnurFLZB
Qyny/TpHx5q/7TNAdh8WGiGCheV45kLaixCZ/KmKkj7Z5t0AX51bT4Fot35XBU/h
4V3HiE41MK4r8VtKrdP3eIIzUoq3Zi54KzpDIdvO4nKiY9AWd9KHC4RZZk6uC/V8
C5YE7rH6+1QaZfHg4mpFKf0RS+1peEKHiemk/Ryvto5I1+naInMzeefSlE3hAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUA2OxGoxHTEjnJydViq/Qg9DIaiswHwYDVR0j
BBgwFoAUzv9YUHrxoGrv2mfdjWUSXDZKTewwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNURDOTc2OEVBMEFBQ0Y0NkRDOTExRTgxRDBEOUQwNDk5
MjdEMjRBQUNBRjA2ODVDQjM2N0Q1NENFRTJCRDk1LzAvQ0VGRjU4NTA3QUYxQTA2
QUVGREE2N0REOEQ2NTEyNUMzNjRBNERFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUZGNTg1MDdBRjFBMDZBRUZE
QTY3REQ4RDY1MTI1QzM2NEE0REVDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVEQzk3NjhFQTBBQUNGNDZEQzkxMUU4MUQwRDlEMDQ5OTI3RDI0QUFD
QUYwNjg1Q0IzNjdENTRDRUUyQkQ5NS8wL0NFRkY1ODUwN0FGMUEwNkFFRkRBNjdE
RDhENjUxMjVDMzY0QTRERUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEpfLpdZyamoZ3ZjpIbcHwdSN+
Fsmnq/WM+gxyHUbyqaofSRaWVyOXwl0mG8CIlHLu4AgfHCXDWkf8Hg3011ttU+iR
7dIEVJTNa0Tw2zre6B6t8gRrIrHZiBkK8lxry8oHwOU+Q0UVbTNPSKogic+GInVy
74+7oAvYFsgdG3637e6f8owCsPt86gAS5+AHW/+W/RSdR6uC7PafzaANK3cH/sTh
aw8wvnoCfwPMpGqX6BQEWRkmD29+7YQzcAzvjIx9D72os6McsRA//6l0PlQzCHE0
vVtvteQNxL4LwqUeyPmXD1O4lxCEX9ZOS5/7t9gqUKPORc97xM9qIKXeSndN
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:42 2026 by rpki-client