
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft
File: 20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft (raw, json)
Hash identifier: V3Idtyugy/08iaF8+laGrPkOx0dqH1C8SMuAL4qC1hQ=
Subject key identifier: 9D:4D:8C:60:16:DC:D8:99:6C:07:78:32:49:47:94:25:F5:DB:BD:24
Authority key identifier: 20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75
Certificate issuer: /CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75
Certificate serial: 10605DCFAC45A51FBF691EDB1FA8D5E9AFD2E4A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft
Manifest number: 0182
Signing time: Thu 26 Mar 2026 14:19:46 +0000
Manifest this update: Thu 26 Mar 2026 14:14:46 +0000
Manifest next update: Mon 30 Mar 2026 21:30:46 +0000
Files and hashes: 1: 323830333a653363303a3a2f33322d3438203d3e20323635373339.roa (hash: SoFI60tFI6lZ1grV/HGoKdRqCh6/SoLbl1W7ynRMqiY=)
2: 20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl (hash: nc34U9iP7Ecm2hb3KEyCHMmVfQZ9SpmDpzBGIssX/fc=)
3: 34352e372e3235322e302f32322d3234203d3e20323635373339.roa (hash: OMJEZFekQ8UXoZWHGUZCT61hMTLJIrxdPqyDSm2LEV8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl
rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:60:5d:cf:ac:45:a5:1f:bf:69:1e:db:1f:a8:d5:e9:af:d2:e4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75
Validity
Not Before: Mar 26 14:14:46 2026 GMT
Not After : Mar 30 21:30:46 2026 GMT
Subject: CN=9D4D8C6016DCD8996C07783249479425F5DBBD24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:e7:46:a5:30:4f:f0:5e:e4:6a:19:1b:0c:
83:e9:0e:a8:3b:ca:68:82:b9:ac:09:af:d7:60:02:
a5:02:ec:ef:5f:7c:a6:91:75:df:ab:d1:bc:4d:b1:
6b:b5:e3:c9:aa:8c:db:30:0a:2e:8b:17:a5:3e:dc:
38:ec:86:ce:0a:32:cd:a6:62:b9:97:29:0a:37:13:
08:5b:b7:3e:71:a6:17:a6:45:3c:ff:e2:9a:f5:25:
a9:68:73:47:b5:9a:ee:cf:0d:0a:30:aa:ff:9f:71:
d2:8c:14:e8:22:de:fb:6a:8a:46:37:a7:7f:08:b4:
c7:88:ca:a1:63:aa:d5:6a:13:e9:ee:a6:63:33:cd:
e7:a8:9b:72:38:e1:a5:1c:17:1f:4f:63:52:d3:53:
b4:cc:6d:e2:5a:04:d0:4d:f2:d1:95:bc:97:85:5e:
d2:44:46:70:e1:ff:9e:b4:55:fc:ca:c2:ce:ef:1f:
92:8c:eb:c3:d9:40:73:60:dd:e1:bb:2d:ba:19:69:
ee:f7:4e:28:9a:b4:5e:78:a6:2d:5a:83:47:15:29:
91:d3:ad:81:2b:2f:58:6e:10:ec:7c:45:e4:93:1c:
bf:ad:3e:d2:f3:58:4d:95:44:97:32:b6:c0:10:30:
6a:32:68:bb:ba:4a:2d:f6:a2:4d:0f:62:10:9a:8e:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4D:8C:60:16:DC:D8:99:6C:07:78:32:49:47:94:25:F5:DB:BD:24
X509v3 Authority Key Identifier:
keyid:20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f1:4a:59:58:7d:a2:e8:d8:70:0f:ca:42:8b:13:30:4d:76:
34:c0:91:ba:81:d4:6d:07:ac:2d:78:a9:bf:a0:b5:57:88:a6:
a7:dd:22:a7:56:85:7e:18:4e:c7:c6:4d:36:0e:0f:87:d5:24:
ef:4b:1f:78:65:34:40:6b:2a:3f:54:1a:f5:0d:c7:8f:21:97:
af:d1:ce:48:31:2e:d4:91:a4:78:1c:8e:d5:b8:4b:83:e6:59:
f2:08:f6:3d:b4:74:eb:96:a6:20:db:e1:6d:0b:50:c0:c0:c2:
9d:80:cd:e3:1c:24:e5:ce:ec:bd:de:8f:3b:61:72:81:2d:8a:
50:c8:71:ec:42:e5:89:00:c2:fa:16:ae:4f:0d:5f:c5:72:e3:
7b:f1:4a:40:9c:a1:7c:55:8b:03:a7:f2:a1:e4:7e:30:d8:bc:
bc:8f:28:d3:a9:e2:5f:fa:e0:37:aa:d0:28:ec:74:4b:e5:aa:
ba:39:2e:2b:64:76:10:c2:3c:71:e2:15:bf:38:55:1c:a9:95:
63:bd:b9:1a:fe:f7:eb:89:75:f4:d7:72:ae:31:cf:d6:25:1a:
2e:05:37:f5:e7:76:4c:3f:e9:46:89:a3:79:ad:f4:71:cd:d5:
26:07:e7:6b:5c:1c:60:67:92:1f:cc:6d:0d:c0:52:fe:4d:7e:
17:3a:6b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:42:37 2026 by rpki-client