
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft
File: DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft (raw, json)
Hash identifier: OD0Q1dtnZ7XZ/+gagnL8kKENSolNHnKaqJyKz7cU3wI=
Subject key identifier: 06:6C:CC:F6:60:8E:F0:39:C7:5B:37:B4:44:BC:9B:D9:E1:59:68:1B
Authority key identifier: DA:C2:CF:C9:35:EC:2F:A7:67:F1:EC:1D:7F:A8:FE:23:5D:EA:35:51
Certificate issuer: /CN=DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551
Certificate serial: 5ACD0B04A7BC632940BB89C38D1E8C13DBCAA023
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft
Manifest number: 75
Signing time: Wed 25 Mar 2026 09:02:57 +0000
Manifest this update: Wed 25 Mar 2026 08:57:57 +0000
Manifest next update: Sun 29 Mar 2026 19:52:57 +0000
Files and hashes: 1: 323830333a663339303a3a2f33322d3438203d3e20323733303238.roa (hash: GbxfBZdsYzBpzFY2/23FU6K35pcdUO+ZJXm6P0hKK0A=)
2: DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.crl (hash: zhM6/8ewzRiY8l/EzZtpTEt6i/34dKwlCzdIjAjXI5I=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.crl
rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 19:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:cd:0b:04:a7:bc:63:29:40:bb:89:c3:8d:1e:8c:13:db:ca:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551
Validity
Not Before: Mar 25 08:57:57 2026 GMT
Not After : Mar 29 19:52:57 2026 GMT
Subject: CN=066CCCF6608EF039C75B37B444BC9BD9E159681B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:db:d5:2c:ca:9d:23:24:ac:15:4c:39:ae:
f5:d5:29:53:5b:97:c4:3d:12:bb:31:b4:f2:18:db:
a7:30:4a:e7:f3:cb:00:12:32:25:dd:5e:5d:f3:1d:
0a:ed:80:f7:71:d8:8c:62:29:84:ce:c0:07:dd:cd:
ff:49:9b:17:0a:e8:ce:d0:75:66:44:5f:e2:78:9d:
1e:22:bf:82:72:6a:0a:14:ae:73:ac:62:36:47:f8:
6d:13:46:d4:ad:bd:ee:84:1a:5b:d4:8f:fd:fb:96:
94:dd:c0:c4:14:7f:87:df:2f:2b:6d:f2:fa:b5:3f:
11:1d:71:97:c4:dc:c0:cf:aa:2a:18:3b:f7:d0:0f:
e0:05:f7:32:01:a7:04:be:a9:9a:4f:a2:52:63:a3:
de:ed:26:71:08:0c:61:f5:ac:94:11:a4:30:f8:05:
84:52:33:5a:4a:b3:4c:1a:77:73:a3:b0:98:ff:81:
9c:3a:93:f3:8d:b5:65:79:11:94:23:fe:ff:3f:2c:
6f:95:e3:f2:de:87:05:54:e3:97:ae:f0:82:50:02:
6f:34:29:c6:70:dd:a4:0e:4f:d5:6f:2c:c6:96:1b:
55:25:93:c2:c5:8b:66:c8:f0:54:36:77:08:92:5a:
48:00:36:54:7f:49:c6:dc:2b:65:a2:09:3c:48:a1:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:CC:F6:60:8E:F0:39:C7:5B:37:B4:44:BC:9B:D9:E1:59:68:1B
X509v3 Authority Key Identifier:
keyid:DA:C2:CF:C9:35:EC:2F:A7:67:F1:EC:1D:7F:A8:FE:23:5D:EA:35:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD148AD4CF917AF8B9178684E1C1AF04E6ABBC9708B8BD87D3FAFE4AEAE26117/0/DAC2CFC935EC2FA767F1EC1D7FA8FE235DEA3551.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:36:fe:5c:7f:2c:17:df:e9:a4:49:3c:fc:5f:5b:e3:e5:f1:
25:7d:8b:a3:78:16:33:57:6b:f3:fc:ed:3b:5d:50:63:d8:cf:
24:d7:2a:71:ab:61:0a:96:05:96:b6:c3:06:5a:0a:5e:6f:fa:
4b:f5:df:07:5e:c0:08:95:45:0d:b1:6c:90:dc:92:cd:53:18:
72:70:c6:6e:7c:df:b3:08:49:fc:95:bd:8c:02:79:a5:dd:25:
9f:90:4b:4c:aa:3f:fc:eb:9e:69:67:19:2e:3c:eb:a6:1f:e9:
af:2a:bf:9d:28:45:51:16:6b:c4:06:12:dc:6c:72:78:fe:6e:
5d:18:d8:31:c9:bc:cf:9b:51:a7:67:0d:c3:a4:30:f0:51:0c:
92:75:f6:6c:ac:3e:7e:b6:73:d1:80:98:4f:f7:f5:23:d7:93:
76:9e:19:46:9d:dc:00:92:d3:7d:d2:49:bf:69:18:ef:64:2d:
c2:3e:2b:86:41:d6:60:dd:c8:1f:30:7b:8f:65:22:de:c8:07:
c4:28:1b:86:1d:36:13:7b:85:83:70:8c:0a:9a:cd:f3:b0:1d:
8c:b4:00:24:18:88:fc:14:2f:3a:bc:12:c3:10:c7:85:92:7a:
04:72:90:d8:d9:56:53:ec:30:66:f3:8e:78:31:74:f2:0f:ef:
5c:90:ad:3f
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUWs0LBKe8YylAu4nDjR6ME9vKoCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFDMkNGQzkzNUVDMkZBNzY3RjFFQzFEN0ZBOEZFMjM1
REVBMzU1MTAeFw0yNjAzMjUwODU3NTdaFw0yNjAzMjkxOTUyNTdaMDMxMTAvBgNV
BAMTKDA2NkNDQ0Y2NjA4RUYwMzlDNzVCMzdCNDQ0QkM5QkQ5RTE1OTY4MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xdvVLMqdIySsFUw5rvXVKVNb
l8Q9ErsxtPIY26cwSufzywASMiXdXl3zHQrtgPdx2IxiKYTOwAfdzf9JmxcK6M7Q
dWZEX+J4nR4iv4JyagoUrnOsYjZH+G0TRtStve6EGlvUj/37lpTdwMQUf4ffLytt
8vq1PxEdcZfE3MDPqioYO/fQD+AF9zIBpwS+qZpPolJjo97tJnEIDGH1rJQRpDD4
BYRSM1pKs0wad3OjsJj/gZw6k/ONtWV5EZQj/v8/LG+V4/LehwVU45eu8IJQAm80
KcZw3aQOT9VvLMaWG1Ulk8LFi2bI8FQ2dwiSWkgANlR/ScbcK2WiCTxIoYhrAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUBmzM9mCO8DnHWze0RLyb2eFZaBswHwYDVR0j
BBgwFoAU2sLPyTXsL6dn8ewdf6j+I13qNVEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRDE0OEFENENGOTE3QUY4QjkxNzg2ODRFMUMxQUYwNEU2
QUJCQzk3MDhCOEJEODdEM0ZBRkU0QUVBRTI2MTE3LzAvREFDMkNGQzkzNUVDMkZB
NzY3RjFFQzFEN0ZBOEZFMjM1REVBMzU1MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQUMyQ0ZDOTM1RUMyRkE3NjdG
MUVDMUQ3RkE4RkUyMzVERUEzNTUxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkQxNDhBRDRDRjkxN0FGOEI5MTc4Njg0RTFDMUFGMDRFNkFCQkM5NzA4
QjhCRDg3RDNGQUZFNEFFQUUyNjExNy8wL0RBQzJDRkM5MzVFQzJGQTc2N0YxRUMx
RDdGQThGRTIzNURFQTM1NTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9Nv5cfywX3+mkSTz8X1vj5fEl
fYujeBYzV2vz/O07XVBj2M8k1ypxq2EKlgWWtsMGWgpeb/pL9d8HXsAIlUUNsWyQ
3JLNUxhycMZufN+zCEn8lb2MAnml3SWfkEtMqj/8655pZxkuPOumH+mvKr+dKEVR
FmvEBhLcbHJ4/m5dGNgxybzPm1GnZw3DpDDwUQySdfZsrD5+tnPRgJhP9/Uj15N2
nhlGndwAktN90km/aRjvZC3CPiuGQdZg3cgfMHuPZSLeyAfEKBuGHTYTe4WDcIwK
ms3zsB2MtAAkGIj8FC86vBLDEMeFknoEcpDY2VZT7DBm8454MXTyD+9ckK0/
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:08 2026 by rpki-client