
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.mft
File: 4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.mft (raw, json)
Hash identifier: ps/LmQGjvsJ+0lLzCpua+dkvidpp4itfWI/FvKTOuyQ=
Subject key identifier: 7F:20:AD:62:5F:53:F7:46:8B:EB:AD:C9:F7:7C:B5:FD:A0:03:04:92
Authority key identifier: 4C:E9:DD:4A:CA:90:E6:24:B6:F7:B7:2C:71:A4:7D:45:41:C7:BB:4E
Certificate issuer: /CN=4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E
Certificate serial: 0A335EE122512265591A3C02F8E38DCE9A410B2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.mft
Manifest number: 017A
Signing time: Wed 25 Mar 2026 04:10:08 +0000
Manifest this update: Wed 25 Mar 2026 04:05:08 +0000
Manifest next update: Mon 30 Mar 2026 08:45:08 +0000
Files and hashes: 1: 34352e3137312e3138302e302f32322d3234203d3e20323637373737.roa (hash: MlzV1YZR5S/MPBbG6oWDe3ITqsiE0Cx3aZM/tUpAnx4=)
2: 323830333a313761303a3a2f33322d3332203d3e20323637373737.roa (hash: UOan2lxLa/B/VPGbvrmkJgfAHpvjL6i8clwSOIBgyi0=)
3: 4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.crl (hash: jmmyEEF5DA2hCPhKRyDFRkCTVdiJ4R0mlyUw9tp6Mos=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.crl
rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 17:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:33:5e:e1:22:51:22:65:59:1a:3c:02:f8:e3:8d:ce:9a:41:0b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E
Validity
Not Before: Mar 25 04:05:08 2026 GMT
Not After : Mar 30 08:45:08 2026 GMT
Subject: CN=7F20AD625F53F7468BEBADC9F77CB5FDA0030492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:92:7c:02:9b:b0:6f:dc:84:ab:6b:39:f0:
96:1b:0c:4e:ba:49:68:fa:1b:8f:dc:67:2f:73:fb:
a8:f4:ee:bf:d4:20:39:3c:a0:a1:22:b2:e5:d2:b4:
74:5b:be:85:f1:67:fa:b5:6d:ba:e8:de:be:fa:37:
71:a5:6f:81:64:74:a1:ef:25:78:2b:b9:17:b6:65:
8c:21:0a:39:f3:a6:39:fd:c1:67:dd:1e:de:bc:8c:
8c:3d:b7:38:ce:07:13:76:49:0a:95:fa:f8:ee:44:
9a:bf:cc:e2:7e:fd:46:9c:ce:7a:d7:b3:9b:6a:a1:
ac:f8:54:5e:40:e8:70:19:66:b2:c7:b4:48:1f:d3:
c1:00:e1:a4:17:50:56:e6:15:96:2e:e1:16:a7:67:
0d:31:76:55:95:84:c2:36:ba:cd:be:d2:f8:08:ae:
9a:34:79:15:da:7f:54:4f:ff:00:d1:f3:8f:f9:60:
9a:32:46:2e:ee:14:0e:0b:41:5e:7f:85:d1:b6:5c:
20:bb:cb:93:21:9d:07:53:c5:e9:2f:f5:ab:df:d3:
2c:93:a8:d4:32:11:9d:e0:22:34:ba:64:97:ba:56:
41:ef:24:ee:ff:09:f3:06:dc:bc:c8:a9:77:3a:73:
1c:eb:da:fa:36:7c:39:26:92:3c:23:57:bc:02:c2:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:20:AD:62:5F:53:F7:46:8B:EB:AD:C9:F7:7C:B5:FD:A0:03:04:92
X509v3 Authority Key Identifier:
keyid:4C:E9:DD:4A:CA:90:E6:24:B6:F7:B7:2C:71:A4:7D:45:41:C7:BB:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fb:f5:84:60:a1:69:9a:ee:95:ee:7d:f9:a4:5b:1a:dd:9a:
f9:7e:5f:27:f1:0e:a9:8c:66:7c:b0:14:a9:d8:88:04:13:e0:
e5:94:de:f4:91:3a:bf:3f:d0:68:d9:3c:32:57:df:dd:5c:44:
82:1f:6b:7f:b2:a8:7b:6e:0e:e2:e0:7f:9d:6e:90:ad:88:8c:
de:8b:d6:7e:d0:b2:2c:dc:44:4b:43:9f:5f:7c:66:ac:26:c4:
e4:90:55:7e:33:46:d3:e0:6f:02:38:e8:38:03:bd:bf:92:f0:
f2:61:67:0b:02:2d:9c:aa:3b:49:55:6a:87:b2:ea:f1:71:97:
fd:c2:05:43:98:5c:e2:12:1e:4e:df:4f:bf:b3:72:b8:a9:4e:
af:d0:07:9c:57:b6:31:69:a2:f5:f3:83:70:12:db:fd:a3:61:
bd:47:e4:2f:68:db:46:d6:c6:c1:75:aa:ef:7b:8e:c8:ed:9e:
d1:a1:c9:f1:c8:3b:a3:e7:31:ed:3e:2d:65:ed:64:6d:0c:4e:
2f:b4:b0:e4:a8:52:f9:c5:30:96:16:d3:e3:8d:06:a2:e4:22:
8f:e2:fb:ff:1c:6f:1b:30:81:87:86:fa:90:5d:da:7a:d7:ee:
ac:ba:30:ad:02:3a:64:74:ea:9b:33:2e:94:62:e6:f9:f6:2b:
5d:02:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:36:44 2026 by rpki-client