
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft
File: 1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft (raw, json)
Hash identifier: rfvTN6om6ySB28L8qxdcK0Ddng4QZzLIsDFJOrFDDMg=
Subject key identifier: A1:27:B4:4E:0F:D5:D5:C8:10:0B:45:94:3A:97:34:2F:F3:51:66:BA
Authority key identifier: 1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC
Certificate issuer: /CN=1FF21857EA288ABC3D5018816284FC74ED1A1CCC
Certificate serial: 7D340705A37E2A0660AF3533CA284102AE89A5ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft
Manifest number: 017A
Signing time: Wed 25 Mar 2026 11:29:21 +0000
Manifest this update: Wed 25 Mar 2026 11:24:21 +0000
Manifest next update: Mon 30 Mar 2026 03:35:21 +0000
Files and hashes: 1: 1FF21857EA288ABC3D5018816284FC74ED1A1CCC.crl (hash: x3sjOfiTXaEUhpy+zzudd1BDdSzRu3SMY2llxzBUs/Y=)
2: 34352e3232342e35322e302f32322d3234203d3e203532333237.roa (hash: cy2+k+7aGxG2uVpnEUmR2T8VJmd2O3iHOL1r+ecu8tY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.crl
rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 03:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:34:07:05:a3:7e:2a:06:60:af:35:33:ca:28:41:02:ae:89:a5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FF21857EA288ABC3D5018816284FC74ED1A1CCC
Validity
Not Before: Mar 25 11:24:21 2026 GMT
Not After : Mar 30 03:35:21 2026 GMT
Subject: CN=A127B44E0FD5D5C8100B45943A97342FF35166BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:81:9f:85:b1:5c:c2:d1:73:22:60:97:12:
23:0c:44:1c:a2:d2:a5:e8:19:2f:6d:5b:dd:65:de:
6b:82:77:f3:dd:d5:17:7c:78:67:90:c9:2c:10:b1:
6e:ab:72:8c:d3:dc:84:45:bd:37:11:e0:fd:01:6f:
14:60:26:1e:42:d8:aa:04:48:5f:7f:28:7f:9f:2e:
79:40:28:75:7f:19:b4:65:48:e8:ce:f1:74:53:20:
e5:16:f9:0c:8d:7b:76:ea:21:fc:89:00:e6:f4:bc:
44:8c:44:b1:1b:6f:3f:73:ea:e3:70:89:8a:16:71:
87:f1:a2:28:52:c8:57:f8:83:bb:70:94:26:9e:60:
3b:bb:1c:ce:4d:7c:3a:38:69:68:2c:70:5c:4e:51:
8a:fb:ca:8d:f9:bf:e3:37:b7:05:43:63:e8:9d:79:
e3:5c:7e:66:3a:55:96:99:38:1f:a6:60:62:dc:6e:
57:67:91:5d:84:cb:56:3f:04:08:58:5e:b5:53:41:
61:04:ea:34:b6:ad:37:be:18:a2:ca:e0:68:a2:55:
73:b6:93:7c:7b:1d:fd:9f:33:51:ea:65:6f:41:a7:
b1:19:86:db:f2:de:bd:fa:1a:2f:85:b7:fa:4e:7a:
33:51:b5:49:3b:74:79:10:b1:8d:fe:3d:02:76:9d:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:B4:4E:0F:D5:D5:C8:10:0B:45:94:3A:97:34:2F:F3:51:66:BA
X509v3 Authority Key Identifier:
keyid:1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ca:0c:89:31:2b:36:24:0e:7c:59:44:86:b2:4f:51:6a:3a:
d7:98:3a:96:a2:aa:f3:76:2f:28:e1:e2:f1:17:e9:e5:7b:6c:
8d:10:40:99:57:76:a5:84:86:c9:18:19:8b:ef:44:c9:7e:3d:
d9:c0:9f:4f:eb:ac:d2:e8:dd:e6:fd:27:9a:df:ee:70:55:e1:
b5:e7:e6:5d:49:bf:85:d1:16:c5:b4:c0:0d:d5:1f:08:aa:5c:
40:1e:06:ac:40:4a:ed:3c:3c:98:3b:4f:03:0c:16:5d:b0:bb:
cd:9c:a6:1b:d2:e5:8a:a7:ec:e4:5b:d7:db:06:3f:23:f1:8a:
be:f6:72:62:11:af:51:27:dd:ce:cb:75:2a:83:c4:09:74:1e:
f6:2c:3f:13:d3:e3:68:67:c0:b3:21:6f:46:47:48:1e:71:52:
c3:9d:47:e8:43:21:93:12:df:d7:35:42:ac:05:d5:75:09:67:
0b:fb:51:44:11:91:57:fe:71:3d:41:85:7e:45:de:9a:db:4b:
df:0e:b0:16:65:f6:f2:39:aa:9e:92:ab:9f:a2:4e:66:ad:bc:
c8:dc:16:26:2e:12:ee:25:7a:b6:3a:ef:4b:7b:8f:4b:6f:1d:
50:cc:3b:cb:fe:e4:95:7e:98:bf:29:f9:f8:24:27:c7:8b:9e:
89:00:e6:85
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUfTQHBaN+KgZgrzUzyihBAq6Jpe0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZGMjE4NTdFQTI4OEFCQzNENTAxODgxNjI4NEZDNzRF
RDFBMUNDQzAeFw0yNjAzMjUxMTI0MjFaFw0yNjAzMzAwMzM1MjFaMDMxMTAvBgNV
BAMTKEExMjdCNDRFMEZENUQ1QzgxMDBCNDU5NDNBOTczNDJGRjM1MTY2QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClt4GfhbFcwtFzImCXEiMMRByi
0qXoGS9tW91l3muCd/Pd1Rd8eGeQySwQsW6rcozT3IRFvTcR4P0BbxRgJh5C2KoE
SF9/KH+fLnlAKHV/GbRlSOjO8XRTIOUW+QyNe3bqIfyJAOb0vESMRLEbbz9z6uNw
iYoWcYfxoihSyFf4g7twlCaeYDu7HM5NfDo4aWgscFxOUYr7yo35v+M3twVDY+id
eeNcfmY6VZaZOB+mYGLcbldnkV2Ey1Y/BAhYXrVTQWEE6jS2rTe+GKLK4GiiVXO2
k3x7Hf2fM1HqZW9Bp7EZhtvy3r36Gi+Ft/pOejNRtUk7dHkQsY3+PQJ2ne3bAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUoSe0Tg/V1cgQC0WUOpc0L/NRZrowHwYDVR0j
BBgwFoAUH/IYV+ooirw9UBiBYoT8dO0aHMwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERkU2Q0RDN0U3NjZCOThEODBDMjhGMjUxOTlGMTA5NzBE
RDg5ODczMzRGOEVEQjBCOUQyMzJEQzUyMDY4NTRCLzAvMUZGMjE4NTdFQTI4OEFC
QzNENTAxODgxNjI4NEZDNzRFRDFBMUNDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRkYyMTg1N0VBMjg4QUJDM0Q1
MDE4ODE2Mjg0RkM3NEVEMUExQ0NDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREZFNkNEQzdFNzY2Qjk4RDgwQzI4RjI1MTk5RjEwOTcwREQ4OTg3MzM0
RjhFREIwQjlEMjMyREM1MjA2ODU0Qi8wLzFGRjIxODU3RUEyODhBQkMzRDUwMTg4
MTYyODRGQzc0RUQxQTFDQ0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhygyJMSs2JA58WUSGsk9RajrX
mDqWoqrzdi8o4eLxF+nle2yNEECZV3alhIbJGBmL70TJfj3ZwJ9P66zS6N3m/Sea
3+5wVeG15+ZdSb+F0RbFtMAN1R8IqlxAHgasQErtPDyYO08DDBZdsLvNnKYb0uWK
p+zkW9fbBj8j8Yq+9nJiEa9RJ93Oy3Uqg8QJdB72LD8T0+NoZ8CzIW9GR0gecVLD
nUfoQyGTEt/XNUKsBdV1CWcL+1FEEZFX/nE9QYV+Rd6a20vfDrAWZfbyOaqekquf
ok5mrbzI3BYmLhLuJXq2Ou9Le49Lbx1QzDvL/uSVfpi/Kfn4JCfHi56JAOaF
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:16 2026 by rpki-client