
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
File: 538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft (raw, json)
Hash identifier: XbHYrpkzaLnnEojEuGnQ3f5OtEW+EWKv3yV9AHeBjwg=
Subject key identifier: 96:23:BA:F9:EC:5C:EF:8F:D5:53:3E:95:CC:91:C6:96:4D:22:16:1D
Authority key identifier: 53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56
Certificate issuer: /CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
Certificate serial: 2C86D9A0B37A20188C7F1EDCE0902A051B306406
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
Manifest number: 0177
Signing time: Thu 26 Mar 2026 15:50:39 +0000
Manifest this update: Thu 26 Mar 2026 15:45:39 +0000
Manifest next update: Tue 31 Mar 2026 09:14:39 +0000
Files and hashes: 1: 34352e3232382e37362e302f32322d3235203d3e20323636363832.roa (hash: 8d844V7hlqgHVpfkLOupzGPT2pBVcmBmlUToxMnZCK4=)
2: 34352e3232382e37362e302f32322d3234203d3e20323636363832.roa (hash: nVNdEKFXaKCQCG+wChrdBTjEgYvoiSTdjXH4CvfXLso=)
3: 538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl (hash: dXn6CMjRxflS25yo0gdLeyfJOAwEFOXrA8IKlPE3g54=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl
rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:86:d9:a0:b3:7a:20:18:8c:7f:1e:dc:e0:90:2a:05:1b:30:64:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
Validity
Not Before: Mar 26 15:45:39 2026 GMT
Not After : Mar 31 09:14:39 2026 GMT
Subject: CN=9623BAF9EC5CEF8FD5533E95CC91C6964D22161D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:99:6c:49:e4:ae:98:a5:cb:6c:74:ad:71:
c6:42:6a:bf:c1:16:99:33:3c:8e:63:8f:1e:04:23:
0f:d4:56:f3:91:2f:cf:8c:29:dd:30:b1:ce:86:bd:
24:51:84:53:14:b4:fc:be:9f:c8:a8:47:68:1d:12:
a9:c8:fa:07:40:c1:3c:e0:fb:55:a2:2d:12:32:73:
3c:e2:0d:57:b0:e4:8e:b3:cd:7e:bc:bd:82:26:75:
b4:4d:e9:f6:af:2e:53:67:71:1b:35:3d:30:50:85:
70:f2:e7:54:c5:1e:8a:b6:13:f6:b1:74:7f:79:5c:
cf:c0:b7:a0:63:9e:73:2f:fd:ea:8c:ad:83:05:6d:
3d:6f:a0:23:18:e2:c7:5d:cd:53:c2:71:7f:11:57:
fb:be:0d:bd:8e:cb:4f:c0:7f:f7:8f:47:94:9a:f9:
9e:6d:86:28:32:f9:a1:72:70:95:a8:18:b0:e4:6a:
a3:87:46:a3:ff:b9:e9:81:f9:67:3d:4d:9d:94:90:
4a:4b:fb:0a:cb:77:45:e6:dc:c1:27:96:ff:4b:53:
ad:19:29:ff:b7:8f:d2:0f:6e:d6:e0:45:34:27:da:
26:14:68:e5:a9:e7:1b:3f:dc:9b:11:49:27:7f:b5:
ba:95:d8:1e:74:9e:31:78:99:da:ee:2e:f6:cb:56:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:23:BA:F9:EC:5C:EF:8F:D5:53:3E:95:CC:91:C6:96:4D:22:16:1D
X509v3 Authority Key Identifier:
keyid:53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:25:8e:10:a9:b0:fb:5e:1c:e2:88:6e:16:98:2d:71:39:ad:
6a:80:66:a7:63:41:71:f9:2b:9f:62:8e:60:90:09:e2:e7:7e:
10:d9:f2:f9:de:81:a1:a5:9c:66:6a:fa:30:6e:fc:a2:f3:f2:
b3:57:fb:eb:e2:63:18:32:48:fd:ca:01:87:21:fa:e4:a0:79:
f2:a5:83:fe:5f:19:33:54:65:a2:61:a3:2a:44:0f:48:a7:4f:
70:a9:4c:03:01:7c:c4:4e:3e:83:1e:a8:92:ed:17:62:69:a0:
49:b5:b2:93:bc:5f:0a:52:36:8a:cc:a2:78:85:27:a0:b0:66:
fc:34:91:09:79:63:fa:87:16:4f:bd:87:0b:7b:a9:fd:b4:65:
ea:92:a7:0d:5b:31:32:19:3f:17:63:e1:ca:64:75:25:3a:f5:
cb:b9:3b:4b:10:da:04:fb:da:28:d8:7f:c2:11:fb:8f:a9:3b:
4b:79:6d:ef:53:95:12:0d:dd:57:3b:bd:be:88:cc:ef:79:f8:
3a:e9:a4:95:1b:33:00:8e:79:4c:28:c8:3e:7b:0c:83:52:9b:
2a:33:01:e1:ca:52:71:94:92:4c:b5:99:96:2b:43:4a:86:aa:
d5:d9:cf:c3:92:41:4d:8a:be:b3:d1:b4:eb:f4:cb:86:d2:5e:
f5:e8:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:17:38 2026 by rpki-client