
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.mft
File: DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.mft (raw, json)
Hash identifier: uaW2lTtlq/b+Uu1LMHq7MjqAsRyB8PdbJ8PsPf30Tvc=
Subject key identifier: 71:E1:70:8A:74:2D:84:BC:37:35:68:AB:70:93:97:95:B2:46:20:F7
Authority key identifier: DC:37:31:A4:5F:32:7E:DC:D8:C0:84:72:27:CD:EE:EA:E8:37:6B:9A
Certificate issuer: /CN=DC3731A45F327EDCD8C0847227CDEEEAE8376B9A
Certificate serial: 6A60AC91C091039140FA0E40852154DF1AB14A5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.mft
Manifest number: 017C
Signing time: Wed 25 Mar 2026 15:06:22 +0000
Manifest this update: Wed 25 Mar 2026 15:01:22 +0000
Manifest next update: Sun 29 Mar 2026 18:08:22 +0000
Files and hashes: 1: DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.crl (hash: L8FR9UXeKvb0Ce8k0/I6+rrSshlig3IQeDubZWpKTvk=)
2: 3230312e3232302e3132382e302f32302d3234203d3e203237383834.roa (hash: Ee2nL8FKy9MsDWUo59E3+jYW/xuhPgM7LM5zb+DWlE4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.crl
rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 17:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:60:ac:91:c0:91:03:91:40:fa:0e:40:85:21:54:df:1a:b1:4a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC3731A45F327EDCD8C0847227CDEEEAE8376B9A
Validity
Not Before: Mar 25 15:01:22 2026 GMT
Not After : Mar 29 18:08:22 2026 GMT
Subject: CN=71E1708A742D84BC373568AB70939795B24620F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:8b:67:20:a0:69:12:a9:43:44:a5:4b:48:
46:e4:89:1b:40:27:71:c7:38:bf:9f:f1:24:8a:c5:
47:ed:df:a7:68:97:60:b5:11:ab:f3:7f:b0:74:9c:
4a:f8:51:00:2a:f0:d1:0b:22:68:6d:fb:31:eb:fb:
92:86:cf:da:28:42:fb:a6:92:32:5c:ac:c9:0a:c4:
fd:bd:bf:1e:02:ae:50:86:0c:56:b2:f7:fc:68:6e:
05:de:e0:60:bb:ec:dd:85:95:0c:95:a5:15:d2:5f:
7e:c7:99:39:aa:88:aa:97:bc:13:10:46:08:c9:aa:
c2:d2:a6:4a:2b:27:7b:6a:9e:24:42:73:33:dc:3e:
51:c8:c9:ef:80:60:b1:91:51:8c:be:76:da:3c:90:
c6:5b:c0:42:00:89:1b:4e:c4:35:ac:20:c7:6a:d2:
0c:1c:9c:1c:47:5e:21:5c:df:3f:e4:32:68:6f:7c:
35:82:ac:38:fe:98:f2:58:c1:b7:50:14:e3:91:e0:
2a:17:8c:5b:8f:c2:e2:ca:2b:8b:26:6a:01:cf:de:
9a:7d:a1:62:a2:41:ca:96:d6:0c:f2:19:34:c6:54:
02:37:2f:fb:c6:33:d5:18:d2:6a:9c:b1:eb:4a:be:
dd:fd:5f:48:08:85:89:e8:ca:52:a6:30:f2:2a:b0:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E1:70:8A:74:2D:84:BC:37:35:68:AB:70:93:97:95:B2:46:20:F7
X509v3 Authority Key Identifier:
keyid:DC:37:31:A4:5F:32:7E:DC:D8:C0:84:72:27:CD:EE:EA:E8:37:6B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:67:b0:7c:f8:8e:e3:b0:db:bb:7b:e1:d5:d3:d2:02:90:47:
c5:62:cf:4c:93:6f:14:75:64:55:4d:14:e1:34:17:65:c4:4d:
17:db:30:35:f8:59:5e:40:84:fa:ab:d5:c4:ee:a3:26:65:bc:
cc:a3:b3:81:bf:b7:60:fc:f7:c7:80:9d:1f:34:d4:7f:63:af:
60:d5:e6:86:cc:6e:78:49:f8:ed:dc:a5:1d:da:83:61:36:cf:
87:6d:47:f9:61:6f:05:91:49:ab:f3:e4:5e:d5:09:fa:92:be:
cc:7e:33:0e:f1:cb:7b:7a:7b:1a:ca:c4:fd:97:0e:60:9d:ee:
f2:ee:48:e4:9c:39:a2:e2:cf:ea:e2:1d:68:bd:98:e2:87:2c:
3d:b1:e3:a9:f1:ee:de:38:82:ab:e6:cf:0f:fc:22:30:78:ff:
40:bd:19:3d:a1:93:9e:67:da:c2:44:ae:dd:21:15:1f:7e:f7:
0e:66:31:76:0b:49:74:2f:d7:e1:5b:a2:fb:24:29:b8:65:6d:
3a:66:fb:d4:fb:36:fe:0e:12:2b:3d:99:00:48:4c:9c:99:e9:
a6:c9:5f:1b:8d:dd:2a:4b:ec:7d:ad:ab:6b:c8:93:39:f4:da:
78:b0:f9:8a:53:66:76:57:68:26:fa:99:b7:dd:33:7e:89:59:
c0:33:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:41 2026 by rpki-client