
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA5532DBF94E76CF9D70D507B7B4E50E2B357B8EDFDFB57D7E99B0706DEEDB49/0/D388726820F873DA6DA8B68F10DE77E2BC168B10.mft
File: D388726820F873DA6DA8B68F10DE77E2BC168B10.mft (raw, json)
Hash identifier: Bvj+cYIHcw8kll3aG7j0uM1bfxZXh3LTKychIMXXxWk=
Subject key identifier: BD:50:BA:B4:30:88:87:CA:8A:0E:F7:85:14:EA:A6:A9:CF:EA:48:B5
Authority key identifier: D3:88:72:68:20:F8:73:DA:6D:A8:B6:8F:10:DE:77:E2:BC:16:8B:10
Certificate issuer: /CN=D388726820F873DA6DA8B68F10DE77E2BC168B10
Certificate serial: 2D8786D872ADF3C14F621BF58EB61FE9774377BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D388726820F873DA6DA8B68F10DE77E2BC168B10.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FA5532DBF94E76CF9D70D507B7B4E50E2B357B8EDFDFB57D7E99B0706DEEDB49/0/D388726820F873DA6DA8B68F10DE77E2BC168B10.mft
Manifest number: 21
Signing time: Thu 26 Mar 2026 06:15:14 +0000
Manifest this update: Thu 26 Mar 2026 06:10:14 +0000
Manifest next update: Mon 30 Mar 2026 16:36:14 +0000
Files and hashes: 1: 34352e3232352e3133352e302f32342d3234203d3e203634313037.roa (hash: 368FdytXgZ1uGKTZr9nmPISaR9R8SN+XDMSAWMZPYH0=)
2: D388726820F873DA6DA8B68F10DE77E2BC168B10.crl (hash: OZOfoY4v9R3nrGVcg9B/vQXnFEv39g4lh3iwdJgcwJU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FA5532DBF94E76CF9D70D507B7B4E50E2B357B8EDFDFB57D7E99B0706DEEDB49/0/D388726820F873DA6DA8B68F10DE77E2BC168B10.crl
rsync://repository.lacnic.net/rpki/lacnic/FA5532DBF94E76CF9D70D507B7B4E50E2B357B8EDFDFB57D7E99B0706DEEDB49/0/D388726820F873DA6DA8B68F10DE77E2BC168B10.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D388726820F873DA6DA8B68F10DE77E2BC168B10.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 17:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:87:86:d8:72:ad:f3:c1:4f:62:1b:f5:8e:b6:1f:e9:77:43:77:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D388726820F873DA6DA8B68F10DE77E2BC168B10
Validity
Not Before: Mar 26 06:10:14 2026 GMT
Not After : Mar 30 16:36:14 2026 GMT
Subject: CN=BD50BAB4308887CA8A0EF78514EAA6A9CFEA48B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:23:b0:31:71:fa:01:98:54:4b:7d:2d:f2:
3f:8a:0c:c2:be:31:c8:7a:a7:53:e6:8b:35:fe:21:
10:4e:48:ee:75:fe:11:46:90:01:ea:85:2b:8e:14:
87:4c:ea:7f:1d:d8:24:e3:74:fd:cc:9f:a8:2b:86:
d1:35:6b:ea:93:3b:87:e5:b0:0b:40:66:6d:bd:98:
e7:37:0a:e2:8d:d0:0e:bb:cc:0f:91:d2:ee:24:20:
6c:7c:df:3b:c1:7a:05:df:25:2d:4f:30:46:ff:66:
1f:74:6c:1e:b5:a9:9e:d2:27:fb:d2:a3:2d:ab:8d:
9a:8e:f8:d2:c5:c6:85:4c:29:e2:c0:b4:65:f9:14:
cc:05:c3:f8:03:bc:1b:82:92:ce:c0:c4:a7:d1:d6:
74:c6:4c:d3:81:40:0a:79:b8:a7:6b:b3:6b:1e:74:
59:e8:86:06:4a:a3:a5:69:f7:28:2b:4c:e1:2b:e5:
19:12:85:f5:5f:c1:7e:38:df:47:7e:cb:fe:53:97:
eb:f1:2c:23:30:3a:53:29:a0:93:2a:11:ca:fe:f5:
d6:50:73:2b:49:87:b7:52:96:33:c3:3a:dc:a0:04:
a8:16:51:61:3b:94:78:85:07:0a:84:d5:e4:d6:24:
79:e1:7a:66:d7:a2:ee:59:be:a5:fe:68:4c:0a:66:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:50:BA:B4:30:88:87:CA:8A:0E:F7:85:14:EA:A6:A9:CF:EA:48:B5
X509v3 Authority Key Identifier:
keyid:D3:88:72:68:20:F8:73:DA:6D:A8:B6:8F:10:DE:77:E2:BC:16:8B:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FA5532DBF94E76CF9D70D507B7B4E50E2B357B8EDFDFB57D7E99B0706DEEDB49/0/D388726820F873DA6DA8B68F10DE77E2BC168B10.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D388726820F873DA6DA8B68F10DE77E2BC168B10.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA5532DBF94E76CF9D70D507B7B4E50E2B357B8EDFDFB57D7E99B0706DEEDB49/0/D388726820F873DA6DA8B68F10DE77E2BC168B10.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fe:c7:e6:47:87:13:0e:21:13:dd:f4:76:94:f9:1c:f9:a7:
d7:a3:db:66:e3:87:7d:8d:3f:67:ee:6d:7f:b2:53:38:90:c0:
17:7b:a1:6b:0e:d9:b0:9f:e3:43:92:0c:f2:b9:a5:40:35:48:
1d:04:a7:ec:99:a1:c1:d2:ba:10:83:b0:81:59:1d:ba:a3:32:
6d:6e:5e:51:4b:91:35:12:80:33:5d:fe:47:86:36:ab:01:c7:
de:0e:92:9e:d5:ae:f7:12:b4:a9:e6:b2:46:80:13:05:f0:fc:
ae:f8:37:90:44:65:9e:74:93:1b:a2:18:24:09:32:0c:13:42:
40:76:98:bf:f7:25:b3:99:a6:59:ab:e0:b7:f5:bb:0b:a3:12:
84:52:83:6f:94:fb:f1:9e:d3:fb:fb:9d:18:97:f2:ff:16:a4:
1b:34:78:e1:b5:41:e7:01:a8:38:cd:65:21:a5:10:c0:0d:5f:
d8:98:35:55:3a:65:b9:c6:54:8b:eb:c0:82:b0:ce:84:05:f6:
68:ee:1d:34:fb:b3:1e:83:83:8e:2b:58:52:00:8e:53:05:57:
f6:a2:5a:34:43:08:d7:2d:5d:b3:c7:2f:55:f8:c3:99:52:69:
64:b3:d7:4f:d5:67:23:b6:d2:61:2e:ce:39:2e:50:64:d7:f8:
80:6b:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:48 2026 by rpki-client