
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
File: 2D420DA52C4FED64C64081F978E8485CD8161A81.mft (raw, json)
Hash identifier: FKixsFyZZj9WNmGGSl47wZgp/SmGCx+8CX4LiGhXgjQ=
Subject key identifier: 0A:2D:62:96:B6:38:FC:A2:39:73:B3:F6:0D:EA:29:D5:DF:4E:30:AB
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Certificate issuer: /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial: 2FA2C13D174CB137A97C448E89E430B2A8723611
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
Manifest number: 017A
Signing time: Tue 07 Apr 2026 03:41:35 +0000
Manifest this update: Tue 07 Apr 2026 03:36:35 +0000
Manifest next update: Sun 12 Apr 2026 14:37:35 +0000
Files and hashes: 1: 3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa (hash: +DpAbksORTScTSriBErvBnV4AH2ePw0j36QFfH02aFI=)
2: 3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa (hash: RmhvMSewm57XjZWYjQ6FqQiuRZEOLVHefEqSR3AIuXM=)
3: 3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa (hash: sIOThUcQTanpBtFFWyJfRelgsmR3o4AWTlypmW/lm64=)
4: 2D420DA52C4FED64C64081F978E8485CD8161A81.crl (hash: vyQM2U0+euamrKO50wfGhZ8nH5sTLNdg9cOgOWSDPfs=)
5: 323830333a633036303a3a2f33322d3332203d3e203631343531.roa (hash: L+ywmizwf83korHEOAc77B04u3MNpX37wQ9frbNDUX0=)
6: 34352e3137332e302e302f32322d3234203d3e203631343531.roa (hash: AdjIKz6Nels2dhwXWp6EKIPfwBZmvhJdNx8CyYWHGao=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 12 Apr 2026 05:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a2:c1:3d:17:4c:b1:37:a9:7c:44:8e:89:e4:30:b2:a8:72:36:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Validity
Not Before: Apr 7 03:36:35 2026 GMT
Not After : Apr 12 14:37:35 2026 GMT
Subject: CN=0A2D6296B638FCA23973B3F60DEA29D5DF4E30AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:4a:1a:5a:bc:1d:bd:02:5c:4b:6b:11:9e:
a7:5c:16:32:e1:47:02:7e:ab:cc:48:30:09:50:7c:
5a:89:e9:b5:82:7b:c7:cb:3e:37:65:66:15:a3:4f:
5e:1b:5f:3b:13:2a:b6:32:8a:ff:be:94:36:8e:17:
96:c4:cb:87:a2:eb:7f:2b:ea:6a:84:57:7e:62:be:
cc:28:22:d9:33:34:a3:59:41:3d:7c:76:41:09:25:
2d:22:ee:b2:61:7d:9d:b7:23:a5:8b:35:13:90:f2:
86:19:99:e9:5c:cf:4a:20:bf:4d:92:fe:cd:91:60:
3e:27:97:45:db:79:38:a9:c1:37:ce:f3:47:81:b5:
ca:cd:32:4c:b0:cc:a0:10:15:a8:86:7f:22:f8:e4:
81:5d:a0:a1:8f:44:6b:6e:00:d1:27:fc:6c:f2:cd:
c8:27:b6:40:c6:5e:00:45:d7:9f:e5:a5:b6:00:82:
77:da:05:28:34:25:29:e5:b1:49:df:67:68:77:82:
ed:5c:d6:73:dd:74:51:cf:5a:7c:6d:49:91:38:d9:
5f:9e:3b:2e:5a:45:39:ef:d9:d9:b4:f4:b8:b5:87:
74:37:ca:19:0e:fd:79:3f:b6:58:a0:3d:05:bb:3f:
3f:88:9f:1c:27:b9:ad:91:13:2b:e0:b3:91:35:6e:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:62:96:B6:38:FC:A2:39:73:B3:F6:0D:EA:29:D5:DF:4E:30:AB
X509v3 Authority Key Identifier:
keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:03:8f:39:51:c4:18:ac:f6:2a:b8:5d:62:dc:5e:b3:93:d5:
ff:ec:e2:15:39:01:97:67:fa:02:05:c8:05:a9:b9:62:e9:c9:
ef:20:d4:16:95:38:fa:a6:15:15:60:6e:51:24:13:a3:4a:cc:
67:24:87:72:62:7c:99:da:27:06:b1:cd:70:60:db:a3:5c:8c:
66:9a:b1:f8:40:ac:0f:e9:d8:dc:ec:da:d8:0e:60:05:82:25:
3b:e9:fa:fe:f4:3f:63:38:a5:3a:76:41:87:2e:d5:42:11:c8:
8f:76:9f:31:28:b2:45:3b:42:7d:f0:84:93:09:7f:35:00:02:
da:24:a1:4f:c2:14:75:82:7b:61:b9:b5:2e:16:89:bc:ec:4b:
dc:55:55:f6:4f:d7:5c:42:fd:de:b7:cf:c7:50:70:51:d6:70:
8a:81:05:9b:71:94:65:41:e7:ed:62:e2:1c:76:fe:88:fb:e9:
19:cf:29:c7:99:20:40:e7:3e:6b:b2:3d:9e:cd:44:9b:5a:aa:
63:f2:f9:68:b7:ea:85:54:dd:e9:97:c2:39:b0:53:79:2b:9f:
96:79:13:bf:07:6b:45:c1:ba:e0:7e:ef:c0:76:1b:31:23:3d:
82:3c:50:25:a4:32:ee:4f:fe:84:a2:46:39:fb:40:dd:04:d4:
af:e4:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 08:35:41 2026 by rpki-client