
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
File: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft (raw, json)
Hash identifier: CS4SBCLghTto5cP+dWDcc3W5hYG7VwT+TTVXhZOy+QM=
Subject key identifier: 60:C0:85:C9:5A:D3:34:63:62:54:68:EF:9C:04:60:11:A1:B3:C0:DB
Authority key identifier: AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B
Certificate issuer: /CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
Certificate serial: 1ADD0BAE67AAF2A5AB17A1B76B0E557B271B52A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
Manifest number: 0184
Signing time: Wed 08 Apr 2026 05:17:17 +0000
Manifest this update: Wed 08 Apr 2026 05:12:17 +0000
Manifest next update: Sun 12 Apr 2026 22:12:17 +0000
Files and hashes: 1: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl (hash: TXp+JpFfsYE4WZ+e10MBBOavfpJvLwM8peGeqG+ecZc=)
2: 3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa (hash: xOt5MgbMcs/Gu2Sz180hCjy9JznRqG+a2o1Y8PTCEjI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl
rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 12 Apr 2026 05:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:dd:0b:ae:67:aa:f2:a5:ab:17:a1:b7:6b:0e:55:7b:27:1b:52:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
Validity
Not Before: Apr 8 05:12:17 2026 GMT
Not After : Apr 12 22:12:17 2026 GMT
Subject: CN=60C085C95AD33463625468EF9C046011A1B3C0DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:70:ec:bb:89:a7:88:2e:e4:91:5f:b9:25:
d0:36:cc:48:1f:05:1f:5c:60:3b:f2:6d:54:46:74:
91:27:fa:d3:28:01:1e:90:47:53:aa:66:f3:c0:3b:
e7:84:ed:fc:60:33:94:02:09:b9:6a:54:51:40:82:
03:ef:93:a9:93:14:9c:9a:58:94:7d:ef:12:c3:09:
66:f2:41:c8:b5:be:24:11:b1:36:fa:ee:39:8c:3a:
83:f5:be:54:2b:a0:c1:e7:11:cc:e7:28:6c:26:6b:
c9:07:19:4a:0f:b3:d7:19:20:98:68:1f:27:36:17:
42:1b:9b:24:1d:9c:dd:01:f5:14:7b:fd:50:cb:35:
81:93:5e:ae:7c:bc:43:74:09:4c:4d:7f:ff:e4:22:
54:fe:50:69:8a:e5:cd:12:00:93:bc:8e:15:14:81:
a3:64:a6:d9:04:90:2a:ae:82:a9:aa:d0:84:b8:9c:
cc:f7:44:61:e6:5a:0e:12:be:34:8d:49:9b:3b:3c:
67:b8:ae:d1:cf:79:a5:30:ce:2a:54:75:fa:95:3b:
55:a7:39:61:7b:f0:f8:d6:ce:04:11:76:05:7e:20:
f3:45:d2:fd:21:29:f3:b9:26:10:fe:e4:f3:c1:61:
87:74:d5:1f:aa:a8:33:f0:15:5b:9c:b6:43:ec:fb:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C0:85:C9:5A:D3:34:63:62:54:68:EF:9C:04:60:11:A1:B3:C0:DB
X509v3 Authority Key Identifier:
keyid:AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ae:c2:a0:bc:fe:23:fe:1e:de:3d:35:a9:0a:a1:bb:95:1c:
71:37:7f:e2:6a:e1:c5:75:1e:82:5a:05:e0:11:58:f3:74:db:
64:84:37:57:78:12:5e:42:14:ce:a4:7c:43:bd:e1:b5:20:c9:
b1:94:c7:98:60:98:79:0f:d6:9c:64:c0:20:f7:4a:68:0e:84:
39:16:ff:0d:f4:0c:46:ec:0b:2a:06:6a:b7:7e:21:84:4f:60:
90:32:51:18:a8:86:09:21:d9:8b:4d:ec:29:57:74:a8:4c:8f:
67:11:88:ed:0b:f5:e6:48:f4:22:ea:4d:08:7a:03:ab:72:33:
93:b2:e0:18:34:b2:48:25:1b:de:6b:d1:60:49:5f:e6:9a:d6:
d5:65:23:ff:37:e3:c5:f6:22:88:27:e1:0a:d6:c0:1b:25:42:
32:6e:a2:f1:16:e0:70:78:4a:2e:a4:25:68:2b:1a:2c:c8:9e:
9e:e0:c7:c8:f7:86:de:ef:63:a3:c0:f3:65:a9:e2:2e:38:83:
3a:66:ec:8a:91:0c:91:3c:0f:3e:e3:b1:05:a7:0c:e3:68:3c:
64:b7:0d:31:66:fe:08:b3:08:68:6e:42:10:5d:c3:53:f6:87:
a3:40:eb:d2:84:b6:32:29:54:e1:77:76:b7:e5:c0:56:00:84:
8c:61:4a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:40:58 2026 by rpki-client