
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.mft
File: 33AE83F4491BEA105F85ED2DA938440613250424.mft (raw, json)
Hash identifier: Z70zr6pQQESc03qbsuuDYeUysjI7/J7fnhygGT75L8I=
Subject key identifier: CE:7A:85:61:CF:5F:19:1A:E6:69:6C:C7:4B:82:5E:82:2E:C9:46:7D
Authority key identifier: 33:AE:83:F4:49:1B:EA:10:5F:85:ED:2D:A9:38:44:06:13:25:04:24
Certificate issuer: /CN=33AE83F4491BEA105F85ED2DA938440613250424
Certificate serial: 620129B66830F417A6C97F9AA1DFC2DCFC7F0005
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.mft
Manifest number: 0142
Signing time: Mon 16 Mar 2026 12:26:21 +0000
Manifest this update: Mon 16 Mar 2026 12:21:21 +0000
Manifest next update: Sun 22 Mar 2026 03:32:21 +0000
Files and hashes: 1: 33AE83F4491BEA105F85ED2DA938440613250424.crl (hash: vIYt48o8dnz3KDqdYmpfvLhoxCemd4N1MVAcZLDwYVs=)
2: 323830333a396565303a3a2f33322d3332203d3e20323639393838.roa (hash: 9FOxULTAdbFwn2YiI8uSMtsen57iR6H9GDxT88zMA0w=)
3: 3137372e3132382e3131322e302f32322d3234203d3e20323639393838.roa (hash: lKDsGUdF6vU48E6/gLmEaNuf3NfC/ebqouJ+N09fKFs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.crl
rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Mar 2026 21:25:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:01:29:b6:68:30:f4:17:a6:c9:7f:9a:a1:df:c2:dc:fc:7f:00:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33AE83F4491BEA105F85ED2DA938440613250424
Validity
Not Before: Mar 16 12:21:21 2026 GMT
Not After : Mar 22 03:32:21 2026 GMT
Subject: CN=CE7A8561CF5F191AE6696CC74B825E822EC9467D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:41:53:99:4c:dc:26:d0:83:ea:8f:12:bf:ee:
8c:9f:6c:1e:8a:75:a6:91:9a:68:62:3e:8d:d2:7f:
a9:61:1e:37:93:fe:1c:a7:62:16:c4:1e:d9:14:1e:
49:17:21:24:34:4d:11:69:af:b5:b8:18:10:43:06:
68:7a:6a:5d:99:8c:f7:4c:dd:6a:a0:01:50:52:c6:
57:2d:69:68:d7:46:02:fa:a2:b2:ab:14:30:d7:1a:
48:69:58:a7:2e:0a:13:92:8a:bc:67:f1:d7:ff:38:
fc:0e:a9:c1:2f:c3:8b:02:e2:85:87:77:35:1e:a0:
4a:27:09:d5:39:8b:10:c2:db:34:a1:76:41:58:32:
30:64:19:92:c8:16:af:24:d2:2a:20:86:78:11:46:
85:79:cf:70:f4:7d:34:b2:60:0b:1c:32:98:b8:c2:
04:b8:c0:ac:07:e9:63:99:5e:c7:58:2c:e0:cc:c9:
8d:58:9e:07:45:01:65:d0:49:33:52:41:a0:0f:22:
7f:3a:69:ce:24:15:4f:96:d7:7f:d4:8d:21:68:c2:
ff:07:61:a4:de:96:a4:58:8a:a4:95:e7:64:6c:24:
59:66:fc:bc:ce:7b:aa:aa:e7:02:00:1f:09:c3:dc:
e7:5c:e4:4b:a1:3c:89:16:cd:26:a0:1f:fc:0d:cf:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7A:85:61:CF:5F:19:1A:E6:69:6C:C7:4B:82:5E:82:2E:C9:46:7D
X509v3 Authority Key Identifier:
keyid:33:AE:83:F4:49:1B:EA:10:5F:85:ED:2D:A9:38:44:06:13:25:04:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ab:0b:ea:9f:83:7a:00:85:84:6d:42:ea:7e:c8:6a:c4:26:
a2:72:85:d9:fb:b8:ee:4e:5b:92:f1:28:51:20:e4:b3:f4:5e:
a9:3f:e6:c2:dc:7d:69:29:2f:65:a8:ef:43:39:a3:f8:51:82:
3d:55:f8:0d:5f:39:44:6a:63:78:5f:79:47:81:30:13:63:ec:
3c:02:ca:e6:db:3f:6a:49:92:7c:a1:1f:39:af:bf:83:1b:3c:
f1:b6:cc:be:4a:38:5b:d3:f6:99:7c:1b:d2:a0:c3:7d:27:96:
83:41:a7:fa:ff:f9:77:44:7b:69:50:d7:bb:73:45:06:dd:83:
9c:9c:d1:9f:e6:71:5c:f0:32:73:2d:3f:2a:99:33:6e:3f:24:
9a:fa:89:ae:d4:d2:ad:07:65:28:42:0c:d0:59:9c:c2:ea:3a:
28:c5:48:6c:3c:1e:89:b7:18:a0:1f:88:e6:66:6c:0a:17:3e:
11:d3:b8:04:06:e8:56:18:b4:e4:d2:a7:d2:14:c7:63:da:19:
c2:dd:bd:64:11:df:bd:67:2d:e6:8e:62:f6:0e:2e:b0:e0:4d:
70:c5:ad:83:33:46:17:b2:c6:48:71:9e:38:52:cd:74:a6:dc:
1e:b4:a5:8c:17:ab:59:84:75:d2:ad:e5:06:25:89:48:90:aa:
d9:e7:8d:2f
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUYgEptmgw9BemyX+aod/C3Px/AAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNBRTgzRjQ0OTFCRUExMDVGODVFRDJEQTkzODQ0MDYx
MzI1MDQyNDAeFw0yNjAzMTYxMjIxMjFaFw0yNjAzMjIwMzMyMjFaMDMxMTAvBgNV
BAMTKENFN0E4NTYxQ0Y1RjE5MUFFNjY5NkNDNzRCODI1RTgyMkVDOTQ2N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCQVOZTNwm0IPqjxK/7oyfbB6K
daaRmmhiPo3Sf6lhHjeT/hynYhbEHtkUHkkXISQ0TRFpr7W4GBBDBmh6al2ZjPdM
3WqgAVBSxlctaWjXRgL6orKrFDDXGkhpWKcuChOSirxn8df/OPwOqcEvw4sC4oWH
dzUeoEonCdU5ixDC2zShdkFYMjBkGZLIFq8k0ioghngRRoV5z3D0fTSyYAscMpi4
wgS4wKwH6WOZXsdYLODMyY1YngdFAWXQSTNSQaAPIn86ac4kFU+W13/UjSFowv8H
YaTelqRYiqSV52RsJFlm/LzOe6qq5wIAHwnD3Odc5EuhPIkWzSagH/wNzzf5AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUznqFYc9fGRrmaWzHS4Jegi7JRn0wHwYDVR0j
BBgwFoAUM66D9Ekb6hBfhe0tqThEBhMlBCQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0JDMTE2QTgzMkZBMTY2MDdENjc1Qzc1RjY3RTMwMDQ5
NzA0NTU0MTNGM0Q1QjZERkM2Q0U0MjRDODE2NEM4LzAvMzNBRTgzRjQ0OTFCRUEx
MDVGODVFRDJEQTkzODQ0MDYxMzI1MDQyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zM0FFODNGNDQ5MUJFQTEwNUY4
NUVEMkRBOTM4NDQwNjEzMjUwNDI0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNCQzExNkE4MzJGQTE2NjA3RDY3NUM3NUY2N0UzMDA0OTcwNDU1NDEz
RjNENUI2REZDNkNFNDI0QzgxNjRDOC8wLzMzQUU4M0Y0NDkxQkVBMTA1Rjg1RUQy
REE5Mzg0NDA2MTMyNTA0MjQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDIqwvqn4N6AIWEbULqfshqxCai
coXZ+7juTluS8ShRIOSz9F6pP+bC3H1pKS9lqO9DOaP4UYI9VfgNXzlEamN4X3lH
gTATY+w8Asrm2z9qSZJ8oR85r7+DGzzxtsy+Sjhb0/aZfBvSoMN9J5aDQaf6//l3
RHtpUNe7c0UG3YOcnNGf5nFc8DJzLT8qmTNuPySa+omu1NKtB2UoQgzQWZzC6joo
xUhsPB6JtxigH4jmZmwKFz4R07gEBuhWGLTk0qfSFMdj2hnC3b1kEd+9Zy3mjmL2
Di6w4E1wxa2DM0YXssZIcZ44Us10ptwetKWMF6tZhHXSreUGJYlIkKrZ540v
-----END CERTIFICATE-----
Generated at Mon Mar 16 14:57:15 2026 by rpki-client