
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft
File: 9AFA60D4E92B5689530450825C9C35894D0EB152.mft (raw, json)
Hash identifier: 0to9V7zO6NMTeaJzEj2q/cDIZ9PzXkazAZdtOqrAdw8=
Subject key identifier: EF:64:A4:76:D9:D4:68:D6:ED:E0:D3:AE:E2:D8:50:D3:09:52:87:79
Authority key identifier: 9A:FA:60:D4:E9:2B:56:89:53:04:50:82:5C:9C:35:89:4D:0E:B1:52
Certificate issuer: /CN=9AFA60D4E92B5689530450825C9C35894D0EB152
Certificate serial: 3D536844F2DB26EA279A2F914788BAB7A5559A87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AFA60D4E92B5689530450825C9C35894D0EB152.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft
Manifest number: 016D
Signing time: Tue 17 Mar 2026 20:25:11 +0000
Manifest this update: Tue 17 Mar 2026 20:20:11 +0000
Manifest next update: Sun 22 Mar 2026 18:38:11 +0000
Files and hashes: 1: 9AFA60D4E92B5689530450825C9C35894D0EB152.crl (hash: OLk+JFVjD9htJj9VPYwYWspK0I6ec6aMKLAcq9gX/oQ=)
2: 323830333a386231303a3a2f33322d3332203d3e20323732303733.roa (hash: +SPzQGpSkMBhPc7K/wmZPSDjYcbc1wZoO967aWn00OI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.crl
rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AFA60D4E92B5689530450825C9C35894D0EB152.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Mar 2026 06:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:53:68:44:f2:db:26:ea:27:9a:2f:91:47:88:ba:b7:a5:55:9a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AFA60D4E92B5689530450825C9C35894D0EB152
Validity
Not Before: Mar 17 20:20:11 2026 GMT
Not After : Mar 22 18:38:11 2026 GMT
Subject: CN=EF64A476D9D468D6EDE0D3AEE2D850D309528779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:44:be:a5:54:30:68:04:cb:7a:87:bc:e3:
d8:59:01:21:cf:7b:ec:b9:3c:7a:70:b9:91:03:7a:
cc:da:32:d4:dd:03:ea:7f:d9:63:a0:da:d2:a8:96:
a1:70:6d:b2:93:5c:96:1a:5b:83:17:38:9a:c0:d6:
9b:ba:3f:42:b0:d3:56:dc:56:2b:3b:4f:45:3b:e7:
de:0c:fc:b9:0e:0b:0f:01:7f:38:37:21:16:b0:cd:
1b:01:05:69:b6:24:81:58:e0:97:bc:30:7c:33:50:
5b:49:a0:b5:f2:35:88:5e:67:38:a0:d5:ae:4b:ff:
23:2c:2d:06:76:9f:87:ff:cc:1a:53:d8:ac:27:91:
e0:e1:bc:09:e8:34:10:50:6d:9b:47:40:3d:12:a2:
fe:7d:4a:c9:e0:58:89:af:c4:be:d6:da:80:7d:40:
15:a3:70:64:c8:19:a6:b6:ff:3f:b0:9d:be:3e:0a:
8e:2c:25:4d:7a:c1:46:58:86:93:44:47:0f:0d:9b:
27:ff:c5:3c:c3:3b:74:7d:77:41:57:b9:ed:29:b6:
73:56:60:43:26:cf:62:a6:68:09:fb:c4:13:05:2c:
e0:fa:be:12:f3:a7:f4:7f:a5:cd:be:6f:ab:2a:1a:
66:04:cf:0e:0f:35:6f:d8:01:de:2e:34:b8:ea:62:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:64:A4:76:D9:D4:68:D6:ED:E0:D3:AE:E2:D8:50:D3:09:52:87:79
X509v3 Authority Key Identifier:
keyid:9A:FA:60:D4:E9:2B:56:89:53:04:50:82:5C:9C:35:89:4D:0E:B1:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AFA60D4E92B5689530450825C9C35894D0EB152.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fb:b5:99:70:00:57:ab:3e:96:f9:b2:6d:fb:e9:eb:46:fe:
ac:1a:a0:d4:27:5b:50:0c:57:1e:1f:77:41:54:07:50:9c:39:
f7:7b:2d:81:74:b2:ed:4e:21:2d:a3:1b:4b:24:dc:e8:1a:b8:
af:a2:a9:95:3f:f8:bb:42:28:4a:43:42:d9:46:1e:68:d4:5d:
48:69:e6:ad:8a:21:7e:86:46:bb:4e:06:0f:e2:19:42:7a:52:
ae:5e:2d:62:b1:67:2f:82:9a:5b:76:e7:8e:30:79:7b:ab:c9:
e0:24:d8:1a:e2:d9:ec:b2:4b:94:41:ec:65:2b:41:a7:90:e0:
65:83:6b:39:82:7e:84:79:1f:a1:12:34:a0:03:3f:a6:b8:77:
29:9a:94:e0:ad:bb:65:f3:a2:17:bd:0b:bb:1a:32:65:19:f7:
ac:a2:b1:06:80:a6:50:f4:c0:ff:62:c2:96:de:c5:da:99:67:
91:95:5e:26:6d:9c:f9:cb:df:14:31:f3:46:ef:47:85:b7:b0:
29:2a:96:00:cd:70:f4:03:d2:b1:42:3c:26:a5:1c:79:6f:60:
1a:ed:0e:4e:6d:e2:e4:0b:58:c1:8f:06:00:8f:93:c1:fd:91:
29:d9:94:10:b7:9a:39:bd:40:b0:c0:d3:f5:79:16:b2:2e:1a:
d7:3e:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 10:26:14 2026 by rpki-client