
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft
File: 2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft (raw, json)
Hash identifier: dLG6LJXri0wV+gbGhh5Z3PNDYaMHGM7RJNvgueupRRk=
Subject key identifier: 79:CC:A8:E5:FA:30:A9:B6:80:32:69:E0:34:BD:EF:41:23:8E:5D:66
Authority key identifier: 2D:00:DE:68:56:A4:66:70:E7:4C:BC:33:80:A8:4B:75:A4:BD:98:2C
Certificate issuer: /CN=2D00DE6856A46670E74CBC3380A84B75A4BD982C
Certificate serial: 1663CBE0230FC3435783C4B7321312FD3556A6DA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft
Manifest number: 0173
Signing time: Sat 14 Mar 2026 16:44:10 +0000
Manifest this update: Sat 14 Mar 2026 16:39:10 +0000
Manifest next update: Fri 20 Mar 2026 06:17:10 +0000
Files and hashes: 1: 3230302e3131352e3137392e302f32342d3234203d3e20323632323338.roa (hash: fHx7zfFwxLzJoE/lhEuhV8qNamJHYDndrwXqX3ASKu4=)
2: 323830313a303a3331303a3a2f34382d3438203d3e20323632323338.roa (hash: 3pNdSZ6rmbBeqQTCTd8NE4kNVSN3Wb65usCYtLjEJvw=)
3: 2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl (hash: q/FsO+rCyjinbyiTU/NM3Rys8wpaksPTXC1COgruqms=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl
rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 19 Mar 2026 05:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:63:cb:e0:23:0f:c3:43:57:83:c4:b7:32:13:12:fd:35:56:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D00DE6856A46670E74CBC3380A84B75A4BD982C
Validity
Not Before: Mar 14 16:39:10 2026 GMT
Not After : Mar 20 06:17:10 2026 GMT
Subject: CN=79CCA8E5FA30A9B6803269E034BDEF41238E5D66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:70:d0:dd:fb:63:a6:b6:d5:c6:06:e9:ff:
73:0e:ab:54:48:2c:a7:51:e1:e8:1f:b7:11:6c:39:
3a:36:fa:0f:f2:40:0c:f6:74:d6:73:ba:ab:46:3a:
cf:e0:17:45:48:6d:b5:a0:93:00:89:b9:59:7b:c2:
f2:c5:13:d7:0c:65:6e:28:70:19:ce:83:28:b7:1c:
92:f0:3e:bd:79:65:3b:3a:5c:75:55:d5:6e:db:0b:
f6:3b:9b:17:52:aa:a3:c1:01:31:a8:34:b6:42:cc:
ab:32:96:49:2a:ac:b7:93:ad:c9:6c:ad:d7:a7:77:
77:7f:01:f0:36:2f:4f:02:47:a1:51:12:09:4e:75:
36:1e:28:0f:36:75:8c:da:b4:3f:c4:0f:f7:6a:13:
96:46:3a:47:78:74:10:b4:d5:74:f5:d9:29:71:f6:
4d:a6:51:70:36:f2:e9:4e:c9:ff:49:32:ba:13:ba:
60:5d:89:34:4d:a2:8f:f0:09:ca:f8:62:41:bc:a6:
8a:55:0c:a7:1c:32:ad:83:35:1a:ec:f9:b9:f2:3d:
18:66:55:f0:b5:8c:0b:1c:85:d4:0f:64:16:54:51:
91:b2:59:9e:e3:3c:7f:86:d1:8b:11:4f:d4:28:50:
e5:79:06:77:3e:82:b8:03:b4:f8:02:60:34:ec:da:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CC:A8:E5:FA:30:A9:B6:80:32:69:E0:34:BD:EF:41:23:8E:5D:66
X509v3 Authority Key Identifier:
keyid:2D:00:DE:68:56:A4:66:70:E7:4C:BC:33:80:A8:4B:75:A4:BD:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f8:95:dd:91:4e:3f:6c:21:6f:88:78:3d:b5:ca:3c:9b:09:
49:9d:ef:71:33:14:be:39:6b:cf:f2:fc:0b:b4:ef:6d:3d:e0:
59:4f:b0:1c:e1:3d:20:bb:aa:3e:7d:e9:03:d2:67:12:b8:e1:
00:d6:26:e8:3a:04:1d:2e:fb:31:20:8a:8b:25:3c:eb:7c:4d:
a3:a6:ff:33:e8:97:30:81:3e:3a:19:59:4c:ce:56:b3:f6:56:
fa:a7:f0:cf:5c:41:15:38:89:25:88:85:df:b0:29:26:3a:d9:
9a:c9:c0:a8:e0:42:8e:02:3c:12:72:be:98:ae:7d:2d:5c:34:
ce:5f:7f:2f:38:d0:5d:b7:28:af:d3:14:7d:68:82:cd:00:43:
9a:21:89:1f:f3:83:b3:f3:c5:f2:b8:22:ce:0e:89:68:66:22:
d1:5d:e6:23:b3:26:b3:2d:68:e8:25:f2:d9:a4:f1:8e:24:78:
3b:b5:41:4a:e5:c9:53:8f:ba:b3:c6:c5:9e:2d:9e:4a:01:9e:
a1:ba:a4:4a:08:ec:e5:14:c1:c2:4e:65:ad:aa:2f:9c:36:7e:
be:84:2e:23:10:91:fd:1e:38:3c:8e:e7:8d:69:fa:95:5d:93:
e5:5f:d9:c2:62:69:e4:06:45:69:79:79:84:bf:67:5e:3b:a9:
40:58:a2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 02:01:01 2026 by rpki-client