
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft
File: 65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft (raw, json)
Hash identifier: 68yk6EQ98HGF/YEluPbLmig3Xnbde7Rrd5LQkmJu2Gs=
Subject key identifier: A2:F8:E8:E4:8E:F3:F3:D3:8F:24:8C:4D:38:70:1C:5A:9A:CE:89:1B
Authority key identifier: 65:88:6C:5B:D6:6D:87:F3:6C:E0:A1:4E:13:89:41:C8:AC:70:F2:C9
Certificate issuer: /CN=65886C5BD66D87F36CE0A14E138941C8AC70F2C9
Certificate serial: 5BBBD8A0383988C8E4D8C6F6D5A417338AA99D27
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft
Manifest number: 0171
Signing time: Sun 01 Mar 2026 17:35:38 +0000
Manifest this update: Sun 01 Mar 2026 17:30:38 +0000
Manifest next update: Fri 06 Mar 2026 22:03:38 +0000
Files and hashes: 1: 3133382e3230342e3136302e302f32322d3234203d3e20323633383131.roa (hash: nGEJxM7wJt/adgiMM9NAOghZn6PtIE2079NNwlAzNc8=)
2: 65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl (hash: wTPlEWneBILrVj1sVigqcDPYioYjdIC66Fs/jWCYx4o=)
3: 323830333a643234303a3a2f33322d3438203d3e20323633383131.roa (hash: 9mFwq5yLNEPrkw7DxIIPenvy9mudvicQJMQwJDQ7spI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl
rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Mar 2026 22:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:bb:d8:a0:38:39:88:c8:e4:d8:c6:f6:d5:a4:17:33:8a:a9:9d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65886C5BD66D87F36CE0A14E138941C8AC70F2C9
Validity
Not Before: Mar 1 17:30:38 2026 GMT
Not After : Mar 6 22:03:38 2026 GMT
Subject: CN=A2F8E8E48EF3F3D38F248C4D38701C5A9ACE891B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:96:14:41:15:c5:df:e4:55:cf:39:aa:fb:
3d:f0:c4:11:64:f9:6d:25:40:cc:e9:af:06:8c:e0:
b2:67:16:0e:49:58:0d:0f:f1:2c:e6:d9:37:00:74:
d7:e3:76:13:fb:96:92:6b:2f:25:31:b2:8d:e4:76:
a9:9b:66:2c:0c:ee:52:5f:73:53:6d:52:b5:5e:f7:
f0:9a:46:6b:5f:50:b0:09:5e:fe:1b:9b:7e:68:27:
b5:42:f4:2c:e1:61:3c:d5:67:81:45:ba:ec:8b:e7:
41:00:3b:5c:8e:e8:6f:47:d8:50:e2:cb:5f:8b:86:
76:f8:d0:6f:22:74:45:0c:fe:61:96:af:cf:d7:e8:
78:77:d3:92:f2:97:eb:78:49:f6:8f:b5:c8:85:be:
a2:00:18:9b:22:d6:96:cc:00:d3:7c:17:35:ee:f6:
dd:03:35:54:fd:4f:56:d0:67:75:f0:1b:79:2a:44:
35:c0:f7:8c:6e:31:84:4e:ca:e6:bd:da:be:7b:fb:
62:50:d2:69:1c:22:0d:f5:d7:cc:60:df:53:18:72:
cf:e8:0b:7a:e7:63:09:4f:40:2b:2a:9d:b0:59:94:
b7:24:c2:20:ce:e6:8f:a8:8f:65:60:c0:0e:dc:5b:
a6:fe:0a:87:e6:dc:cd:97:27:bc:c0:f8:04:42:0b:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F8:E8:E4:8E:F3:F3:D3:8F:24:8C:4D:38:70:1C:5A:9A:CE:89:1B
X509v3 Authority Key Identifier:
keyid:65:88:6C:5B:D6:6D:87:F3:6C:E0:A1:4E:13:89:41:C8:AC:70:F2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:97:60:fb:f3:df:99:de:e9:33:86:88:c1:00:69:d2:f3:25:
dd:ac:55:86:16:c6:dc:a3:6f:6b:a3:eb:fe:23:5b:18:fd:8c:
65:f5:f0:28:79:7b:7b:81:50:d3:bf:99:90:26:59:14:f9:32:
a4:20:18:b6:b1:54:34:dd:f9:2c:7a:7c:aa:84:bc:03:36:5e:
92:5b:11:57:45:fe:b7:ea:7b:34:0b:ae:4b:fe:fc:50:6f:a3:
22:a1:68:16:44:f6:92:27:32:50:1b:a5:30:56:d1:9f:66:22:
ba:3b:20:22:54:a8:71:7a:96:13:1d:8e:02:0a:6f:a7:0c:8d:
dc:c3:db:07:64:4b:3d:10:f6:45:fa:58:95:d0:f4:89:c9:ef:
cb:14:da:ad:d2:99:97:88:15:a8:5d:e3:60:36:00:6a:54:0a:
be:d2:f6:73:d1:18:87:04:73:e2:bf:e7:3f:ff:3f:dd:d0:e4:
f4:96:d8:52:7a:dd:da:8f:3d:19:24:8c:46:d6:96:5a:f9:09:
03:c1:39:37:bd:2e:a9:70:68:53:0c:4c:8e:fe:6f:a4:5c:5d:
55:98:a8:83:85:a8:58:55:7c:f4:55:f0:70:52:5c:af:57:3b:
b2:18:e6:ad:fb:2c:50:d0:8a:ed:ba:e9:b5:62:cb:27:b5:bf:
5d:e1:12:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:40:43 2026 by rpki-client