
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
File: C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft (raw, json)
Hash identifier: V8+gCBuWTKmu2k91Fi/cxMEvTv3giPpZSg2RHeV3YD0=
Subject key identifier: 68:FC:CB:A9:4C:FA:59:3B:D1:AD:80:A4:0F:75:C0:0C:A8:45:77:1F
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Certificate issuer: /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial: 4AED4FA2279FFCC909FF95D4676F4F2E6C8D4B3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
Manifest number: 0168
Signing time: Sat 21 Feb 2026 10:22:09 +0000
Manifest this update: Sat 21 Feb 2026 10:17:09 +0000
Manifest next update: Thu 26 Feb 2026 10:40:09 +0000
Files and hashes: 1: 34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa (hash: nKWKeqjf327+P/Uzx+eYYEsgGMSAUSbQkFW9YlvKWiA=)
2: C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl (hash: wnFkcwFErGUjA2gE2ijXfvNcKC1NxU55PYKRbpbVu/s=)
3: 323830333a396632303a3a2f33322d3332203d3e20323636373830.roa (hash: CS+P551Yu5V1f1S0N+nkUhlgxfNbyXLy5YTAVtPeesk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 25 Feb 2026 01:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ed:4f:a2:27:9f:fc:c9:09:ff:95:d4:67:6f:4f:2e:6c:8d:4b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Validity
Not Before: Feb 21 10:17:09 2026 GMT
Not After : Feb 26 10:40:09 2026 GMT
Subject: CN=68FCCBA94CFA593BD1AD80A40F75C00CA845771F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:df:e9:d7:0d:d1:a5:75:ff:4f:37:da:77:f7:
12:06:84:01:29:7a:a6:41:79:67:15:27:53:2a:e9:
69:a5:00:20:f8:07:de:90:cf:af:ec:3b:7b:d9:33:
26:82:91:cc:a6:25:f2:2d:43:df:d7:6c:36:dc:9d:
42:07:24:5c:a9:11:68:5b:97:ed:e4:7a:e3:3c:8e:
7f:73:7a:1b:7a:2c:08:35:01:54:89:32:14:3b:67:
91:a3:f3:01:5f:22:09:0c:8a:66:4c:bc:66:75:3f:
4e:15:34:17:18:ba:07:1d:e5:c9:a4:c4:5e:d5:1e:
1b:80:53:0a:2d:fd:be:3a:47:2b:a5:a9:df:0e:4e:
40:b4:79:c1:06:d5:e6:30:86:24:33:7a:77:e9:96:
4b:c4:1c:08:b3:ff:70:9e:1d:f2:b7:09:07:b8:4a:
d8:bc:28:6e:73:aa:e4:a4:7b:d4:d3:4d:32:1d:28:
52:d3:16:57:34:01:f4:56:90:b0:a9:b7:cd:df:f6:
31:92:87:13:02:e9:52:f8:41:92:df:f3:4f:0e:21:
11:6a:73:e1:76:d7:5c:0e:a4:87:f5:8e:16:6f:b3:
49:96:6a:50:1f:ce:6b:f2:76:de:f7:58:93:d1:be:
af:b8:f7:f2:9f:b8:77:20:93:ca:1e:90:f7:b5:40:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FC:CB:A9:4C:FA:59:3B:D1:AD:80:A4:0F:75:C0:0C:A8:45:77:1F
X509v3 Authority Key Identifier:
keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8b:c7:3b:78:a8:ba:12:cc:b5:ea:a5:ef:96:73:d2:63:cb:
51:a3:90:be:a3:0c:e3:93:62:76:d5:3d:85:52:a7:09:41:0b:
42:52:db:42:6c:76:f1:12:83:d4:ff:f9:f1:f2:d2:cf:a4:ba:
b1:e5:1d:02:09:eb:b8:ad:54:fe:e4:9e:4c:ae:d6:ff:39:11:
f3:62:85:5a:67:e8:55:1c:07:5d:51:fa:08:c4:bc:7e:10:02:
16:fa:5d:13:a9:1a:94:80:fa:7c:b9:df:40:dd:21:8e:a6:9e:
99:1b:af:13:ab:b3:a2:da:fd:0b:8b:bf:ce:df:0e:c4:7f:99:
18:70:6f:a5:89:31:44:f2:a0:fc:ab:7c:cb:32:a4:eb:11:9f:
cf:08:c0:97:7e:ac:33:10:68:ec:f2:df:05:23:ed:4c:8a:da:
10:24:c5:c7:c8:4c:bc:79:18:ce:05:32:ae:a6:06:e3:1b:0c:
ba:4e:7f:46:11:10:f1:d7:09:ff:fd:06:92:6b:08:f0:a1:27:
c7:b7:d2:a0:d3:51:0a:d7:3c:75:fe:1e:6e:d7:f3:6f:fa:0c:
2d:74:14:e9:f8:05:d1:76:01:66:17:86:69:b4:fe:80:f1:ec:
6a:d1:2a:78:f8:c0:56:01:94:f5:6d:dd:22:db:54:09:3d:08:
77:9f:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 22:50:06 2026 by rpki-client