
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
File: C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft (raw, json)
Hash identifier: 228HgOFIMd/d0fjRBNG1WOCMjXOCEOH0yqJDHsCM11o=
Subject key identifier: 64:3B:AD:58:39:7A:25:4B:08:69:EE:11:33:72:BA:76:06:0A:05:06
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Certificate issuer: /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial: 654D895AAEF44A2F5C6EEF884169C532D7B12984
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
Manifest number: 01CB
Signing time: Sun 06 Sep 2026 12:12:17 +0000
Manifest this update: Sun 06 Sep 2026 12:07:17 +0000
Manifest next update: Sat 12 Sep 2026 02:53:17 +0000
Files and hashes: 1: 34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa (hash: nKWKeqjf327+P/Uzx+eYYEsgGMSAUSbQkFW9YlvKWiA=)
2: 323830333a396632303a3a2f33322d3332203d3e20323636373830.roa (hash: CS+P551Yu5V1f1S0N+nkUhlgxfNbyXLy5YTAVtPeesk=)
3: C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl (hash: p/CqV4YW8aLwNFPtj9POosYBaDwyZQT2QIfG1TR1NRc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Sep 2026 23:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:4d:89:5a:ae:f4:4a:2f:5c:6e:ef:88:41:69:c5:32:d7:b1:29:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Validity
Not Before: Sep 6 12:07:17 2026 GMT
Not After : Sep 12 02:53:17 2026 GMT
Subject: CN=643BAD58397A254B0869EE113372BA76060A0506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:ed:6a:58:d8:f2:e7:eb:02:d9:07:5d:cc:
5a:c3:d2:e0:d2:72:32:b6:12:00:8d:71:64:ac:97:
98:c9:a9:be:1c:ac:5a:c8:d0:9c:b6:22:c2:8a:3a:
e7:c4:94:79:65:82:88:ab:65:b0:48:45:7d:3a:04:
83:40:c8:b9:dd:29:7c:54:9a:d1:d5:a9:6f:a4:ab:
29:f2:1d:3b:c0:66:79:1d:64:9e:b6:77:44:70:a5:
7f:82:37:bf:8a:f1:47:2a:32:6e:41:a1:48:48:57:
a0:02:c5:96:60:e9:f6:c0:57:43:8a:0a:f5:9a:ce:
e7:5b:e3:a3:ca:56:c7:ed:6c:73:61:22:09:5a:ca:
55:0e:de:2b:71:ae:4f:62:cf:61:87:2f:62:59:a7:
63:92:20:b9:1f:5d:18:b3:38:23:1d:19:ce:f9:f3:
3e:5e:4c:0d:ae:c4:60:8a:75:f0:8c:08:71:a6:be:
44:25:04:c0:ed:32:fd:0c:cb:1c:04:6a:a6:90:75:
e6:af:26:5e:61:8c:6a:26:1d:2b:88:2c:e8:95:e5:
83:21:4b:05:0b:4c:39:08:aa:48:cd:ca:99:85:54:
e3:17:bc:13:29:65:db:b6:6c:2e:69:c1:e8:90:a2:
18:35:ed:56:27:bb:04:a2:66:5d:c9:86:86:61:f0:
c0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:AD:58:39:7A:25:4B:08:69:EE:11:33:72:BA:76:06:0A:05:06
X509v3 Authority Key Identifier:
keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:40:9e:c6:58:bd:73:25:f0:7e:5a:7f:8b:35:0b:e2:3e:ec:
bb:1c:8e:33:37:88:81:bb:1b:d3:09:09:05:58:b8:01:3f:3b:
81:cf:6d:84:9f:0d:f6:a7:ce:eb:f6:5d:2f:09:60:28:87:df:
15:fd:23:26:c9:1d:bc:6f:72:e4:0a:a1:36:46:96:17:99:5a:
27:d9:13:c2:73:1e:0c:2b:b0:a6:d9:05:9b:22:11:f4:42:92:
48:56:18:b6:43:56:fd:4e:6e:9f:f1:3f:08:49:f7:b0:f9:0f:
4d:24:bf:86:e7:f4:dc:87:71:0d:0d:76:96:a9:ba:5a:a9:3d:
f9:a2:e5:4c:11:de:66:ba:bf:51:bb:82:c4:86:cd:d8:4d:b1:
f7:6d:52:91:34:21:82:ba:ce:93:53:bd:83:6f:5a:86:c8:b8:
7e:d1:cd:a6:1c:9d:b5:b3:c0:2c:02:d9:2d:14:b4:7b:6f:44:
10:60:53:5e:71:6c:1a:85:69:7d:90:82:45:eb:3a:2f:32:8f:
2a:7d:91:19:0b:60:1f:a5:97:c2:e6:d4:94:63:14:4b:7e:e4:
cc:9d:a6:a5:cf:4a:c7:bf:4f:1d:b3:04:19:2a:4b:32:f1:e9:
36:47:fc:bd:61:91:0b:3e:33:04:9e:cd:24:2b:aa:49:a5:b2:
3c:5e:7f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 11:33:29 2026 by rpki-client