
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.mft
File: 2949913DC6C3E739C74D8B456424411BD4668DD8.mft (raw, json)
Hash identifier: xUsV/qkJ8/h+0b8ie0xTrQnd+jAIgtPpTuIJitVioic=
Subject key identifier: 40:72:9D:E2:1D:CB:CC:A5:C9:A5:4B:59:0C:5B:86:23:87:9A:FF:34
Authority key identifier: 29:49:91:3D:C6:C3:E7:39:C7:4D:8B:45:64:24:41:1B:D4:66:8D:D8
Certificate issuer: /CN=2949913DC6C3E739C74D8B456424411BD4668DD8
Certificate serial: 45B0A92E5018723A974D875A77FAA0BA5EA2FDD9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.mft
Manifest number: 017E
Signing time: Sun 29 Mar 2026 08:14:28 +0000
Manifest this update: Sun 29 Mar 2026 08:09:28 +0000
Manifest next update: Fri 03 Apr 2026 00:41:28 +0000
Files and hashes: 1: 3136312e32322e36342e302f31382d3234203d3e203231333531.roa (hash: vbJqdjiroJReUYrPXEOB1U3PqY/n4JKBTI5moA3ZEnc=)
2: 323830333a313638303a333030303a3a2f33362d3438203d3e203231333531.roa (hash: d2/fgg4W7omxsp2Gr1CZlMsIg7QMLn+62f5p9wkS+f4=)
3: 2949913DC6C3E739C74D8B456424411BD4668DD8.crl (hash: T26e+eqjJnrfzUpbx0DiFPd2wAxEZ/3u5JryLc8Odf0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.crl
rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 01 Apr 2026 21:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b0:a9:2e:50:18:72:3a:97:4d:87:5a:77:fa:a0:ba:5e:a2:fd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2949913DC6C3E739C74D8B456424411BD4668DD8
Validity
Not Before: Mar 29 08:09:28 2026 GMT
Not After : Apr 3 00:41:28 2026 GMT
Subject: CN=40729DE21DCBCCA5C9A54B590C5B8623879AFF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:17:ba:c4:4e:2f:71:d8:fd:af:31:99:c5:
cc:e7:15:8a:24:4a:f0:06:7c:7b:81:f6:c3:7e:51:
57:a0:ad:de:5e:ed:b8:d8:69:03:65:bf:9c:28:bb:
54:81:e5:71:c0:93:dc:d4:24:51:6b:21:0c:2c:8f:
3b:da:3a:16:ea:06:9e:5d:0a:a3:3c:36:d8:b7:21:
5a:8f:67:40:00:3d:a9:af:6e:17:53:78:b7:29:c7:
52:3b:44:50:96:a8:06:6f:d7:0d:df:29:83:46:be:
4a:98:3b:27:01:d2:e0:a6:e8:fb:ef:4c:49:39:ee:
5e:66:fa:d6:77:d5:73:fd:c9:9f:87:e2:bf:fe:13:
73:53:a5:84:ca:60:30:37:a8:9f:8f:29:7d:fb:11:
83:85:a0:ce:2c:89:6f:48:cd:1e:b8:11:16:93:38:
f9:9d:06:11:e2:10:c2:e8:61:b7:ab:76:96:58:40:
33:37:43:ff:28:d2:32:4a:63:d6:98:ef:e3:7c:66:
60:a0:fe:77:d5:f6:f5:2b:53:2e:d8:e1:45:b9:ff:
a0:57:29:eb:30:1d:ac:d2:66:40:d3:d5:b7:f3:d0:
ae:f9:f8:f4:f8:8a:87:d1:18:88:2d:94:fe:8e:f2:
97:9c:ad:dc:86:2b:53:c6:70:42:a2:aa:e2:e7:db:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:72:9D:E2:1D:CB:CC:A5:C9:A5:4B:59:0C:5B:86:23:87:9A:FF:34
X509v3 Authority Key Identifier:
keyid:29:49:91:3D:C6:C3:E7:39:C7:4D:8B:45:64:24:41:1B:D4:66:8D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a0:d6:23:88:d9:8b:d8:82:44:f5:f9:75:d3:0b:f7:80:34:
28:4b:d4:94:f6:93:2f:48:9e:67:5d:ef:0f:05:0a:73:37:4c:
42:7b:24:8f:4e:89:80:80:f3:ce:b9:8e:4f:d5:87:eb:16:e2:
0e:aa:b7:28:30:01:3e:15:4f:0f:05:dd:b4:67:b2:15:72:ff:
74:9d:34:a5:1b:48:72:b6:e9:fb:0e:5d:16:75:83:d8:3f:ac:
51:87:fd:d6:90:f1:c9:40:54:0c:a3:0f:ca:a2:24:2b:96:29:
d4:c2:d0:11:0a:8e:09:4e:f9:68:46:33:8e:3c:07:e7:a0:7f:
00:02:4b:81:71:a0:cd:d4:57:a1:74:cd:1c:76:d2:c1:0a:03:
96:94:c9:c7:9b:84:a4:03:a4:11:b0:43:b1:36:1d:54:8c:09:
7a:e8:12:b6:ab:97:2e:92:84:d2:e6:91:c0:e9:a9:95:74:c3:
6d:f8:ce:14:bd:64:e6:59:fb:fb:0d:d2:97:a7:d4:30:eb:02:
3e:30:a2:05:a4:c0:b2:11:71:e7:05:c1:53:95:10:5f:82:72:
5c:a6:21:a2:1a:ba:7b:86:5c:5d:86:06:37:d4:51:79:52:5c:
7d:bd:80:6a:40:00:d2:24:07:67:a6:e2:02:b5:03:e4:7f:75:
05:d3:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:48:27 2026 by rpki-client