
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
File: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft (raw, json)
Hash identifier: tNIGFZ7F7hJ+excPADR07ZUw8cIRWyJPH3CQRcEUmcI=
Subject key identifier: 46:D1:B3:D1:A8:5F:EC:30:6C:B7:EF:A1:EB:17:32:19:44:C7:F4:DB
Authority key identifier: CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C
Certificate issuer: /CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C
Certificate serial: 59898F9C3F64AD7E80CD1D3E9D24025CFB6BAE69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
Manifest number: 0173
Signing time: Fri 27 Mar 2026 18:20:57 +0000
Manifest this update: Fri 27 Mar 2026 18:15:57 +0000
Manifest next update: Tue 31 Mar 2026 18:34:57 +0000
Files and hashes: 1: 3136342e3136332e3132322e302f32332d3234203d3e20323734323837.roa (hash: pzH8ChjyGM8irvisCLOMRVfFg2o+/iOBhQZU0VAmYyg=)
2: 3136342e3136332e3132302e302f32332d3234203d3e20323635383334.roa (hash: ITajnx8AoEh3NK9eg3wJYTD8jN+mIdo7dvHMiOnMIP8=)
3: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl (hash: kbQvjSVvpuwVl0Jgw+Kzutid0bDorZQqQJ9vD48cZjw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl
rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 31 Mar 2026 18:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:89:8f:9c:3f:64:ad:7e:80:cd:1d:3e:9d:24:02:5c:fb:6b:ae:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C
Validity
Not Before: Mar 27 18:15:57 2026 GMT
Not After : Mar 31 18:34:57 2026 GMT
Subject: CN=46D1B3D1A85FEC306CB7EFA1EB17321944C7F4DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:92:fa:c5:dc:75:fc:40:e0:da:02:55:bd:
da:56:cd:35:db:76:29:32:6f:6f:a1:c9:01:d8:05:
c4:f2:4e:00:39:4b:4b:5d:bd:53:bb:fa:c8:60:94:
aa:f9:64:81:72:7a:53:a9:f2:0f:90:17:98:10:e3:
6a:06:cf:13:47:c7:ff:34:51:e9:43:88:50:a3:2b:
81:8a:e9:58:ad:25:49:04:4e:7b:5e:7f:82:20:c6:
80:03:82:10:09:38:00:70:c9:ad:1f:74:4e:9a:f7:
4a:65:47:c7:bb:8b:27:5f:b5:53:df:c0:29:9d:4c:
f6:59:8e:c1:2e:7e:ba:17:21:93:aa:ea:6a:30:de:
a1:00:04:0a:9d:a1:d7:a5:6b:b2:f4:ee:39:2e:67:
40:cc:2d:57:a0:2d:28:82:07:3e:fe:ea:b3:1b:3c:
b5:5e:c0:58:39:1a:2d:51:75:fb:1f:f1:f3:a1:94:
4e:7d:02:2b:c2:9c:53:67:f3:e0:b9:23:79:42:32:
60:55:55:c2:b1:0a:3e:15:0c:df:41:8f:8a:d7:e4:
87:14:0d:32:10:3a:0b:61:1c:59:04:27:cd:84:69:
e5:5c:36:b1:fe:1f:7b:bc:07:19:2f:1d:30:8c:02:
ce:6c:fe:7f:e0:ce:51:b9:08:0a:b3:41:ee:be:3a:
74:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:B3:D1:A8:5F:EC:30:6C:B7:EF:A1:EB:17:32:19:44:C7:F4:DB
X509v3 Authority Key Identifier:
keyid:CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0a:99:87:db:d1:98:1e:2b:68:3a:eb:42:7b:f9:82:66:1c:
9f:6b:4d:b3:77:c9:71:79:ac:23:e4:6f:54:a2:ee:42:ff:31:
54:ac:66:a0:3c:74:f7:80:1c:04:8b:ba:a3:be:87:1d:a4:bf:
91:a9:a2:45:0f:80:6c:ca:fb:ce:03:38:d7:8b:92:bc:65:30:
12:b5:cd:e7:7c:1a:67:f2:d5:a5:72:46:fc:61:cb:a6:01:b9:
86:ab:1f:17:bd:ee:27:1e:3b:69:a8:18:a7:5b:33:41:04:44:
59:b7:1d:1b:74:39:71:b6:80:e7:4d:af:70:44:22:67:7e:ae:
3e:ef:e4:de:a5:82:9c:6f:78:bc:62:8f:04:b0:dc:f3:a9:b2:
0a:30:8f:14:b7:c3:7e:65:ee:10:df:af:27:cc:54:e6:e3:21:
fc:e1:06:7d:8d:03:a5:ee:22:86:48:39:6e:ba:82:7e:2a:de:
c9:15:46:b7:d4:c4:87:16:6a:59:d3:54:bf:12:23:94:16:93:
e1:3b:f3:8e:5b:5e:fa:46:30:5f:af:ae:de:ed:f8:4d:60:0a:
f5:4e:1c:79:9a:2b:9c:55:c2:82:f0:69:a8:f0:6a:12:5e:c7:
61:d2:4f:1e:54:71:84:88:83:b1:ae:96:73:43:66:a5:15:fc:
cf:f1:78:f9
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUWYmPnD9krX6AzR0+nSQCXPtrrmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDMDE5OENENEM2NTZDNEFEQ0VDNzM3MEQ2OUY2MUM0
QUJFREIxQzAeFw0yNjAzMjcxODE1NTdaFw0yNjAzMzExODM0NTdaMDMxMTAvBgNV
BAMTKDQ2RDFCM0QxQTg1RkVDMzA2Q0I3RUZBMUVCMTczMjE5NDRDN0Y0REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiKpL6xdx1/EDg2gJVvdpWzTXb
dikyb2+hyQHYBcTyTgA5S0tdvVO7+shglKr5ZIFyelOp8g+QF5gQ42oGzxNHx/80
UelDiFCjK4GK6VitJUkETntef4IgxoADghAJOABwya0fdE6a90plR8e7iydftVPf
wCmdTPZZjsEufroXIZOq6mow3qEABAqdodela7L07jkuZ0DMLVegLSiCBz7+6rMb
PLVewFg5Gi1Rdfsf8fOhlE59AivCnFNn8+C5I3lCMmBVVcKxCj4VDN9Bj4rX5IcU
DTIQOgthHFkEJ82EaeVcNrH+H3u8BxkvHTCMAs5s/n/gzlG5CAqzQe6+OnQlAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQURtGz0ahf7DBst++h6xcyGUTH9NswHwYDVR0j
BBgwFoAUzcAZjNTGVsStzsc3DWn2HEq+2xwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTU5RTUyMTk1QUI3Nzk0MkQzODE4NzE4ODM4QjU2ODJC
RjBDM0E4NDE4NURFQTU5M0MyNUNCMkVCNTcyM0NFLzAvQ0RDMDE5OENENEM2NTZD
NEFEQ0VDNzM3MEQ2OUY2MUM0QUJFREIxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREMwMTk4Q0Q0QzY1NkM0QURD
RUM3MzcwRDY5RjYxQzRBQkVEQjFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDk1OUU1MjE5NUFCNzc5NDJEMzgxODcxODgzOEI1NjgyQkYwQzNBODQx
ODVERUE1OTNDMjVDQjJFQjU3MjNDRS8wL0NEQzAxOThDRDRDNjU2QzRBRENFQzcz
NzBENjlGNjFDNEFCRURCMUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmCpmH29GYHitoOutCe/mCZhyf
a02zd8lxeawj5G9Uou5C/zFUrGagPHT3gBwEi7qjvocdpL+RqaJFD4BsyvvOAzjX
i5K8ZTAStc3nfBpn8tWlckb8YcumAbmGqx8Xve4nHjtpqBinWzNBBERZtx0bdDlx
toDnTa9wRCJnfq4+7+TepYKcb3i8Yo8EsNzzqbIKMI8Ut8N+Ze4Q368nzFTm4yH8
4QZ9jQOl7iKGSDluuoJ+Kt7JFUa31MSHFmpZ01S/EiOUFpPhO/OOW176RjBfr67e
7fhNYAr1Thx5miucVcKC8Gmo8GoSXsdh0k8eVHGEiIOxrpZzQ2alFfzP8Xj5
-----END CERTIFICATE-----
Generated at Sat Mar 28 17:05:49 2026 by rpki-client