
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft
File: BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft (raw, json)
Hash identifier: vjPuUFYSFZg9WCM/DXt8XZPFVvPu0j7PEOCKy5UP85A=
Subject key identifier: 3A:C4:EC:DB:EA:ED:98:BD:9D:6C:85:D3:E6:0A:82:9E:EA:18:0F:25
Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31
Certificate issuer: /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
Certificate serial: 39BF669A60C31D05DABB392AF6E60ECB66C628A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft
Manifest number: 01D5
Signing time: Thu 10 Sep 2026 17:38:19 +0000
Manifest this update: Thu 10 Sep 2026 17:33:19 +0000
Manifest next update: Wed 16 Sep 2026 05:53:19 +0000
Files and hashes: 1: BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl (hash: ojvv8vDq5FSH+NvVJp+pxosaodaFziTfmWZ2jGQ3IXY=)
2: 323830313a3161393a313a3a2f34382d3438203d3e20323732393039.roa (hash: c18jRtqhZN01/gTi9lg46b3cCnkr32f0FoJvifBJVIc=)
3: 323830313a3161393a323a3a2f34382d3438203d3e20323732393039.roa (hash: 6k51px2TSaFaWZI8BEWq+C4/GtAEPldzHpNbSB9NhcI=)
4: 323830313a3161393a3a2f34342d3434203d3e20323732393039.roa (hash: U7oUDHyTDhblaUmWMfDj+2/IieGmVN6mcBA3MkQDeO4=)
5: 323830313a3161393a323a3a2f34382d3438203d3e203133343839.roa (hash: 3oQRCQrHHCT3P5lChOtGimUodWU6JY/Yj2YANFnvU3o=)
6: 323830313a3161393a313a3a2f34382d3438203d3e203133343839.roa (hash: DLVgtmij6ZRXLybHKvKmJYb6AKWn8LgmuN7QQkMk9LI=)
7: 323830313a3161393a313a3a2f34382d3438203d3e203237393531.roa (hash: TfWo+j9xXCL/GKCkAxbT74nLngBoDHoQbEqlsetvkzg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl
rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 16 Sep 2026 05:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:bf:66:9a:60:c3:1d:05:da:bb:39:2a:f6:e6:0e:cb:66:c6:28:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
Validity
Not Before: Sep 10 17:33:19 2026 GMT
Not After : Sep 16 05:53:19 2026 GMT
Subject: CN=3AC4ECDBEAED98BD9D6C85D3E60A829EEA180F25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:b4:04:74:14:87:73:61:2b:0c:85:08:9f:
97:ef:12:00:81:54:41:f6:bb:d2:59:bb:c2:a8:dd:
17:9f:78:8f:63:d8:32:7b:a0:4d:50:a8:a4:53:65:
b6:37:e9:21:ab:40:67:0e:37:cb:30:b3:bb:3f:c2:
b6:34:a2:41:b3:9d:a7:73:83:0e:2f:21:ce:13:5f:
d2:e9:b1:31:32:ec:ff:8b:a6:2c:78:e4:4f:7a:b7:
7a:6a:e0:ba:61:36:1c:98:aa:c4:2b:41:e5:c7:15:
b2:34:3e:66:d6:61:e9:13:d6:a2:40:6f:3c:63:c0:
a9:bd:01:34:a2:5b:ff:ec:18:bc:d3:f1:f4:8d:7c:
ef:77:5e:8b:48:fe:d3:e1:a4:19:7a:33:ee:38:69:
f8:05:4e:3e:71:5d:be:02:bf:49:eb:2a:cb:ee:8b:
9a:56:89:5a:2f:3c:58:04:3c:a2:64:9d:ea:03:c5:
c6:5c:48:b1:ad:41:74:ce:e5:1f:3e:33:22:04:28:
f0:d7:ac:5d:b1:68:27:74:37:21:0d:9a:dc:2e:c9:
4f:92:70:9e:f3:41:4f:28:9d:10:7d:ba:c8:70:89:
ce:8a:2b:ca:57:1b:da:a8:48:a2:87:9d:d9:bb:5b:
f9:15:98:76:24:f4:75:11:32:f6:bb:da:d4:42:50:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C4:EC:DB:EA:ED:98:BD:9D:6C:85:D3:E6:0A:82:9E:EA:18:0F:25
X509v3 Authority Key Identifier:
keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0f:68:a5:13:4a:b0:db:8d:37:95:72:b7:25:ad:40:66:98:
57:e0:3a:b9:97:30:93:dd:06:18:37:c4:2b:5a:e9:df:c2:db:
af:e9:c1:06:93:92:54:62:05:0d:d3:75:52:d1:34:62:c0:6b:
4e:45:ad:d2:ba:cd:15:48:b6:5c:5e:71:b3:3d:5a:df:4e:3c:
e9:cd:32:35:d0:71:e4:fc:f4:a1:f9:01:12:4e:61:a1:1c:8e:
c2:a2:8a:cc:14:9d:cf:b3:1c:27:e1:75:f6:cd:f4:77:f2:8b:
09:0f:e4:52:aa:51:19:79:4c:20:c9:1d:f0:b5:51:f0:ac:7a:
11:1d:b2:7f:eb:d4:3d:a1:fd:7c:c2:09:38:48:18:7d:83:7d:
60:68:79:df:e2:1c:46:32:f9:2e:3a:a7:d7:7e:dc:7f:49:85:
7c:9b:89:94:6f:f8:a5:47:b5:d5:c6:e5:92:ce:8f:40:7b:38:
42:80:b8:50:a6:4b:29:49:b8:eb:89:36:b7:91:92:1f:4d:24:
04:0a:4e:36:69:f9:65:d8:68:2b:37:03:1a:74:79:15:73:ec:
d5:93:41:b3:1e:58:d3:ef:48:0a:a3:25:83:d4:a3:1a:73:ce:
ae:78:01:39:0c:b4:d9:00:93:8c:93:21:60:c8:b0:dd:0b:cc:
f5:5f:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 01:01:46 2026 by rpki-client