
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5470EB29612BC37FEFF39A8D76737E1807A8AAA538EF689BB10C51D0A6075B77/0/436B27D19A4D21297A3025924643760885CB0C15.mft
File: 436B27D19A4D21297A3025924643760885CB0C15.mft (raw, json)
Hash identifier: cxQKgNeTQl72wN6Ocus9kaZ/dgBhyt/IJP1AV3FKQC4=
Subject key identifier: F8:A8:5E:E0:C2:1A:99:41:9B:16:A3:A6:50:28:87:C4:28:9E:A9:EB
Authority key identifier: 43:6B:27:D1:9A:4D:21:29:7A:30:25:92:46:43:76:08:85:CB:0C:15
Certificate issuer: /CN=436B27D19A4D21297A3025924643760885CB0C15
Certificate serial: 626463A42178C6B7A8AE15777ECB4644D9CBA4CE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/436B27D19A4D21297A3025924643760885CB0C15.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5470EB29612BC37FEFF39A8D76737E1807A8AAA538EF689BB10C51D0A6075B77/0/436B27D19A4D21297A3025924643760885CB0C15.mft
Manifest number: 018D
Signing time: Fri 01 May 2026 08:36:35 +0000
Manifest this update: Fri 01 May 2026 08:31:35 +0000
Manifest next update: Tue 05 May 2026 16:57:35 +0000
Files and hashes: 1: 323830333a636530303a3a2f33322d3332203d3e203532343232.roa (hash: z1N9KBamzMEHgtIsXopKBcgXMwl1z8iF25RU0w7oPKU=)
2: 3230302e3131352e3138382e302f32322d3234203d3e203532343232.roa (hash: 5faQft87d2+fxAKSyGuvBxqAB9N2ULdhI5q/R7C5Eks=)
3: 436B27D19A4D21297A3025924643760885CB0C15.crl (hash: Y9DuApaD8/35+WqIJOxwaot9I9lH59k5S+b2uEHNrYE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5470EB29612BC37FEFF39A8D76737E1807A8AAA538EF689BB10C51D0A6075B77/0/436B27D19A4D21297A3025924643760885CB0C15.crl
rsync://repository.lacnic.net/rpki/lacnic/5470EB29612BC37FEFF39A8D76737E1807A8AAA538EF689BB10C51D0A6075B77/0/436B27D19A4D21297A3025924643760885CB0C15.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/436B27D19A4D21297A3025924643760885CB0C15.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 05 May 2026 16:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:64:63:a4:21:78:c6:b7:a8:ae:15:77:7e:cb:46:44:d9:cb:a4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436B27D19A4D21297A3025924643760885CB0C15
Validity
Not Before: May 1 08:31:35 2026 GMT
Not After : May 5 16:57:35 2026 GMT
Subject: CN=F8A85EE0C21A99419B16A3A6502887C4289EA9EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b6:cc:03:48:62:64:6d:b3:58:a9:ea:4d:bf:
0b:ee:f2:14:16:b0:84:62:e9:1f:81:b5:f3:f6:53:
00:f7:c4:dd:b1:81:7d:fa:f7:4d:b7:15:83:13:f4:
18:8b:7f:28:72:ce:88:3f:40:0d:cf:60:bc:53:0a:
27:9c:7c:e8:70:b8:26:5a:b6:7a:2a:29:85:62:d5:
14:d6:21:0b:59:53:ba:90:cc:7b:da:9a:96:55:18:
52:07:00:2e:c8:88:cc:b3:40:9c:7e:57:8a:27:7f:
69:e0:0c:56:7b:68:6f:bd:04:a0:5f:24:01:af:83:
6f:3e:f9:ad:d7:73:6d:ed:9c:8a:29:ef:9a:57:ac:
52:2c:be:fa:06:b7:8d:05:b0:15:9f:b3:14:37:b8:
d2:a0:a0:0a:2f:24:da:d4:1f:4d:2c:12:20:b5:ea:
22:d4:7c:e2:27:0a:20:d1:1c:2f:cc:99:d8:c3:86:
3d:3c:03:48:ce:05:24:ff:7e:92:63:e2:36:7f:9c:
24:8f:94:2a:a9:51:ca:6c:69:8e:bb:b9:e2:e3:87:
da:52:5d:0b:de:55:9c:f2:ca:9d:ad:f9:b8:ef:b4:
6c:61:e0:27:48:5a:18:b6:fd:07:34:db:44:4b:be:
32:c5:d7:57:26:42:2a:66:48:e1:c0:dc:72:1b:97:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A8:5E:E0:C2:1A:99:41:9B:16:A3:A6:50:28:87:C4:28:9E:A9:EB
X509v3 Authority Key Identifier:
keyid:43:6B:27:D1:9A:4D:21:29:7A:30:25:92:46:43:76:08:85:CB:0C:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5470EB29612BC37FEFF39A8D76737E1807A8AAA538EF689BB10C51D0A6075B77/0/436B27D19A4D21297A3025924643760885CB0C15.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/436B27D19A4D21297A3025924643760885CB0C15.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5470EB29612BC37FEFF39A8D76737E1807A8AAA538EF689BB10C51D0A6075B77/0/436B27D19A4D21297A3025924643760885CB0C15.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8f:4d:93:f2:5d:54:19:79:98:19:3b:d6:a5:fa:73:ef:4c:
ce:24:5b:d1:24:9c:ae:11:fc:28:17:99:00:9b:63:d6:e2:9e:
eb:8a:e0:41:52:90:74:05:49:7a:6e:c2:6d:d4:5a:15:e1:fc:
84:8a:1c:07:97:5f:c2:68:9b:e7:0d:1f:00:a9:59:0b:71:c9:
c3:4e:04:01:20:76:cd:5e:6b:de:00:04:09:32:15:28:b6:38:
86:01:1c:4a:38:07:af:13:9a:42:37:15:78:dd:28:cf:47:29:
60:3c:70:64:3d:3d:73:58:7b:4d:e6:9a:9e:d2:09:ce:b4:7f:
15:f6:fa:0d:87:da:be:c9:52:78:cb:af:08:d6:b9:c1:d9:35:
28:10:d0:b4:72:ca:d0:11:b7:7e:8f:5c:88:69:c4:2d:15:41:
8d:05:12:81:69:73:dc:9c:e3:c1:5b:6c:0e:77:1f:d6:2b:48:
2a:31:d9:4b:16:3b:fe:85:31:a0:7a:b0:ba:12:27:81:9c:9d:
6c:22:14:ea:05:8b:49:24:a0:05:38:51:52:de:d1:f5:6c:fa:
2d:cc:15:d5:1f:27:a2:ae:b0:58:11:92:f1:b9:78:31:df:57:
ac:30:ae:ef:8c:56:6a:e8:40:43:bb:e2:95:9d:f3:19:6c:6f:
5f:8a:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 06:22:05 2026 by rpki-client