
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5470EB29612BC37FEFF39A8D76737E1807A8AAA538EF689BB10C51D0A6075B77/0/436B27D19A4D21297A3025924643760885CB0C15.mft
File: 436B27D19A4D21297A3025924643760885CB0C15.mft (raw, json)
Hash identifier: 5ebGDxGH/dZjZFtYcdTilYWgYKoWhEScLhi06ZOL7bk=
Subject key identifier: 95:C8:D3:9C:0A:17:97:16:A8:62:6A:B5:B9:EE:5F:DE:E6:6E:6A:34
Authority key identifier: 43:6B:27:D1:9A:4D:21:29:7A:30:25:92:46:43:76:08:85:CB:0C:15
Certificate issuer: /CN=436B27D19A4D21297A3025924643760885CB0C15
Certificate serial: 633ACAC27DE17862807EBD8F2F604973EF45B81D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/436B27D19A4D21297A3025924643760885CB0C15.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5470EB29612BC37FEFF39A8D76737E1807A8AAA538EF689BB10C51D0A6075B77/0/436B27D19A4D21297A3025924643760885CB0C15.mft
Manifest number: 01D2
Signing time: Sat 12 Sep 2026 10:32:25 +0000
Manifest this update: Sat 12 Sep 2026 10:27:25 +0000
Manifest next update: Fri 18 Sep 2026 10:28:25 +0000
Files and hashes: 1: 3230302e3131352e3138382e302f32322d3234203d3e203532343232.roa (hash: 5faQft87d2+fxAKSyGuvBxqAB9N2ULdhI5q/R7C5Eks=)
2: 323830333a636530303a3a2f33322d3332203d3e203532343232.roa (hash: z1N9KBamzMEHgtIsXopKBcgXMwl1z8iF25RU0w7oPKU=)
3: 436B27D19A4D21297A3025924643760885CB0C15.crl (hash: BE2RQtb2UiUTeFOuRPDOK3mXFOtBuMjk++ADIbVJ5VU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5470EB29612BC37FEFF39A8D76737E1807A8AAA538EF689BB10C51D0A6075B77/0/436B27D19A4D21297A3025924643760885CB0C15.crl
rsync://repository.lacnic.net/rpki/lacnic/5470EB29612BC37FEFF39A8D76737E1807A8AAA538EF689BB10C51D0A6075B77/0/436B27D19A4D21297A3025924643760885CB0C15.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/436B27D19A4D21297A3025924643760885CB0C15.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Sep 2026 03:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:3a:ca:c2:7d:e1:78:62:80:7e:bd:8f:2f:60:49:73:ef:45:b8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436B27D19A4D21297A3025924643760885CB0C15
Validity
Not Before: Sep 12 10:27:25 2026 GMT
Not After : Sep 18 10:28:25 2026 GMT
Subject: CN=95C8D39C0A179716A8626AB5B9EE5FDEE66E6A34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d3:8c:75:1a:ee:cd:ac:be:9a:42:c6:d2:4b:
19:e7:3d:e8:39:0c:20:51:38:43:ff:53:2f:1b:81:
f2:c4:5c:1f:91:00:24:e5:e2:1d:1d:31:2c:87:f6:
0f:dd:32:ce:be:41:2c:36:3e:ba:db:05:a2:6d:ab:
40:fe:aa:8a:50:09:09:e8:61:bb:23:48:69:7f:67:
7a:ad:d3:a5:b0:c1:1f:e0:46:fd:cc:ad:da:f3:54:
a4:58:b4:8f:af:80:8b:42:53:b4:0d:71:f0:37:b1:
7b:43:c1:58:3c:b3:9f:5a:b1:55:81:50:4f:60:8c:
93:62:b0:fa:32:c7:36:f9:95:48:4d:e5:39:e4:ab:
f3:bc:cd:1b:7b:b2:83:7c:dd:c5:10:d2:35:3d:ca:
88:ba:ab:c7:49:94:ec:19:88:3c:e4:02:78:5d:24:
4d:0b:bf:b3:81:1a:b7:84:c4:9a:3d:dd:5d:e3:e8:
d5:c3:ab:24:9a:ce:72:05:96:0c:3a:83:3e:5d:e8:
b5:b2:fc:f3:39:d7:e1:dc:19:c9:f9:89:0c:be:8e:
f3:61:b4:42:b8:8d:d2:f9:ae:d2:d6:96:7f:aa:60:
f7:e5:68:ce:bc:28:e2:b3:ac:3a:d3:88:27:01:67:
bc:53:cd:22:a1:87:7b:30:cd:a6:bd:e3:91:51:7b:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C8:D3:9C:0A:17:97:16:A8:62:6A:B5:B9:EE:5F:DE:E6:6E:6A:34
X509v3 Authority Key Identifier:
keyid:43:6B:27:D1:9A:4D:21:29:7A:30:25:92:46:43:76:08:85:CB:0C:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5470EB29612BC37FEFF39A8D76737E1807A8AAA538EF689BB10C51D0A6075B77/0/436B27D19A4D21297A3025924643760885CB0C15.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/436B27D19A4D21297A3025924643760885CB0C15.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5470EB29612BC37FEFF39A8D76737E1807A8AAA538EF689BB10C51D0A6075B77/0/436B27D19A4D21297A3025924643760885CB0C15.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cb:a1:b9:5d:a5:ba:c5:c0:4b:6a:e3:4e:ca:4b:6c:9b:59:
27:b2:dc:f8:c5:ae:ac:f8:2c:80:9b:f2:e7:08:cd:05:bf:07:
78:b2:bd:df:90:62:b1:f6:91:56:d8:b4:80:36:38:91:ef:8c:
1e:91:3a:64:89:d6:69:70:77:58:73:62:46:a9:27:44:77:ee:
8e:17:20:8c:c5:f3:93:d0:86:b4:ab:0c:c3:92:05:a8:0a:07:
3f:63:6d:84:e4:f6:ed:57:98:2c:dd:25:7f:12:19:10:28:3e:
af:88:4f:14:ed:26:28:85:82:b2:ce:93:9f:a9:53:d6:3f:22:
ad:af:83:cb:a5:dd:00:8a:09:e4:ec:2a:81:19:51:c4:2e:41:
50:0d:4b:02:fa:ef:73:80:ad:57:18:54:42:ee:a9:3b:61:6b:
24:d8:ba:eb:5e:39:94:e8:c4:62:57:2f:37:f8:80:2b:3b:0a:
3e:01:d3:b8:84:7c:54:c5:f4:73:dc:11:62:f6:a9:5b:80:e6:
1a:8e:7e:22:89:4d:3e:f7:17:13:5c:5a:fe:88:1c:ae:8e:e1:
32:c3:bb:90:48:26:98:71:a3:2f:74:b2:c4:ae:46:c3:6b:59:
74:4c:75:70:f7:ce:d6:3d:49:5c:95:ee:aa:68:bc:8a:05:13:
1b:8f:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:48:43 2026 by rpki-client