
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
File: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft (raw, json)
Hash identifier: zZfxIIBpsRwGwAjnO/Z12Tm9pDujPJMiP92MFmcAz38=
Subject key identifier: 5C:1B:4A:C3:A3:D0:84:8F:F3:AC:DF:26:BD:9D:73:8D:64:AB:18:C3
Authority key identifier: BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7
Certificate issuer: /CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7
Certificate serial: 334C92EA5853E1FB87D34870DB43AE4680AAF9D1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
Manifest number: 0181
Signing time: Wed 01 Apr 2026 22:01:35 +0000
Manifest this update: Wed 01 Apr 2026 21:56:35 +0000
Manifest next update: Tue 07 Apr 2026 09:57:35 +0000
Files and hashes: 1: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl (hash: uB1CwqCDLNOKXYZZugagWKdEtp3RSM1cUC/P+hzROJk=)
2: 323830333a663539303a3a2f33322d3438203d3e20323732393836.roa (hash: qiV3mbSCleZeiH8P5cTiossyGGceGqDaRLKvcaFSDVc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl
rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 05 Apr 2026 23:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4c:92:ea:58:53:e1:fb:87:d3:48:70:db:43:ae:46:80:aa:f9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7
Validity
Not Before: Apr 1 21:56:35 2026 GMT
Not After : Apr 7 09:57:35 2026 GMT
Subject: CN=5C1B4AC3A3D0848FF3ACDF26BD9D738D64AB18C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:24:7e:f3:dd:1c:3b:2b:65:08:4f:1a:f1:
34:ad:9b:71:78:59:58:9b:af:d6:5c:91:66:25:e7:
e1:dd:00:78:49:2b:e5:94:67:5c:97:ca:90:fe:88:
c3:88:2c:8f:81:a0:5f:d8:c8:24:62:ff:f4:24:ab:
7c:fc:cf:83:b5:a6:7f:44:ef:36:1e:f7:22:22:23:
93:74:ba:af:ed:5c:42:ad:d1:a5:be:5f:c8:3e:c8:
16:ee:da:26:2e:c7:3e:cf:30:1d:84:88:bb:46:8a:
d3:53:ec:8b:c6:02:2a:62:29:7a:51:98:a2:ab:15:
9d:39:cd:10:71:56:56:e4:a3:ea:20:85:07:06:fa:
7c:d0:28:3b:ee:3d:8f:1a:37:27:c4:8e:7a:90:22:
b9:2c:5c:0d:c2:51:13:b9:6b:5a:76:9a:95:83:72:
25:bf:b5:08:ab:e1:ec:5b:5e:b5:2a:b4:d4:e1:c6:
47:9d:e0:56:56:ef:cd:5d:35:9d:cf:7e:b1:5b:67:
1a:91:06:1b:f1:ff:91:4d:84:4b:45:a2:cf:16:e4:
fc:a8:33:bb:5d:9c:0d:a8:4f:0e:42:3d:4a:02:af:
4b:50:e9:9a:4e:31:66:01:89:15:fa:03:76:a9:b3:
e2:d5:00:dc:99:8c:d5:57:d4:7c:bf:25:8e:e7:6b:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1B:4A:C3:A3:D0:84:8F:F3:AC:DF:26:BD:9D:73:8D:64:AB:18:C3
X509v3 Authority Key Identifier:
keyid:BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ca:5f:9d:4a:ec:c6:82:a5:1b:ac:e7:0d:28:61:92:97:e5:
c5:a0:7e:76:1b:0e:45:11:4b:82:fa:da:03:09:d3:38:3b:57:
5e:0c:57:79:80:27:93:86:9f:2a:36:2e:cc:90:12:2e:9b:fb:
29:34:12:08:22:45:7b:35:9d:f1:87:41:a6:eb:b0:8f:e9:71:
f6:69:1e:75:ed:26:1b:02:cb:0c:11:19:a9:20:af:47:74:b1:
f1:22:e8:db:a7:ad:62:05:95:b0:df:ce:09:38:0d:d8:65:f0:
24:6e:48:9b:df:5d:0d:e5:e4:ad:50:f1:33:b5:4f:14:96:18:
3d:25:c4:d7:ba:4d:e5:7f:8c:ce:c1:b1:20:44:be:26:ea:10:
61:3a:72:ea:3a:07:df:10:ee:7a:32:bf:90:ff:bf:81:6b:f3:
b7:e4:54:0f:e3:30:e9:25:16:97:90:c9:11:20:dc:68:75:10:
72:49:7b:82:1f:b1:cf:81:2c:89:e4:65:ca:2d:b0:11:b4:e9:
67:52:32:71:62:32:78:fd:07:6c:85:48:f8:2b:2e:93:15:cb:
15:8d:32:88:34:08:8f:d3:7b:4b:1c:9b:23:10:b4:c3:ea:eb:
27:18:57:ab:68:fb:fd:92:54:0d:cc:50:bf:95:c6:c4:2c:d7:
f0:26:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 10:45:48 2026 by rpki-client