
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
File: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft (raw, json)
Hash identifier: K/ZFIv7nfS17gf1tWth9P71i2QtOiI6UJjUQFf+hnj8=
Subject key identifier: 94:2B:3A:9C:AC:31:76:AD:53:F5:7A:39:DF:31:4D:1A:CD:7D:5E:CF
Authority key identifier: BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7
Certificate issuer: /CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7
Certificate serial: 066F1DC9593BA86727AB514774AF7A2B1D15394E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
Manifest number: 018D
Signing time: Sun 26 Apr 2026 18:24:50 +0000
Manifest this update: Sun 26 Apr 2026 18:19:50 +0000
Manifest next update: Fri 01 May 2026 06:35:50 +0000
Files and hashes: 1: BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl (hash: Uu7nIDtoJ34qjYmzs4qX2+nZoh5O0ccchvw4LNFcWjc=)
2: 323830333a663539303a3a2f33322d3438203d3e20323732393836.roa (hash: qiV3mbSCleZeiH8P5cTiossyGGceGqDaRLKvcaFSDVc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl
rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 01 May 2026 01:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:6f:1d:c9:59:3b:a8:67:27:ab:51:47:74:af:7a:2b:1d:15:39:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7
Validity
Not Before: Apr 26 18:19:50 2026 GMT
Not After : May 1 06:35:50 2026 GMT
Subject: CN=942B3A9CAC3176AD53F57A39DF314D1ACD7D5ECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:49:d3:b4:3c:51:b9:fc:b3:83:ec:e8:eb:
5d:26:3f:88:ff:c4:c4:5d:2e:5e:0d:ca:63:60:f0:
79:91:d5:78:af:04:26:18:07:2c:8b:33:a6:a6:f6:
63:ef:a0:cd:95:ed:57:f0:cc:27:57:79:bb:2b:0d:
b8:f2:8f:61:e4:06:37:44:3e:b8:ff:46:bc:07:53:
99:3b:63:d2:79:a0:64:a5:f7:7d:9d:7a:13:2c:bb:
d5:52:44:eb:19:cb:ce:df:2f:01:0b:97:59:19:4e:
2a:f0:58:05:30:7e:8f:1c:cd:06:ac:64:b2:60:ef:
6a:d1:79:72:2c:2f:b7:4b:ec:05:f3:84:58:e6:bd:
90:d8:72:49:d5:47:77:cc:03:2b:8c:7d:f0:64:1c:
82:4e:29:aa:eb:75:1e:93:7d:e4:58:40:66:9a:dc:
10:5f:7d:69:28:08:56:ec:79:80:a7:38:59:8d:8a:
f4:f1:20:e8:58:40:e5:6d:97:85:92:59:3a:e5:b0:
65:06:e1:09:15:19:84:19:01:f4:38:62:98:c2:a3:
cb:53:97:1c:29:5e:56:b5:d0:d8:57:64:02:55:51:
46:8d:09:d4:97:f8:76:48:36:46:ba:47:4e:11:7e:
a0:9d:c6:4d:ee:8d:ff:1b:e8:6a:7b:cd:6a:52:f0:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2B:3A:9C:AC:31:76:AD:53:F5:7A:39:DF:31:4D:1A:CD:7D:5E:CF
X509v3 Authority Key Identifier:
keyid:BD:9D:39:8B:AC:E3:90:C2:6A:32:CD:4C:77:58:AA:1F:A9:E3:7C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/677EAD7672C2B1A5E3D3F69DFCB964C866ED4CA7C9B2FF7DB131F76D68C4BC04/0/BD9D398BACE390C26A32CD4C7758AA1FA9E37CC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9d:1c:c2:c8:64:b3:74:3f:0c:ac:29:50:82:e9:68:67:69:
ee:ac:32:a7:ad:b4:af:17:de:8f:bd:a1:7f:0d:be:35:6c:c7:
22:35:9d:b6:ad:11:96:36:ca:d5:09:99:49:a4:52:a4:49:0f:
36:f3:e6:de:00:6e:36:e4:f2:cc:1c:94:ba:9f:45:36:6d:0e:
d0:ed:30:7e:cf:d0:8c:29:70:04:19:66:7c:ba:23:21:64:16:
58:b7:0f:52:eb:57:bc:22:ab:01:7f:c0:a5:63:67:0e:8c:a3:
1a:ac:3d:85:b2:de:40:24:a9:05:36:c0:9e:fa:f9:88:f8:f1:
36:8e:9f:a8:58:16:5d:79:26:e7:0e:48:d5:f5:1f:35:9d:f5:
cd:2d:4e:82:89:73:9d:1f:5e:9e:9f:b1:c3:63:98:d3:06:50:
10:67:fa:4e:b4:59:87:79:8b:fa:9c:82:db:4e:fa:d1:68:75:
5a:75:2a:9a:06:dd:29:c2:ef:92:38:8b:f4:ae:fd:7c:90:98:
0a:ac:a1:95:26:bf:18:2c:73:ab:17:8d:c0:9e:b7:9c:4f:18:
d6:dc:84:fb:1f:15:09:e5:0a:f3:11:63:4d:74:d3:15:97:db:
62:64:f8:21:d4:a8:de:0c:b7:c7:da:a7:47:0d:1f:5b:97:ff:
23:41:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:22:11 2026 by rpki-client