
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
File: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft (raw, json)
Hash identifier: eb/lcnEjPqsf8Ox32NYG2fm0RCnwS4cy5uwa5wKPT5Y=
Subject key identifier: 69:1C:91:EA:DC:E5:BD:2B:AB:31:AB:3C:E8:42:21:C6:6A:16:E1:14
Authority key identifier: 0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98
Certificate issuer: /CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
Certificate serial: 2A14C04CA3B0C6C8CF39C0B9CAEEBDBB40FCA454
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
Manifest number: 017C
Signing time: Tue 24 Mar 2026 01:13:44 +0000
Manifest this update: Tue 24 Mar 2026 01:08:44 +0000
Manifest next update: Sun 29 Mar 2026 20:28:44 +0000
Files and hashes: 1: 3133322e3235352e362e302f32342d3234203d3e20323633363937.roa (hash: H9+XRzLm621808CLXrjIM1PpTIS2n26Arwi0YDC79+Y=)
2: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl (hash: faeBmhUr0wMQ+/TuGfnxu4beJrsWtotjZLbpN55jTyo=)
3: 3133322e3235352e372e302f32342d3234203d3e20323633373236.roa (hash: d7HCNtMUJSDBU0MNo6D8oMi5dElo7qdJ0fXrO1yj6Hc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl
rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 28 Mar 2026 17:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:14:c0:4c:a3:b0:c6:c8:cf:39:c0:b9:ca:ee:bd:bb:40:fc:a4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
Validity
Not Before: Mar 24 01:08:44 2026 GMT
Not After : Mar 29 20:28:44 2026 GMT
Subject: CN=691C91EADCE5BD2BAB31AB3CE84221C66A16E114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:b4:1a:f0:8f:4b:b2:99:ca:13:1a:52:55:
f0:a2:af:92:68:60:71:21:88:3d:04:b9:9c:38:32:
29:0b:11:71:7d:fa:0d:05:0c:7d:04:24:84:96:05:
5d:50:d5:cb:6f:23:6b:1b:ba:f4:35:5f:7f:c9:2a:
a5:51:f6:bd:a5:cc:70:4f:f6:b7:10:28:35:d3:3f:
be:a6:93:a6:d3:30:5c:53:ba:b7:b6:f9:89:fb:14:
f1:5a:fb:b0:23:68:a6:47:9a:20:02:24:85:0b:81:
0f:95:33:27:c5:3a:c5:43:15:99:9a:72:5f:d2:90:
82:95:ca:1f:52:8e:82:e7:1f:8c:e4:67:88:94:6c:
fb:7e:67:0d:4c:80:e7:55:5c:11:3b:38:63:cd:de:
fb:65:54:1b:42:52:1b:57:68:f0:d0:d8:c5:64:40:
3e:3a:96:a2:73:3a:cf:5a:e2:06:de:5d:5d:d2:6b:
c6:54:1b:7b:b2:a3:01:1f:cf:58:ac:7d:03:e3:7f:
a0:7f:f8:17:e8:dd:52:b2:c2:bb:ab:10:ef:28:f1:
59:dc:7f:ad:07:89:84:e3:12:cf:10:52:4d:39:14:
19:1d:29:78:50:b1:49:59:54:b0:f0:a0:60:36:c8:
04:71:5a:5a:95:bc:36:69:fb:c4:47:79:76:ba:29:
b9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1C:91:EA:DC:E5:BD:2B:AB:31:AB:3C:E8:42:21:C6:6A:16:E1:14
X509v3 Authority Key Identifier:
keyid:0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d3:e6:40:df:07:6d:d2:80:2e:98:a4:05:78:22:ff:2f:de:
ea:8f:0b:2c:54:3f:97:7f:be:a5:54:83:b2:dd:12:e5:5f:bb:
f1:42:ea:e5:1f:bc:4c:45:a5:37:ac:ce:d4:ba:2b:9d:e4:93:
fa:80:c2:ee:f3:93:1e:84:74:12:6a:34:d8:98:49:7a:54:43:
f1:1e:1f:25:4e:fe:1f:19:25:b6:c9:b4:cc:6d:7c:40:40:42:
4a:13:18:6a:c6:0c:64:26:af:24:72:f9:40:f5:16:05:6e:42:
3a:80:99:64:7e:7a:82:c6:cf:48:98:10:55:1b:d4:f5:c1:88:
20:a7:58:28:b5:98:ab:c4:8f:11:80:b3:d5:59:39:6a:ca:5d:
ac:c4:8a:39:01:3a:a3:fb:91:5d:a0:e7:d8:60:ae:c7:45:33:
03:39:ce:48:d6:cb:d0:67:a4:bc:c4:af:37:c0:c7:b7:54:6e:
3c:4e:e3:f9:2b:92:d6:d3:5f:f4:f6:97:ab:b2:ac:55:30:21:
27:cd:49:bf:90:67:e7:f1:42:b0:aa:04:38:37:bb:7e:8b:fe:
62:36:ff:14:28:7f:ff:b8:04:ca:75:7a:98:08:ac:5d:4c:fb:
8c:33:c0:2e:99:b3:98:12:79:1b:fe:0d:f2:6a:9f:40:d1:70:
a7:4d:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 15:17:33 2026 by rpki-client