
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
File: BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft (raw, json)
Hash identifier: KWXC0s4mcIuA26fbU1+J71heU20Z6TNSlXga6fF00Qs=
Subject key identifier: 01:0C:AC:09:59:95:C8:EA:55:9A:8A:29:C8:76:C3:91:14:39:0C:C6
Authority key identifier: BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6
Certificate issuer: /CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6
Certificate serial: 0520128EAA901FB4EF1AE06F547C1AB5B97C1E9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
Manifest number: 010C
Signing time: Sun 15 Mar 2026 17:44:09 +0000
Manifest this update: Sun 15 Mar 2026 17:39:09 +0000
Manifest next update: Thu 19 Mar 2026 22:46:09 +0000
Files and hashes: 1: BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl (hash: S0kXg8JsDq+Nw4az4KTsrrgDyTKiT2ClFLwRSjuXCX8=)
2: 323830333a633335303a3a2f33322d3332203d3e20323733383834.roa (hash: QyUtb/5gl6krDSKK04fIDtKnAQYQqWsdxxEP9vtOfXU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl
rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 19 Mar 2026 05:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:20:12:8e:aa:90:1f:b4:ef:1a:e0:6f:54:7c:1a:b5:b9:7c:1e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6
Validity
Not Before: Mar 15 17:39:09 2026 GMT
Not After : Mar 19 22:46:09 2026 GMT
Subject: CN=010CAC095995C8EA559A8A29C876C39114390CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7b:44:88:27:0b:33:31:61:9a:05:34:9f:b6:
dc:8b:49:54:c2:09:aa:de:10:10:66:c3:c0:ed:cb:
5c:ee:b9:22:1a:ec:6d:e1:70:1a:42:51:c3:a0:7f:
91:cb:8c:02:62:ad:27:c8:32:15:81:e4:b5:ed:60:
b1:6e:5e:37:95:25:93:87:b5:92:fe:2d:e4:1e:26:
e3:fa:3f:7a:ed:30:6d:e8:da:83:e3:13:de:e3:11:
49:e8:05:33:f9:2d:8e:55:0c:e0:e2:df:c1:be:b2:
c8:2d:6c:55:5e:1c:7d:c4:b3:35:64:52:43:19:b6:
b6:76:9c:ae:ac:a4:81:90:31:a4:08:95:89:da:db:
9d:a0:10:7d:55:e5:33:cb:31:27:f1:50:ec:fb:da:
f5:c6:a4:bd:86:54:9b:d1:cb:36:ac:28:97:8d:44:
48:5f:58:c5:27:82:a1:66:85:cc:fb:53:22:9a:f1:
93:9c:16:fe:0c:db:4d:2e:a4:79:e0:9a:af:0b:13:
2f:13:bd:e0:39:b7:fe:00:48:03:cb:e5:05:e7:28:
56:bb:0c:09:d5:45:8d:25:b9:bb:0f:94:d5:8c:ad:
91:a8:cf:af:99:91:57:96:85:46:c6:c3:bd:f0:dc:
96:9c:2f:c1:82:93:3c:55:95:aa:36:98:a1:03:3a:
18:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0C:AC:09:59:95:C8:EA:55:9A:8A:29:C8:76:C3:91:14:39:0C:C6
X509v3 Authority Key Identifier:
keyid:BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:51:51:ae:74:87:da:df:59:2b:28:b0:15:ea:cd:f9:c7:86:
ae:b5:86:7c:8b:10:ad:23:4c:a6:a9:11:bb:ad:54:cf:27:1f:
6c:2c:38:39:a8:c6:84:37:df:43:76:e7:31:1d:70:39:1c:bd:
a1:4b:4a:5d:13:88:2c:aa:1e:05:0a:db:9f:ea:38:57:27:71:
e3:57:4e:0f:83:97:49:75:d7:e6:aa:11:b5:4c:c8:a6:58:3c:
65:b5:ac:8d:69:cc:e8:22:8e:2d:e8:10:f6:60:7c:3a:c8:23:
c2:4c:de:46:ec:58:35:f5:b1:87:be:87:62:93:88:56:bf:dd:
b1:e1:2d:44:7d:99:b8:28:68:a0:60:00:e0:98:f4:ba:ba:31:
23:95:ab:a0:67:12:99:5c:74:46:bc:b3:5f:7e:c0:01:d7:c8:
72:d1:0e:06:fc:73:b6:01:cd:64:68:e8:cc:c7:63:0d:72:c8:
ba:4d:ed:13:86:e3:1e:02:ad:b1:ac:37:25:3c:5c:fc:c3:eb:
10:2a:2b:bc:b5:83:f6:c9:64:a0:1f:f7:fc:d1:dc:4d:7c:01:
de:21:d8:0f:2c:ef:f1:54:bd:5b:0a:1e:45:b3:2d:03:aa:32:
81:88:26:e4:53:2b:8b:31:b5:2b:dd:7d:4f:f1:f2:35:ef:d2:
68:6c:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:59:35 2026 by rpki-client