
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json)
Hash identifier: 18XTUvWGq1Ah2c5RALY5sP5aqWyu4L6FzlZCuhpRnEY=
Subject key identifier: F7:14:35:BC:EA:4C:13:27:D4:CD:B0:F0:69:88:B9:DF:D0:E9:63:A8
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial: 2C10BF6FE4E0D053F6D46DA4F3EBDA218D0C3D39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
Manifest number: 017F
Signing time: Sun 22 Mar 2026 03:50:46 +0000
Manifest this update: Sun 22 Mar 2026 03:45:46 +0000
Manifest next update: Fri 27 Mar 2026 18:45:46 +0000
Files and hashes: 1: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: XE2awn9T+5ggVHcwpgRTfWKLa6eNnQYDkphDSuamOgQ=)
2: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: dbTjuGS3PzrURh7F2dZU8q1IyUt3ByHVC9cX7x0Huss=)
3: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: fvj26Bbn1lF7J142LNf4JUl6zxt4/DEIbTucgOu9PBM=)
4: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: kgjgwHarhaMs6Iouvoz80koNaPks3R7U+aIkHqr9IWM=)
5: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: L57VWgacj/zmSjf7yEB+iUGkpSFTYzflOQWN6Q62GvI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 18:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:10:bf:6f:e4:e0:d0:53:f6:d4:6d:a4:f3:eb:da:21:8d:0c:3d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Validity
Not Before: Mar 22 03:45:46 2026 GMT
Not After : Mar 27 18:45:46 2026 GMT
Subject: CN=F71435BCEA4C1327D4CDB0F06988B9DFD0E963A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:36:0c:d9:f3:6a:3f:6b:7e:95:99:c6:30:
c7:3a:85:fb:83:81:96:d4:ed:26:e8:28:0e:f6:60:
2b:50:4f:8c:3a:47:c1:8b:c1:7d:4f:c7:cd:46:56:
a7:3f:46:ec:3a:fe:51:57:c0:54:55:94:be:f3:34:
a1:8a:3f:ee:b8:4a:d4:96:27:3e:5a:c7:ad:b7:2e:
a4:9d:f3:7b:ff:93:ca:9e:97:66:56:61:f7:2f:b0:
b3:2a:15:cf:a8:f9:5f:61:26:a0:6b:42:4e:3b:bd:
2a:93:72:5f:02:32:74:e2:db:8b:18:78:7e:3e:d2:
de:83:55:08:fc:ea:9e:93:d2:c0:09:6b:c0:db:55:
04:05:85:08:ba:e2:55:19:a2:8a:71:f9:cb:cc:14:
a7:a2:fb:9c:5d:a2:71:0a:29:28:1a:52:9c:04:f9:
ca:62:87:3c:ef:04:03:ab:3b:c7:7b:37:4b:5c:a1:
64:cc:16:32:6a:42:d7:ca:4f:f9:59:1a:b5:fe:d2:
e6:1e:42:ea:dd:da:4a:6c:f6:b1:c4:be:ae:da:c1:
25:c3:1a:2e:8b:aa:c1:48:83:04:5d:a6:07:85:20:
63:2c:d1:4e:85:8f:7a:e5:e2:d9:4c:f8:17:c2:1c:
93:65:ed:7f:95:0b:f1:32:02:e3:0b:9d:80:a3:7a:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:14:35:BC:EA:4C:13:27:D4:CD:B0:F0:69:88:B9:DF:D0:E9:63:A8
X509v3 Authority Key Identifier:
keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:df:37:50:2b:8f:19:40:f7:0c:31:85:ce:9f:e0:a9:3a:72:
12:74:23:75:03:03:25:35:e1:7d:3c:6d:82:fd:06:02:1b:eb:
46:3d:70:69:52:40:35:65:22:b0:da:b0:e0:e0:07:5f:82:73:
e5:f3:1c:95:10:1f:97:a9:43:7b:ae:68:a5:93:56:09:93:57:
72:47:97:a6:39:ff:fd:95:81:11:ab:0e:89:f4:a7:ca:3c:f8:
a6:ed:21:73:18:81:02:2c:70:a1:63:e7:66:d3:ea:7d:ef:c6:
ae:58:89:74:67:91:ef:e3:8d:45:86:cc:92:39:59:a0:1c:0c:
df:ee:5d:ff:d1:75:a2:fe:15:ac:1c:ee:13:84:39:d0:71:e3:
ca:fc:fa:42:be:63:8b:51:61:42:d4:81:30:e8:50:08:2d:d2:
d0:1a:7f:8e:9f:9c:43:07:32:d8:9b:4f:e2:ef:da:d5:92:2e:
c1:e2:2a:49:70:fe:cc:b8:fd:b8:db:01:22:06:fe:b6:d4:b3:
20:4e:54:97:f0:6d:df:9d:f4:ae:10:9b:61:47:b6:8d:ac:fc:
90:45:3b:1e:4d:c8:98:8f:c0:33:28:91:ae:70:81:12:b7:7b:
91:0b:b8:8f:4b:aa:01:2f:21:df:2a:0b:14:1b:2a:7a:2b:82:
61:94:ee:2e
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIULBC/b+Tg0FP21G2k8+vaIY0MPTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JCMzBGQ0EyN0I4
RkJFOERBOTAeFw0yNjAzMjIwMzQ1NDZaFw0yNjAzMjcxODQ1NDZaMDMxMTAvBgNV
BAMTKEY3MTQzNUJDRUE0QzEzMjdENENEQjBGMDY5ODhCOURGRDBFOTYzQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCloDYM2fNqP2t+lZnGMMc6hfuD
gZbU7SboKA72YCtQT4w6R8GLwX1Px81GVqc/Ruw6/lFXwFRVlL7zNKGKP+64StSW
Jz5ax623LqSd83v/k8qel2ZWYfcvsLMqFc+o+V9hJqBrQk47vSqTcl8CMnTi24sY
eH4+0t6DVQj86p6T0sAJa8DbVQQFhQi64lUZoopx+cvMFKei+5xdonEKKSgaUpwE
+cpihzzvBAOrO8d7N0tcoWTMFjJqQtfKT/lZGrX+0uYeQurd2kps9rHEvq7awSXD
Gi6LqsFIgwRdpgeFIGMs0U6Fj3rl4tlM+BfCHJNl7X+VC/EyAuMLnYCjeiNrAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU9xQ1vOpMEyfUzbDwaYi539DpY6gwHwYDVR0j
BBgwFoAUyjJcdYvZWuIzjTe7MPyie4++jakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZF
MkVCNEQxOTVCQTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFF
MjMzOEQzN0JCMzBGQ0EyN0I4RkJFOERBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTMyNUM3NThCRDk1QUUyMzM4
RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzA5MjdENEUxOEY3N0VGQjYwMkFFMjFENTYxMUI4OUM2RTJFQjREMTk1
QkExODQ4REQ5OTYxRjg0QTBFRDJCMi8wL0NBMzI1Qzc1OEJEOTVBRTIzMzhEMzdC
QjMwRkNBMjdCOEZCRThEQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ3zdQK48ZQPcMMYXOn+CpOnIS
dCN1AwMlNeF9PG2C/QYCG+tGPXBpUkA1ZSKw2rDg4AdfgnPl8xyVEB+XqUN7rmil
k1YJk1dyR5emOf/9lYERqw6J9KfKPPim7SFzGIECLHChY+dm0+p978auWIl0Z5Hv
441FhsySOVmgHAzf7l3/0XWi/hWsHO4ThDnQcePK/PpCvmOLUWFC1IEw6FAILdLQ
Gn+On5xDBzLYm0/i79rVki7B4ipJcP7MuP242wEiBv621LMgTlSX8G3fnfSuEJth
R7aNrPyQRTseTciYj8AzKJGucIESt3uRC7iPS6oBLyHfKgsUGyp6K4JhlO4u
-----END CERTIFICATE-----
Generated at Tue Mar 24 15:32:57 2026 by rpki-client