
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
File: BF32AEE1B63DB0DF1296575D56FA963E24476012.mft (raw, json)
Hash identifier: XNuMcb858beoVRn8qd1JTi4b9+eLL03AkJsbM7WcfqI=
Subject key identifier: 03:05:C5:E3:73:C6:03:35:14:A7:A3:84:39:29:EB:A3:D9:9B:19:0B
Authority key identifier: BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12
Certificate issuer: /CN=BF32AEE1B63DB0DF1296575D56FA963E24476012
Certificate serial: 181F68121C394BB334BBFDBD0C2515169C10E244
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
Manifest number: D3
Signing time: Tue 28 Apr 2026 22:31:46 +0000
Manifest this update: Tue 28 Apr 2026 22:26:46 +0000
Manifest next update: Sun 03 May 2026 08:29:46 +0000
Files and hashes: 1: BF32AEE1B63DB0DF1296575D56FA963E24476012.crl (hash: oUu8cin2m3Hfxypwli9gGhRriNNvZ4AA8VUp7oCIYkQ=)
2: 323830333a323264303a3a2f33322d3334203d3e20323734303438.roa (hash: jba4C/AZYdnWu2FhgfiQQUktEOf6lyPQZ/uQ/QLEYcY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl
rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 03 May 2026 08:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:1f:68:12:1c:39:4b:b3:34:bb:fd:bd:0c:25:15:16:9c:10:e2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF32AEE1B63DB0DF1296575D56FA963E24476012
Validity
Not Before: Apr 28 22:26:46 2026 GMT
Not After : May 3 08:29:46 2026 GMT
Subject: CN=0305C5E373C6033514A7A3843929EBA3D99B190B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:8d:e7:67:fc:3c:02:d9:79:db:bc:4e:ab:
1c:34:86:a7:75:f8:6e:62:5d:9c:e3:49:a1:64:a3:
6e:bc:e7:e3:12:75:79:27:7c:90:4f:a8:30:d4:bd:
39:a5:ad:ec:f7:6c:a7:dc:bd:2c:8b:49:86:d7:14:
d0:6e:e5:c4:a9:da:37:43:6c:c6:52:3c:d9:97:ad:
8b:6d:04:fc:79:d2:7e:89:43:71:51:c3:5b:97:6a:
42:14:04:9a:e4:f5:8e:00:6c:18:98:59:17:04:0f:
5a:1c:35:6d:60:0a:c9:ab:d8:ff:8b:0a:f0:63:aa:
b1:c0:a3:5a:ab:ab:fe:f6:0e:cb:ee:55:74:0d:a8:
70:f7:a3:05:3f:7e:96:3f:6c:01:d9:be:b2:e0:b1:
de:96:06:4d:f8:44:02:c0:9f:ab:01:4e:1f:e0:08:
8d:ee:04:a9:ae:86:ab:4a:cd:7f:6c:59:6b:99:14:
f5:d0:6d:58:a7:5a:b3:52:e2:04:28:9f:86:cf:d4:
21:d0:e8:cb:72:c0:44:42:cc:0e:76:4d:ef:d4:ef:
04:ce:2b:33:92:bf:6b:62:fd:e2:c5:54:47:06:26:
2e:8c:c4:55:db:87:34:bb:63:9d:74:6f:2d:66:e4:
e3:b0:71:c2:93:26:d6:9a:f1:17:1a:ef:c8:06:68:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:05:C5:E3:73:C6:03:35:14:A7:A3:84:39:29:EB:A3:D9:9B:19:0B
X509v3 Authority Key Identifier:
keyid:BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bb:8f:e6:c9:2d:5a:d7:84:df:b2:a8:48:12:1a:b7:ef:0b:
8e:a2:a5:0f:8a:33:6e:bb:8a:fb:92:67:84:d4:43:a8:c5:d5:
77:9e:c2:4c:86:0f:2f:91:f6:c4:e4:ef:a8:cf:7c:25:20:3f:
8e:50:f8:4d:c9:52:8f:f1:99:e5:d5:2c:67:aa:e9:da:ed:6f:
71:33:cf:64:ce:19:68:cc:ef:be:e0:1e:36:da:50:43:c4:5b:
a2:94:31:4f:55:f5:1a:6a:5c:5f:13:9d:b7:dc:59:b5:12:b6:
9f:a6:25:5c:58:98:5b:e6:8a:6a:9d:2d:b0:19:94:55:81:1e:
fd:ab:9f:bb:2b:04:38:f8:f3:27:aa:d0:12:93:5d:64:54:1d:
eb:dd:cc:3d:f6:71:3a:6e:f8:4f:14:de:7d:3e:22:a0:d1:49:
4b:61:bc:22:86:e7:65:25:5e:f1:fd:08:05:e1:47:49:6e:2f:
35:72:25:8a:1b:61:d4:09:fe:26:35:3d:32:24:9c:36:72:85:
64:a2:02:3a:4c:5f:06:90:d6:2f:57:96:29:76:87:df:bd:df:
a4:5c:30:df:8f:9a:7b:02:fe:42:60:4a:d0:d5:54:03:06:ea:
52:6c:26:91:a6:1d:7e:35:57:ba:42:12:e7:80:ef:fb:fb:93:
45:48:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 05:50:23 2026 by rpki-client