
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
File: BF32AEE1B63DB0DF1296575D56FA963E24476012.mft (raw, json)
Hash identifier: 1aCBEgJQOiJoGIS/4k5U7IHrHGNs+GQ9rM8jhVJevoA=
Subject key identifier: AC:74:8F:88:3B:AE:CD:71:09:9C:3D:70:86:EA:9C:9D:90:C9:22:3E
Authority key identifier: BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12
Certificate issuer: /CN=BF32AEE1B63DB0DF1296575D56FA963E24476012
Certificate serial: 1C367219AA09FE7902D6747EA33E77750F4797E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
Manifest number: BE
Signing time: Sun 15 Mar 2026 12:56:21 +0000
Manifest this update: Sun 15 Mar 2026 12:51:21 +0000
Manifest next update: Thu 19 Mar 2026 13:46:21 +0000
Files and hashes: 1: BF32AEE1B63DB0DF1296575D56FA963E24476012.crl (hash: XfpWUKT7zgI70D+eXIhFksUenI4m8p2DToi6HQ2TCnQ=)
2: 323830333a323264303a3a2f33322d3334203d3e20323734303438.roa (hash: jba4C/AZYdnWu2FhgfiQQUktEOf6lyPQZ/uQ/QLEYcY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl
rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 19 Mar 2026 05:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:36:72:19:aa:09:fe:79:02:d6:74:7e:a3:3e:77:75:0f:47:97:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF32AEE1B63DB0DF1296575D56FA963E24476012
Validity
Not Before: Mar 15 12:51:21 2026 GMT
Not After : Mar 19 13:46:21 2026 GMT
Subject: CN=AC748F883BAECD71099C3D7086EA9C9D90C9223E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:52:bd:22:e3:92:29:b0:be:9a:3b:f6:7c:
72:c6:93:1d:e3:00:d9:fe:20:51:a8:b5:df:0c:df:
32:4d:f2:a2:a5:c4:c4:f1:fc:32:71:08:da:7f:19:
79:d3:18:ef:b5:e9:27:5a:30:35:59:5e:d1:a7:76:
f6:54:df:b6:83:8d:44:a8:f3:dc:88:9e:86:1a:14:
a9:de:21:c6:8a:db:4c:e2:1b:4a:38:62:80:aa:b6:
c2:fa:68:c7:fa:a4:bf:a4:e2:11:62:0a:69:c6:ff:
f8:1a:e1:14:57:cb:5e:53:66:d2:0c:36:df:27:04:
bd:23:80:98:d6:0e:b6:04:55:43:17:a3:21:0e:eb:
0e:9c:3e:e0:05:8c:8b:10:fb:7f:7e:25:75:2b:86:
f2:80:22:a6:3b:1c:b5:1e:ee:84:19:c3:ef:22:c7:
2e:1b:aa:3e:54:35:e8:2c:c3:0e:a6:d1:f1:7d:97:
66:d5:3b:6f:71:74:1d:da:74:af:4d:d7:0d:a3:aa:
da:1a:8a:ae:a8:84:6e:61:87:6d:54:21:b4:c0:1b:
20:81:f8:3d:db:f9:5b:42:29:ca:ad:33:5b:1f:e0:
d7:e5:d6:6a:b3:c7:b9:8c:27:20:4b:83:40:4d:1f:
62:57:d4:46:7e:e1:04:94:91:9c:23:e8:cf:21:cb:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:74:8F:88:3B:AE:CD:71:09:9C:3D:70:86:EA:9C:9D:90:C9:22:3E
X509v3 Authority Key Identifier:
keyid:BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f7:a0:8e:0e:6e:c8:a7:22:38:fb:23:d9:f6:f1:b7:6c:02:
38:43:70:e5:96:a6:5d:84:a1:a3:af:d3:d7:48:8c:3e:55:e6:
bf:08:25:ae:65:07:dc:65:fc:bf:5c:7e:2e:be:4c:5b:9c:c6:
ae:3b:48:dc:28:da:d9:73:4c:b7:f3:8e:ea:ee:6e:a5:24:b1:
a2:20:06:7f:77:29:f7:17:a7:df:3d:5f:f5:9c:c6:f0:76:ed:
5d:34:8c:4f:d9:ff:f2:ad:92:04:6b:38:58:00:b9:f3:bb:e2:
94:fd:9b:12:ba:cc:a6:34:86:c2:c8:1d:80:a8:7b:a6:de:24:
3f:5e:40:96:34:a2:0e:88:2f:00:a8:b4:45:5a:f5:96:51:01:
03:1b:ef:71:ff:5d:a9:7f:d6:15:77:90:a8:79:3a:f5:47:db:
6a:83:9a:21:db:f7:58:23:6a:83:01:bd:8e:c1:0f:22:47:31:
63:f3:0b:cd:21:12:c6:96:ce:53:26:03:bb:4e:0c:25:e5:02:
20:0c:70:dd:85:09:9f:f9:08:d8:10:cd:26:5d:df:16:7a:b2:
c4:2a:52:f6:60:d2:f7:17:05:ea:38:e5:52:83:e1:cb:f9:74:
ca:f3:01:00:0b:32:7a:5f:7d:5e:d5:f7:c8:e4:a2:13:60:f6:
84:41:42:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:57:51 2026 by rpki-client