
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft
File: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft (raw, json)
Hash identifier: Gvznh35XtJ1xdgsk5L9IxG+U2dxzxs2Z7KsXBfBFIF8=
Subject key identifier: 33:47:35:9F:FF:0D:3E:78:3B:7F:3B:26:4C:D8:21:10:04:24:64:43
Authority key identifier: AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C
Certificate issuer: /CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C
Certificate serial: 286B2CF2AEC2C8347B36E1B963356E49FBED48E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft
Manifest number: 0168
Signing time: Tue 03 Mar 2026 00:49:55 +0000
Manifest this update: Tue 03 Mar 2026 00:44:55 +0000
Manifest next update: Sun 08 Mar 2026 17:48:55 +0000
Files and hashes: 1: 323830333a346135303a3a2f33322d3438203d3e20323733313736.roa (hash: UUBAOvgOUgq/NLYCC7QYqDjUg5uQSFav0HyuyzhrMSs=)
2: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl (hash: tyWzUBJOiMhQH3eMtAlFB8Lgn/zw01FwtJOMbRguku4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl
rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:6b:2c:f2:ae:c2:c8:34:7b:36:e1:b9:63:35:6e:49:fb:ed:48:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C
Validity
Not Before: Mar 3 00:44:55 2026 GMT
Not After : Mar 8 17:48:55 2026 GMT
Subject: CN=3347359FFF0D3E783B7F3B264CD8211004246443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:a9:c4:00:14:b0:5b:d0:4c:25:16:20:56:
a0:a6:ff:6a:7f:d0:0e:77:52:f1:61:13:3b:12:18:
25:3d:b7:3f:9f:88:be:4a:85:cb:92:c2:aa:38:dd:
88:1f:87:5a:43:05:9d:c0:79:90:77:f0:1b:9e:a0:
d3:68:c4:34:1e:b6:45:54:91:90:22:ea:47:f7:50:
9d:c9:12:b1:3d:d3:21:5e:f9:2b:9a:f9:0c:88:5e:
92:e7:c3:6d:2a:4d:0c:34:ed:a8:47:a1:49:33:a1:
4b:eb:b9:02:02:b5:7e:d7:b0:c3:91:81:4c:c3:14:
b0:23:b0:af:94:25:e1:c9:e8:cf:d2:7d:62:34:b3:
41:37:48:85:1a:63:f1:f6:96:91:09:16:71:14:fb:
07:a7:2b:17:50:b3:2e:0c:37:db:95:dd:3f:95:13:
35:0f:5a:be:34:50:11:12:9a:e1:e4:de:ce:55:7c:
5b:43:2e:67:e2:87:ed:8d:96:4b:80:95:83:22:30:
ad:de:5b:03:c6:de:76:b2:b8:60:0d:3b:9d:a9:d7:
6a:a3:cc:51:fa:9c:31:0d:c1:6c:2a:cd:1b:49:6a:
1b:58:de:fd:87:50:35:8b:69:c9:cd:31:b7:8d:88:
cf:27:a5:42:8a:1e:17:5d:02:9f:a7:c4:54:e4:8e:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:47:35:9F:FF:0D:3E:78:3B:7F:3B:26:4C:D8:21:10:04:24:64:43
X509v3 Authority Key Identifier:
keyid:AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8f:70:1e:16:f9:d2:da:6c:d2:bd:ab:51:30:31:67:53:c2:
ae:d9:70:c5:ab:d2:32:5c:5b:86:62:fe:c6:ce:93:e6:8f:40:
d2:c2:4b:59:13:2a:84:05:e7:1a:43:c0:79:23:3d:ce:e1:ba:
0a:d7:3d:22:ff:9b:97:f0:d5:d7:73:8b:a3:d8:de:11:b9:75:
87:65:d1:dd:8e:78:94:de:b1:ba:eb:d2:53:77:47:4d:76:6a:
75:64:91:63:87:70:d3:8b:b4:73:94:cf:84:a3:a2:f9:6c:c6:
2f:d0:12:83:10:c3:e3:48:6d:ae:3d:7e:93:79:d8:24:68:17:
6a:d8:62:f8:8a:bf:c9:97:a8:e7:5c:14:ae:01:bc:70:ff:5d:
5f:49:ac:b9:da:8d:09:e1:04:d2:48:53:f3:d0:24:14:06:14:
f6:c4:c1:82:79:26:02:c8:96:8d:eb:90:05:34:ff:c6:09:72:
d1:79:9f:50:a6:ef:57:b5:b2:38:d5:89:d1:34:58:59:4a:c2:
04:f5:f1:66:54:8d:4a:27:33:ff:1a:17:2b:8a:03:e9:c7:8c:
63:3d:56:e8:35:02:dd:5d:ff:57:1b:36:bc:49:c7:47:88:2e:
8d:1f:36:1e:72:e3:30:40:5b:da:8a:54:a5:5d:79:cc:f7:71:
22:99:3a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:05:34 2026 by rpki-client