
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
File: 2D420DA52C4FED64C64081F978E8485CD8161A81.mft (raw, json)
Hash identifier: gIwP7U/WjvRo4F/60UYlvzNtcBs4QBkG+euTAKGb0ew=
Subject key identifier: B3:BF:FA:85:B7:2D:EE:F2:8D:3A:17:BF:BE:79:50:74:F7:09:EF:5A
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Certificate issuer: /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial: 7503F0AB7A8AE54944DB494BCB861F0D7A046012
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
Manifest number: 017E
Signing time: Fri 17 Apr 2026 11:20:43 +0000
Manifest this update: Fri 17 Apr 2026 11:15:43 +0000
Manifest next update: Tue 21 Apr 2026 23:00:43 +0000
Files and hashes: 1: 2D420DA52C4FED64C64081F978E8485CD8161A81.crl (hash: TtyU32VzcY97EjchKiMGMKuqAfNVSSGo657qXDrC3MU=)
2: 3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa (hash: RmhvMSewm57XjZWYjQ6FqQiuRZEOLVHefEqSR3AIuXM=)
3: 323830333a633036303a3a2f33322d3332203d3e203631343531.roa (hash: L+ywmizwf83korHEOAc77B04u3MNpX37wQ9frbNDUX0=)
4: 34352e3137332e302e302f32322d3234203d3e203631343531.roa (hash: AdjIKz6Nels2dhwXWp6EKIPfwBZmvhJdNx8CyYWHGao=)
5: 3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa (hash: +DpAbksORTScTSriBErvBnV4AH2ePw0j36QFfH02aFI=)
6: 3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa (hash: sIOThUcQTanpBtFFWyJfRelgsmR3o4AWTlypmW/lm64=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:03:f0:ab:7a:8a:e5:49:44:db:49:4b:cb:86:1f:0d:7a:04:60:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Validity
Not Before: Apr 17 11:15:43 2026 GMT
Not After : Apr 21 23:00:43 2026 GMT
Subject: CN=B3BFFA85B72DEEF28D3A17BFBE795074F709EF5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fb:1b:00:63:1d:49:2c:ec:1e:d0:5c:db:5a:
7d:2c:c6:32:c9:e1:29:58:62:cf:98:9d:b5:8a:7f:
d8:94:24:61:06:e7:f0:f5:65:09:00:59:71:37:22:
62:39:9a:f4:2e:1c:5f:bd:52:fb:e0:2d:01:ef:8d:
78:9d:98:8b:f3:ab:63:ac:ac:f1:e0:d0:88:f4:6d:
51:4d:81:d5:d1:36:27:ce:1d:b3:3c:bf:6e:ab:a2:
04:01:2b:d0:eb:3a:af:e7:75:d8:c6:81:a7:a3:fe:
0c:f2:d4:76:70:94:92:6d:ad:3b:bb:e8:7e:20:33:
29:2a:ac:ac:af:23:17:b6:cd:97:df:a3:91:16:85:
96:d0:eb:5e:f0:73:ff:92:c3:a0:a5:e5:21:2b:a6:
60:d4:22:a2:ea:21:ab:a9:dd:bd:48:bf:54:2f:19:
6c:71:86:cc:80:35:58:87:3e:ab:9a:23:4a:f1:c7:
2c:fb:b0:b6:a3:87:4c:9c:7b:d4:c9:b0:7b:50:65:
66:58:37:db:81:6c:f3:ff:22:5f:9d:20:11:d0:2a:
6f:86:9c:55:ee:41:78:e8:eb:bc:fe:d2:ae:4e:d8:
47:bc:42:78:52:80:4f:da:00:df:28:ef:d8:00:76:
4c:c0:90:75:3c:73:b7:a3:80:d2:e5:2a:86:24:8f:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BF:FA:85:B7:2D:EE:F2:8D:3A:17:BF:BE:79:50:74:F7:09:EF:5A
X509v3 Authority Key Identifier:
keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:08:a8:a1:eb:63:e3:b1:bd:c0:00:b0:47:cc:33:94:0d:29:
7a:14:bf:b8:d6:36:c8:fa:96:2f:29:0d:39:ff:83:12:da:b7:
18:5f:ac:5e:c2:06:60:24:39:95:b7:07:04:ca:88:82:ce:81:
35:1c:d0:f6:7d:27:5d:7f:c3:86:cc:0c:ed:81:4e:5a:a2:3c:
a5:6a:f1:5e:67:e6:b6:60:62:0a:ec:82:e5:8e:54:a5:e0:60:
bd:06:89:c8:c4:2a:b1:7a:29:bd:ab:6c:48:e1:cc:c1:48:78:
ba:bc:8d:bf:fb:a1:f3:77:ef:b3:b2:c0:8b:de:9a:f0:bb:3b:
cf:55:88:43:95:12:33:ac:22:eb:26:00:f8:b2:0d:c8:06:2a:
93:cd:a2:a8:68:11:95:ab:9e:89:0c:c8:b5:7a:c2:cc:94:9b:
30:43:9b:f6:ed:eb:45:b2:68:42:82:64:58:49:9d:b9:50:cf:
a2:0b:7b:a0:b0:15:c5:d4:8e:d6:f8:bd:5f:ba:02:1e:5f:e2:
94:83:f2:02:22:d0:87:05:aa:72:8a:2e:31:86:0a:7c:25:87:
51:db:45:ae:6a:1d:1d:24:40:b8:c0:97:43:5e:fe:7a:51:8c:
0f:e7:a8:3c:b7:19:18:b3:de:c1:76:73:a1:2a:3e:73:fb:d7:
a8:cd:76:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:30:15 2026 by rpki-client