
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft
File: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft (raw, json)
Hash identifier: s7xSGe8dem7jhbeJNOsYNK1tQXsIH0hR4bzcsIvO8UI=
Subject key identifier: C7:FB:BE:12:16:95:AA:E2:CC:E9:4B:39:E5:CB:3F:DD:5B:40:50:9E
Authority key identifier: 2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA
Certificate issuer: /CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA
Certificate serial: 7A4A54C96B7C5497E20B7902BB86AF4A49CA60AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft
Manifest number: 0173
Signing time: Mon 02 Mar 2026 20:17:09 +0000
Manifest this update: Mon 02 Mar 2026 20:12:09 +0000
Manifest next update: Sun 08 Mar 2026 07:03:09 +0000
Files and hashes: 1: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl (hash: jwDTeJam1KGOOgCD8UO5XiT9WSo2uPfP8LQWw7vMQTQ=)
2: 3137392e302e39362e302f32322d3234203d3e20323731383736.roa (hash: 2RY99k5r4m7LTiiAEglPIkVdsaJV7PELr5NUpSbrO5E=)
3: 323830333a616331303a3a2f33322d3332203d3e20323731383736.roa (hash: RinAQGqkXRV26MCQom++5ZvzDcuNbvW//nd+nedLhQ0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl
rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:4a:54:c9:6b:7c:54:97:e2:0b:79:02:bb:86:af:4a:49:ca:60:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA
Validity
Not Before: Mar 2 20:12:09 2026 GMT
Not After : Mar 8 07:03:09 2026 GMT
Subject: CN=C7FBBE121695AAE2CCE94B39E5CB3FDD5B40509E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:ca:9e:ed:0e:8a:a3:92:cc:2f:56:d0:df:
1f:f9:15:b1:2c:0b:2e:33:ae:48:09:28:04:cb:74:
6f:45:d2:5d:e9:e4:0f:b4:8b:da:96:5c:d9:6a:5a:
9f:85:bd:c9:dd:1d:7f:c6:2a:fd:0c:ef:18:70:43:
21:76:d8:2f:9f:69:ed:60:04:5a:02:93:e5:dc:89:
27:05:4d:64:c0:70:ed:55:b7:66:dd:9d:ad:c1:62:
fe:f7:35:2e:d6:8b:a2:53:38:26:08:d1:88:73:fe:
06:37:fb:13:f6:88:5c:4b:65:a9:9b:b6:1d:63:6c:
34:3a:83:b6:a2:b2:6c:2b:e3:c3:31:f3:2a:d4:3b:
6f:3f:5a:53:6d:29:61:9e:ea:5d:78:44:c6:b8:c8:
26:ca:ad:88:4f:14:20:2e:47:66:25:4a:79:de:7a:
b1:b7:c4:fb:50:fc:a4:b3:69:20:92:da:24:c0:76:
5f:02:22:5d:0e:07:58:61:cc:75:ed:d9:41:07:af:
8f:ad:c9:2d:ce:24:7a:9b:fd:d8:89:f2:02:79:c1:
9a:6e:fc:f6:87:50:50:44:29:e9:a0:77:dc:56:7d:
a6:8d:8c:d4:8b:0a:a4:a1:96:16:5a:57:a0:5b:a9:
61:6c:8f:f0:fc:b8:eb:7d:2e:a0:ce:d7:81:dd:cb:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FB:BE:12:16:95:AA:E2:CC:E9:4B:39:E5:CB:3F:DD:5B:40:50:9E
X509v3 Authority Key Identifier:
keyid:2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:93:d3:7e:55:3e:d5:b7:67:e4:6e:ac:2b:1d:ed:ef:be:9d:
22:8e:36:0e:9d:fc:c9:f0:90:c8:6c:ed:3c:a9:f0:04:c3:2d:
b0:bd:88:64:84:f7:22:b2:f9:49:36:31:9e:d2:06:fb:0f:41:
67:2e:9e:bf:f8:a4:64:6c:fa:06:98:bc:80:1a:fe:2a:e7:b8:
35:6b:67:cf:70:f8:d8:dd:06:f9:81:67:d3:ed:0a:5b:1c:48:
a2:18:3f:99:80:9a:6e:e6:e1:81:1f:1d:bc:22:2a:1d:24:d0:
db:ab:d3:cc:a3:10:2e:e0:28:8a:35:76:f4:e3:45:d4:59:bb:
a4:bd:5c:68:dc:58:19:5f:59:33:b8:d8:41:83:a9:d8:1a:51:
f8:6e:81:f9:32:c1:1e:b3:10:3d:50:20:8f:cc:5a:60:fb:1e:
f7:b2:40:60:ea:97:50:ab:63:d9:36:05:5a:16:79:b1:f7:3e:
5a:07:60:09:28:ad:33:d1:ac:1f:0d:44:88:79:8e:3a:a9:6b:
fc:e5:d8:cb:55:16:91:91:7c:71:83:32:3f:76:99:c0:a1:d8:
56:4d:da:8d:d7:ea:b0:60:c8:07:07:bb:32:a7:f7:07:60:44:
57:bb:1c:bf:ca:9a:4e:87:42:e3:ba:8d:fe:d0:0c:32:c8:55:
c4:62:0b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:26:17 2026 by rpki-client