
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
File: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft (raw, json)
Hash identifier: b/UGXI+9xIVp+vwE7J2wZ3uGOSXXhfog0fWffKF9MH8=
Subject key identifier: 1F:CC:7E:94:24:12:1F:E8:70:34:B8:AB:50:53:E2:6A:CE:02:48:25
Authority key identifier: AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B
Certificate issuer: /CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
Certificate serial: 086EC7EBB0BB596AC036DA8F004B1F4C3620FC6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
Manifest number: 0170
Signing time: Sun 01 Mar 2026 08:15:13 +0000
Manifest this update: Sun 01 Mar 2026 08:10:13 +0000
Manifest next update: Fri 06 Mar 2026 09:44:13 +0000
Files and hashes: 1: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl (hash: mSscrvBvRx2d5oMzN0kSIlrZA8jnw2opGPcItWxrs+k=)
2: 3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa (hash: xOt5MgbMcs/Gu2Sz180hCjy9JznRqG+a2o1Y8PTCEjI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl
rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Mar 2026 09:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6e:c7:eb:b0:bb:59:6a:c0:36:da:8f:00:4b:1f:4c:36:20:fc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
Validity
Not Before: Mar 1 08:10:13 2026 GMT
Not After : Mar 6 09:44:13 2026 GMT
Subject: CN=1FCC7E9424121FE87034B8AB5053E26ACE024825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:3a:a6:9d:be:4a:fb:2d:1e:f5:cb:42:53:
08:48:8a:20:05:14:ed:82:61:08:64:b4:a3:ff:b3:
f9:41:b5:de:5d:77:7e:39:72:7e:be:e9:74:bd:d8:
d9:fc:7c:75:2b:23:e3:58:ea:84:21:7d:a4:a4:07:
c8:da:cf:5f:ca:76:2d:8a:f6:f9:d9:26:aa:6a:54:
24:03:d1:9e:0f:e5:fb:20:5a:54:26:b2:fd:ed:e6:
d6:e1:3d:eb:1c:52:86:f8:be:a7:9c:68:4b:49:cf:
7b:36:70:a8:91:66:09:0c:4c:31:a9:0e:1d:03:2d:
13:c4:bd:d4:eb:a6:d7:87:9c:51:eb:b9:e5:9c:bf:
0a:10:15:0a:96:e5:4b:3f:dd:19:44:45:91:4f:71:
6e:b1:10:1d:30:ee:c5:16:06:2e:77:7e:04:6c:23:
01:4c:9e:95:df:8a:6c:42:30:23:d7:86:cb:95:f6:
e9:2d:61:15:f9:12:ec:ff:39:e0:6c:f9:ad:2a:53:
52:5a:0b:47:e3:d1:ba:8c:ab:88:0b:79:bc:64:71:
74:e8:1f:01:f9:78:36:e2:23:e6:13:1a:47:c5:92:
af:62:d8:2c:64:e6:1b:70:3a:ef:ea:60:e0:6d:43:
bb:ac:e6:d6:4b:04:11:e2:ca:fb:72:a5:07:aa:6f:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CC:7E:94:24:12:1F:E8:70:34:B8:AB:50:53:E2:6A:CE:02:48:25
X509v3 Authority Key Identifier:
keyid:AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f6:10:f4:81:56:8c:68:47:83:2a:27:63:73:f9:e1:69:11:
e3:f3:80:36:73:51:b4:82:87:25:8d:f2:29:e6:fc:2b:df:7b:
bd:2b:dc:5e:35:3e:bc:40:0e:c3:0b:24:41:70:01:94:04:40:
78:d8:b6:15:51:ba:1a:09:49:ce:ce:85:2a:1c:f9:81:8a:bc:
ae:69:02:0e:b1:85:dd:a6:75:b1:54:29:19:97:e8:bf:07:68:
bd:04:76:e7:c1:cd:cd:fe:c8:4a:b7:9b:d0:3e:20:46:af:b8:
ea:93:4f:49:6e:b4:2e:06:a4:7c:b9:20:e3:58:ef:9e:8f:5b:
fc:6f:38:fc:28:a0:8f:09:98:6d:76:92:8f:91:d0:6a:f1:fb:
af:9c:73:d8:eb:8f:f2:b1:9e:d0:b5:da:60:2a:fb:5c:de:b0:
6d:37:59:1a:c5:6f:06:8c:6f:0c:ff:47:7b:2e:dc:0f:15:49:
9b:f5:23:9e:fb:1e:be:46:97:d3:d2:bd:7c:a3:68:21:45:ec:
91:28:bf:f1:41:eb:1d:e4:5f:79:0b:1a:a5:55:4b:53:ab:5b:
b1:6a:34:ac:f7:51:9e:2f:4e:b2:cf:a9:b7:59:5f:74:dc:f7:
24:75:63:f9:8b:ee:5d:fc:63:ce:80:a1:e3:30:34:33:db:44:
fb:28:ef:c6
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUCG7H67C7WWrANtqPAEsfTDYg/G0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE0NTk4RDgzREJDMTQyQTE2NEFENzJGNUREOTAzNkFB
RURCMEExQjAeFw0yNjAzMDEwODEwMTNaFw0yNjAzMDYwOTQ0MTNaMDMxMTAvBgNV
BAMTKDFGQ0M3RTk0MjQxMjFGRTg3MDM0QjhBQjUwNTNFMjZBQ0UwMjQ4MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnjqmnb5K+y0e9ctCUwhIiiAF
FO2CYQhktKP/s/lBtd5dd345cn6+6XS92Nn8fHUrI+NY6oQhfaSkB8jaz1/Kdi2K
9vnZJqpqVCQD0Z4P5fsgWlQmsv3t5tbhPescUob4vqecaEtJz3s2cKiRZgkMTDGp
Dh0DLRPEvdTrpteHnFHrueWcvwoQFQqW5Us/3RlERZFPcW6xEB0w7sUWBi53fgRs
IwFMnpXfimxCMCPXhsuV9uktYRX5Euz/OeBs+a0qU1JaC0fj0bqMq4gLebxkcXTo
HwH5eDbiI+YTGkfFkq9i2Cxk5htwOu/qYOBtQ7us5tZLBBHiyvtypQeqbxnNAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUH8x+lCQSH+hwNLirUFPias4CSCUwHwYDVR0j
BBgwFoAUqkWY2D28FCoWStcvXdkDaq7bChswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTM3MjExN0I2MUYzMTcxRTM3OTdBOUY2ODQwREZCNDE1
NTREMTM0NUNDQTgyN0MxNEZFODhCQkY0MkZGNjZDLzAvQUE0NTk4RDgzREJDMTQy
QTE2NEFENzJGNUREOTAzNkFBRURCMEExQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTQ1OThEODNEQkMxNDJBMTY0
QUQ3MkY1REQ5MDM2QUFFREIwQTFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkUzNzIxMTdCNjFGMzE3MUUzNzk3QTlGNjg0MERGQjQxNTU0RDEzNDVD
Q0E4MjdDMTRGRTg4QkJGNDJGRjY2Qy8wL0FBNDU5OEQ4M0RCQzE0MkExNjRBRDcy
RjVERDkwMzZBQUVEQjBBMUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAc9hD0gVaMaEeDKidjc/nhaRHj
84A2c1G0gocljfIp5vwr33u9K9xeNT68QA7DCyRBcAGUBEB42LYVUboaCUnOzoUq
HPmBiryuaQIOsYXdpnWxVCkZl+i/B2i9BHbnwc3N/shKt5vQPiBGr7jqk09JbrQu
BqR8uSDjWO+ej1v8bzj8KKCPCZhtdpKPkdBq8fuvnHPY64/ysZ7QtdpgKvtc3rBt
N1kaxW8GjG8M/0d7LtwPFUmb9SOe+x6+RpfT0r18o2ghReyRKL/xQesd5F95Cxql
VUtTq1uxajSs91GeL06yz6m3WV903PckdWP5i+5d/GPOgKHjMDQz20T7KO/G
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:29 2026 by rpki-client