
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
File: D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft (raw, json)
Hash identifier: khdDmXUSwcFxV4w4LMbkvhA79i60mqzzGL8D/v+rxPQ=
Subject key identifier: E1:CA:25:AA:1F:7F:18:DD:65:9E:BE:10:80:95:F7:99:FB:C2:83:05
Authority key identifier: D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A
Certificate issuer: /CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
Certificate serial: 066C8D9BCE5F29A6F81C3DB21B7B6F5E335ECBFF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
Manifest number: 0174
Signing time: Sun 01 Mar 2026 07:04:28 +0000
Manifest this update: Sun 01 Mar 2026 06:59:28 +0000
Manifest next update: Fri 06 Mar 2026 21:30:28 +0000
Files and hashes: 1: 3136382e3139362e3232342e302f32322d3234203d3e20323634373635.roa (hash: /3PJ8A24fuVZ2jst91s0DvWjwFky/aosmeA3JNB63sQ=)
2: 323830333a373136303a3a2f33322d3438203d3e20323634373635.roa (hash: /zdUwLbxl00Girej4HoyI+eFaLX0wm3b1GX7j4RH5LE=)
3: 34352e3138312e3132382e302f32322d3234203d3e20323634373635.roa (hash: 0+PNUeSmVUch8eK60Re3j4k59qVUp9kbcVEZHiU1AKg=)
4: D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl (hash: pqC710p6jinprqBF5AEclnS+PVYZz/IMx36CtDotLhI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl
rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Mar 2026 21:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:6c:8d:9b:ce:5f:29:a6:f8:1c:3d:b2:1b:7b:6f:5e:33:5e:cb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
Validity
Not Before: Mar 1 06:59:28 2026 GMT
Not After : Mar 6 21:30:28 2026 GMT
Subject: CN=E1CA25AA1F7F18DD659EBE108095F799FBC28305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:65:12:3b:e7:ce:a8:72:ab:70:47:5a:ff:
93:52:f4:08:81:df:fb:d1:2a:54:9c:85:4a:2a:17:
fe:b5:bc:cb:6e:4f:98:3a:a3:ba:72:2e:6e:30:0e:
61:85:f4:8c:c2:bc:be:c8:20:ba:a1:17:83:8a:9f:
98:f4:fd:f7:96:2e:78:46:06:6f:50:05:3c:b0:90:
82:3d:61:0d:f4:d2:09:47:6b:a3:af:06:07:48:79:
32:88:9c:1a:95:3e:e1:18:87:b5:09:cc:54:64:62:
e8:da:70:9e:da:07:ca:4d:71:d5:d8:c7:74:71:22:
1e:41:71:96:ca:7a:90:ee:bf:9e:ed:47:fa:ad:6b:
77:59:52:f0:0f:d1:aa:db:8a:a7:0d:a0:21:ea:46:
99:0d:62:76:71:53:9f:7f:a9:d1:be:dc:e6:ce:49:
63:88:81:f1:54:3d:fe:d8:6b:7d:e2:9e:90:8f:c4:
ad:58:77:59:c0:40:39:67:44:80:63:04:d5:93:a9:
c5:cd:d5:c5:e5:2e:34:93:4d:f0:1f:e6:c2:bc:b4:
ff:ac:48:9b:cc:3c:6a:90:94:37:ea:c6:1e:b8:d9:
fd:ec:19:d4:83:26:25:9a:7c:a2:c1:08:80:86:77:
48:8b:27:48:0e:ef:a0:fe:e3:e6:12:60:9d:90:70:
05:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CA:25:AA:1F:7F:18:DD:65:9E:BE:10:80:95:F7:99:FB:C2:83:05
X509v3 Authority Key Identifier:
keyid:D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9c:dd:5d:63:8e:ad:c7:3a:ba:8c:49:4b:13:c8:76:32:f8:
a7:55:9f:ec:d2:57:2a:9e:7a:e9:db:ad:d7:d0:30:63:5c:a7:
d8:30:51:22:34:22:cf:85:ce:9b:f8:b5:25:f8:a2:20:0d:a2:
74:d3:16:b2:01:17:c6:1d:3b:70:87:b1:04:67:17:dd:7c:89:
49:6e:3d:2c:cc:d7:6b:c1:68:36:4c:ed:89:d3:5e:e6:d4:70:
de:8c:1f:24:77:37:d2:3c:0d:ff:a0:2b:8d:22:8a:0f:3b:7c:
11:b3:92:b4:bd:db:64:b0:be:9d:35:2e:f0:a0:c4:26:5d:42:
88:40:90:4b:13:c4:a3:8c:1f:2f:4c:eb:51:fc:60:ea:87:b9:
a3:09:81:fe:a5:8d:f4:c6:ba:4c:c6:8a:67:12:f2:bd:a7:52:
46:31:b4:cc:84:48:53:51:9b:4f:ab:d0:e9:a0:f0:cc:ab:1d:
76:c0:8c:e3:d8:81:c1:c9:57:df:20:28:4b:dd:52:6b:04:46:
4b:42:39:b0:83:26:c1:36:2b:91:6d:98:39:bd:07:25:4e:41:
80:82:a0:7f:e2:95:09:c1:db:79:8a:3d:26:a2:11:01:a8:7a:
8d:86:e4:0e:8b:81:8c:63:f2:01:03:51:7e:d7:96:15:5f:1b:
82:69:00:9f
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUBmyNm85fKab4HD2yG3tvXjNey/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGRkJDODZCMjVCNDg3NzM2MjM1QzVDQTBENkREMDA0
QzBDQUE2QTAeFw0yNjAzMDEwNjU5MjhaFw0yNjAzMDYyMTMwMjhaMDMxMTAvBgNV
BAMTKEUxQ0EyNUFBMUY3RjE4REQ2NTlFQkUxMDgwOTVGNzk5RkJDMjgzMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjGUSO+fOqHKrcEda/5NS9AiB
3/vRKlSchUoqF/61vMtuT5g6o7pyLm4wDmGF9IzCvL7IILqhF4OKn5j0/feWLnhG
Bm9QBTywkII9YQ300glHa6OvBgdIeTKInBqVPuEYh7UJzFRkYujacJ7aB8pNcdXY
x3RxIh5BcZbKepDuv57tR/qta3dZUvAP0arbiqcNoCHqRpkNYnZxU59/qdG+3ObO
SWOIgfFUPf7Ya33inpCPxK1Yd1nAQDlnRIBjBNWTqcXN1cXlLjSTTfAf5sK8tP+s
SJvMPGqQlDfqxh642f3sGdSDJiWafKLBCICGd0iLJ0gO76D+4+YSYJ2QcAVNAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU4colqh9/GN1lnr4QgJX3mfvCgwUwHwYDVR0j
BBgwFoAU0f+8hrJbSHc2I1xcoNbdAEwMqmowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMEEyRjQzRjNGQjU2OTQ0RjMxRjhFNzQ4OTI3NjlBMEQy
Q0ZDMkIwMDgxMEJDMEZFMEQ3RTg2MTc4Rjk5QkYzLzAvRDFGRkJDODZCMjVCNDg3
NzM2MjM1QzVDQTBENkREMDA0QzBDQUE2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMUZGQkM4NkIyNUI0ODc3MzYy
MzVDNUNBMEQ2REQwMDRDMENBQTZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzBBMkY0M0YzRkI1Njk0NEYzMUY4RTc0ODkyNzY5QTBEMkNGQzJCMDA4
MTBCQzBGRTBEN0U4NjE3OEY5OUJGMy8wL0QxRkZCQzg2QjI1QjQ4NzczNjIzNUM1
Q0EwRDZERDAwNEMwQ0FBNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtnN1dY46txzq6jElLE8h2Mvin
VZ/s0lcqnnrp263X0DBjXKfYMFEiNCLPhc6b+LUl+KIgDaJ00xayARfGHTtwh7EE
ZxfdfIlJbj0szNdrwWg2TO2J017m1HDejB8kdzfSPA3/oCuNIooPO3wRs5K0vdtk
sL6dNS7woMQmXUKIQJBLE8SjjB8vTOtR/GDqh7mjCYH+pY30xrpMxopnEvK9p1JG
MbTMhEhTUZtPq9DpoPDMqx12wIzj2IHByVffIChL3VJrBEZLQjmwgybBNiuRbZg5
vQclTkGAgqB/4pUJwdt5ij0mohEBqHqNhuQOi4GMY/IBA1F+15YVXxuCaQCf
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:44 2026 by rpki-client