
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft
File: 2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft (raw, json)
Hash identifier: oew3pe365jxvXoFl4IpPdHwjjOIG+rbCU71LVVU3IxA=
Subject key identifier: 71:E7:B1:06:3C:1D:59:52:1C:8D:FD:94:09:F9:7E:95:1F:E7:2A:B6
Authority key identifier: 2D:00:DE:68:56:A4:66:70:E7:4C:BC:33:80:A8:4B:75:A4:BD:98:2C
Certificate issuer: /CN=2D00DE6856A46670E74CBC3380A84B75A4BD982C
Certificate serial: 75D7DCD8FAB777F57417AF8B148390C5BF5EBAF2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft
Manifest number: 016D
Signing time: Mon 02 Mar 2026 10:46:11 +0000
Manifest this update: Mon 02 Mar 2026 10:41:11 +0000
Manifest next update: Fri 06 Mar 2026 23:53:11 +0000
Files and hashes: 1: 323830313a303a3331303a3a2f34382d3438203d3e20323632323338.roa (hash: 3pNdSZ6rmbBeqQTCTd8NE4kNVSN3Wb65usCYtLjEJvw=)
2: 3230302e3131352e3137392e302f32342d3234203d3e20323632323338.roa (hash: fHx7zfFwxLzJoE/lhEuhV8qNamJHYDndrwXqX3ASKu4=)
3: 2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl (hash: rHvScJHzn4BqPf0lcSrDp5dSzGQDlLpxYLpSAH0KxLs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl
rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Mar 2026 23:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d7:dc:d8:fa:b7:77:f5:74:17:af:8b:14:83:90:c5:bf:5e:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D00DE6856A46670E74CBC3380A84B75A4BD982C
Validity
Not Before: Mar 2 10:41:11 2026 GMT
Not After : Mar 6 23:53:11 2026 GMT
Subject: CN=71E7B1063C1D59521C8DFD9409F97E951FE72AB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:53:07:c6:5b:4d:e6:c7:75:d0:53:29:02:
d6:ff:80:9b:3d:58:4c:b6:6d:bf:d7:92:59:18:33:
e0:7a:a6:6d:48:43:6e:b0:30:2d:e8:7f:0f:50:21:
e1:0d:bc:9c:46:76:84:21:c9:4e:b7:53:89:34:e3:
7d:b5:e5:47:3a:65:a5:7e:ac:a6:65:74:ff:cf:bc:
49:8c:f0:cf:1e:56:3b:d5:9d:6e:8d:20:f2:ba:3f:
e1:0f:8c:a7:15:48:32:33:9a:09:b1:ac:26:52:9d:
e9:60:85:60:76:c3:d8:c7:e0:f9:ab:2d:7e:06:75:
06:0b:8e:67:42:d8:ce:13:2a:64:b3:db:7d:b7:2d:
0a:1b:f9:0e:c0:ae:7f:61:86:ce:bb:7f:b7:12:93:
40:b1:40:ce:3f:c1:9a:4b:66:83:85:f3:9d:b1:d9:
2f:de:26:45:7a:db:78:e7:90:53:93:d6:8c:f8:b3:
ad:46:16:eb:cc:af:16:df:fc:43:b1:1d:c5:d1:42:
3c:9a:cc:ed:8b:60:9f:00:84:77:38:7b:1f:b2:38:
90:35:87:92:c0:73:3d:5f:04:58:ce:e4:39:d2:90:
31:e1:6c:2f:f9:39:72:3f:4e:ff:49:8f:61:46:4b:
7e:13:aa:26:b7:c9:d9:80:ee:d9:99:28:95:5b:ff:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E7:B1:06:3C:1D:59:52:1C:8D:FD:94:09:F9:7E:95:1F:E7:2A:B6
X509v3 Authority Key Identifier:
keyid:2D:00:DE:68:56:A4:66:70:E7:4C:BC:33:80:A8:4B:75:A4:BD:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ec:22:36:fa:ae:6c:bb:5a:8b:02:1c:01:09:b7:12:c6:c5:
fc:e7:f8:74:64:0e:79:9a:79:b1:9e:3e:4b:f6:c7:f2:f4:8e:
cf:95:a4:03:bd:ee:5e:28:71:db:c7:e4:c3:3b:e7:0f:b6:05:
9c:06:cf:78:01:02:0a:76:45:fb:8f:94:b6:bc:04:f3:a6:72:
de:8d:63:f3:df:8c:7b:3f:c1:3b:42:a6:a1:e6:79:5e:12:dc:
c3:2f:c0:56:9e:79:c1:94:22:89:35:35:d5:bf:e8:4c:a7:0b:
91:0c:9b:d2:c3:09:ae:e4:0e:18:a2:43:ba:67:4e:3e:86:90:
f3:98:7b:ac:b4:05:cb:72:fe:58:28:6a:6e:fe:28:ac:73:b4:
f9:6c:fb:2c:d9:2b:1f:67:6c:a2:ff:2a:10:7f:78:69:07:c2:
68:ba:22:50:c0:00:f6:36:38:71:3c:82:31:d7:60:8f:ad:44:
32:4d:f2:25:0c:06:66:e9:0e:a2:90:39:7c:4e:5f:7a:24:d7:
a2:f6:8e:d1:b9:77:60:59:f6:75:05:df:f2:fa:8d:9d:a5:16:
20:b2:ac:43:3a:ca:3b:eb:41:d6:8b:68:e3:06:16:fb:9a:26:
8d:18:26:ea:4a:fb:4a:7e:eb:21:7b:86:8c:4e:cd:ee:18:ed:
85:16:d5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:14:45 2026 by rpki-client