
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft
File: 2AA949233251849B5F79085FA81406E588FF36E5.mft (raw, json)
Hash identifier: oqCnhUUiu+gE98cG2/eQoQlcW8zUKEjf2aJIWF8Jw2E=
Subject key identifier: ED:30:2E:8E:5D:E4:66:B1:E3:BA:82:F7:1A:9E:D8:30:42:A5:46:21
Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5
Certificate issuer: /CN=2AA949233251849B5F79085FA81406E588FF36E5
Certificate serial: 4360C601B91DAB3D32178E45340F08A5B36A59E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft
Manifest number: 0167
Signing time: Sun 01 Mar 2026 21:07:38 +0000
Manifest this update: Sun 01 Mar 2026 21:02:38 +0000
Manifest next update: Sat 07 Mar 2026 20:01:38 +0000
Files and hashes: 1: 34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (hash: uCp0Q9i+9+veJ1b/OCdVe/YrScL0cJtyu9wRI4ruDrM=)
2: 323830333a333736303a3a2f33322d3332203d3e20323639383238.roa (hash: RifkABZsLCmRbyVKtsTZJib9sHbG7NxVmTf/yWidQbI=)
3: 2AA949233251849B5F79085FA81406E588FF36E5.crl (hash: rv30nNeoaphIqIM43tdVjvSxOT0fX04OnJGJwqcbM1I=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl
rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:60:c6:01:b9:1d:ab:3d:32:17:8e:45:34:0f:08:a5:b3:6a:59:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5
Validity
Not Before: Mar 1 21:02:38 2026 GMT
Not After : Mar 7 20:01:38 2026 GMT
Subject: CN=ED302E8E5DE466B1E3BA82F71A9ED83042A54621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:19:3e:22:70:6b:06:61:72:27:7c:2f:3a:
91:b3:d0:a6:94:3c:d9:11:89:e7:22:aa:e0:bd:71:
c2:61:5a:7c:0f:1f:50:48:77:fa:b6:99:4b:dd:4d:
da:5f:77:a8:07:5c:8b:df:53:38:0c:96:f3:b6:88:
66:eb:d6:b1:75:4c:91:0b:49:59:c8:3d:06:cd:c7:
91:6d:e0:77:72:e0:e3:ee:0a:0e:0d:26:95:66:d4:
7d:b7:9d:c1:0a:2a:06:02:d0:4f:21:4f:85:e7:8c:
4f:3f:e9:6a:e3:03:10:2b:12:8a:64:dd:14:bb:0f:
41:0d:fc:be:a1:92:2f:05:8e:ce:99:af:d7:e8:ed:
4c:12:a4:e5:68:b6:3d:aa:3d:a9:97:b9:84:17:1a:
34:61:93:35:71:db:c8:17:71:f2:15:36:c7:a0:cb:
f9:56:1c:dd:d2:ed:94:2c:e3:42:b8:67:f9:2e:5b:
96:35:b4:3d:4f:36:50:2c:92:43:2b:06:45:cc:39:
43:f0:37:fb:eb:62:de:23:91:fb:73:22:d6:fb:61:
1d:ac:13:31:b9:f5:30:e1:39:c0:aa:2f:d6:e9:8d:
9a:55:48:42:4c:7f:91:32:c0:6b:a8:b6:74:de:98:
47:77:96:3e:ab:bf:fa:94:b0:ef:4e:05:c5:ad:64:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:30:2E:8E:5D:E4:66:B1:E3:BA:82:F7:1A:9E:D8:30:42:A5:46:21
X509v3 Authority Key Identifier:
keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:35:9e:5b:0c:fc:eb:33:10:5d:f5:07:2d:02:a6:e0:6d:5a:
48:ca:8c:80:0b:96:bc:02:25:e9:4b:fc:26:da:2d:a3:25:3e:
93:ac:8b:e6:75:1f:ad:1c:22:59:0e:56:06:6d:da:fd:66:02:
fc:d9:ba:d6:74:68:e2:13:ae:f6:bc:92:69:d5:53:60:28:c8:
4a:dc:5f:e0:d1:15:79:a6:03:a9:61:29:a3:02:ae:f2:f8:41:
15:c7:8c:3d:f7:8f:e8:e9:29:c9:99:c5:2a:f8:ff:92:43:9d:
58:ae:18:3a:ab:0e:b4:94:fe:17:d3:d4:28:49:36:e1:e9:21:
1a:f6:86:a3:0e:73:74:dd:09:25:a1:84:d0:46:54:81:bf:c4:
9d:56:22:30:e8:85:5f:bb:80:76:aa:00:42:e4:0b:44:b4:f9:
1d:f2:02:ab:d5:df:f6:67:b0:ec:47:c4:09:b5:ae:27:10:4f:
fe:25:5f:3c:e7:c0:f9:12:24:a1:a8:07:d9:cd:ca:8d:a3:e9:
f6:13:ac:36:1f:bb:59:ad:18:c7:4c:5b:dc:0b:4e:b3:27:a3:
cf:66:4f:3a:de:d5:dc:35:96:59:14:57:69:a3:55:18:5d:a8:
86:9f:e2:88:60:ab:f5:8b:dd:9d:61:03:6d:6f:ae:3c:a6:d3:
38:43:9d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:54:53 2026 by rpki-client