
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.mft
File: 4C23F5AA03BB1AFD7BAEE8E36D98415754948835.mft (raw, json)
Hash identifier: wqrYFsKBIUVG3XxZ2ukLjjRhu3RSSy404TxJFwvihdk=
Subject key identifier: 32:9A:C3:DD:B7:92:C6:EC:70:88:D4:A2:C7:5C:D4:8F:28:4D:68:25
Authority key identifier: 4C:23:F5:AA:03:BB:1A:FD:7B:AE:E8:E3:6D:98:41:57:54:94:88:35
Certificate issuer: /CN=4C23F5AA03BB1AFD7BAEE8E36D98415754948835
Certificate serial: 154B4378EB1DECBB9B6B89CF5A764A89F5CB30BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.mft
Manifest number: 0172
Signing time: Mon 02 Mar 2026 01:09:56 +0000
Manifest this update: Mon 02 Mar 2026 01:04:56 +0000
Manifest next update: Fri 06 Mar 2026 01:35:56 +0000
Files and hashes: 1: 3133312e302e3130382e302f32322d3234203d3e20323637393036.roa (hash: vqkn37jbJa+xlGDs79ZYteRQn1aPm+nC3N7Ff10pkac=)
2: 4C23F5AA03BB1AFD7BAEE8E36D98415754948835.crl (hash: cudo1s27bcMXXYuPtcomlM/XhD37qjhuTT5sw05mVk4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.crl
rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Mar 2026 01:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4b:43:78:eb:1d:ec:bb:9b:6b:89:cf:5a:76:4a:89:f5:cb:30:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C23F5AA03BB1AFD7BAEE8E36D98415754948835
Validity
Not Before: Mar 2 01:04:56 2026 GMT
Not After : Mar 6 01:35:56 2026 GMT
Subject: CN=329AC3DDB792C6EC7088D4A2C75CD48F284D6825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:ff:bd:d3:b9:c0:6b:f3:55:a3:c3:df:a0:
a7:a0:9d:b2:85:f1:0b:6d:56:99:14:b7:23:75:f6:
ba:9c:7e:74:8e:f5:5e:3e:9b:12:75:e7:bc:28:71:
f5:94:93:95:3d:21:b3:c0:cf:f8:d1:05:03:50:a0:
6a:f3:cf:d3:2b:e7:15:13:02:db:75:ab:e3:b8:39:
c2:6d:b0:d1:10:30:de:eb:97:51:67:97:26:e0:5a:
c7:22:a2:c0:52:97:83:4b:d8:6c:68:40:3b:0c:53:
a3:6e:5b:58:39:bd:65:1a:4f:28:59:1b:2e:41:04:
c1:6a:dc:00:e8:31:e3:ee:93:42:8c:ee:00:e1:0d:
b6:d1:b1:bf:82:2f:c3:a5:fb:d1:14:71:b4:7c:34:
15:87:0f:3b:2f:d8:9d:bd:9e:e5:ee:7b:34:e0:a1:
40:e9:ae:3c:d6:a1:43:d5:88:07:72:e1:8a:f6:83:
3a:21:54:ac:d4:9d:8c:79:8b:c8:44:0b:82:f1:23:
49:8b:f1:e6:1d:ce:ea:b4:ff:94:9d:e3:5c:1e:65:
7b:76:e1:68:60:21:7d:53:99:59:17:bc:14:a4:05:
bc:06:fb:48:56:b4:97:c5:dd:70:0c:08:43:40:d8:
28:7f:56:5f:9c:69:51:11:08:a2:41:7b:e2:7a:44:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9A:C3:DD:B7:92:C6:EC:70:88:D4:A2:C7:5C:D4:8F:28:4D:68:25
X509v3 Authority Key Identifier:
keyid:4C:23:F5:AA:03:BB:1A:FD:7B:AE:E8:E3:6D:98:41:57:54:94:88:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2a:fb:68:8c:03:a2:24:60:9c:f1:3c:53:88:a4:c4:74:74:
34:a1:9e:9e:ab:72:73:a0:f3:c6:7e:84:84:3c:ad:39:86:69:
a6:4b:6c:b0:8f:c0:4b:1b:18:2e:59:31:c4:34:24:e2:4f:ce:
d2:0e:4a:44:78:7e:01:88:39:37:1c:1d:ed:9d:e5:54:90:44:
b5:f4:07:ed:d8:7b:2d:08:10:a6:16:61:11:03:24:84:92:45:
81:0b:53:63:2c:01:ee:ed:06:25:20:bd:f7:96:43:e4:54:14:
8d:00:48:e9:87:08:f3:69:16:e1:bf:2e:30:40:2d:65:02:3e:
53:28:37:4f:91:7f:ae:44:6f:71:f7:4d:7f:11:31:32:92:eb:
b2:03:37:cc:11:de:8f:a0:e5:d7:5e:83:c7:c1:5a:77:25:94:
b7:99:2e:f9:31:23:00:d7:97:71:a8:a5:3f:55:1b:9b:8f:6e:
df:7c:99:cd:92:1b:8b:47:fd:bd:5f:30:ee:82:13:29:2a:d5:
ba:21:5d:8c:a8:cb:4a:e5:e8:24:38:05:55:e9:b8:8f:c8:bf:
4e:8b:65:dd:f7:dc:6a:c7:b7:d5:9d:72:fd:60:b1:81:78:5d:
0e:dd:93:7e:91:18:88:18:b3:4e:18:30:73:ce:1b:a8:63:75:
8f:8c:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:54:11 2026 by rpki-client