
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft
File: 420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft (raw, json)
Hash identifier: VSczJsmPHYdlbzrDqvdg6QKaqo4uBDAvk0IC9RkBj0k=
Subject key identifier: 4B:E8:D6:EF:68:E5:7B:50:EE:77:AC:E0:3C:74:7D:2A:40:AF:CB:82
Authority key identifier: 42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09
Certificate issuer: /CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09
Certificate serial: 5E6CE54D3751199318149863E05A6511F60A0CBB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft
Manifest number: 0165
Signing time: Sat 28 Feb 2026 10:21:23 +0000
Manifest this update: Sat 28 Feb 2026 10:16:23 +0000
Manifest next update: Fri 06 Mar 2026 07:52:23 +0000
Files and hashes: 1: 323830313a31333a623030303a3a2f34382d3438203d3e203634313039.roa (hash: qxcrjZxBllpFWBiv7au4lxYMzojTdIFke/oTd1/mJ6o=)
2: 34352e3233302e33342e302f32332d3234203d3e203634313039.roa (hash: 5GK9uhqlf/yat0D0gaWncsUyBX1uVtywnjRnF6mg/+I=)
3: 420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl (hash: 8lwi4YPzByxeFkDCAIBCTNGQ67K0veFTi7EQ9GYK+tg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl
rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Mar 2026 07:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6c:e5:4d:37:51:19:93:18:14:98:63:e0:5a:65:11:f6:0a:0c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09
Validity
Not Before: Feb 28 10:16:23 2026 GMT
Not After : Mar 6 07:52:23 2026 GMT
Subject: CN=4BE8D6EF68E57B50EE77ACE03C747D2A40AFCB82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:01:34:0d:cc:04:35:80:de:dc:a3:04:81:
79:f3:f4:f2:31:5f:15:6a:03:ad:3b:e9:cf:3a:93:
bf:da:d0:bd:56:05:d9:99:80:c6:a7:a4:3c:5c:70:
97:2a:5e:eb:04:93:3f:ca:63:9c:e5:0b:4a:51:34:
33:09:d3:4d:82:5e:cd:a8:e5:5f:8a:43:d0:35:81:
f3:a4:07:5d:11:57:e4:a1:15:2a:40:1d:b9:c5:01:
5a:71:33:aa:fe:6c:84:49:53:5c:33:b6:74:bb:bb:
39:c4:3d:5a:76:ce:53:43:e8:a3:ee:9b:a2:a1:4c:
bb:7e:42:19:db:ed:f9:08:a4:ba:f0:13:76:18:b2:
4a:50:42:7c:0d:ee:39:2e:72:e2:93:40:29:80:12:
59:08:6a:14:3a:72:50:b5:9e:9a:b8:de:d5:5f:12:
79:51:3f:73:96:42:42:47:9a:ce:a0:a4:39:40:4e:
de:b9:b0:86:6f:ef:85:27:02:a6:c5:5b:91:2e:72:
57:2d:f0:f0:81:ae:7d:9a:9f:a7:0d:a2:d6:53:7c:
bd:40:6e:30:f6:02:75:ca:e4:4a:28:1a:9f:d2:3a:
27:9c:95:f9:f1:cb:43:ed:fa:07:58:97:78:d9:f8:
ce:7b:0c:4b:04:1c:42:09:75:ca:b2:4f:4f:43:6f:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E8:D6:EF:68:E5:7B:50:EE:77:AC:E0:3C:74:7D:2A:40:AF:CB:82
X509v3 Authority Key Identifier:
keyid:42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:47:e4:6f:ec:e5:c4:eb:f0:a7:fb:f7:a4:c3:fc:a4:ec:6b:
55:6e:c3:e4:a8:69:3f:be:b5:ab:ca:7c:fa:38:02:c4:5a:47:
ac:a1:e4:92:66:e6:91:78:05:48:7a:77:86:61:bf:c7:dc:32:
72:c1:bc:05:e3:05:93:dd:1a:8d:51:46:1c:17:03:7d:8d:7b:
48:72:84:b8:d7:36:91:2c:05:7a:cc:db:e8:d1:c0:b4:80:cc:
98:ca:22:4c:50:34:43:3f:4a:da:ee:3f:d1:61:95:35:62:a0:
08:62:b6:af:0a:61:19:77:6f:dd:3d:18:28:0c:4f:ce:ee:ae:
ab:16:77:85:b3:00:34:fc:13:53:98:71:ef:07:58:96:35:57:
73:8a:e2:62:cb:e1:29:15:6e:24:85:a4:4b:35:f8:87:ac:34:
58:de:38:47:38:bd:2d:19:ea:68:72:b7:6e:1b:f3:7f:7f:d8:
ea:af:7f:a0:28:82:b2:6a:d8:80:44:09:e2:9e:7c:13:47:5f:
f6:a9:5b:6e:d8:d3:ab:93:cb:f2:63:6b:00:56:b8:6f:2b:3d:
cb:96:e0:be:8f:83:d3:96:b5:92:a6:0c:d9:dd:72:31:b5:bc:
6a:18:c7:94:1d:6a:3e:16:0e:67:10:b1:6c:82:e4:43:e8:45:
db:31:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:13:06 2026 by rpki-client