
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft
File: 68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft (raw, json)
Hash identifier: PVMdrP0xxcEPUubI/BRETTBZu+GWFBVhEO11fbN7b6I=
Subject key identifier: 68:5F:A7:2B:71:FC:C5:68:9B:B4:DB:2C:0C:1D:6B:F3:C4:7A:35:75
Authority key identifier: 68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37
Certificate issuer: /CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
Certificate serial: 18C1270DB3FC829711EE910EE20ECDEAB77FA785
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft
Manifest number: 0167
Signing time: Mon 02 Mar 2026 12:02:03 +0000
Manifest this update: Mon 02 Mar 2026 11:57:03 +0000
Manifest next update: Fri 06 Mar 2026 17:16:03 +0000
Files and hashes: 1: 323830333a373339303a3a2f34382d3438203d3e203237373633.roa (hash: Asn3d+h0b5q+J2xmL0wae4RdPWtRJqB3UePLg69lzcM=)
2: 3230302e32352e3232342e302f31392d3234203d3e203237373633.roa (hash: rXZiZD+t9ffOixxz16BqfBn2TraObCCKBxGonyOg7PU=)
3: 68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl (hash: Oj5eJQIABZhguDiI9Ulm0nR8nXtX1a3CuURpNwa8GBo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl
rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Mar 2026 17:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c1:27:0d:b3:fc:82:97:11:ee:91:0e:e2:0e:cd:ea:b7:7f:a7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
Validity
Not Before: Mar 2 11:57:03 2026 GMT
Not After : Mar 6 17:16:03 2026 GMT
Subject: CN=685FA72B71FCC5689BB4DB2C0C1D6BF3C47A3575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:e4:85:ae:79:7f:57:a2:97:5e:57:b4:03:
51:78:1a:9b:75:2e:94:87:b0:fc:11:c6:47:8f:7e:
8f:b9:15:26:17:b5:b1:a0:d4:2d:ba:30:b4:d4:3a:
60:5c:57:f9:9d:20:f9:b2:ad:96:3d:07:4b:ca:dc:
42:32:4a:f1:9b:0e:73:e9:d4:dc:7d:dd:35:45:c7:
aa:0e:58:12:d8:a0:78:ef:bf:b5:4f:04:ce:66:e7:
2f:ec:25:ee:ba:0d:e3:cb:67:3f:d1:df:01:11:2b:
a3:79:90:d7:3e:ce:bd:75:3c:fc:a7:90:02:ef:32:
f4:d2:5a:b7:dc:a5:c4:04:da:d3:1e:9c:d4:c0:b6:
82:fe:b6:85:11:9a:c5:50:fe:78:02:5a:e2:d5:c1:
61:10:43:fd:7f:cd:a7:b3:b8:d5:ee:fa:5d:65:16:
03:c7:81:4e:05:4f:b7:ea:db:24:3f:67:48:d1:b4:
7d:27:b9:ea:c5:78:e7:21:5c:ae:e4:a5:4b:e1:f2:
46:86:6e:2d:05:28:2d:dc:45:2d:48:e3:66:2c:41:
a9:1b:64:62:a6:73:9a:23:01:c6:d7:0a:45:cf:1e:
2f:08:72:46:e9:84:70:1d:38:3f:a3:8e:ff:50:5f:
4e:8f:6b:25:02:6b:55:4e:b6:35:32:78:cc:33:1a:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5F:A7:2B:71:FC:C5:68:9B:B4:DB:2C:0C:1D:6B:F3:C4:7A:35:75
X509v3 Authority Key Identifier:
keyid:68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:87:4c:38:01:1e:0d:2d:b2:3a:9e:41:1a:7a:e7:c5:55:14:
e8:db:1a:67:87:b1:5f:3b:0d:59:cf:ae:da:7a:51:13:63:07:
74:10:c2:75:6e:de:a7:1b:73:e7:27:6a:f6:2c:10:12:cc:44:
a0:35:e5:48:9c:5a:36:d5:9a:9c:fb:2a:35:da:da:1b:7c:d4:
27:a6:b5:be:c8:05:c4:55:69:96:1b:8c:b4:c5:31:df:34:22:
f7:e1:99:58:85:31:c8:68:fe:57:86:38:04:39:cd:a5:9e:78:
93:b4:99:78:3c:f0:72:2e:b4:6a:6e:8e:6b:a2:61:78:e8:dd:
d2:61:29:b6:b0:30:27:57:bb:99:5d:cc:2e:3e:1e:15:fa:c1:
81:ae:a8:c9:aa:3e:3c:c2:93:74:77:54:9d:bb:b1:72:0a:d4:
aa:24:a3:dc:28:5c:67:7f:42:70:4a:22:ec:ba:85:3a:e0:bf:
87:0f:6b:8c:b1:0f:21:bd:6c:76:1e:85:63:b9:9c:77:e6:aa:
0a:e1:c5:e2:23:c2:d6:dc:3e:76:29:7d:3e:70:ef:30:dd:7d:
6d:11:4b:d8:c9:3e:22:6b:f5:c2:58:3e:b4:74:7a:6d:66:87:
d9:42:94:78:4a:db:60:17:d9:1f:b5:46:65:ae:ac:c0:05:e1:
a0:76:7c:98
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGMEnDbP8gpcR7pEO4g7N6rd/p4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFQTUzQ0M2QTQyRDlEM0ZCM0QxREYyNjE4NDY5QzFG
MzJENjkzNzAeFw0yNjAzMDIxMTU3MDNaFw0yNjAzMDYxNzE2MDNaMDMxMTAvBgNV
BAMTKDY4NUZBNzJCNzFGQ0M1Njg5QkI0REIyQzBDMUQ2QkYzQzQ3QTM1NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHouSFrnl/V6KXXle0A1F4Gpt1
LpSHsPwRxkePfo+5FSYXtbGg1C26MLTUOmBcV/mdIPmyrZY9B0vK3EIySvGbDnPp
1Nx93TVFx6oOWBLYoHjvv7VPBM5m5y/sJe66DePLZz/R3wERK6N5kNc+zr11PPyn
kALvMvTSWrfcpcQE2tMenNTAtoL+toURmsVQ/ngCWuLVwWEQQ/1/zaezuNXu+l1l
FgPHgU4FT7fq2yQ/Z0jRtH0nuerFeOchXK7kpUvh8kaGbi0FKC3cRS1I42YsQakb
ZGKmc5ojAcbXCkXPHi8IckbphHAdOD+jjv9QX06PayUCa1VOtjUyeMwzGqx5AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUaF+nK3H8xWibtNssDB1r88R6NXUwHwYDVR0j
BBgwFoAUaOpTzGpC2dP7PR3yYYRpwfMtaTcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82N0QwNTdGQjExRDNDRDk4MzQzQkYzMEZGNTA1QkU4MEVD
QUUzRjBGRDUwODI2ODUzOTU3QkI0RDRBODJGOURBLzAvNjhFQTUzQ0M2QTQyRDlE
M0ZCM0QxREYyNjE4NDY5QzFGMzJENjkzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OEVBNTNDQzZBNDJEOUQzRkIz
RDFERjI2MTg0NjlDMUYzMkQ2OTM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjdEMDU3RkIxMUQzQ0Q5ODM0M0JGMzBGRjUwNUJFODBFQ0FFM0YwRkQ1
MDgyNjg1Mzk1N0JCNEQ0QTgyRjlEQS8wLzY4RUE1M0NDNkE0MkQ5RDNGQjNEMURG
MjYxODQ2OUMxRjMyRDY5MzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZh0w4AR4NLbI6nkEaeufFVRTo
2xpnh7FfOw1Zz67aelETYwd0EMJ1bt6nG3PnJ2r2LBASzESgNeVInFo21Zqc+yo1
2tobfNQnprW+yAXEVWmWG4y0xTHfNCL34ZlYhTHIaP5XhjgEOc2lnniTtJl4PPBy
LrRqbo5romF46N3SYSm2sDAnV7uZXcwuPh4V+sGBrqjJqj48wpN0d1Sdu7FyCtSq
JKPcKFxnf0JwSiLsuoU64L+HD2uMsQ8hvWx2HoVjuZx35qoK4cXiI8LW3D52KX0+
cO8w3X1tEUvYyT4ia/XCWD60dHptZofZQpR4SttgF9kftUZlrqzABeGgdnyY
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:50 2026 by rpki-client