
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft
File: 68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft (raw, json)
Hash identifier: 4556DG0mREZe9GNBKEplMHn5tJj3PnxOoqEuBchWSNM=
Subject key identifier: 29:A0:03:29:43:B4:A5:33:27:74:F1:AE:B7:5D:CA:5D:27:95:CB:74
Authority key identifier: 68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37
Certificate issuer: /CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
Certificate serial: 19B89A6ACC5ED1A33859E1B294396A69208D44CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft
Manifest number: 017D
Signing time: Thu 16 Apr 2026 19:05:14 +0000
Manifest this update: Thu 16 Apr 2026 19:00:14 +0000
Manifest next update: Tue 21 Apr 2026 08:04:14 +0000
Files and hashes: 1: 3230302e32352e3232342e302f31392d3234203d3e203237373633.roa (hash: rXZiZD+t9ffOixxz16BqfBn2TraObCCKBxGonyOg7PU=)
2: 323830333a373339303a3a2f34382d3438203d3e203237373633.roa (hash: Asn3d+h0b5q+J2xmL0wae4RdPWtRJqB3UePLg69lzcM=)
3: 68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl (hash: bKid1ODsYIpoGW1LqgSLHC0C0QtwiK1foCD8QCjndGk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl
rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 08:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b8:9a:6a:cc:5e:d1:a3:38:59:e1:b2:94:39:6a:69:20:8d:44:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
Validity
Not Before: Apr 16 19:00:14 2026 GMT
Not After : Apr 21 08:04:14 2026 GMT
Subject: CN=29A0032943B4A5332774F1AEB75DCA5D2795CB74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:4a:be:75:1f:35:1b:25:33:d9:f8:dd:de:
86:ca:94:4d:96:38:bf:c0:30:43:ac:50:d9:d1:82:
f4:92:e7:d9:8e:0c:4d:0e:a6:7a:d1:aa:6d:d2:db:
f5:3d:3d:dc:54:08:24:11:e6:33:0b:7c:83:32:b5:
45:12:ac:bf:69:1d:02:a7:86:69:24:5f:01:d6:e6:
ca:75:25:90:78:eb:0d:90:20:ca:eb:61:d0:1c:4c:
a7:6a:9d:07:21:91:ae:3a:04:ae:07:93:26:6b:b4:
a9:e9:42:eb:d4:3a:66:a2:4c:79:67:ec:79:cf:0e:
82:f3:7e:4a:0d:79:1e:41:6a:7e:86:36:55:bd:c1:
74:64:4d:db:5b:83:f5:a8:ca:ca:b8:6c:0e:f6:aa:
a1:73:eb:77:ce:03:a3:86:ef:3e:80:f5:29:33:86:
da:cc:7d:5b:ca:f8:04:dd:48:00:24:23:57:1a:cf:
15:a4:ba:75:57:84:59:80:52:2b:80:70:c4:bd:c0:
cb:2d:81:59:74:b8:5f:ea:84:de:6f:66:e3:66:21:
46:9f:ea:89:01:8a:d1:b4:67:aa:a6:b9:81:0e:d0:
cb:2b:40:1f:2f:82:51:5f:fd:cc:23:6b:39:d4:8c:
90:9e:71:1c:d9:26:31:dd:2b:96:33:a2:76:74:22:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A0:03:29:43:B4:A5:33:27:74:F1:AE:B7:5D:CA:5D:27:95:CB:74
X509v3 Authority Key Identifier:
keyid:68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:12:f3:9a:c2:d9:c0:18:b8:6e:9b:5b:c9:ff:dc:96:fc:f0:
09:58:b3:e5:38:b5:bf:99:a5:9a:7d:b4:4e:8f:2c:e9:a7:39:
a8:bb:b4:07:56:d4:23:f4:cf:58:28:43:20:7a:0d:65:0c:54:
de:7c:65:64:87:c3:e5:4b:09:91:0e:db:88:f1:73:5c:b6:62:
ee:1b:5d:a2:8a:05:44:a5:9c:ef:ac:5a:7d:75:69:1f:0c:d0:
78:e8:db:fc:8a:60:72:4e:97:a3:80:80:d0:c7:c6:e4:b9:e0:
e2:3c:94:3c:1a:61:a1:a9:a1:90:31:0a:aa:94:c6:2e:66:3c:
b0:e7:17:7c:3c:d5:d8:9e:4b:3c:5a:b0:e6:9f:6b:6a:9c:e8:
ab:bc:c2:06:10:10:f8:c0:6d:66:b1:74:34:bd:d7:af:55:2d:
0c:d4:4e:d8:e5:c2:2b:3e:f1:2c:d3:94:15:3f:6b:9f:a5:e8:
33:e6:d8:01:77:81:e9:82:17:c0:f0:42:ef:c7:11:67:e2:f1:
2d:24:9f:d5:97:93:c9:ed:91:5d:92:65:35:2c:42:10:7a:5c:
16:e2:77:4c:0c:ae:61:23:3e:4b:af:88:cc:65:3f:35:40:ec:
95:c6:0e:d5:41:68:df:b5:7f:ab:5a:9f:1f:46:f8:5c:96:4f:
68:ba:47:fd
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGbiaasxe0aM4WeGylDlqaSCNRM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFQTUzQ0M2QTQyRDlEM0ZCM0QxREYyNjE4NDY5QzFG
MzJENjkzNzAeFw0yNjA0MTYxOTAwMTRaFw0yNjA0MjEwODA0MTRaMDMxMTAvBgNV
BAMTKDI5QTAwMzI5NDNCNEE1MzMyNzc0RjFBRUI3NURDQTVEMjc5NUNCNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT4Uq+dR81GyUz2fjd3obKlE2W
OL/AMEOsUNnRgvSS59mODE0OpnrRqm3S2/U9PdxUCCQR5jMLfIMytUUSrL9pHQKn
hmkkXwHW5sp1JZB46w2QIMrrYdAcTKdqnQchka46BK4HkyZrtKnpQuvUOmaiTHln
7HnPDoLzfkoNeR5Ban6GNlW9wXRkTdtbg/Woysq4bA72qqFz63fOA6OG7z6A9Skz
htrMfVvK+ATdSAAkI1cazxWkunVXhFmAUiuAcMS9wMstgVl0uF/qhN5vZuNmIUaf
6okBitG0Z6qmuYEO0MsrQB8vglFf/cwjaznUjJCecRzZJjHdK5YzonZ0IvVDAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUKaADKUO0pTMndPGut13KXSeVy3QwHwYDVR0j
BBgwFoAUaOpTzGpC2dP7PR3yYYRpwfMtaTcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82N0QwNTdGQjExRDNDRDk4MzQzQkYzMEZGNTA1QkU4MEVD
QUUzRjBGRDUwODI2ODUzOTU3QkI0RDRBODJGOURBLzAvNjhFQTUzQ0M2QTQyRDlE
M0ZCM0QxREYyNjE4NDY5QzFGMzJENjkzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OEVBNTNDQzZBNDJEOUQzRkIz
RDFERjI2MTg0NjlDMUYzMkQ2OTM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjdEMDU3RkIxMUQzQ0Q5ODM0M0JGMzBGRjUwNUJFODBFQ0FFM0YwRkQ1
MDgyNjg1Mzk1N0JCNEQ0QTgyRjlEQS8wLzY4RUE1M0NDNkE0MkQ5RDNGQjNEMURG
MjYxODQ2OUMxRjMyRDY5MzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMEvOawtnAGLhum1vJ/9yW/PAJ
WLPlOLW/maWafbROjyzppzmou7QHVtQj9M9YKEMgeg1lDFTefGVkh8PlSwmRDtuI
8XNctmLuG12iigVEpZzvrFp9dWkfDNB46Nv8imByTpejgIDQx8bkueDiPJQ8GmGh
qaGQMQqqlMYuZjyw5xd8PNXYnks8WrDmn2tqnOirvMIGEBD4wG1msXQ0vdevVS0M
1E7Y5cIrPvEs05QVP2ufpegz5tgBd4HpghfA8ELvxxFn4vEtJJ/Vl5PJ7ZFdkmU1
LEIQelwW4ndMDK5hIz5Lr4jMZT81QOyVxg7VQWjftX+rWp8fRvhclk9oukf9
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:43:13 2026 by rpki-client