
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/1CB025B39863578DD58913190CAE124E8D58CAF4.mft
File: 1CB025B39863578DD58913190CAE124E8D58CAF4.mft (raw, json)
Hash identifier: 9dfS1yuoXmC6fq7dGTsZQvMIKtwgvGYzb/4hkp2Szxo=
Subject key identifier: 3E:3B:BB:D7:47:26:42:87:D7:AB:2B:DE:2E:80:9A:DA:A6:97:6D:59
Authority key identifier: 1C:B0:25:B3:98:63:57:8D:D5:89:13:19:0C:AE:12:4E:8D:58:CA:F4
Certificate issuer: /CN=1CB025B39863578DD58913190CAE124E8D58CAF4
Certificate serial: 2B4A362DCD8FA84BCE5D5E49D69187510FFE69EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CB025B39863578DD58913190CAE124E8D58CAF4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/1CB025B39863578DD58913190CAE124E8D58CAF4.mft
Manifest number: 34
Signing time: Mon 02 Mar 2026 10:25:56 +0000
Manifest this update: Mon 02 Mar 2026 10:20:56 +0000
Manifest next update: Sun 08 Mar 2026 05:37:56 +0000
Files and hashes: 1: 323830333a376664303a3a2f33322d3332203d3e20323734323637.roa (hash: NUlUvY+evZcar5le1bVVQaQ+PpGh5tmzoE8pLkG8z3I=)
2: 323830333a376664303a663030303a3a2f33362d3336203d3e20323734323637.roa (hash: wnmYk1eSGtXYe/LtiV4Jh1xFQV4j5JE9hKhu1UQisGo=)
3: 323830333a376664303a3a2f33362d3336203d3e20323734323637.roa (hash: vOsPi4f2RSHNQxDW3DYWQ49IsIHKwcS35PhUxgOYeNY=)
4: 1CB025B39863578DD58913190CAE124E8D58CAF4.crl (hash: LUEmKPrPt32r6KaHuAcdIyGRZ9pqifxHRkKP7TV2mFM=)
5: 323830333a376664303a313030303a3a2f33362d3336203d3e20323734323637.roa (hash: 17F7EHO+0IMAEBjdsYlUbOy7ckGrKaVf2GBLbuY/aAY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/1CB025B39863578DD58913190CAE124E8D58CAF4.crl
rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/1CB025B39863578DD58913190CAE124E8D58CAF4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CB025B39863578DD58913190CAE124E8D58CAF4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4a:36:2d:cd:8f:a8:4b:ce:5d:5e:49:d6:91:87:51:0f:fe:69:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB025B39863578DD58913190CAE124E8D58CAF4
Validity
Not Before: Mar 2 10:20:56 2026 GMT
Not After : Mar 8 05:37:56 2026 GMT
Subject: CN=3E3BBBD747264287D7AB2BDE2E809ADAA6976D59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:28:23:43:e5:df:d4:c7:26:e6:e0:42:fd:
80:28:a0:09:8e:fe:f8:84:d1:6a:58:02:76:3d:2f:
3a:ed:c0:d2:59:15:bc:b1:ec:54:ff:20:c9:45:e4:
cf:97:83:71:75:73:d6:78:bc:4e:88:7a:b7:20:ea:
d0:88:4f:5d:05:9c:c3:f1:e6:73:fc:31:bc:15:23:
2c:fa:0f:b1:ce:be:3d:da:a3:08:db:fb:30:0c:82:
f6:7c:95:b2:95:f8:de:2a:75:44:11:9e:3d:09:b1:
0f:0e:b8:2f:a7:3a:69:f5:a9:ab:b1:72:c3:dd:a3:
a4:0e:9a:eb:c1:2a:04:80:db:9d:ba:78:bc:65:4e:
d3:03:14:a5:c3:2c:c2:01:86:63:a6:9d:7e:c2:b4:
24:73:e8:01:a0:d5:bc:b6:b3:06:7c:5e:c1:45:ce:
5e:fb:cd:06:85:f8:ab:81:08:35:1a:c2:5d:c3:78:
59:6f:1b:78:ba:e2:e2:de:fc:87:6d:21:bf:63:d3:
e2:d4:ba:9d:ec:38:aa:04:a5:95:22:29:55:c4:af:
f6:49:14:d4:5d:18:cd:13:54:23:0f:c4:d9:bd:7b:
a3:d3:4a:5a:4f:72:94:16:76:ed:3f:ea:53:82:ed:
54:37:7c:2e:2b:8c:94:be:fa:4d:7e:54:8b:f0:65:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3B:BB:D7:47:26:42:87:D7:AB:2B:DE:2E:80:9A:DA:A6:97:6D:59
X509v3 Authority Key Identifier:
keyid:1C:B0:25:B3:98:63:57:8D:D5:89:13:19:0C:AE:12:4E:8D:58:CA:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/1CB025B39863578DD58913190CAE124E8D58CAF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CB025B39863578DD58913190CAE124E8D58CAF4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EA824899D127ECE8DC2A263184EDB84102E0B78994033B04ABC5B3590A878D7/0/1CB025B39863578DD58913190CAE124E8D58CAF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:24:2d:eb:b3:8b:5b:f7:3e:e7:87:8f:36:ef:c6:9a:07:1d:
76:11:65:6c:d2:73:0b:7b:a1:99:23:75:2a:e9:8e:20:00:e7:
a0:cf:a0:66:cb:f0:71:32:54:2e:c6:f2:c2:36:e3:65:a6:be:
b7:a6:44:de:7d:64:c8:0a:2e:2b:35:46:8c:91:92:8f:99:e7:
61:c7:2e:44:0c:50:70:59:74:4e:a6:d4:69:fb:87:3f:40:8d:
11:24:f2:dd:d7:4f:9c:88:88:fc:cd:d8:e9:39:5d:85:19:c6:
1f:ee:1e:64:a0:92:b4:b9:cf:8a:51:be:b3:e8:2f:2a:f7:f7:
6f:7e:5f:bd:39:b6:64:14:93:bc:1d:45:d7:a5:2f:43:1d:1c:
17:1c:13:54:dc:fa:10:81:c7:8b:82:29:3f:d6:79:21:97:db:
30:08:1c:bf:6c:12:64:43:75:49:ae:86:c3:df:64:67:40:6d:
93:39:22:51:09:e3:d2:db:a0:cf:15:f7:09:15:31:62:c3:5c:
90:8c:a9:bb:28:9a:5d:6a:15:00:44:d5:34:60:d7:28:45:2b:
b9:bd:e5:ff:58:a5:94:53:c6:47:c5:01:84:cc:d4:9e:d1:b3:
82:36:c1:de:4f:13:49:36:e2:1b:00:a2:1b:b3:f4:c4:be:13:
07:23:4f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:49:47 2026 by rpki-client