
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
File: AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft (raw, json)
Hash identifier: /NPu5WKnGo0DRybFSuKZpB7e9e+2aV7/adS7xZ7ujXo=
Subject key identifier: 66:55:09:6C:7C:F1:F7:47:98:52:DE:EF:87:91:C0:B9:2A:82:D3:5C
Authority key identifier: AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2
Certificate issuer: /CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2
Certificate serial: 73C96F9BD49B4429AECA3D7AEB72727FEB1D274B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
Manifest number: 78
Signing time: Mon 02 Mar 2026 08:24:47 +0000
Manifest this update: Mon 02 Mar 2026 08:19:47 +0000
Manifest next update: Sun 08 Mar 2026 08:20:47 +0000
Files and hashes: 1: 323830333a643964303a3a2f33322d3332203d3e20323734313538.roa (hash: T0oUgPSWTkNTCuDYVPvATKVNJqgqF4Xg4+Ud0zsl7s8=)
2: 3230302e33332e3130382e302f32342d3234203d3e20323734313538.roa (hash: uqIyZ5o3Twoz9lqf2/eatcYZt5rIMFyHnYHlLXTSymI=)
3: AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl (hash: 0DCtyYigmyQ/0V5/S8D3O/g3yw0xpw5D7hkJpJZiCdc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl
rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Mar 2026 11:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c9:6f:9b:d4:9b:44:29:ae:ca:3d:7a:eb:72:72:7f:eb:1d:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2
Validity
Not Before: Mar 2 08:19:47 2026 GMT
Not After : Mar 8 08:20:47 2026 GMT
Subject: CN=6655096C7CF1F7479852DEEF8791C0B92A82D35C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:d1:ad:e5:59:41:cf:57:b5:78:1a:88:ed:
41:e7:ac:b0:b8:70:72:43:c1:35:82:a0:97:55:6d:
3c:fb:a7:21:88:a2:2f:35:6f:b2:dd:83:2e:a3:2a:
52:26:a6:f9:70:4f:7f:c1:84:1e:5f:bd:c3:e1:a6:
00:cc:cb:68:e7:e4:52:e2:0b:3d:82:17:e4:2e:4a:
fb:a7:5a:45:ed:d3:03:2d:4e:7f:f0:ef:63:b3:2d:
a4:4e:b9:77:ea:5c:10:1e:79:08:1c:4f:51:8e:6a:
11:37:c0:55:5f:4e:9c:e7:9a:c2:cd:21:db:b8:32:
ca:de:29:81:98:1d:1f:cf:8b:fd:2b:81:f6:87:b4:
e6:27:2c:61:de:37:c2:1e:b1:35:08:e7:a2:38:03:
3c:3d:48:12:19:04:1b:60:eb:c8:3f:67:f3:4b:ad:
1c:b7:8d:49:ca:56:b4:fc:2e:6d:77:c8:94:f7:b5:
fd:34:15:76:4e:28:74:e3:d1:b1:06:cf:37:2f:c8:
e2:15:72:af:b9:26:97:34:bf:de:38:69:98:0e:72:
b4:fb:11:da:90:d4:9d:f1:b7:42:ee:52:0a:86:58:
5e:d1:68:15:b3:e7:27:db:d9:3e:a2:41:96:90:3c:
a9:5e:e2:b4:2d:23:cb:38:45:92:17:81:f6:d4:00:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:55:09:6C:7C:F1:F7:47:98:52:DE:EF:87:91:C0:B9:2A:82:D3:5C
X509v3 Authority Key Identifier:
keyid:AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:33:9d:1b:2d:28:17:06:a1:de:6b:75:4e:44:74:de:30:8a:
0e:36:5b:65:38:7b:fd:36:df:63:5b:65:96:62:95:59:9b:92:
b0:2b:6a:4c:bd:db:dd:6e:6a:88:a5:fc:48:4f:85:45:ae:21:
52:a8:d9:94:d6:04:bb:06:e5:60:d1:10:29:ff:ee:fc:b6:48:
f4:65:2f:18:08:21:8c:1b:71:d0:1a:9e:70:93:50:34:2d:85:
ee:b4:19:54:a6:4b:25:00:df:79:1f:c7:e2:11:f3:fd:cd:fc:
b8:19:18:e2:09:04:26:48:73:b4:c7:fb:31:8e:b9:54:5a:6d:
2f:5d:66:35:df:89:c4:ff:65:9b:40:d3:28:6c:1a:48:d2:ae:
1b:bf:9c:40:00:8f:bc:b2:e0:09:96:db:72:e1:81:ed:df:3b:
ab:5c:d4:fc:cd:8b:78:65:f3:84:a3:d5:30:e6:a3:c1:47:7f:
75:6f:fd:0a:b8:44:5e:24:70:51:4f:69:88:0a:5d:0f:cb:77:
20:55:81:6a:1d:b8:b0:a4:12:6c:94:e2:f2:49:d5:4c:a6:0a:
29:c7:5a:f0:0b:0a:c1:f5:44:7b:a8:03:6b:77:4b:01:36:c0:
6c:15:a9:a6:ba:60:91:20:2b:f2:a5:af:c7:09:36:65:95:5f:
61:4f:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:00 2026 by rpki-client