
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft
File: 4F43917327673645BD0B520BF95E9CA235CEFEB8.mft (raw, json)
Hash identifier: Kzn5l6JPM3b6fDphOsTl/FevKCatX+evFA0C7y16i+g=
Subject key identifier: 28:3C:1F:76:71:D9:91:89:6F:98:EC:D1:1A:E5:46:BF:4F:98:F2:AB
Authority key identifier: 4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8
Certificate issuer: /CN=4F43917327673645BD0B520BF95E9CA235CEFEB8
Certificate serial: 32C2C477CB42256FED15699400ED2E0906AA786F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft
Manifest number: 0187
Signing time: Thu 16 Apr 2026 04:16:19 +0000
Manifest this update: Thu 16 Apr 2026 04:11:19 +0000
Manifest next update: Wed 22 Apr 2026 02:01:19 +0000
Files and hashes: 1: 3230312e3133312e362e302f32332d3234203d3e203238333932.roa (hash: HvujP03SxpBX9xDN2Kqj9xdyt9eZMEmjv6rPkGZWxIY=)
2: 4F43917327673645BD0B520BF95E9CA235CEFEB8.crl (hash: uQcJA1jhAe98GireIP14ofEUC3w4/FDdhuMj2yBwveE=)
3: 323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa (hash: 6Emknh0Dmw2d0oNnm/ipQ9p6nDiuC9h62Xsp1fSUZk8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl
rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 22 Apr 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c2:c4:77:cb:42:25:6f:ed:15:69:94:00:ed:2e:09:06:aa:78:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F43917327673645BD0B520BF95E9CA235CEFEB8
Validity
Not Before: Apr 16 04:11:19 2026 GMT
Not After : Apr 22 02:01:19 2026 GMT
Subject: CN=283C1F7671D991896F98ECD11AE546BF4F98F2AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:ec:e2:92:12:45:fc:c9:08:71:82:fe:a8:
96:2f:da:ea:06:df:df:d5:1a:42:e4:85:53:26:ac:
60:2c:3a:85:e2:b5:1d:75:54:91:d7:1c:5d:64:93:
ab:02:cd:84:fc:04:6f:f9:6f:f8:44:31:02:82:17:
4f:3e:d2:0c:c1:af:f2:5c:79:b6:73:79:5c:32:65:
3c:fd:32:88:96:fe:2c:d5:85:fa:4a:f5:81:f7:78:
74:a2:4c:c5:1e:81:97:19:1c:45:b6:05:84:de:1c:
ba:e8:ed:b0:c5:bf:57:d2:2a:9d:f0:af:d5:5d:22:
5b:73:cf:ad:7c:a0:e1:e3:54:b4:72:b7:47:a8:e2:
b3:d3:22:0e:f2:a9:59:c7:c3:c4:fa:94:5e:6c:71:
f5:e1:ce:a9:78:cc:b4:2a:94:f5:73:46:d3:f4:e6:
78:42:2c:21:e5:73:95:91:d5:34:c6:f3:c7:5b:78:
00:70:7f:c1:87:ea:fe:8d:74:34:5c:d6:b3:17:a7:
17:d9:49:58:de:66:31:4a:71:e3:37:00:9a:68:91:
0e:cc:c3:a7:98:db:07:16:74:f6:46:eb:d6:d4:66:
b2:29:d9:2e:68:44:df:30:0b:f5:0e:27:27:d5:80:
cb:cb:07:e1:38:fb:8d:c3:ef:2f:63:36:dc:44:08:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3C:1F:76:71:D9:91:89:6F:98:EC:D1:1A:E5:46:BF:4F:98:F2:AB
X509v3 Authority Key Identifier:
keyid:4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ed:82:9b:66:70:2d:f8:44:f3:ea:89:e1:4f:ab:76:ab:8b:
0d:8e:32:4f:9a:db:c8:91:53:7c:65:80:bd:11:c9:12:d6:34:
df:52:2f:8f:9b:0f:54:06:3e:78:10:e2:23:ce:75:9d:a1:d3:
bb:48:0d:45:dd:33:4f:8d:89:7a:aa:59:56:a0:d4:df:26:c9:
9e:f4:28:a7:0f:85:fb:91:2c:ee:90:36:76:26:3f:6f:5b:df:
b4:b1:9f:ca:9a:24:b6:31:b6:99:a9:76:f6:f2:af:dc:b0:e3:
5f:15:a7:d5:db:61:eb:d3:89:b6:07:2e:20:f0:63:47:c9:20:
43:d7:c5:6f:0c:ec:5d:a4:be:9c:6f:15:c2:cd:20:ee:9f:6c:
d7:41:fc:d4:d8:48:c9:6c:f6:70:62:ed:d4:07:92:c2:11:1d:
41:f1:7d:02:f2:7b:53:a8:0e:e5:bb:92:da:7f:57:9b:f2:83:
0d:16:9b:12:a0:fc:cf:41:bf:cf:ee:9a:8f:dc:f4:d9:a8:cf:
f7:23:f0:e8:26:b9:c7:90:94:fa:e1:db:06:a9:07:aa:7d:57:
40:31:5a:2e:2b:72:5e:9b:54:e2:c3:e3:85:9f:a4:78:fd:11:
10:52:d2:0c:b3:40:c3:77:8e:85:b6:fa:05:1e:b4:a4:10:9f:
59:15:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:12:38 2026 by rpki-client