
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json)
Hash identifier: OKU+LH8tlU5lT9H3R22bpwyomKiAGu0YWAyRbbMk4QU=
Subject key identifier: E8:74:4C:E1:3A:28:59:5B:86:37:F6:1F:5E:B4:8E:E7:EE:67:56:55
Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9
Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9
Certificate serial: 69CAFE19DC930CE4730BEE97F12ABDB6A57598DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
Manifest number: 0170
Signing time: Mon 02 Mar 2026 13:27:58 +0000
Manifest this update: Mon 02 Mar 2026 13:22:58 +0000
Manifest next update: Sat 07 Mar 2026 05:48:58 +0000
Files and hashes: 1: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: m4d9LgGYsAU1CrFfzHnYliN6K7D7iV4fHvY1fxn5o0k=)
2: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: lls2NOIQefkNui92Jx0iA7Lcnw+MwNLxm47JeaFpIdo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl
rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ca:fe:19:dc:93:0c:e4:73:0b:ee:97:f1:2a:bd:b6:a5:75:98:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9
Validity
Not Before: Mar 2 13:22:58 2026 GMT
Not After : Mar 7 05:48:58 2026 GMT
Subject: CN=E8744CE13A28595B8637F61F5EB48EE7EE675655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cc:e0:c3:56:e2:84:dc:6a:78:9d:fa:8b:ca:
cc:ba:ec:ea:80:b0:3b:63:09:41:8d:55:e7:c1:b5:
5b:a5:c2:66:9a:11:1d:91:8d:aa:c2:5f:95:be:c8:
f8:24:f6:2e:ef:18:72:d0:2d:78:07:fa:af:fd:f5:
9f:72:ff:34:10:d4:e8:b4:1c:31:19:d1:bf:bc:d4:
cd:0c:20:5b:17:3f:a9:92:52:4c:b7:47:69:39:d6:
76:0b:89:5c:8a:bf:40:d0:7e:39:d6:db:a4:7e:f8:
d5:13:30:4f:1f:6d:ff:2a:c7:40:dc:4b:17:fe:1a:
34:c9:b6:3c:1f:1c:9e:0b:cd:d7:c8:ef:13:d4:65:
06:c7:45:be:f4:dc:a4:86:fb:c4:58:25:f6:62:19:
4c:20:ec:38:dd:21:2c:4c:e8:ea:96:0f:da:38:5f:
cd:be:62:e8:c1:66:19:17:c1:0b:27:e1:53:39:ca:
42:47:52:b0:6a:8e:8f:49:db:8d:02:84:80:ad:a2:
de:c1:b6:e2:2c:b2:9c:47:0f:65:cd:12:b9:85:7c:
18:37:c5:2b:e4:31:99:e2:ec:5e:42:c0:0d:4b:c6:
3f:af:c8:40:ce:e5:02:3e:0c:88:d4:93:0b:b9:1f:
33:6a:a4:c7:a3:7a:24:f5:73:86:2a:39:8c:64:74:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:74:4C:E1:3A:28:59:5B:86:37:F6:1F:5E:B4:8E:E7:EE:67:56:55
X509v3 Authority Key Identifier:
keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:59:84:7a:0a:f0:d6:ee:6d:3a:a4:2d:d3:38:c0:9c:a6:e2:
3c:16:50:56:e3:9d:23:94:69:a2:69:f5:83:4a:8d:35:f2:bb:
79:4c:99:34:4e:4b:6a:ca:ab:cf:0d:2b:99:0a:e9:a6:e5:8f:
32:93:da:b9:50:08:22:1b:6a:17:2e:aa:72:0d:f1:60:b6:04:
0f:c2:0f:0b:5d:92:51:3d:e6:81:2b:8c:84:89:35:a3:48:4b:
e2:7e:6d:e1:f4:cb:8b:52:f9:62:4a:a0:87:d5:42:23:01:a2:
e5:cb:d1:5c:08:c9:43:3b:d5:d3:db:55:b3:4a:8e:cd:24:ce:
46:b2:de:f2:8c:52:22:6a:11:f7:6f:d1:36:c8:e0:8c:a5:80:
2a:26:76:35:b6:ce:11:29:33:ff:18:bd:56:46:3f:68:00:22:
a4:2f:78:26:10:07:d4:87:28:c0:93:fe:fe:91:2d:7c:40:f1:
6d:b9:02:f0:18:10:16:cc:92:ee:b9:48:05:97:16:c4:81:3c:
f1:e7:bd:b4:b8:01:b5:94:e5:22:7a:a8:ce:e4:10:bb:36:35:
79:97:56:7d:7e:c8:01:41:29:3d:90:e1:e1:4e:a5:68:98:d5:
66:4d:7e:f4:1c:26:5c:a3:85:b0:fd:e9:36:53:0d:92:2d:61:
2a:24:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:46:16 2026 by rpki-client