
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
File: D3A9BB2434EF24613DA3D824164DFABE55243F12.mft (raw, json)
Hash identifier: L1LNqY2/+ZKTLJZmMKlGXZkfhoA7i6BxoGebiqwgsV0=
Subject key identifier: 02:03:B7:23:87:45:93:24:F1:AA:37:DF:E0:2C:D0:78:57:E0:3F:C0
Authority key identifier: D3:A9:BB:24:34:EF:24:61:3D:A3:D8:24:16:4D:FA:BE:55:24:3F:12
Certificate issuer: /CN=D3A9BB2434EF24613DA3D824164DFABE55243F12
Certificate serial: 21B7E0CB044A8DE72341CE92ABEF1FB60B4C4709
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
Manifest number: 4F
Signing time: Thu 16 Apr 2026 08:39:11 +0000
Manifest this update: Thu 16 Apr 2026 08:34:11 +0000
Manifest next update: Wed 22 Apr 2026 02:04:11 +0000
Files and hashes: 1: D3A9BB2434EF24613DA3D824164DFABE55243F12.crl (hash: c8c10ifUogGCQOHn5UFow4CkvOxDp2d3cq+7sCrrIEM=)
2: 323830333a653764303a3a2f33322d3332203d3e2037333033.roa (hash: fdb8H8VqkJYA0bY105LFtERGfPeDP7saEd+IzOgBJdM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.crl
rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 22 Apr 2026 02:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b7:e0:cb:04:4a:8d:e7:23:41:ce:92:ab:ef:1f:b6:0b:4c:47:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3A9BB2434EF24613DA3D824164DFABE55243F12
Validity
Not Before: Apr 16 08:34:11 2026 GMT
Not After : Apr 22 02:04:11 2026 GMT
Subject: CN=0203B72387459324F1AA37DFE02CD07857E03FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:f9:59:d6:e9:bc:9e:8d:4e:2a:7f:c0:89:
fb:12:cb:87:66:3a:8f:10:9c:85:42:0c:34:0e:76:
6d:56:93:3c:b0:7d:cf:14:10:af:23:6a:ad:91:19:
6e:f8:42:31:6f:5a:74:1e:cf:03:d3:49:99:8d:ee:
cc:0e:86:e0:13:4e:93:0f:aa:55:41:ef:76:c4:40:
47:07:47:ea:bf:40:88:da:8c:20:c3:ce:5a:ed:d0:
cb:e8:43:49:86:0c:55:97:63:ed:d4:d3:f0:7c:5e:
10:32:80:e2:bc:ce:35:37:c3:8e:cb:ef:6a:f6:7d:
15:8c:8e:af:b5:50:71:aa:2b:e6:89:20:c5:39:68:
3c:f8:c3:94:f8:8a:2b:07:69:b0:ad:44:48:c0:3e:
95:a3:62:aa:09:7f:6c:81:f1:27:26:ce:e6:3d:e3:
c2:5f:6e:70:c2:f8:92:dc:60:9b:51:cc:51:cd:30:
e1:97:7c:ef:26:ca:be:5a:0d:af:fa:c0:fb:24:b6:
92:38:88:2a:c2:4d:4f:0a:94:09:39:73:6c:b0:4c:
bd:89:7d:de:a0:91:9f:50:f9:99:b7:2b:71:7b:f1:
94:fd:df:52:f5:75:c7:f9:42:28:fd:3a:86:18:7e:
d5:5e:ae:f8:75:1a:cf:ae:b9:03:f4:95:bb:0c:89:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:03:B7:23:87:45:93:24:F1:AA:37:DF:E0:2C:D0:78:57:E0:3F:C0
X509v3 Authority Key Identifier:
keyid:D3:A9:BB:24:34:EF:24:61:3D:A3:D8:24:16:4D:FA:BE:55:24:3F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2e:ea:22:9a:71:c1:eb:fd:bf:30:2f:35:a5:b4:b8:f8:e8:
2b:fd:0b:fc:1b:9c:09:bf:3d:d8:12:f5:2e:ea:94:1f:11:59:
a5:d6:1a:86:9a:2d:bb:bd:21:8a:26:47:22:d4:0f:86:5b:d1:
ad:91:a8:76:92:b8:b1:3c:7b:d9:68:39:c9:f1:6a:50:a9:43:
23:27:8b:d7:7b:8a:f7:ed:21:4b:60:c8:85:df:57:5a:53:6a:
8d:ca:5b:28:f6:14:7c:dd:0b:f4:e4:6d:d9:ba:2f:04:b8:b2:
b6:59:ed:e4:2d:f8:43:f5:1e:64:c9:1d:bc:55:c6:d3:25:bf:
86:2c:cc:2d:5f:eb:3a:98:e1:b4:34:bb:d4:dc:ff:ba:72:31:
a6:9a:2b:57:85:5e:42:31:6e:10:1c:57:5c:d1:79:73:64:df:
bb:a0:95:cb:48:e6:41:94:9e:5b:1c:9e:c2:43:06:a8:fa:d2:
18:ce:4c:8b:ed:77:79:e4:69:08:2c:81:71:34:00:ee:dd:18:
ba:e6:06:7f:8e:98:1f:98:aa:75:cd:f2:c6:75:71:69:5c:8c:
c6:7a:3d:5b:85:de:b0:a8:df:26:5c:d9:e2:9c:6a:c3:16:ef:
c6:66:0b:b2:64:da:26:ae:9c:a2:cc:15:81:06:74:ae:79:cf:
52:58:79:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:46:40 2026 by rpki-client