
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
File: CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft (raw, json)
Hash identifier: 0ykJPLxBws8+hsIirmC3KkVs3lI/KYndc2FtKNdCPEs=
Subject key identifier: 23:F3:AE:40:C9:36:86:D6:31:9D:B5:DB:1C:82:75:B6:1D:9E:B2:98
Authority key identifier: CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44
Certificate issuer: /CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
Certificate serial: 402CEBFC60F49FC579623C65F6BF89A7B0F6B51A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
Manifest number: 0170
Signing time: Sun 01 Mar 2026 22:43:39 +0000
Manifest this update: Sun 01 Mar 2026 22:38:39 +0000
Manifest next update: Sat 07 Mar 2026 08:29:39 +0000
Files and hashes: 1: CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl (hash: iDyKSBYeBvgcIwSOJJp7H2kaMyI8UODRv/lUeJoYQnU=)
2: 34352e342e3136302e302f32322d3234203d3e20323635363833.roa (hash: wEn/APFzafHB3GZi5VfmjaxMtMba2sIznwByPXXL/uU=)
3: 323830333a363163303a3a2f33322d3634203d3e20323635363833.roa (hash: QmQHVdEyZNm2qTnEpWW0WwAJ7v9mlSF0RkYWae2+QrU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl
rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Mar 2026 11:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:2c:eb:fc:60:f4:9f:c5:79:62:3c:65:f6:bf:89:a7:b0:f6:b5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
Validity
Not Before: Mar 1 22:38:39 2026 GMT
Not After : Mar 7 08:29:39 2026 GMT
Subject: CN=23F3AE40C93686D6319DB5DB1C8275B61D9EB298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:23:c3:5a:4c:3c:32:06:55:82:86:fd:65:
b4:33:8f:0a:cd:ec:29:b6:9d:49:69:bf:99:ef:9f:
66:0f:a5:76:62:23:fe:39:e3:cf:06:ca:19:1a:45:
c8:2d:bc:01:84:9d:fc:6c:02:c0:74:58:ff:95:f6:
e3:7a:b4:7b:aa:55:68:2e:65:e1:95:6f:45:3a:3b:
9d:3a:a6:20:d5:2c:52:11:7a:82:04:c4:a4:59:4c:
49:b1:ce:42:af:a7:b8:c1:12:eb:2d:e8:39:d6:0c:
a7:fe:37:2b:8c:e3:c7:a4:65:69:0c:87:95:37:1f:
47:cc:0e:c9:df:b3:1b:83:e7:95:ee:0c:2d:8f:81:
d4:1d:6c:d0:94:2a:04:fc:9e:22:f7:1c:ea:b6:14:
18:ec:79:a0:94:d9:66:10:62:82:44:62:b3:9f:cf:
ba:00:da:72:97:5f:38:ad:c0:d7:36:f1:f3:b1:c1:
e2:49:3d:ed:d7:f1:4d:9a:c5:26:65:96:30:9d:9e:
08:3a:80:7c:7c:10:fb:73:b8:5a:a2:ca:f6:b8:93:
b7:ce:fb:f7:1f:f6:63:1a:40:64:44:43:20:2b:68:
52:a4:40:57:0c:6a:c0:3a:35:2d:1c:61:5c:c8:08:
66:a6:10:50:34:8c:6f:0c:c9:ef:6e:db:43:54:aa:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F3:AE:40:C9:36:86:D6:31:9D:B5:DB:1C:82:75:B6:1D:9E:B2:98
X509v3 Authority Key Identifier:
keyid:CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a8:65:b3:33:52:6d:af:54:2f:b0:40:01:e5:dd:fc:97:06:
da:e5:80:2e:ef:03:a7:e4:de:db:af:34:d1:81:bc:24:ef:dc:
f9:ba:32:1b:37:ca:f9:8c:c7:b3:5b:af:4c:f1:cd:42:01:db:
ff:a8:02:30:43:9f:26:b7:b3:14:1b:37:76:f7:74:17:8a:98:
5f:17:88:ff:f1:62:81:12:29:99:8c:2d:41:3e:0f:09:b0:78:
c3:1c:01:4c:64:75:49:9a:ab:78:73:4b:06:94:a5:a7:42:71:
4f:e2:75:e4:ba:cb:0a:7b:39:9b:4e:30:64:f3:c0:7f:8d:5f:
e3:d4:09:23:b3:69:c6:23:db:ee:96:33:d0:a3:ae:8d:3a:59:
18:2a:25:50:2f:69:12:e1:d9:63:ef:fd:73:eb:99:41:54:eb:
e4:f5:31:0d:21:c7:53:e4:85:9b:ec:2c:66:8a:c0:d0:f1:fa:
17:53:d1:ad:fb:f3:31:f6:85:14:54:d5:96:18:b4:ef:74:44:
e1:8e:5a:35:cb:0c:98:dc:55:4d:26:7e:fc:a0:d2:5f:fb:f0:
3d:80:b4:0d:69:df:3f:80:84:c7:52:44:3d:d1:e5:97:fa:96:
d2:d9:04:97:99:ff:55:39:2f:92:0c:fb:7c:73:9f:31:76:e5:
29:7e:e6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:54 2026 by rpki-client