
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.mft
File: DF440E65C2E63992C250A9905BFC8D428DB61F12.mft (raw, json)
Hash identifier: myscJK/gEvn4nTVPsPPZwbdGPa0Khh5u5bnQQjDGDxI=
Subject key identifier: D0:F4:6E:0F:AA:F4:C1:D8:D0:7B:41:39:FB:37:8A:F1:D4:E2:C4:9D
Authority key identifier: DF:44:0E:65:C2:E6:39:92:C2:50:A9:90:5B:FC:8D:42:8D:B6:1F:12
Certificate issuer: /CN=DF440E65C2E63992C250A9905BFC8D428DB61F12
Certificate serial: 3CE0FD1E5A59424E99C654D30DC28C53FB9AA7FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.mft
Manifest number: 01B2
Signing time: Mon 20 Jul 2026 14:08:14 +0000
Manifest this update: Mon 20 Jul 2026 14:03:14 +0000
Manifest next update: Sat 25 Jul 2026 08:56:14 +0000
Files and hashes: 1: DF440E65C2E63992C250A9905BFC8D428DB61F12.crl (hash: jMJY20I53TgoVJsZqXsKJVKJbUmYUZPmjj6yqpWFKx0=)
2: 3230302e33332e38352e302f32342d3234203d3e20323633383331.roa (hash: 0s1vFdpdKQnE/XmfCgKxF8YD+PzWLpcBKIDDIqK+/yI=)
3: 323830313a31663a323030303a3a2f34382d3438203d3e20323633383331.roa (hash: 2XD/FoTdYDI5R2ccO+Q7x10K9FF41GNSKmnNv105k00=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.crl
rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 05:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e0:fd:1e:5a:59:42:4e:99:c6:54:d3:0d:c2:8c:53:fb:9a:a7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF440E65C2E63992C250A9905BFC8D428DB61F12
Validity
Not Before: Jul 20 14:03:14 2026 GMT
Not After : Jul 25 08:56:14 2026 GMT
Subject: CN=D0F46E0FAAF4C1D8D07B4139FB378AF1D4E2C49D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:d4:2a:93:45:cc:5f:e8:f6:fd:85:db:24:
2a:a1:2c:92:f3:0a:00:a1:77:0f:20:23:c5:11:dc:
37:71:98:6f:f1:f5:a4:84:7d:64:30:53:6d:49:d9:
22:42:18:09:3a:49:31:0a:46:ce:dd:53:dc:76:de:
ec:7b:a1:03:e6:14:e1:46:2d:63:8c:3f:84:e1:83:
1a:6b:42:cc:aa:fb:55:62:a7:72:d0:4e:bd:86:bb:
2f:db:34:db:de:26:57:86:68:8b:94:84:d3:ae:f2:
38:bc:42:82:cf:f1:dd:35:7e:62:a7:3d:ab:e9:49:
65:08:4f:8b:9c:a7:b4:84:f7:9e:50:3a:70:0a:3a:
e3:90:91:ae:9d:24:02:6e:56:3c:85:1e:37:92:78:
79:73:7b:ca:b8:74:8e:ee:e8:ac:d9:31:53:f5:e1:
5b:b9:7f:b7:b0:94:ef:a5:1c:c8:69:51:85:96:24:
f4:3d:ff:57:3c:25:ee:e4:7f:ca:9b:37:70:6f:d8:
d9:20:d0:16:8c:c2:d9:ee:29:4f:49:4b:07:15:06:
b8:9e:1b:8d:0a:06:cd:db:c0:c7:94:e2:5e:5a:89:
41:7f:88:68:fb:3e:d5:8e:7d:f2:20:5b:ae:9e:ae:
a7:a2:27:1a:e0:e5:a1:91:52:63:03:ab:91:57:d1:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:6E:0F:AA:F4:C1:D8:D0:7B:41:39:FB:37:8A:F1:D4:E2:C4:9D
X509v3 Authority Key Identifier:
keyid:DF:44:0E:65:C2:E6:39:92:C2:50:A9:90:5B:FC:8D:42:8D:B6:1F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:44:25:ba:b0:c8:d6:67:6f:83:8f:05:24:95:9c:dc:af:e9:
76:d9:60:c1:17:78:d0:cb:38:d1:29:f5:5e:ca:2a:33:e6:35:
1d:89:72:22:05:f6:2f:78:8f:6b:ca:1c:e4:e5:33:6c:3c:98:
89:cc:23:fa:65:b3:fd:e2:eb:d6:c1:51:e6:12:a2:89:60:cd:
73:05:cc:80:f2:cc:ff:50:e3:52:9c:47:6a:8b:92:82:d8:58:
3c:da:a7:6c:0d:25:7f:5d:b8:58:f2:bb:4f:a6:a2:f7:93:8e:
cc:8f:13:a6:fe:a6:22:95:51:86:35:17:ed:9a:b9:d6:63:00:
fd:8c:6b:39:bf:30:3a:da:b9:13:e9:8e:2d:78:da:1f:3c:8a:
01:75:1f:f1:59:ce:86:f0:81:16:23:c3:20:03:d2:64:b2:ec:
51:23:2f:94:ed:a0:91:c6:be:61:4d:6c:77:42:d4:19:6e:21:
4d:3e:40:86:56:8e:11:0e:68:8f:6e:fb:64:50:3f:79:04:77:
f6:43:0d:6e:ef:63:11:e6:ea:4e:e6:82:19:2b:8f:57:40:ca:
7c:4b:4e:5b:f3:cf:53:94:f2:cb:ef:25:72:a9:54:8e:76:8e:
5b:af:e2:69:ca:b2:ad:30:de:c8:95:91:ec:a5:27:57:93:f4:
52:be:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:56:50 2026 by rpki-client