
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
File: D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft (raw, json)
Hash identifier: onWbx9VQtBxVuklFsFTfW9GUZx+ikMKmPTklf8p7ivI=
Subject key identifier: 65:3A:1E:21:2A:9F:3B:F4:76:AF:C4:42:08:4B:34:96:23:3C:FD:63
Authority key identifier: D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C
Certificate issuer: /CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
Certificate serial: 6D554404DE78EB97CDD3E9834C0453CBB35BB627
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
Manifest number: 01CC
Signing time: Tue 01 Sep 2026 22:35:38 +0000
Manifest this update: Tue 01 Sep 2026 22:30:38 +0000
Manifest next update: Sun 06 Sep 2026 17:46:38 +0000
Files and hashes: 1: 34352e37302e3138302e302f32322d3232203d3e20323635383134.roa (hash: wkHRl/gQ8N7VZbnZSc/yZu7X+RrDQJCd4MliWRWWgig=)
2: D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl (hash: JBlhvY9moTF2SA05TLKwqFkhtQCpINGqdtUD7WjUtis=)
3: 323830333a333832303a3a2f33322d3332203d3e20323635383134.roa (hash: 7nyWFZqmWXQSgc2vMkGLZsiUj1TT6vu46INlTokJIIs=)
4: 34352e37302e3138312e3232342f32372d3237203d3e20323635383134.roa (hash: mYfcLHyCYVVXPO+b0E7K1LgsU6m5RB8F3iThSFiYlNQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl
rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 06 Sep 2026 17:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:55:44:04:de:78:eb:97:cd:d3:e9:83:4c:04:53:cb:b3:5b:b6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
Validity
Not Before: Sep 1 22:30:38 2026 GMT
Not After : Sep 6 17:46:38 2026 GMT
Subject: CN=653A1E212A9F3BF476AFC442084B3496233CFD63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9d:68:45:ae:50:81:53:21:c8:38:7f:e4:7c:
50:ba:b7:12:62:79:f4:52:2d:db:c4:68:e7:8e:c7:
cc:fa:f2:07:ef:58:ab:47:2f:dd:e6:ac:d7:81:a3:
d5:af:61:4f:fd:28:0b:b6:89:31:3c:74:cb:f9:a7:
e1:9c:45:09:6f:ec:ca:91:e7:03:0a:e8:95:07:36:
13:7f:0a:2b:71:06:bc:df:04:fc:51:be:ee:2e:83:
1b:0c:fc:b8:a7:5f:43:81:2b:d0:99:c4:c9:95:78:
aa:7c:92:1b:1f:54:95:83:de:e2:87:e2:97:7c:0a:
fc:d6:d2:e0:4b:8f:32:f7:91:d8:6f:53:c2:85:8f:
f8:59:7a:b8:e2:ec:22:0d:6d:9e:d2:b5:d3:f9:f1:
e2:05:73:d0:54:12:82:2d:a2:02:e5:87:5f:96:95:
69:9d:02:99:0a:1d:f5:6b:33:92:15:8d:c6:48:6e:
2a:5a:95:8d:75:30:ac:5f:55:cd:97:54:f9:f3:50:
f7:44:37:ed:21:53:22:09:18:f8:1e:18:dc:92:14:
e4:3c:2e:31:6c:24:f8:13:9e:f6:a5:e0:56:e6:63:
f6:9c:ab:8b:d5:2f:80:90:b9:e9:41:7b:34:1d:84:
14:d4:92:e4:ed:3b:0e:ba:21:15:d3:f8:cf:16:c0:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3A:1E:21:2A:9F:3B:F4:76:AF:C4:42:08:4B:34:96:23:3C:FD:63
X509v3 Authority Key Identifier:
keyid:D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b3:fd:9c:c4:e4:6a:60:9b:e6:28:38:00:60:f2:1f:73:f1:
a0:e8:8a:80:39:93:17:50:2f:37:67:55:1d:93:82:07:e4:f5:
6c:2d:f1:79:b0:16:01:69:b3:4e:0f:5a:1b:d5:98:ff:c7:55:
18:6e:e8:b6:ad:b2:71:07:a4:f4:85:72:15:a6:ce:90:ef:c1:
7b:3a:4e:91:a2:46:1d:ce:08:e4:16:5b:88:15:d7:76:ca:c2:
be:43:6c:9e:46:17:44:d9:19:8a:cf:de:6c:43:5c:28:64:bb:
99:72:e3:5d:b0:c5:03:7f:50:15:ee:5d:6a:12:01:48:ea:99:
7a:fd:7c:56:f6:0f:bc:5d:34:90:0b:db:90:69:8b:cb:e4:5c:
32:b9:8f:f5:3f:39:76:23:b8:86:3c:d0:69:06:b7:5f:16:67:
9c:ef:53:a6:6f:39:89:fc:a9:04:19:5d:71:64:9a:b6:65:19:
ea:d3:56:f4:40:b2:2f:10:e6:78:f3:5a:36:88:66:f0:d0:6b:
cc:39:2a:3d:7f:87:6a:ef:a7:f4:71:ee:41:f7:59:2a:f4:54:
30:4f:8d:7e:53:2f:93:ed:23:31:13:00:c7:dd:01:e5:f8:a5:
6a:25:93:73:5a:9f:c4:6b:e7:cd:7a:59:04:75:7d:71:f3:af:
7c:31:1d:86
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUbVVEBN5465fN0+mDTARTy7NbticwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlEM0UwREJDNEMzRUIwRUU3Q0E1NjRGMEY5MUEwMzhB
MUQ1ODc3QzAeFw0yNjA5MDEyMjMwMzhaFw0yNjA5MDYxNzQ2MzhaMDMxMTAvBgNV
BAMTKDY1M0ExRTIxMkE5RjNCRjQ3NkFGQzQ0MjA4NEIzNDk2MjMzQ0ZENjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenWhFrlCBUyHIOH/kfFC6txJi
efRSLdvEaOeOx8z68gfvWKtHL93mrNeBo9WvYU/9KAu2iTE8dMv5p+GcRQlv7MqR
5wMK6JUHNhN/CitxBrzfBPxRvu4ugxsM/LinX0OBK9CZxMmVeKp8khsfVJWD3uKH
4pd8CvzW0uBLjzL3kdhvU8KFj/hZerji7CINbZ7StdP58eIFc9BUEoItogLlh1+W
lWmdApkKHfVrM5IVjcZIbipalY11MKxfVc2XVPnzUPdEN+0hUyIJGPgeGNySFOQ8
LjFsJPgTnval4FbmY/acq4vVL4CQuelBezQdhBTUkuTtOw66IRXT+M8WwO0HAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUZToeISqfO/R2r8RCCEs0liM8/WMwHwYDVR0j
BBgwFoAU2dPg28TD6w7nylZPD5GgOKHVh3wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RjYwQUFGMTMyODVCNzQwM0Q0M0JFMTQ0NjM3OEI2MDIz
OUEyNDdGQzEzNTBBMjdFMzc0NjQzNkI0NTMwNzU2LzAvRDlEM0UwREJDNEMzRUIw
RUU3Q0E1NjRGMEY5MUEwMzhBMUQ1ODc3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOUQzRTBEQkM0QzNFQjBFRTdD
QTU2NEYwRjkxQTAzOEExRDU4NzdDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUY2MEFBRjEzMjg1Qjc0MDNENDNCRTE0NDYzNzhCNjAyMzlBMjQ3RkMx
MzUwQTI3RTM3NDY0MzZCNDUzMDc1Ni8wL0Q5RDNFMERCQzRDM0VCMEVFN0NBNTY0
RjBGOTFBMDM4QTFENTg3N0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBts/2cxORqYJvmKDgAYPIfc/Gg
6IqAOZMXUC83Z1Udk4IH5PVsLfF5sBYBabNOD1ob1Zj/x1UYbui2rbJxB6T0hXIV
ps6Q78F7Ok6RokYdzgjkFluIFdd2ysK+Q2yeRhdE2RmKz95sQ1woZLuZcuNdsMUD
f1AV7l1qEgFI6pl6/XxW9g+8XTSQC9uQaYvL5FwyuY/1Pzl2I7iGPNBpBrdfFmec
71OmbzmJ/KkEGV1xZJq2ZRnq01b0QLIvEOZ481o2iGbw0GvMOSo9f4dq76f0ce5B
91kq9FQwT41+Uy+T7SMxEwDH3QHl+KVqJZNzWp/Ea+fNelkEdX1x8698MR2G
-----END CERTIFICATE-----
Generated at Thu Sep 3 19:01:16 2026 by rpki-client