
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft
File: D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft (raw, json)
Hash identifier: cP67lqBj9A894Q8x8BB4cdRandsDVOZRFQXLwfSa2F8=
Subject key identifier: 33:8E:09:91:04:88:E0:55:EC:BE:79:92:25:94:64:83:75:77:9E:68
Authority key identifier: D9:04:39:A5:3A:2E:3B:C9:0D:B0:1B:EC:E2:6E:7C:08:88:E4:7E:F5
Certificate issuer: /CN=D90439A53A2E3BC90DB01BECE26E7C0888E47EF5
Certificate serial: 606534D6508AE0BB0FC9373F09ECC50EA134559E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft
Manifest number: 01AD
Signing time: Sun 19 Jul 2026 10:50:02 +0000
Manifest this update: Sun 19 Jul 2026 10:45:02 +0000
Manifest next update: Fri 24 Jul 2026 12:32:02 +0000
Files and hashes: 1: D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl (hash: F0s2akD03byfwAZydx2NJq4/TMYFHwuBhsr4s1XDGRA=)
2: 34352e3138392e3131392e302f32342d3234203d3e20323639383637.roa (hash: GmxEw87DnLB/guFwcCxw3Nvj37PNO7vWsuaDQda9i9A=)
3: 323830313a31353a373030303a3a2f34382d3438203d3e20323639383637.roa (hash: /tSbPUUpefJwkpQEE6wLxUy6dAWAHNBUlR3yi3tz7ig=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl
rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Jul 2026 12:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:65:34:d6:50:8a:e0:bb:0f:c9:37:3f:09:ec:c5:0e:a1:34:55:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D90439A53A2E3BC90DB01BECE26E7C0888E47EF5
Validity
Not Before: Jul 19 10:45:02 2026 GMT
Not After : Jul 24 12:32:02 2026 GMT
Subject: CN=338E09910488E055ECBE79922594648375779E68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a5:b5:46:dd:3f:ad:5a:fa:1f:49:41:92:4a:
54:77:4f:87:48:d4:aa:95:22:84:ed:50:36:5e:d3:
bd:e1:96:6c:17:bd:2b:74:08:2d:24:fe:68:be:42:
15:40:bc:7b:6a:20:70:51:52:22:05:fb:85:c8:e5:
86:1e:62:35:1d:24:be:e4:72:57:74:d3:63:c4:e5:
d1:f8:8c:a2:c7:ab:3b:93:2b:70:8e:d7:1c:3f:6b:
ff:b4:26:53:78:0b:41:88:8b:91:e7:71:ab:7d:56:
95:12:a2:24:c7:18:7a:4c:b9:59:a2:f5:98:97:fe:
da:88:78:b0:9f:0c:73:65:fc:ee:37:12:30:6f:42:
4c:6e:27:f9:fe:d1:e6:0f:ed:cd:c4:17:81:9b:20:
58:64:98:f1:cf:d3:52:7b:3c:a2:de:5c:0c:03:27:
f5:d4:7c:d2:fc:4c:10:e0:48:ea:ca:89:e5:77:22:
5a:90:8a:02:2f:30:1e:5c:f0:10:9e:ee:74:bf:b1:
67:0d:e6:ca:fc:a3:46:3d:14:97:f6:b4:7d:d7:9a:
a2:53:95:a6:32:c8:37:2f:ea:1d:8b:e8:43:45:96:
67:7d:6b:51:90:a0:fe:b3:c4:59:2a:da:75:52:9e:
a8:3b:ca:12:54:a7:6f:6d:6a:2b:da:33:15:ba:88:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8E:09:91:04:88:E0:55:EC:BE:79:92:25:94:64:83:75:77:9E:68
X509v3 Authority Key Identifier:
keyid:D9:04:39:A5:3A:2E:3B:C9:0D:B0:1B:EC:E2:6E:7C:08:88:E4:7E:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:60:6e:63:0b:53:cf:e1:1d:bc:6e:b8:78:33:47:fb:ef:cc:
0f:2b:d6:fe:d8:fc:b5:90:98:c9:fa:67:58:68:57:e9:42:84:
52:03:7f:7f:4c:b4:f0:89:c5:97:5c:55:a3:a0:41:15:e4:28:
cc:f0:c5:96:d2:93:96:57:fd:fb:85:6e:18:a3:0b:0a:bb:8f:
df:87:82:b4:fc:4b:d8:d8:a0:6d:48:0e:7e:fa:25:50:f7:1f:
8a:4d:88:84:31:5c:14:43:d0:ae:11:12:f6:95:43:c7:3d:8d:
9b:41:cc:9b:9a:7b:0b:25:aa:73:0b:45:e0:28:1b:ca:7b:10:
20:4b:8c:54:78:e4:8c:e0:95:5f:b2:09:7a:98:da:e8:c4:53:
4e:bf:4c:95:02:20:3f:e1:31:d6:91:54:36:4a:70:5a:48:e3:
21:5d:96:44:2d:62:20:3b:8b:70:41:da:b6:8a:3e:96:86:d8:
16:8c:b2:fc:e1:1e:db:31:b9:95:9d:8c:77:2a:d7:4a:fc:e4:
25:e6:ee:36:2b:2b:e3:42:86:25:e9:49:a8:44:da:d4:5d:c7:
12:64:58:a3:8e:0a:2c:ff:ed:23:07:f8:4b:e9:ef:02:83:9b:
eb:5d:07:5f:82:87:24:7c:16:85:03:fd:75:14:13:6a:71:92:
ad:80:eb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:19:51 2026 by rpki-client