
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft
File: D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft (raw, json)
Hash identifier: KXu0DakhEnRJ7+SO62K8cBDBjsKpc+qySaFuQloZwhY=
Subject key identifier: 3C:41:CA:93:8B:C5:8A:F4:6F:F3:1A:39:7A:5A:EE:57:4A:CE:D5:D6
Authority key identifier: D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0
Certificate issuer: /CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0
Certificate serial: 51EA1E7338978EB0CA350DF03EBD8CD2A7D8EEBE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft
Manifest number: BB
Signing time: Tue 28 Jul 2026 21:32:55 +0000
Manifest this update: Tue 28 Jul 2026 21:27:55 +0000
Manifest next update: Mon 03 Aug 2026 06:31:55 +0000
Files and hashes: 1: 323830333a343165303a3a2f33322d3332203d3e20323639393935.roa (hash: guYhYjbg58vq+IWbvvvwBEY23t9+osq2o/cSpvd9xh8=)
2: 3230302e3130382e3139312e302f32342d3234203d3e20323639393935.roa (hash: 0bh4BC+/0PgWB7GQmqDhC8RSk9LLMEdq+dzpgRfx3RI=)
3: D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl (hash: yUrb2acQr+404/gtff920WZiBxs+7OhBTMTZEB/fBxg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl
rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 02 Aug 2026 21:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ea:1e:73:38:97:8e:b0:ca:35:0d:f0:3e:bd:8c:d2:a7:d8:ee:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0
Validity
Not Before: Jul 28 21:27:55 2026 GMT
Not After : Aug 3 06:31:55 2026 GMT
Subject: CN=3C41CA938BC58AF46FF31A397A5AEE574ACED5D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:e5:a4:b6:3c:34:54:df:27:0e:aa:db:fd:
b8:58:c1:39:b0:65:25:b7:23:e6:65:e3:fa:d4:bf:
5e:47:35:2c:16:b3:21:89:1a:e8:aa:10:b9:8c:59:
ed:ec:77:b1:3c:4a:93:df:e0:4e:a3:fd:c1:be:87:
c3:5a:89:f9:c8:79:7a:05:75:ee:88:3d:5c:b5:6a:
2b:4d:a2:01:2a:1d:b3:7d:ee:58:4e:ef:8a:b8:24:
e4:f3:4d:59:e4:e2:05:96:f5:54:46:de:5b:3a:8a:
62:1b:bb:cb:74:05:a5:dd:72:eb:1f:86:be:09:71:
9d:48:a6:86:01:82:ce:08:24:ac:33:98:53:6e:f1:
aa:2b:70:b2:d3:1a:75:e8:2d:c7:ae:bc:e4:b3:54:
e8:79:8e:c6:48:e5:06:52:d4:e2:52:e5:29:95:92:
a4:f5:37:7a:37:1c:0e:8b:ba:a1:01:5c:3b:44:f2:
60:9e:9f:25:98:88:9a:8e:47:41:de:cb:5d:b0:69:
17:02:fa:1c:11:a2:f8:3b:9e:63:f1:e6:65:e4:41:
c5:e1:07:17:9b:c2:4d:71:e0:8b:21:79:7e:54:1d:
a7:10:c6:05:47:f6:7b:c8:5e:25:1b:0a:74:23:85:
1d:62:5a:31:94:21:07:43:01:c7:cc:e2:72:76:37:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:CA:93:8B:C5:8A:F4:6F:F3:1A:39:7A:5A:EE:57:4A:CE:D5:D6
X509v3 Authority Key Identifier:
keyid:D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:40:29:45:9f:ec:63:a4:a8:67:5d:c4:5e:b7:3e:9e:a8:3c:
e3:fd:0b:61:90:4c:a3:40:69:15:7f:6e:ed:fa:ab:37:2c:1d:
b1:f5:f7:71:63:68:f7:d4:c6:b6:a1:ac:10:17:22:27:2b:33:
31:17:97:7d:38:23:44:0b:40:38:b0:e8:23:0d:ac:34:44:98:
64:e6:88:07:ac:d9:aa:5c:ad:fd:d7:19:02:97:ff:14:c5:4d:
19:bf:f6:d2:71:20:b8:f6:d1:fc:02:8c:76:26:75:0e:a4:e1:
2d:41:bb:8b:21:53:a2:93:af:19:2e:97:e9:0f:2a:68:13:3e:
5f:3d:2b:c2:49:74:b6:cc:b4:9b:bb:ec:c2:df:04:ea:04:b1:
ae:cd:c2:61:43:4e:57:15:9f:02:4d:a3:05:e4:8f:8a:4d:4c:
81:1d:f8:fd:d5:a8:39:15:c9:89:05:6e:c0:d1:29:ce:0d:3a:
c9:4d:a5:44:aa:f4:2a:7e:43:83:42:50:76:87:cd:fa:cd:ee:
54:82:bc:8d:9d:e0:89:04:aa:0b:ad:63:d6:02:07:b9:e6:63:
76:e1:ee:61:75:69:e7:a0:c0:70:56:59:02:d0:55:02:88:4b:
8c:23:62:82:6b:c8:2c:d0:f7:a9:cb:2a:a5:74:6a:20:51:06:
67:5a:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:03:56 2026 by rpki-client