
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2DD961900D0738717BE910908F6313356E357B9EDA28EF0AD89C5E8D19814922/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.mft
File: D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.mft (raw, json)
Hash identifier: j0paAQ2ZV5ZFGv33VsYYwJOjjgETYPGwy2+ixWoswGY=
Subject key identifier: FC:4B:4B:28:EA:60:8C:62:B9:FC:95:36:1B:72:D6:C7:6E:9B:5E:65
Authority key identifier: D5:F2:C2:0C:BA:17:BB:8A:FB:7E:18:80:E9:B4:2A:12:A0:71:54:1A
Certificate issuer: /CN=D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A
Certificate serial: 1966773B5E9813109EB295EA74E4FB95A63D362A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2DD961900D0738717BE910908F6313356E357B9EDA28EF0AD89C5E8D19814922/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.mft
Manifest number: 01C8
Signing time: Sat 22 Aug 2026 23:08:30 +0000
Manifest this update: Sat 22 Aug 2026 23:03:30 +0000
Manifest next update: Fri 28 Aug 2026 18:35:30 +0000
Files and hashes: 1: 3137392e34382e3134302e302f32322d3234203d3e20323730303737.roa (hash: AmVgOvtN2YUVoeXwzdNwPXx5ZifG3myPqaNIqEm4y3M=)
2: D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.crl (hash: 1xyCngh+FOtIZl9zdJLOYNgovR3DwF33vb6+mC0zf4U=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2DD961900D0738717BE910908F6313356E357B9EDA28EF0AD89C5E8D19814922/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.crl
rsync://repository.lacnic.net/rpki/lacnic/2DD961900D0738717BE910908F6313356E357B9EDA28EF0AD89C5E8D19814922/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 27 Aug 2026 11:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:66:77:3b:5e:98:13:10:9e:b2:95:ea:74:e4:fb:95:a6:3d:36:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A
Validity
Not Before: Aug 22 23:03:30 2026 GMT
Not After : Aug 28 18:35:30 2026 GMT
Subject: CN=FC4B4B28EA608C62B9FC95361B72D6C76E9B5E65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:68:7a:64:04:bd:d0:b2:d1:b1:5b:5d:45:82:
ce:09:18:ae:7b:36:58:c9:b5:df:d6:eb:11:65:81:
e3:65:16:f0:b4:87:24:26:6a:cd:15:a2:a9:27:0f:
61:bc:fe:77:8e:64:d6:66:ca:9e:4a:9b:37:12:f0:
17:e4:c4:1d:f7:a4:87:f4:08:32:28:0f:65:7e:a6:
db:01:c4:36:75:a7:25:27:84:bf:64:84:f3:ae:48:
0f:b0:0d:3c:5e:86:c6:78:a5:02:11:9b:3d:73:09:
d9:5d:06:df:41:82:b4:c7:c6:a7:98:03:7b:29:02:
84:4d:17:ec:2f:53:ab:c0:9b:57:bb:f3:25:29:52:
92:7a:58:61:18:fe:26:7e:cb:5a:a4:96:12:d3:61:
66:a9:70:79:10:9f:66:97:62:37:fd:5c:01:30:a7:
88:52:b5:00:3b:08:aa:26:60:cf:3f:23:d2:a5:cf:
14:df:ca:3f:ea:0e:01:dc:c1:18:12:23:5e:1f:7c:
55:c2:86:d5:ef:60:97:4f:8a:9d:6e:ea:e6:21:0e:
17:c6:ce:0d:12:b4:15:64:fd:83:fb:be:46:ad:a0:
cd:49:f4:92:4b:a1:f4:18:dc:22:3a:43:67:0d:13:
72:5d:a0:5c:48:43:63:0f:5b:11:7a:f2:a7:18:eb:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4B:4B:28:EA:60:8C:62:B9:FC:95:36:1B:72:D6:C7:6E:9B:5E:65
X509v3 Authority Key Identifier:
keyid:D5:F2:C2:0C:BA:17:BB:8A:FB:7E:18:80:E9:B4:2A:12:A0:71:54:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2DD961900D0738717BE910908F6313356E357B9EDA28EF0AD89C5E8D19814922/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DD961900D0738717BE910908F6313356E357B9EDA28EF0AD89C5E8D19814922/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:07:34:43:1d:9d:98:d5:59:29:99:72:51:b3:a1:f7:27:16:
ae:58:fe:a8:30:d6:77:c8:66:50:dd:23:d2:91:66:3e:5c:f5:
ea:e6:83:6b:51:ce:ba:b6:55:b8:f5:65:cc:ed:5e:2e:27:9f:
9d:09:36:75:95:10:fd:33:04:b3:3c:23:a5:94:ee:a4:b3:28:
33:25:8a:6b:95:06:84:ee:54:d7:ff:e1:2f:14:97:f4:ed:e5:
d7:07:dd:f3:b7:df:8a:3f:d6:5a:32:75:9a:f9:f3:70:3e:74:
48:4d:d8:13:84:74:7e:eb:e9:dd:ad:5a:28:90:7e:30:5e:63:
89:dd:44:a9:a7:a6:1e:1a:1d:d0:e6:00:6a:b4:0b:c4:42:af:
fa:c2:11:07:62:04:51:b3:8c:9f:a9:20:83:4d:58:91:d8:3b:
2b:02:05:fa:7d:00:a4:16:11:c9:b2:23:3e:db:b2:24:83:72:
f6:00:30:a5:f2:e1:ef:e1:60:df:a1:01:a5:ac:63:96:e7:76:
1b:73:95:74:54:29:54:ec:58:1c:f0:d9:e9:ae:b6:1a:af:6c:
d0:12:43:25:fe:3b:4a:19:55:95:f8:45:e5:65:d6:34:fc:8b:
c9:10:b9:54:0d:42:b9:0d:83:05:76:85:b8:98:48:97:22:d8:
bb:04:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:27:43 2026 by rpki-client