
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.mft
File: CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.mft (raw, json)
Hash identifier: MGVVHOkQaSeC5Da2SGFlzLtezStA4vny4WdTfO8ZqLk=
Subject key identifier: 3D:2F:D6:5E:2E:98:49:CC:C7:16:29:0D:D8:FB:7F:61:74:9F:49:18
Authority key identifier: CD:3D:D9:73:68:EF:31:55:FD:11:7C:D3:03:8D:E9:0C:AB:31:E1:F6
Certificate issuer: /CN=CD3DD97368EF3155FD117CD3038DE90CAB31E1F6
Certificate serial: 6DF79778061E4339763311BC62B265887198787A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.mft
Manifest number: 1D
Signing time: Thu 29 Oct 2026 09:21:11 +0000
Manifest this update: Thu 29 Oct 2026 09:16:11 +0000
Manifest next update: Wed 04 Nov 2026 05:45:11 +0000
Files and hashes: 1: CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.crl (hash: O/4hlgMkqFP6kLT4p3vNOxpId2GvjyMWzmO3Rx685rk=)
2: 34352e3233302e3132352e302f32342d3234203d3e20323633313537.roa (hash: ssb7tpVXHv1g4XURL2e8QVgjv0Lzc/fo1NhewV5Zubo=)
3: 34352e3233302e3132362e302f32342d3234203d3e20323633313537.roa (hash: qoXOxRU5NZEkXVOGNmXnIjBTpX/TcY0hYirH4WahF5Q=)
4: 34352e3233302e3132372e302f32342d3234203d3e20323633313537.roa (hash: HcSNN5bXl4U8NFg8DTwsSmyyovi/eKFy8+5fGYxEPew=)
5: 34352e3233302e3132342e302f32342d3234203d3e20323633313537.roa (hash: +RTPt003qKMCK0JfwXxooxnk90Whnwft71E2PuLO4L8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.crl
rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 04 Nov 2026 02:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f7:97:78:06:1e:43:39:76:33:11:bc:62:b2:65:88:71:98:78:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD3DD97368EF3155FD117CD3038DE90CAB31E1F6
Validity
Not Before: Oct 29 09:16:11 2026 GMT
Not After : Nov 4 05:45:11 2026 GMT
Subject: CN=3D2FD65E2E9849CCC716290DD8FB7F61749F4918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:e8:dd:fc:e1:36:db:75:10:f5:65:7e:f2:
d6:0f:f2:d6:df:7a:a5:08:e7:c5:29:81:2a:fc:42:
53:0e:81:6f:a6:e2:61:69:8a:71:60:0f:06:1e:e0:
de:89:0d:b8:a3:59:f3:18:3b:86:17:57:ec:e5:a7:
bb:c5:3f:a2:33:88:27:cf:ee:e8:56:37:b1:af:c7:
cf:77:55:4a:b2:c3:26:26:ed:8a:54:f5:ba:d8:0a:
07:47:3b:70:e7:66:97:3f:ec:37:4f:2f:0c:9f:44:
92:cf:bd:8f:84:0d:68:97:88:55:e8:49:9c:b0:ed:
8a:86:1b:52:0e:34:f7:5c:90:01:97:29:0c:56:c3:
4a:69:db:67:16:4f:26:45:f2:cd:40:c8:aa:14:d9:
60:30:4a:64:40:c9:3a:91:a3:6b:f7:77:64:ba:78:
14:2d:22:7f:f3:27:7e:ae:86:c9:dc:93:56:ea:68:
72:4b:d9:12:2f:96:3f:18:df:64:0a:ba:d3:5f:a5:
a3:11:44:66:9c:cf:7b:e0:2c:ec:2d:2a:89:d9:57:
c8:44:90:ee:e1:f4:99:f7:4f:a3:48:db:f4:fc:6f:
d3:6f:ed:58:25:e7:d1:d4:c9:35:87:21:42:83:78:
c1:ce:d0:db:1b:16:38:6d:1a:8e:77:ba:81:9b:4d:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:D6:5E:2E:98:49:CC:C7:16:29:0D:D8:FB:7F:61:74:9F:49:18
X509v3 Authority Key Identifier:
keyid:CD:3D:D9:73:68:EF:31:55:FD:11:7C:D3:03:8D:E9:0C:AB:31:E1:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e2:ac:17:8f:06:9d:73:3d:d0:67:8a:17:b5:89:7c:37:54:
58:55:35:29:76:0c:76:f2:cf:f7:3a:32:f7:0e:78:d1:97:2a:
29:4f:b2:16:0e:ef:2d:7f:86:f9:06:ae:28:1b:7b:58:2a:c4:
37:80:29:bb:ab:23:7e:a2:b9:58:b2:64:d5:8c:26:d2:4e:bb:
06:a6:eb:6b:a2:db:a4:be:72:f1:59:29:83:bf:dc:82:6f:88:
cd:6a:40:36:db:7d:48:71:4d:70:b8:89:8f:26:9c:66:20:a1:
35:51:ba:be:7b:a8:8a:cf:67:d2:a9:68:54:67:15:ec:f0:d0:
9b:d0:fb:94:b0:7a:76:1a:70:19:62:1c:47:44:4c:e0:f8:fa:
c8:fc:69:3d:9b:9f:21:ab:c1:fb:ef:6b:e0:ad:0b:84:95:2f:
d3:7b:2a:e3:7d:78:f3:7b:2d:69:60:eb:11:9a:4e:33:3b:1f:
48:c3:cd:5a:8b:75:92:8f:e0:09:71:e9:b1:2d:e6:f5:d8:f7:
0b:44:99:21:a6:b0:40:5c:e6:72:f6:24:db:b3:33:9f:ae:f0:
df:36:3b:b7:ce:eb:a8:3e:34:b8:9c:7f:1d:5d:ff:57:49:d2:
24:36:c5:ff:79:77:13:ba:6e:34:64:67:5b:7a:31:a1:17:7c:
03:73:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:47:36 2026 by rpki-client