
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
File: 8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft (raw, json)
Hash identifier: ew6LOBQ61HH7Bs2nivETjJZmeIn/qaP2k/Ey6ZuBGOw=
Subject key identifier: 35:42:94:CD:44:A6:52:C7:C1:C0:33:25:70:4E:C9:95:33:8C:17:FB
Authority key identifier: 8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
Certificate issuer: /CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Certificate serial: 0891F9C3B3088A035BEEBF8C00036350B2FC51AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
Manifest number: 0193
Signing time: Mon 20 Apr 2026 04:19:20 +0000
Manifest this update: Mon 20 Apr 2026 04:14:20 +0000
Manifest next update: Sat 25 Apr 2026 17:47:20 +0000
Files and hashes: 1: 3230302e312e3136312e302f32342d3234203d3e20323639393431.roa (hash: KYuU+wjthWMyT+p27a96RBIKOde2OQzRDCZTx7mgDeY=)
2: 8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl (hash: BN4h4EJqEPLsxFpmIXFSFSvnHyNITPioXgEBBb+PbD4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Apr 2026 17:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:91:f9:c3:b3:08:8a:03:5b:ee:bf:8c:00:03:63:50:b2:fc:51:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Validity
Not Before: Apr 20 04:14:20 2026 GMT
Not After : Apr 25 17:47:20 2026 GMT
Subject: CN=354294CD44A652C7C1C03325704EC995338C17FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:ef:de:37:e2:26:26:23:c3:42:00:fa:7f:
39:79:97:d0:80:79:5f:94:f5:7c:39:8b:df:bb:6b:
c3:b4:dc:01:72:38:88:08:3c:66:3b:5b:6a:7a:b7:
b5:f4:0f:cf:fe:64:d1:7b:47:6a:4f:15:c1:ca:eb:
15:89:bf:27:aa:15:72:7e:90:4b:13:f7:c7:1a:d9:
57:34:49:6e:1b:b0:76:e0:ae:0e:d8:0c:0c:b6:31:
fe:08:f9:c3:c8:40:cc:b5:a1:3c:c2:2b:b6:a2:fb:
6a:15:0a:ff:57:c1:4d:d0:22:00:0d:57:87:8d:46:
cf:64:04:bc:f8:2d:56:05:b7:26:40:00:0d:0b:73:
90:a3:f4:a6:4c:66:43:43:dc:ac:3d:95:7a:0a:ba:
80:e7:30:42:62:f0:94:7e:9a:b1:da:83:22:f7:2d:
2d:4f:e8:61:d3:a7:69:13:82:28:9c:1f:95:dd:59:
52:2e:c5:66:57:ca:3d:cd:98:ed:9e:d8:4c:df:48:
04:88:10:d4:bb:23:36:5f:11:af:86:1d:93:0c:6c:
f5:db:96:45:13:94:2f:72:99:80:ff:de:9b:bb:4e:
ae:14:95:83:d0:6b:ae:34:f1:94:6c:0b:57:c1:8f:
24:79:8e:6d:9a:ca:f4:e1:6f:b9:45:67:cd:d2:4e:
32:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:42:94:CD:44:A6:52:C7:C1:C0:33:25:70:4E:C9:95:33:8C:17:FB
X509v3 Authority Key Identifier:
keyid:8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ee:3e:b6:e4:b9:f6:71:d3:70:de:da:24:40:77:d0:fe:73:
01:dd:53:cb:ec:f3:bd:ae:47:c6:43:b9:d8:47:f5:14:2c:f0:
ea:e4:bb:95:7a:40:17:61:4e:19:d1:8c:f2:31:46:89:22:a3:
eb:7e:fc:5b:3b:ec:e6:b3:4b:56:6e:ea:ef:77:2a:ea:4c:3c:
c8:d4:14:72:3d:ea:5b:dd:31:cf:91:ec:bd:bb:2e:ea:f7:f3:
29:f0:c7:30:9f:66:58:ef:af:74:0d:f3:9d:b4:07:b6:2e:96:
c2:86:23:07:e1:78:c5:54:41:a3:0d:63:f4:01:ad:18:55:25:
86:42:50:45:cf:3b:03:61:3c:78:55:84:e6:3f:95:27:36:92:
47:8b:ce:97:f9:60:d7:72:d2:ea:5f:d5:e5:5f:a8:f6:48:8d:
df:91:4a:4b:a7:1f:40:43:2f:43:db:1a:91:24:1a:78:09:58:
02:6e:24:82:1a:9f:a8:51:c9:66:81:51:06:65:88:cd:34:67:
24:c5:39:ca:a7:6d:d5:a7:c6:98:fa:38:8c:7f:90:83:b7:4c:
fe:76:1f:62:04:67:55:92:b7:65:a9:5a:ca:fe:8f:8c:14:a7:
28:29:98:44:dd:2e:31:51:f3:6c:6d:cb:74:9b:d1:7b:b8:de:
f3:39:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:27:59 2026 by rpki-client