
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft
File: 2AA949233251849B5F79085FA81406E588FF36E5.mft (raw, json)
Hash identifier: 2tOEgjs+sVIiyhzNgwh4D5pE1n4o/pvgObpIRXAtJ2o=
Subject key identifier: 2F:38:48:97:D9:BB:D6:3A:E4:90:72:02:54:75:8A:B9:84:88:A8:27
Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5
Certificate issuer: /CN=2AA949233251849B5F79085FA81406E588FF36E5
Certificate serial: 3668AA795EE18E1CAEF4AF43E47DE69F9058E4A6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft
Manifest number: 01D9
Signing time: Mon 26 Oct 2026 01:10:24 +0000
Manifest this update: Mon 26 Oct 2026 01:05:24 +0000
Manifest next update: Sun 01 Nov 2026 00:32:24 +0000
Files and hashes: 1: 2AA949233251849B5F79085FA81406E588FF36E5.crl (hash: 5Dr5/+VYLlwkOcpTdCPTJgZFwTEUzSN0ZYWs0Wt5vxw=)
2: 34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (hash: uCp0Q9i+9+veJ1b/OCdVe/YrScL0cJtyu9wRI4ruDrM=)
3: 323830333a333736303a3a2f33322d3332203d3e20323639383238.roa (hash: RifkABZsLCmRbyVKtsTZJib9sHbG7NxVmTf/yWidQbI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl
rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 20:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:68:aa:79:5e:e1:8e:1c:ae:f4:af:43:e4:7d:e6:9f:90:58:e4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5
Validity
Not Before: Oct 26 01:05:24 2026 GMT
Not After : Nov 1 00:32:24 2026 GMT
Subject: CN=2F384897D9BBD63AE490720254758AB98488A827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:75:12:24:39:9e:2b:e6:d2:12:27:6c:cc:7a:
c9:6c:9d:12:54:fa:18:96:c3:ea:29:33:a4:f8:95:
4a:53:aa:08:9c:d1:87:ac:04:28:2a:b5:e8:fa:4e:
ae:14:f5:d7:75:97:2b:99:5b:2b:5c:df:10:bc:89:
6f:a0:c9:e6:b1:f8:ec:0a:65:ef:4a:14:00:a7:fb:
21:48:65:e7:d1:e1:44:a8:6b:e8:88:0b:33:f2:d6:
69:31:bf:29:a6:d4:61:9d:d3:98:3f:9f:f1:93:c9:
43:a5:ea:36:61:3f:ed:d7:68:23:be:d5:28:08:95:
e3:07:a8:e7:ac:90:56:ff:76:0b:d6:bf:cb:b1:7f:
30:09:00:26:83:5d:dc:b4:d4:39:82:2a:46:0d:cf:
2f:0e:4b:c6:7f:bb:b9:cf:84:86:7c:74:89:cc:a9:
9a:44:36:3e:c8:5d:8f:ce:9d:38:d1:0d:db:6d:a6:
4e:4c:dc:8d:42:31:7e:3e:02:d7:45:02:15:b5:42:
e4:7c:0a:df:fc:bf:78:f1:e9:f2:a7:6e:46:01:56:
be:10:e0:64:32:1d:a8:bb:78:9f:4e:93:d4:f2:3f:
b1:21:7e:11:48:33:84:34:2b:f8:bf:b8:20:8e:03:
b3:71:03:fa:d6:7e:fb:c3:a5:b6:8c:1d:68:ba:6b:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:38:48:97:D9:BB:D6:3A:E4:90:72:02:54:75:8A:B9:84:88:A8:27
X509v3 Authority Key Identifier:
keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a7:35:4c:df:14:71:1d:18:4f:9a:13:50:e1:0a:5c:b2:ef:
bf:20:c9:f5:65:60:e5:71:74:fd:00:44:16:23:27:4b:49:e2:
b9:17:35:6d:aa:8b:e5:48:fd:ac:cd:ae:15:6d:ce:f9:96:71:
7c:6a:a5:5c:de:60:1c:d3:c8:25:cf:1b:e0:a1:6b:1d:5a:1b:
fd:9a:69:06:a2:2f:7a:9b:7b:c1:62:88:0c:e4:48:4f:61:a5:
7a:cd:6f:a3:83:e4:c2:b8:01:3b:c4:a0:4e:9f:45:82:77:18:
1b:4b:97:79:a6:62:1e:56:1b:1f:33:19:bb:81:9a:8c:eb:41:
76:c7:a8:9c:d2:e2:d5:3d:54:e2:46:21:64:ce:d8:1b:71:18:
80:48:e4:db:04:2c:9c:6a:1f:26:67:2a:42:86:04:59:bc:16:
c8:70:9b:83:02:7a:b2:5c:e4:66:49:ad:bc:c2:1e:b9:a1:db:
bb:7b:74:42:17:21:4f:b5:be:13:09:34:f3:de:5b:76:7e:be:
6e:8e:05:18:f9:72:a9:e3:c7:92:5e:48:96:e0:71:87:cf:2c:
7d:da:79:b1:ee:8e:fc:8a:0f:3c:f2:26:bd:68:0c:57:4f:aa:
96:5f:ab:13:36:84:e2:bd:4e:d2:39:ea:cb:8c:de:09:bf:5a:
a0:7d:b3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:46:53 2026 by rpki-client