
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
File: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json)
Hash identifier: 9i814/sFNX0kvZZ2WZxgKZ+yqSZkZ77CC18NeVMuOS8=
Subject key identifier: 15:63:35:FF:8D:C7:98:7E:C3:F1:3E:4D:05:C8:F6:70:53:B9:6D:D5
Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9
Certificate issuer: /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
Certificate serial: 156F2C694ED0403AB66D35CF60C04594BC0B5EEA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
Manifest number: 01CD
Signing time: Thu 17 Sep 2026 18:24:25 +0000
Manifest this update: Thu 17 Sep 2026 18:19:25 +0000
Manifest next update: Tue 22 Sep 2026 18:28:25 +0000
Files and hashes: 1: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: Um86cEkZc1cblKMuUA3/7tQwstJEkeehuPwQs3wj8OI=)
2: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: McZ4Be96M1L/jbKaCqXQcV4ak/UpD08hXS9h3yb0m1U=)
3: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: 4LFf4uRlMxMf2oudTQtCgNr/ddYwiQolDdMBxGwEJcg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl
rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 08:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:6f:2c:69:4e:d0:40:3a:b6:6d:35:cf:60:c0:45:94:bc:0b:5e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
Validity
Not Before: Sep 17 18:19:25 2026 GMT
Not After : Sep 22 18:28:25 2026 GMT
Subject: CN=156335FF8DC7987EC3F13E4D05C8F67053B96DD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:47:3c:6d:a2:b7:9d:25:ce:7e:97:a6:e2:
9c:70:4a:cd:3c:83:93:21:24:68:18:b2:c5:4c:15:
57:b3:8d:83:61:58:cd:56:64:7d:26:c3:84:cc:50:
d9:fa:d5:12:53:fc:5b:f0:f3:b4:71:44:5f:e9:ba:
38:ad:72:e0:e5:77:dd:ff:bb:9e:21:c7:26:28:be:
84:ef:de:00:de:54:2b:a1:91:e1:df:9c:5b:a6:7a:
b5:0f:55:37:4e:8f:22:71:e3:41:08:f4:86:4a:0b:
51:e1:51:5b:bd:a9:b2:4b:2e:88:71:39:a5:c3:4c:
a8:15:a2:e6:d2:4a:9a:48:63:b5:6f:79:38:44:9f:
a1:4a:db:1a:66:13:13:8c:78:dd:f8:ee:96:b9:c9:
61:4b:71:2a:ee:90:e2:71:63:3c:31:57:e4:59:94:
7e:d8:3d:b9:09:5a:b8:6d:fc:39:25:1b:8e:69:e9:
28:b7:67:f8:86:d8:f7:af:a2:f2:fe:c8:b9:c5:65:
03:84:1f:29:81:fa:7b:b3:af:fa:2c:b4:69:f2:aa:
27:5f:f0:e7:da:e0:19:05:25:d6:32:84:17:09:d2:
9c:95:6e:32:b9:5c:6f:c4:3d:95:57:2a:b8:14:9c:
fb:8f:ad:7f:49:3f:5f:45:a9:4b:a9:98:cd:16:cd:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:63:35:FF:8D:C7:98:7E:C3:F1:3E:4D:05:C8:F6:70:53:B9:6D:D5
X509v3 Authority Key Identifier:
keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:08:b7:5d:9d:a4:d9:8e:61:b6:b9:b7:e7:75:a4:a1:46:68:
2a:6f:1d:ef:1f:36:4e:03:7c:5e:52:0b:38:41:37:40:a4:aa:
0a:0b:ab:fd:11:1c:c0:6f:06:7d:44:e0:94:03:11:33:86:3c:
e3:ec:0e:43:41:f5:91:8a:83:4f:9d:00:68:fd:a4:15:38:32:
73:fe:bf:c2:73:cd:6b:3c:e2:bd:c4:e7:59:53:e4:26:a2:ac:
80:7f:82:b4:59:1f:f3:8a:53:8f:70:c4:be:ed:e3:e1:b2:3a:
97:cd:b1:73:de:89:6f:50:02:84:49:50:45:95:42:83:df:89:
b6:c9:a1:7d:67:c7:90:b5:98:d0:86:fc:d0:bf:ed:1d:1f:dc:
c4:7c:ac:1d:a5:39:74:f3:ae:63:2b:6f:35:24:b5:e4:f3:d3:
87:79:fd:41:7f:dc:0f:e3:9b:61:bc:9e:87:e0:e3:af:f9:93:
29:c4:46:84:64:cb:38:2a:0e:5f:1d:07:74:d4:54:5f:21:33:
c4:4e:5a:46:69:8f:06:c2:ad:6b:96:84:6e:ce:88:9f:80:9c:
85:97:89:de:84:d9:1a:17:4d:d9:52:c9:24:cd:e8:3f:49:bc:
61:7f:81:0c:2b:0f:af:e4:ac:c8:e8:ca:24:e9:ee:0d:1d:ce:
0b:fb:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:14:34 2026 by rpki-client