
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft
File: D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft (raw, json)
Hash identifier: B9nXLNkEups1Avejj8JjGjewtzF6D9+sVGMkTCTYpEw=
Subject key identifier: 01:A5:F9:51:8C:C9:BC:A6:18:E2:5C:2D:AE:77:7A:E0:1B:B3:D3:BF
Authority key identifier: D2:FB:79:58:17:08:2A:32:A8:F3:E5:DA:E4:37:DE:6D:0C:A8:5E:1D
Certificate issuer: /CN=D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D
Certificate serial: 137981E8F0D2EB738F4B1D0A3A9572739C94FF8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft
Manifest number: 0183
Signing time: Mon 20 Apr 2026 19:23:01 +0000
Manifest this update: Mon 20 Apr 2026 19:18:01 +0000
Manifest next update: Sat 25 Apr 2026 20:25:01 +0000
Files and hashes: 1: D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.crl (hash: 8Cj98v54h4r6HTDjVihGje7J+XajHi3KdJc5jyX+Q6E=)
2: 3230312e3133312e34392e302f32342d3234203d3e203237393839.roa (hash: P0fzJ+h/Q02XncK+FmJhsPNU/FsnTWCPnD/zvik8i38=)
3: 323830313a31633a363030303a3a2f34382d3438203d3e203237393839.roa (hash: 7VSGvv53e4ZwkRiydpytjjQhiz6SxxSuZFftT9jPXiA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.crl
rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Apr 2026 20:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:79:81:e8:f0:d2:eb:73:8f:4b:1d:0a:3a:95:72:73:9c:94:ff:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D
Validity
Not Before: Apr 20 19:18:01 2026 GMT
Not After : Apr 25 20:25:01 2026 GMT
Subject: CN=01A5F9518CC9BCA618E25C2DAE777AE01BB3D3BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:09:b4:a5:56:ad:bd:79:18:49:74:67:8d:
b5:d2:38:57:a7:96:f6:81:dc:c7:67:95:14:33:2d:
f8:98:cd:bf:09:51:fd:b4:31:a0:7b:3f:e2:3b:64:
72:40:9e:20:62:c8:03:11:d0:e6:73:cb:9c:ad:02:
33:2a:9e:b2:99:05:7e:fa:67:0c:46:3c:5d:fc:4e:
3e:60:35:e1:b3:ed:43:39:80:3e:39:3b:00:c8:5d:
a7:6d:20:9e:5e:4b:9b:a0:10:32:45:d4:6e:3f:4c:
66:e8:16:32:49:25:70:83:52:3c:b6:6c:42:de:52:
0e:42:5e:a4:33:a0:7b:c2:f3:e8:ec:27:a4:2f:89:
25:ef:e9:74:a3:bd:5a:29:ee:d0:5d:c1:7c:7e:91:
4a:dd:f3:f2:31:12:73:f3:1c:c0:72:dd:c7:57:69:
5b:56:c1:b9:4f:b0:0a:d3:04:ec:a2:9a:d5:40:49:
eb:70:02:f3:14:60:3c:95:06:43:92:72:ab:c5:8b:
99:0e:ad:27:8e:c8:ea:d3:52:c6:06:e6:a9:1a:33:
b0:1f:8d:1f:43:52:29:56:df:a9:a1:fa:da:e4:da:
28:bf:21:dd:49:84:dd:c5:1c:1f:20:58:ee:f6:f5:
02:17:b0:0b:2e:95:0e:49:e3:e4:18:5e:6d:3b:fd:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A5:F9:51:8C:C9:BC:A6:18:E2:5C:2D:AE:77:7A:E0:1B:B3:D3:BF
X509v3 Authority Key Identifier:
keyid:D2:FB:79:58:17:08:2A:32:A8:F3:E5:DA:E4:37:DE:6D:0C:A8:5E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dd:08:9d:72:1e:ee:43:cb:a5:1e:d1:e2:91:b9:5d:5c:75:
0f:e9:af:ec:42:25:18:30:93:69:fc:20:32:4a:25:a2:fc:6d:
9e:c7:16:66:a7:8a:05:ae:f6:be:6a:be:33:65:3d:b7:56:20:
23:c9:75:44:b7:fb:f2:08:12:fe:71:ff:97:03:70:54:0f:27:
1f:3b:6c:93:6b:a6:fe:8d:60:81:4d:a2:11:1f:d5:92:d6:53:
f6:54:ef:cf:32:19:15:b2:a6:65:56:54:86:eb:e6:88:f4:39:
5b:d9:86:c3:c2:b4:a2:e7:66:a6:44:6a:98:f8:e6:9c:d2:15:
52:f1:56:1e:b1:44:64:7b:c8:0c:65:27:4a:88:d9:70:82:3e:
8e:80:fe:c1:dd:ba:ff:70:7b:c9:ec:7e:90:53:4c:65:a0:ef:
b8:9c:d1:9e:ca:ad:4b:5c:dd:a1:e1:ad:19:c2:81:30:91:c5:
dd:9d:23:bc:32:aa:ba:28:aa:d8:41:d6:53:9a:30:ce:af:58:
ff:48:c7:16:25:f9:e3:8e:74:60:1a:6e:ea:f3:34:df:20:4d:
01:07:2e:a5:11:97:8d:99:24:3a:2f:ae:a5:06:df:fd:ea:de:
ae:c7:27:5d:f6:1d:62:2a:e4:19:2f:72:38:e2:35:ba:3b:8b:
33:2c:1a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 11:29:24 2026 by rpki-client