
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
File: AA2338B66632D823F77072125112B5BF1F721769.mft (raw, json)
Hash identifier: kODWaoThTAqHSBQJQ7c+eBiCG2UQIlU+8Rxkz0xL2Nc=
Subject key identifier: 82:D4:AB:31:36:AE:E1:E3:87:87:19:90:80:AB:3F:65:82:DB:76:87
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Certificate issuer: /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial: 0D15313598D2ACA2C6BF0901A84CC385163B43D2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
Manifest number: 01D1
Signing time: Fri 18 Sep 2026 10:01:00 +0000
Manifest this update: Fri 18 Sep 2026 09:56:00 +0000
Manifest next update: Thu 24 Sep 2026 02:40:00 +0000
Files and hashes: 1: 34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (hash: KfCwacbp9eH9hJb9ZGCMfC5QzcFXtkIAZsp5iOIs0Ic=)
2: 34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa (hash: LkCZxCyAuIrADNbDworLC+OdX9XvaBOSze8dj/27xsI=)
3: 34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa (hash: u2ZvMdhwZAssXBxw58EFni6m+O1DDLR6gZFw+/rCTeE=)
4: 34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa (hash: r/2mVZsjY64qv+odHhZ1YzATnWCDhY1Z2dOYpA3mEoI=)
5: AA2338B66632D823F77072125112B5BF1F721769.crl (hash: IcZlzxcYWSOxjqRTKul7p1GV9VUdFWVoURpHCEGsqUk=)
6: 34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (hash: E5eo8MMklIeYQBWAJkmTZjSBHIb80W4f0MfsVyxQVVo=)
7: 34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa (hash: SpfcZUQi77eBwB6czggXOfLrkFAYjmUxFOItmPslgf0=)
8: 34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa (hash: KqEDgK6dPR5pezxaXmPeaJ8fMkW3dzyGrMJP0llK+Uc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 04:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:15:31:35:98:d2:ac:a2:c6:bf:09:01:a8:4c:c3:85:16:3b:43:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
Validity
Not Before: Sep 18 09:56:00 2026 GMT
Not After : Sep 24 02:40:00 2026 GMT
Subject: CN=82D4AB3136AEE1E38787199080AB3F6582DB7687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:f3:bf:ee:80:fd:28:f5:de:8e:c9:f2:ca:
be:0d:b9:8c:70:df:03:87:58:0f:54:f8:2b:91:7f:
86:7b:2d:1d:df:65:8f:1f:5a:56:b4:c5:cd:49:48:
9b:59:04:51:3c:49:ab:9b:10:5e:54:57:92:58:17:
6e:44:d8:13:e5:3f:80:33:48:77:0c:34:9a:16:45:
21:99:21:ef:b5:f2:fd:ea:b0:01:9e:0b:07:be:80:
6b:bd:3c:02:30:5c:8a:1e:f4:47:ac:8b:21:c4:81:
08:43:a1:c5:1b:73:64:37:c9:84:0d:6f:b2:e8:cd:
6f:d9:0b:1d:9f:a9:46:c5:a3:ea:1e:34:ee:78:35:
94:3e:3b:c9:4b:a6:39:5f:a5:d4:f2:ae:8e:d3:bc:
85:1b:2a:da:8b:ac:ae:70:3d:a5:37:c0:c5:e2:7c:
6f:74:b4:ef:88:7d:5e:b6:70:27:d6:9d:32:da:98:
a3:31:49:62:0b:e0:bd:80:07:f3:70:d4:ce:8c:80:
1b:d5:68:df:52:0b:44:9c:d3:29:47:01:f6:eb:e7:
2b:57:23:b6:99:94:81:3c:bf:f5:d7:bf:3f:64:39:
df:da:40:49:2c:f9:b0:f3:27:b5:81:66:45:37:08:
ef:c1:13:2f:97:d5:3c:5a:6f:c0:1e:eb:ff:33:5c:
39:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D4:AB:31:36:AE:E1:E3:87:87:19:90:80:AB:3F:65:82:DB:76:87
X509v3 Authority Key Identifier:
keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:74:5e:de:68:77:21:f5:54:27:f4:05:a3:b4:95:a7:57:1f:
03:17:12:b8:c6:f9:86:25:92:06:51:33:eb:c5:df:0d:a2:a1:
f5:bd:80:31:34:e6:de:83:1e:96:6d:c8:2b:8a:c5:56:71:84:
ed:9a:9c:ec:8d:72:f0:15:48:ed:84:0b:ce:0b:30:a9:54:19:
93:a2:5e:d1:2f:d3:91:10:45:0d:ca:42:3d:1a:27:35:a6:44:
b1:b3:06:52:40:08:84:72:f5:11:d2:41:a1:a7:b5:bc:5d:51:
9b:3e:be:ca:e8:8f:64:cf:31:60:dc:06:d5:b3:f0:4e:24:4e:
0e:a5:9b:80:1c:56:08:91:7f:b5:47:59:ee:b3:d8:c0:23:97:
13:48:90:80:a8:d2:03:ed:74:71:7a:d3:96:4d:7e:6d:03:3c:
86:a9:be:c4:ee:bc:57:b6:e9:72:06:70:18:ef:80:97:52:89:
a4:d4:a8:1d:4e:1a:57:b9:7c:ea:b2:9f:85:99:a5:6d:28:2d:
8d:1c:ca:e9:d3:c8:22:0a:fa:b6:14:66:e2:77:b9:68:23:97:
b6:7a:fe:58:3f:4a:63:6b:56:98:ab:18:d2:ef:09:84:c5:b7:
f1:33:ca:8d:34:96:c0:e3:61:a8:ce:ba:ab:3d:89:90:0b:c5:
a9:2a:d5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:20:23 2026 by rpki-client