
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
File: 2D8A5D8A34E265B308F626454D8A6E920C65D608.mft (raw, json)
Hash identifier: L8lypfDKtdB3OL4xneityHnPx4U90FPRmwRx19d/XBQ=
Subject key identifier: 31:6E:4E:99:70:AC:04:68:BF:5D:78:87:B6:35:F4:22:CA:06:53:2D
Authority key identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08
Certificate issuer: /CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
Certificate serial: 0B5D0499AD6D8120FA4BEF70C0B67B1CD8E75CD3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
Manifest number: AF
Signing time: Tue 28 Apr 2026 08:23:27 +0000
Manifest this update: Tue 28 Apr 2026 08:18:27 +0000
Manifest next update: Sun 03 May 2026 07:08:27 +0000
Files and hashes: 1: 323830333a3539303a3a2f33322d3332203d3e20323732393634.roa (hash: MiRAETUfH9BlCGg8tfP4JXli3fS+cIDzZ05tQ8zDulw=)
2: 2D8A5D8A34E265B308F626454D8A6E920C65D608.crl (hash: ST/gGpKN7f8m3+Bts9xv8ZWMpsDvekqmGj9goNLo6LI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl
rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 02 May 2026 11:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5d:04:99:ad:6d:81:20:fa:4b:ef:70:c0:b6:7b:1c:d8:e7:5c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
Validity
Not Before: Apr 28 08:18:27 2026 GMT
Not After : May 3 07:08:27 2026 GMT
Subject: CN=316E4E9970AC0468BF5D7887B635F422CA06532D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:98:d2:15:27:5d:84:b4:30:43:75:f5:76:
1c:2b:b9:9a:32:54:c2:2b:30:05:93:dd:5e:e9:7e:
bb:7a:f7:eb:e5:54:67:1c:94:d9:94:8b:55:0a:df:
f5:f2:0b:d2:31:91:47:41:31:aa:65:0e:ce:ba:8d:
bd:9f:ab:e4:b2:c5:e6:3d:c2:9b:97:c7:fb:5f:a7:
b3:f9:ed:c9:f2:9e:23:72:ca:be:1e:13:62:f7:7c:
39:92:f8:8f:f0:c0:60:ed:f1:15:df:55:97:54:13:
19:99:1f:f0:da:09:1d:7b:ad:b2:d1:8f:16:4e:bf:
47:26:1e:de:87:f7:26:e1:a4:16:10:e5:7f:48:18:
f3:e8:c6:88:93:86:74:ad:2d:b7:8d:ee:b6:57:92:
2f:9f:84:fc:01:83:05:73:d4:ac:b4:e7:23:54:0a:
7c:6f:51:82:22:d8:ab:9b:77:b2:03:a6:42:b4:ed:
80:4a:e6:c4:d0:85:aa:1b:99:5a:e5:1a:5c:89:f1:
a1:87:f5:c6:b4:9d:90:c2:4a:68:a1:8e:6d:0f:72:
f8:aa:8f:bb:34:74:d6:77:26:15:76:e4:0e:25:2e:
65:99:75:5b:3a:8f:b0:de:50:88:46:4c:b0:47:4a:
74:f8:8f:c8:29:7e:ba:b9:d3:fb:a4:3a:10:1a:65:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6E:4E:99:70:AC:04:68:BF:5D:78:87:B6:35:F4:22:CA:06:53:2D
X509v3 Authority Key Identifier:
keyid:2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d4:c6:1d:ec:e0:12:f0:4b:2a:de:f2:f2:3b:da:2e:4b:ac:
18:d3:b9:c2:f1:9a:54:60:06:28:89:04:82:82:8d:fd:4e:31:
6c:6c:2a:db:0a:c2:90:89:3a:c6:16:c4:12:3e:ef:9e:d8:f6:
14:99:ac:d3:0a:f2:d4:2b:c9:c0:3c:6c:9f:97:04:97:5f:3c:
11:af:77:4e:63:68:24:ba:84:33:9f:e7:9c:f1:28:62:2e:6f:
d2:0e:14:b1:44:4d:06:15:d6:97:a6:84:f0:7f:fb:03:d2:15:
a5:08:01:f8:9e:0a:ea:15:46:ad:98:14:2f:c5:f8:be:66:06:
7b:5d:24:2c:e9:47:14:34:23:9c:21:0c:13:25:6e:f2:2f:42:
d7:4b:30:f2:b3:b3:be:da:ec:3a:03:22:d5:19:91:5e:3e:6f:
85:46:f8:45:08:cb:cc:7c:79:81:f6:a0:ac:07:a2:d3:e8:0b:
34:ab:6a:d4:9d:63:d3:46:77:55:99:4d:6c:da:d7:8c:9b:ec:
18:23:bd:ab:2c:68:d4:6d:37:4d:cc:34:dd:8c:4a:17:57:b8:
16:2a:4c:79:78:76:1b:c1:33:11:1d:33:77:92:52:a2:80:3b:
cd:a9:43:f3:52:12:d8:0f:93:4e:bf:90:ab:09:02:a3:10:e8:
88:53:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:06:19 2026 by rpki-client