
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.mft
File: D24B0252516038C8F5AED640DCC6496F35757027.mft (raw, json)
Hash identifier: T5/aGHfYxEoXBdKMYVgO4P2ouGpSkX5ti7q2SI0ZefI=
Subject key identifier: 4A:89:71:F0:EB:07:E7:C3:EA:1B:6B:6A:BC:1A:C8:CE:F2:48:56:A6
Authority key identifier: D2:4B:02:52:51:60:38:C8:F5:AE:D6:40:DC:C6:49:6F:35:75:70:27
Certificate issuer: /CN=D24B0252516038C8F5AED640DCC6496F35757027
Certificate serial: 34B944C8C1B51D5E0B36AFC90A0284AAA661241A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24B0252516038C8F5AED640DCC6496F35757027.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.mft
Manifest number: 01CE
Signing time: Fri 18 Sep 2026 08:29:33 +0000
Manifest this update: Fri 18 Sep 2026 08:24:33 +0000
Manifest next update: Wed 23 Sep 2026 09:05:33 +0000
Files and hashes: 1: 34352e3233362e3138342e302f32322d3234203d3e20323636383033.roa (hash: IM+0P3LZ2pmhBPQManYzF8qvacobSCWjGnpwTpbffJc=)
2: D24B0252516038C8F5AED640DCC6496F35757027.crl (hash: 6GrAcMwG8+O3RckJLgr/nhUWTTuLbO7u8EtPXlQ0iAA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.crl
rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24B0252516038C8F5AED640DCC6496F35757027.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 08:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b9:44:c8:c1:b5:1d:5e:0b:36:af:c9:0a:02:84:aa:a6:61:24:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D24B0252516038C8F5AED640DCC6496F35757027
Validity
Not Before: Sep 18 08:24:33 2026 GMT
Not After : Sep 23 09:05:33 2026 GMT
Subject: CN=4A8971F0EB07E7C3EA1B6B6ABC1AC8CEF24856A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:55:8e:c1:17:43:8e:1b:a8:44:c8:ad:a6:
db:e5:4d:3b:8e:ab:24:90:a9:d0:61:bb:26:bc:09:
ea:7c:86:1c:28:5d:ed:b0:35:d2:c8:c3:06:fb:87:
24:c4:ad:67:1a:0a:64:86:c7:7d:eb:84:e3:9f:ae:
54:de:46:2c:a2:92:f6:60:05:67:42:51:65:8b:5e:
c5:6c:33:2b:f1:c3:e6:8a:2c:81:b7:31:86:c7:fb:
00:fd:2d:09:9a:ca:37:f5:b3:79:68:a8:9b:a4:54:
f8:93:a1:9f:a6:9e:eb:1b:fc:8c:0b:a2:64:b9:40:
5b:3c:76:db:d3:fa:50:ac:d9:61:72:44:b5:81:02:
1c:d4:46:2f:de:da:af:f6:c4:cf:e6:4d:99:24:70:
99:a1:23:91:7a:f0:32:3a:60:29:7d:7d:38:51:3b:
b3:5d:62:01:50:eb:57:5c:37:ac:56:94:68:db:15:
01:26:e1:50:c9:5f:ff:71:4c:33:a3:ae:fc:4e:07:
f2:76:05:c8:2e:f7:37:6a:db:bc:b1:87:d9:33:98:
1f:4b:dd:b9:08:5a:30:c2:02:32:ec:de:4d:d5:f8:
ec:b9:4b:00:ee:93:4f:88:72:db:e0:03:dd:e8:24:
1c:52:97:21:69:de:91:54:04:44:3d:7c:41:c5:b4:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:89:71:F0:EB:07:E7:C3:EA:1B:6B:6A:BC:1A:C8:CE:F2:48:56:A6
X509v3 Authority Key Identifier:
keyid:D2:4B:02:52:51:60:38:C8:F5:AE:D6:40:DC:C6:49:6F:35:75:70:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24B0252516038C8F5AED640DCC6496F35757027.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8d:f8:23:d1:56:bc:67:df:66:75:14:37:27:94:04:67:24:
82:b9:dc:45:bb:9e:85:73:0a:52:10:3f:12:7d:68:b2:35:01:
bc:a2:d8:a6:e5:aa:8e:41:75:91:2b:09:d9:7f:bd:74:9b:f0:
de:2e:fc:17:16:79:59:84:90:30:6b:b9:f0:0d:43:74:60:bf:
91:0e:3e:b2:cc:7c:05:4e:b8:e9:a8:cb:01:c9:11:b2:a7:c3:
8a:d5:10:33:05:6d:eb:c3:b3:44:5b:86:8d:1b:28:49:ef:48:
d8:24:c4:c7:0b:9d:23:38:1e:9b:ed:67:ad:4f:64:28:ed:e1:
62:16:7b:d2:96:44:3c:9c:27:fb:51:1e:91:5b:ee:4e:49:2b:
55:84:83:fc:82:6c:04:47:5e:e5:5e:66:74:48:a7:7e:bf:fb:
61:f8:70:69:a3:b7:9f:36:19:b5:1b:17:93:82:fc:43:8d:0e:
ff:78:5c:28:af:e2:ce:c7:b9:41:a5:7c:35:a3:a4:b1:9e:f8:
de:4b:12:9f:5a:aa:d5:8b:9c:80:47:24:2c:a6:42:7c:61:f0:
97:7d:93:77:d1:2a:2d:23:25:27:38:de:5e:a6:a8:c3:9b:b0:
95:cd:a0:26:3d:46:4c:54:da:e1:d7:6a:8f:45:51:ea:2b:75:
30:a5:40:5d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUNLlEyMG1HV4LNq/JCgKEqqZhJBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI0QjAyNTI1MTYwMzhDOEY1QUVENjQwRENDNjQ5NkYz
NTc1NzAyNzAeFw0yNjA5MTgwODI0MzNaFw0yNjA5MjMwOTA1MzNaMDMxMTAvBgNV
BAMTKDRBODk3MUYwRUIwN0U3QzNFQTFCNkI2QUJDMUFDOENFRjI0ODU2QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2elWOwRdDjhuoRMitptvlTTuO
qySQqdBhuya8Cep8hhwoXe2wNdLIwwb7hyTErWcaCmSGx33rhOOfrlTeRiyikvZg
BWdCUWWLXsVsMyvxw+aKLIG3MYbH+wD9LQmayjf1s3loqJukVPiToZ+mnusb/IwL
omS5QFs8dtvT+lCs2WFyRLWBAhzURi/e2q/2xM/mTZkkcJmhI5F68DI6YCl9fThR
O7NdYgFQ61dcN6xWlGjbFQEm4VDJX/9xTDOjrvxOB/J2Bcgu9zdq27yxh9kzmB9L
3bkIWjDCAjLs3k3V+Oy5SwDuk0+IctvgA93oJBxSlyFp3pFUBEQ9fEHFtGMlAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUSolx8OsH58PqG2tqvBrIzvJIVqYwHwYDVR0j
BBgwFoAU0ksCUlFgOMj1rtZA3MZJbzV1cCcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QjMxNDZDRTkxMjA1RjNENUM3OEM1MTY5Njc4NzdEMzFD
Q0FEM0E0QUY5OEVGNTJCMURDQjYwMTY4RDI1RjdFLzAvRDI0QjAyNTI1MTYwMzhD
OEY1QUVENjQwRENDNjQ5NkYzNTc1NzAyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMjRCMDI1MjUxNjAzOEM4RjVB
RUQ2NDBEQ0M2NDk2RjM1NzU3MDI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEIzMTQ2Q0U5MTIwNUYzRDVDNzhDNTE2OTY3ODc3RDMxQ0NBRDNBNEFG
OThFRjUyQjFEQ0I2MDE2OEQyNUY3RS8wL0QyNEIwMjUyNTE2MDM4QzhGNUFFRDY0
MERDQzY0OTZGMzU3NTcwMjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCOjfgj0Va8Z99mdRQ3J5QEZySC
udxFu56FcwpSED8SfWiyNQG8otim5aqOQXWRKwnZf710m/DeLvwXFnlZhJAwa7nw
DUN0YL+RDj6yzHwFTrjpqMsByRGyp8OK1RAzBW3rw7NEW4aNGyhJ70jYJMTHC50j
OB6b7WetT2Qo7eFiFnvSlkQ8nCf7UR6RW+5OSStVhIP8gmwER17lXmZ0SKd+v/th
+HBpo7efNhm1GxeTgvxDjQ7/eFwor+LOx7lBpXw1o6SxnvjeSxKfWqrVi5yARyQs
pkJ8YfCXfZN30SotIyUnON5epqjDm7CVzaAmPUZMVNrh12qPRVHqK3UwpUBd
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:29:12 2026 by rpki-client