
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.mft
File: D4F1585FADC5386D18707CA8C82245CBAE06969F.mft (raw, json)
Hash identifier: kGFhwBodVrO2PJRzC+RMtNJXshAaUG8e7HjuP6WM4Os=
Subject key identifier: 89:5C:43:B0:23:50:0D:A1:A3:03:5B:43:13:C2:B0:6D:C5:28:7B:7E
Authority key identifier: D4:F1:58:5F:AD:C5:38:6D:18:70:7C:A8:C8:22:45:CB:AE:06:96:9F
Certificate issuer: /CN=D4F1585FADC5386D18707CA8C82245CBAE06969F
Certificate serial: 7AE84DFEF7339B5341E0EB2570E3C3FB9FF97805
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.mft
Manifest number: 01C2
Signing time: Mon 31 Aug 2026 00:57:59 +0000
Manifest this update: Mon 31 Aug 2026 00:52:59 +0000
Manifest next update: Sat 05 Sep 2026 22:36:59 +0000
Files and hashes: 1: 323830313a31343a623030303a3a2f34382d3438203d3e203532333138.roa (hash: 7fWqhJ7LRXsW7pHXlIkB5USwC4IELa8feBe7ssh5SVI=)
2: 3230302e31362e38392e302f32342d3234203d3e203532333138.roa (hash: GapnZaeX1TDPXz9i0JjQs53PAoPkCbYgpvfivDYpfzQ=)
3: D4F1585FADC5386D18707CA8C82245CBAE06969F.crl (hash: rc1Dfin906gpNY/WIyWp2GiCEbk0Lq7TGqMSmCtbPNE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.crl
rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 05 Sep 2026 22:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e8:4d:fe:f7:33:9b:53:41:e0:eb:25:70:e3:c3:fb:9f:f9:78:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F1585FADC5386D18707CA8C82245CBAE06969F
Validity
Not Before: Aug 31 00:52:59 2026 GMT
Not After : Sep 5 22:36:59 2026 GMT
Subject: CN=895C43B023500DA1A3035B4313C2B06DC5287B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:26:c0:5e:94:ab:4c:ff:fc:19:5e:64:4b:
7c:f3:ea:66:26:80:54:41:7c:27:d3:c2:dd:00:a8:
fe:64:a8:8f:57:8c:ce:b8:a5:7e:3a:d2:64:4e:e1:
d1:dc:a0:a3:9a:d6:5c:53:11:be:ca:40:33:1f:c3:
7c:6e:1a:10:a7:f1:2a:5c:62:38:44:5f:76:0c:0f:
01:1b:12:e0:c6:c6:8f:06:84:d0:d2:32:a7:05:3a:
0a:79:04:29:e9:a1:a1:49:ae:61:f3:8e:31:b5:8b:
02:ea:dd:15:fa:fd:45:1c:9a:4e:e7:be:d8:9d:d3:
bc:27:02:b1:11:20:5b:54:8b:3e:7a:cb:e9:28:46:
5a:43:56:b8:cc:14:41:8e:6d:8b:a0:15:bf:86:2f:
47:f2:75:c3:0f:06:00:52:7b:65:a6:cb:d6:f7:53:
91:82:bf:6b:fe:f4:5b:4d:fa:d9:bb:3c:8d:ce:e7:
40:c4:ce:bd:fc:bf:7d:2b:97:75:50:87:03:08:d6:
1c:61:6c:35:60:06:02:cd:2e:3e:c7:fa:45:28:bf:
7f:70:62:12:59:85:fe:75:db:bb:6d:af:c4:5c:96:
61:d6:d0:5d:c5:64:1e:c6:0a:f3:df:0a:bc:7f:19:
08:2d:db:4f:a6:a5:d2:c9:48:92:08:ed:17:7e:6d:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5C:43:B0:23:50:0D:A1:A3:03:5B:43:13:C2:B0:6D:C5:28:7B:7E
X509v3 Authority Key Identifier:
keyid:D4:F1:58:5F:AD:C5:38:6D:18:70:7C:A8:C8:22:45:CB:AE:06:96:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4a:f2:7f:76:fb:da:10:3a:43:2c:f9:89:fe:9d:99:1d:2a:
9a:a9:ff:31:68:40:5e:7c:63:59:20:b8:b3:c6:ed:75:f4:13:
43:75:2a:b3:34:6d:af:0c:a0:3f:38:74:bc:ef:9d:77:eb:51:
07:d9:c7:6d:37:3b:e3:3c:a4:86:49:ca:70:f2:a9:e8:d5:23:
1b:00:d6:d8:57:f0:6a:e3:24:09:97:c3:0a:c8:8f:e7:e2:61:
d6:b4:f3:43:0d:03:88:95:95:de:0f:af:e7:3a:a7:62:ee:94:
80:0d:1e:c8:14:d4:c4:fc:d5:3c:36:97:45:18:24:dd:bf:ff:
df:af:6a:dd:dc:24:6f:51:28:cc:3b:7f:8c:ea:9e:de:d5:7b:
53:f6:fb:54:5a:38:7d:d4:53:a2:ca:10:a7:11:93:2f:99:fb:
69:b8:af:9a:21:1f:ae:9c:6c:f3:c7:c1:92:8b:9d:6c:99:3c:
79:20:31:ea:bb:e6:5b:a0:1d:43:18:82:bd:87:ce:6b:1c:83:
39:37:81:41:eb:9b:6d:66:21:93:b7:71:12:cd:32:d2:b9:60:
9e:ae:65:81:3d:16:86:26:61:1f:5d:2c:3f:ec:52:09:4e:58:
79:53:6d:2d:b1:62:2e:ce:13:c9:6f:18:aa:a0:1c:c9:d3:84:
9c:ad:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 15:39:09 2026 by rpki-client