
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
File: D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft (raw, json)
Hash identifier: eGfuoG2Mui3nfy1z3drEiKBRr8WOv+upsUVuYtIRFDo=
Subject key identifier: B4:74:B4:E5:89:3F:5A:F7:E6:D7:95:9E:E4:59:56:3A:10:45:52:5F
Authority key identifier: D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52
Certificate issuer: /CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
Certificate serial: 791DC2D01ED1D1E1DC3CC15E11F14241C0BF3EA4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
Manifest number: 01E2
Signing time: Fri 30 Oct 2026 01:59:41 +0000
Manifest this update: Fri 30 Oct 2026 01:54:41 +0000
Manifest next update: Tue 03 Nov 2026 12:43:41 +0000
Files and hashes: 1: 34352e3137332e3138322e302f32332d3234203d3e20323637383237.roa (hash: OpEvqGpXZ1NhkLusoCwX9nCVxS/H9uMeazRwOm9M3T0=)
2: 34352e3137332e3138312e302f32342d3234203d3e20323637383237.roa (hash: Bf03kZFX4aTDpv9rMaSfA6rZQRBFqB3GV+XKp7tF7UU=)
3: D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl (hash: 3VgY9HyZrFKFuVdrMBzlkKx4I8wVu6X7NudCOh/hgW0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl
rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 12:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1d:c2:d0:1e:d1:d1:e1:dc:3c:c1:5e:11:f1:42:41:c0:bf:3e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
Validity
Not Before: Oct 30 01:54:41 2026 GMT
Not After : Nov 3 12:43:41 2026 GMT
Subject: CN=B474B4E5893F5AF7E6D7959EE459563A1045525F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:34:51:57:06:3d:1b:04:ba:0e:c1:71:81:
d7:bc:11:3f:d0:00:c3:20:a4:cc:bd:5c:cd:4e:8a:
c6:7f:37:94:35:27:3a:71:06:76:76:84:4a:04:de:
15:31:05:12:ff:ec:36:b0:ae:5d:0e:44:3d:40:21:
6b:68:42:d0:86:71:18:00:87:6c:28:fc:6d:27:0f:
49:0e:5a:cc:48:93:2a:95:56:07:64:44:b6:13:6b:
71:ec:12:ea:fc:39:3d:8c:75:0e:94:74:8b:19:65:
0a:6a:93:88:77:5b:a2:ac:f5:42:9d:ac:21:ec:8b:
6c:61:b8:56:71:b3:23:bf:a4:2d:85:98:67:a3:d6:
a6:3a:95:f0:67:95:27:3f:5b:8d:f1:14:47:f9:9e:
27:36:a3:fd:57:d1:68:d7:9c:82:d7:b0:1b:27:cd:
a1:fc:a1:3f:22:9e:39:3d:8b:23:cc:11:77:a5:a5:
bf:cf:af:6b:31:bf:61:31:ee:d8:c7:ba:ac:08:3a:
68:04:fc:55:12:a1:97:e2:70:01:36:be:a6:c0:b8:
9e:fc:8c:68:84:dd:c6:e9:9b:85:0a:b3:eb:c0:1b:
f6:4e:3d:9c:c1:c5:f0:40:84:23:35:89:8c:d2:2a:
08:63:cd:ac:c3:24:9d:3e:12:7a:e3:43:c9:6d:3f:
da:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:74:B4:E5:89:3F:5A:F7:E6:D7:95:9E:E4:59:56:3A:10:45:52:5F
X509v3 Authority Key Identifier:
keyid:D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4f:2a:6e:69:55:42:6f:b2:b4:0d:fb:1d:2b:8e:48:3a:9d:
00:a8:32:83:91:01:d7:4e:f9:37:bc:e2:cb:da:73:06:f7:be:
18:66:90:1c:4f:09:28:b5:9a:2d:a1:1b:9c:c0:10:f1:7d:25:
06:88:af:9c:bd:1b:4a:c5:62:a6:df:fc:a4:1f:89:b0:17:5f:
51:ba:af:41:ab:8f:ec:4b:88:7c:a2:f3:9f:c5:ef:1e:ed:58:
cc:e3:ba:67:50:78:01:37:b1:59:70:59:26:e2:5a:70:a6:6c:
ec:ea:dd:79:3a:2f:f6:68:ed:ad:b8:33:cf:d6:a8:74:41:d5:
d9:ed:7e:45:e4:23:75:0c:88:fc:53:ff:00:81:ce:03:cf:d6:
58:2a:18:e9:75:1e:dc:a7:37:0f:1a:8a:0f:c6:3a:7a:45:e1:
1f:be:e1:59:7b:60:8b:39:32:fd:e4:96:4a:1d:74:26:ab:49:
8d:3d:84:c7:96:ae:02:53:9b:c7:2d:02:8e:07:bc:65:0f:b7:
9f:6f:a1:35:78:12:25:93:00:e2:8b:04:fe:d3:1c:fc:28:81:
b1:e6:4e:78:32:69:1c:8b:62:89:ac:48:51:3a:f0:bb:43:06:
07:2e:20:2f:31:f6:13:a8:c5:f1:9a:26:aa:3e:5e:eb:63:02:
10:13:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:28:49 2026 by rpki-client