
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
File: D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft (raw, json)
Hash identifier: WfaAu03M0hAjwcetfvcFvk55WnJJesN0uXbMzbTekJg=
Subject key identifier: C5:80:E7:4B:A2:F9:8F:11:E1:9C:72:BE:AD:D1:23:40:04:8D:38:F5
Authority key identifier: D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F
Certificate issuer: /CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F
Certificate serial: 2F553282BE56585A20A926E939E8967A2B015A89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
Manifest number: 01D8
Signing time: Tue 27 Oct 2026 22:29:22 +0000
Manifest this update: Tue 27 Oct 2026 22:24:22 +0000
Manifest next update: Mon 02 Nov 2026 15:53:22 +0000
Files and hashes: 1: D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl (hash: hP60j053Vg0AfuLcSU/K095hJ6uE26L+IHKd1zWzXsc=)
2: 323830333a633731303a3a2f33322d3438203d3e20323732303937.roa (hash: DSg4GKR3JAxP7L6hi1exywi02KmTJl6bemsgNagp3QM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl
rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 15:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:55:32:82:be:56:58:5a:20:a9:26:e9:39:e8:96:7a:2b:01:5a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F
Validity
Not Before: Oct 27 22:24:22 2026 GMT
Not After : Nov 2 15:53:22 2026 GMT
Subject: CN=C580E74BA2F98F11E19C72BEADD12340048D38F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:a4:58:41:1e:ab:a2:30:1f:a1:63:fb:cb:
54:db:c4:2f:6a:d4:a4:a5:32:74:3e:2b:a2:9d:6c:
5e:88:c5:6c:1f:c1:79:4b:16:e7:4a:ca:34:ef:f4:
5e:28:1c:a2:9b:42:a4:ca:7f:cd:93:70:9a:21:57:
df:40:79:d7:3a:f2:37:db:ec:04:16:c5:c7:dd:1b:
62:e1:95:90:a2:12:fa:d6:88:f9:a9:28:28:46:c7:
81:55:20:97:fa:b4:ac:f4:7e:92:0a:13:de:4a:ad:
11:ea:1f:3d:a4:9c:07:66:8d:e6:8c:2c:f4:21:32:
bb:1f:73:c8:88:de:2a:9d:b5:8e:a2:bc:6c:07:8c:
49:84:97:63:79:69:24:2f:73:cd:0d:87:f9:6b:db:
3d:10:e0:3b:34:18:90:b1:b3:18:f7:02:b7:50:66:
0e:d4:e3:7d:f6:30:67:c3:cc:68:d9:da:90:29:17:
be:ea:63:9d:f7:d4:f6:1e:09:67:44:3b:48:46:10:
89:7b:37:63:49:10:ed:cb:37:a3:b7:a4:70:1f:74:
35:31:58:1d:6a:07:65:11:ae:0e:c1:cc:dd:64:b4:
09:ed:4a:12:f2:14:ec:30:e4:a3:9b:57:0d:95:ed:
2a:df:e4:cf:08:45:c9:47:43:0f:69:e5:3c:9c:40:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:80:E7:4B:A2:F9:8F:11:E1:9C:72:BE:AD:D1:23:40:04:8D:38:F5
X509v3 Authority Key Identifier:
keyid:D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:75:1d:c4:13:2a:66:fe:2f:7b:35:b5:f8:7a:d7:69:ae:ef:
e6:6d:95:78:e8:7a:e4:37:a7:42:4a:06:49:02:6f:b5:f7:2d:
34:ed:78:4c:50:c0:36:4c:d7:11:d9:9e:19:7c:74:3d:ec:56:
05:2c:09:a1:44:0e:54:64:84:35:12:84:fe:8f:d9:fb:b1:49:
2e:90:82:8b:21:6b:0e:1b:5a:8e:6b:27:d5:95:a4:5a:a5:66:
b6:6b:35:33:2e:60:d1:49:bb:e5:d0:36:e2:42:42:25:e5:aa:
06:66:03:dd:a8:9b:b2:f6:81:9a:bb:ce:80:0a:ae:12:37:73:
75:23:94:e1:98:6b:22:91:56:66:fb:52:a2:5b:3f:f2:8c:15:
ca:0e:ee:9d:f8:79:92:1b:3e:06:02:b7:60:1b:08:6b:4b:a4:
df:a8:36:af:e5:d1:31:cf:f1:6a:00:7e:10:5d:26:d4:7a:ca:
a5:d4:e0:a2:19:e9:05:ac:5f:12:b8:ff:69:18:ad:73:78:f7:
56:23:e2:57:fb:84:be:20:91:8f:eb:b3:46:f6:cc:54:a0:86:
0b:d4:23:cc:72:a1:8a:6c:8c:f2:62:2c:e4:83:19:4a:9b:65:
2b:04:be:88:22:f5:20:20:eb:ff:9e:fc:d0:48:7c:46:8c:b7:
01:b0:65:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:28:03 2026 by rpki-client