
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft (raw, json)
Hash identifier: 84dPDEx9Wf3ha7C6pO6TjN6Dbyku30cbdxtJAP1nxJ4=
Subject key identifier: 05:5A:5E:8D:AD:11:1F:64:B6:F2:E5:12:42:91:E8:8E:BF:14:0F:18
Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF
Certificate issuer: /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
Certificate serial: 19A6BD0D4FEED09FA635E94AC56C3F4F930C6823
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
Manifest number: 0206
Signing time: Tue 27 Oct 2026 00:55:40 +0000
Manifest this update: Tue 27 Oct 2026 00:50:40 +0000
Manifest next update: Sun 01 Nov 2026 19:41:40 +0000
Files and hashes: 1: AS17072.roa (hash: JcvkJcqRz79i+TTu09CI6uiId4ToPGUCFwr2fUZbY6g=)
2: AS28414.roa (hash: rOU0mQOi/2elHsPXJcG80hVyfwscmcNmlJJeUC6o8fs=)
3: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl (hash: 4NqWU6eySwGuwEUstH3Xj5JDWg+gyVsvzCRCqQGd660=)
4: AS22884.roa (hash: wtutw+Q4M5RjiHjnJFAbDSqQhRAXoqOMY63st0zZL6c=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl
rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 20:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a6:bd:0d:4f:ee:d0:9f:a6:35:e9:4a:c5:6c:3f:4f:93:0c:68:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
Validity
Not Before: Oct 27 00:50:40 2026 GMT
Not After : Nov 1 19:41:40 2026 GMT
Subject: CN=055A5E8DAD111F64B6F2E5124291E88EBF140F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:e5:cc:10:6f:bb:c2:49:d4:ae:8f:9d:78:
a2:69:3b:40:7b:a8:28:1b:35:a7:1c:d6:d6:29:4d:
55:76:51:99:d3:ed:b2:81:69:39:9f:c2:bb:00:ff:
46:6b:e9:8e:5b:ab:ec:ef:d4:4f:02:31:b5:08:55:
a0:36:bf:ed:98:f8:07:bd:87:4c:7f:fb:f8:60:0b:
9a:ae:3c:27:65:13:d3:46:aa:94:bc:8a:ab:1c:50:
74:38:96:99:67:4f:08:ca:b1:3c:f5:71:84:3f:a8:
a8:6d:bf:b6:e9:63:c2:65:54:5b:de:eb:64:17:98:
2d:6d:a2:84:47:89:31:45:23:c1:41:22:b6:9d:1f:
c8:1b:98:3f:02:68:19:20:02:65:89:c6:ef:05:df:
5e:9d:1d:86:15:9a:d0:a6:2d:d3:cc:f2:36:b6:3d:
3d:6b:07:49:45:81:40:be:5b:46:34:56:1b:4b:05:
42:00:81:21:29:19:de:70:fa:38:cc:31:8c:0e:bf:
cb:f8:fe:8f:a6:ef:17:b7:48:64:51:d4:b5:01:a5:
66:11:64:a0:52:42:04:3a:32:df:c5:84:50:17:04:
ec:e5:49:1b:5a:ea:0a:f4:e3:1f:65:70:57:72:71:
88:ab:2d:40:32:08:79:37:9a:ca:2e:c3:51:db:ba:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5A:5E:8D:AD:11:1F:64:B6:F2:E5:12:42:91:E8:8E:BF:14:0F:18
X509v3 Authority Key Identifier:
keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ea:da:7a:83:72:a7:91:c6:ed:36:27:1b:30:db:f4:a8:6b:
06:7b:63:2e:fb:9a:33:7e:73:98:3a:1c:3c:69:01:9b:c0:35:
9e:a1:fa:69:01:8d:0e:2a:3b:11:46:01:63:3a:6b:70:b8:1f:
a9:bd:75:94:85:3b:52:75:76:b7:9b:6a:b6:30:8f:2d:8e:2a:
a5:c4:bb:63:63:52:26:9b:94:7b:1c:b4:ec:e8:a5:f5:f2:5b:
65:98:ef:c3:2f:da:a9:c2:c1:15:cc:ef:30:44:ff:a5:59:0a:
15:55:55:83:9a:3b:da:c1:f5:0a:38:d0:f6:78:76:61:46:47:
10:9d:ca:4e:82:30:64:e2:25:8e:74:4d:fe:a2:67:be:c1:80:
4e:3e:d4:b2:6c:70:3e:ea:5f:72:23:ab:02:18:de:74:75:38:
c0:64:5e:b8:3d:0d:78:47:b0:4a:93:90:36:12:ce:3c:96:37:
f5:04:59:0a:02:b2:8d:fa:51:34:0a:f4:9c:19:ee:e7:e4:ff:
b9:07:33:72:2b:46:bf:99:0a:4c:4d:37:d9:2a:ef:4e:00:ef:
87:c2:3e:46:9e:bd:b7:01:8f:0a:55:ae:d0:f0:0d:04:d8:2c:
a1:03:6f:ea:85:d2:da:f8:b2:ca:0f:dc:4e:34:2d:f0:b2:03:
80:3e:84:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:44:42 2026 by rpki-client