
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft
File: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft (raw, json)
Hash identifier: 3TjM/h/eH8oKRSxLOdAGYU+jmJdbO5Lngd/XIlWWx7I=
Subject key identifier: FC:8E:58:18:27:84:6B:2C:08:94:0B:59:F1:1C:B5:46:47:BA:EF:0F
Authority key identifier: 88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72
Certificate issuer: /CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72
Certificate serial: 436380E267B3FB741C8469900EAD55B2E817DB0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft
Manifest number: 0102
Signing time: Thu 17 Sep 2026 02:18:08 +0000
Manifest this update: Thu 17 Sep 2026 02:13:08 +0000
Manifest next update: Mon 21 Sep 2026 16:53:08 +0000
Files and hashes: 1: 323830333a6164303a3a2f33322d3332203d3e20323734303634.roa (hash: DHa6ditwZtXxLeFd36RN4E+BZavo/NTHMbYI6UBbsnM=)
2: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl (hash: 8IKycf+RL3IDjDZD2EKu/xWrgQco1sbot6YoVbp9y2Y=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl
rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 21 Sep 2026 16:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:63:80:e2:67:b3:fb:74:1c:84:69:90:0e:ad:55:b2:e8:17:db:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72
Validity
Not Before: Sep 17 02:13:08 2026 GMT
Not After : Sep 21 16:53:08 2026 GMT
Subject: CN=FC8E581827846B2C08940B59F11CB54647BAEF0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:31:32:60:68:ac:8e:d4:5e:2b:65:8f:49:
dc:74:ac:84:46:2e:7f:9b:4e:0a:59:5b:e6:35:32:
93:84:5c:5f:27:f4:21:c9:30:ae:c6:48:13:39:54:
c9:8b:d9:b6:99:c5:30:0c:1c:60:68:41:35:af:a8:
9b:ab:60:99:8a:5e:a5:70:c3:88:c0:66:9e:10:8d:
36:ca:9a:4c:f9:18:d7:e6:88:c4:92:5f:24:56:31:
fc:72:10:ee:3e:6e:fc:3d:77:b6:31:4d:5c:33:2c:
38:88:da:4f:70:32:4a:ab:2a:23:60:0f:9c:79:fc:
e9:ec:f8:12:47:ff:2b:f6:bc:da:c4:b7:12:cc:da:
86:69:4a:7e:e6:7c:a2:58:9d:18:56:3f:ee:c9:7d:
6f:b0:9d:9c:36:8c:e4:18:df:da:d2:d4:24:d7:74:
b2:45:4d:66:ea:e8:2f:18:df:8c:e2:c2:f7:c5:e0:
ed:16:60:29:4d:01:2f:a0:5b:f9:ef:42:8c:72:53:
7a:1b:66:3c:7e:80:30:fe:e9:2c:31:9d:7d:9b:e6:
83:39:b7:be:61:3e:80:a0:2c:ad:b5:a2:48:40:dd:
0f:40:7d:43:d4:f5:f0:bb:2d:3a:11:8f:00:23:7a:
27:6e:39:ab:33:f1:4b:32:80:1e:75:be:8f:0e:9d:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8E:58:18:27:84:6B:2C:08:94:0B:59:F1:1C:B5:46:47:BA:EF:0F
X509v3 Authority Key Identifier:
keyid:88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:18:2e:ed:6e:0b:44:2e:8b:2e:2a:2b:77:b5:8b:05:b5:38:
76:fd:01:13:70:07:fa:ec:28:4d:ca:67:45:3f:9f:07:3d:7e:
3c:80:d6:97:02:df:62:78:15:de:1b:bb:29:3f:82:6a:9f:c7:
06:c7:97:96:1d:4e:d8:46:55:3a:88:22:e2:cd:07:ed:97:3f:
49:c6:35:34:18:ca:66:38:93:93:f0:9c:30:07:e7:26:53:01:
7b:4e:4c:3b:61:41:b1:e5:b1:d5:72:2f:bd:81:57:ae:9d:96:
12:61:0e:f1:f6:b8:1f:d5:9f:72:ed:52:7d:74:3c:9b:33:c3:
44:a2:f4:63:00:fc:bc:f2:1d:4e:96:a4:21:c4:92:d3:27:5d:
37:6d:59:33:88:3c:d5:49:35:64:de:7f:68:7b:50:7f:65:e7:
36:45:c7:bb:ed:83:07:a7:c5:55:44:30:4f:6f:6b:79:1b:c4:
a2:51:1b:1f:80:9f:0e:60:28:1b:6a:fa:0a:a3:5b:37:7d:bb:
2a:4f:e2:10:d5:da:ec:0e:40:84:66:7c:6d:4d:2e:da:47:ef:
9d:40:65:c1:56:2a:93:f5:d4:c6:f6:68:98:0c:d4:d7:3b:b9:
c0:94:18:57:31:56:12:d6:64:08:82:cf:1b:d1:05:04:a4:8b:
f6:c1:4c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 14:15:15 2026 by rpki-client