
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
File: AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft (raw, json)
Hash identifier: BwtDpBOlnnJ8latxKrPbOM6LJd9KTgWgvVqfyUh2P3Q=
Subject key identifier: B4:5D:36:3E:61:05:96:0A:23:47:13:3D:E1:40:37:70:CE:C4:3C:7C
Authority key identifier: AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2
Certificate issuer: /CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2
Certificate serial: 5B7D03BAB555FA37D9A3CDEBCCD3223995510C8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
Manifest number: BF
Signing time: Wed 29 Jul 2026 00:12:31 +0000
Manifest this update: Wed 29 Jul 2026 00:07:31 +0000
Manifest next update: Sun 02 Aug 2026 02:10:31 +0000
Files and hashes: 1: 323830333a643964303a3a2f33322d3332203d3e20323734313538.roa (hash: 7RJK0Em0iwss8nYTAQelXTOjROtUTUP647/HD5UXgUI=)
2: AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl (hash: N7C14GDJZpc3zDYKHgLw7dplCykwmdWHIf0q551lpfQ=)
3: 3230302e33332e3130382e302f32342d3234203d3e20323734313538.roa (hash: b0YAaScv5fcisUrBcb579zgag15WT+TTXxx7hMhEMKs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl
rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 02 Aug 2026 02:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:7d:03:ba:b5:55:fa:37:d9:a3:cd:eb:cc:d3:22:39:95:51:0c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2
Validity
Not Before: Jul 29 00:07:31 2026 GMT
Not After : Aug 2 02:10:31 2026 GMT
Subject: CN=B45D363E6105960A2347133DE1403770CEC43C7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:b2:0a:2a:a9:b6:6f:8b:d4:80:87:e7:98:
c3:d9:32:41:01:d4:20:81:44:34:a7:7f:b2:be:1b:
bb:62:56:82:3c:cc:7d:68:65:22:c8:e7:c7:cf:44:
be:ba:03:87:e9:03:28:d7:cf:58:c0:39:25:19:ce:
d7:7b:f8:c4:3f:64:76:d3:be:58:8d:8c:91:d2:23:
4f:20:4b:eb:ca:d8:e5:9d:b3:37:47:00:d3:3d:04:
ce:77:af:50:e5:54:b4:ff:54:8f:88:9d:0f:66:0f:
22:ec:47:c6:47:62:cb:5e:2f:3f:4d:83:a2:f0:b7:
f4:9c:b4:ef:83:4c:5f:50:39:a1:b7:2a:c7:fc:41:
62:73:ce:2f:94:5b:35:d1:d9:fa:4e:89:84:cd:08:
e6:f2:e9:56:a3:d8:a3:62:a7:ae:34:3b:e9:80:d5:
dd:7d:f0:d5:38:12:3f:19:d3:6f:ab:73:b8:9e:ef:
f1:96:c7:ca:86:3e:5a:15:53:f1:5d:bd:2a:fb:ba:
3d:db:57:4c:04:77:8c:8d:37:38:7b:eb:a9:1a:e6:
83:ee:0a:41:cf:6c:fc:1b:df:bc:c6:99:a0:c9:8e:
13:b1:f6:c4:b4:59:03:ee:d3:65:4f:fb:69:54:45:
04:a7:32:f1:d1:56:9d:aa:2b:46:47:1e:1e:3e:b6:
ac:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5D:36:3E:61:05:96:0A:23:47:13:3D:E1:40:37:70:CE:C4:3C:7C
X509v3 Authority Key Identifier:
keyid:AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0d:38:5c:1e:c6:74:12:75:3f:ea:99:25:2e:3f:e5:99:6e:
ce:98:0c:d4:bd:40:c8:65:c7:4f:80:b1:af:2b:f9:fe:bd:eb:
27:ed:11:0f:3a:90:ed:61:12:47:db:05:75:bd:91:a6:26:d0:
3d:30:ca:bf:55:69:f0:19:18:be:d4:a5:0d:bf:d7:13:34:ce:
e0:48:36:a1:f1:eb:2d:39:6a:9b:33:57:41:2a:a8:1a:ec:48:
df:d8:0a:71:13:05:36:e9:dd:c1:a7:d3:b1:9d:90:33:e3:ec:
52:e8:dd:fd:ee:27:c6:08:91:e8:50:6d:55:5f:17:a6:48:a3:
8d:d6:7e:05:ad:bf:76:e5:9d:0c:c1:97:96:ec:96:60:fc:6a:
8f:4e:2c:4a:c7:38:8a:16:c1:dd:84:d2:38:c0:18:c5:0c:2d:
37:03:ad:10:c8:3c:d0:7a:06:73:dd:10:5b:0d:08:fd:14:78:
39:37:fe:6e:6e:46:5a:2f:04:0e:a9:08:38:7c:d6:17:c4:43:
fd:25:15:6f:e8:d0:aa:6e:b7:81:52:61:7e:00:ae:6e:51:e9:
8e:b1:85:25:7b:44:ba:d7:43:c9:85:d7:b3:fb:39:94:da:ab:
a9:33:95:0c:8f:e5:f0:47:fc:45:c3:7d:73:de:5a:41:0b:d4:
52:ba:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:50 2026 by rpki-client