
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft
File: 8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft (raw, json)
Hash identifier: 63kI25IOwOKIACvNqi2LUPQKkpsrR5Q91xBRLPq2uck=
Subject key identifier: 8B:BD:E3:91:CC:91:4D:97:C0:93:05:B7:C2:4E:32:74:6E:06:44:3C
Authority key identifier: 8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72
Certificate issuer: /CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
Certificate serial: 75BFABD4D40577332FFA1D1A55821FDA5407E62D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft
Manifest number: 0189
Signing time: Mon 27 Apr 2026 20:15:45 +0000
Manifest this update: Mon 27 Apr 2026 20:10:45 +0000
Manifest next update: Sun 03 May 2026 04:16:45 +0000
Files and hashes: 1: 323830333a663665303a3a2f33322d3438203d3e20323639393736.roa (hash: nDwa8tvW8ouU8NAYyUPsUCxuMQumbR0OLx66E1Y3O6s=)
2: 32342e3135322e34302e302f32322d3234203d3e20323639393736.roa (hash: lgtt2HWmPq7ECMsSiLj7kCx8cE1Jmjprt1Wdq0iA5Eo=)
3: 8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl (hash: AqKhr37lRPs2DX3JF0lECrksbgv7AKsFC9IX/AiPZR4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl
rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 03 May 2026 04:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:bf:ab:d4:d4:05:77:33:2f:fa:1d:1a:55:82:1f:da:54:07:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
Validity
Not Before: Apr 27 20:10:45 2026 GMT
Not After : May 3 04:16:45 2026 GMT
Subject: CN=8BBDE391CC914D97C09305B7C24E32746E06443C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:2a:39:48:c6:2a:c1:c6:da:02:66:8b:5a:
90:18:9a:d1:8e:6a:e3:72:c7:2e:56:10:1a:fe:12:
ca:a1:53:54:c8:95:57:94:1d:a1:9b:c1:cb:5f:54:
cc:2c:93:6f:57:f5:58:e8:08:9d:d7:4c:52:0a:fa:
2e:41:69:e8:5a:93:28:ab:db:b4:c2:7d:e3:e5:47:
c6:69:82:b8:a8:c5:a2:d8:7f:5d:69:eb:c0:d3:94:
f3:5d:e2:be:41:72:08:a8:28:b9:3b:a1:50:d3:4f:
81:c6:12:47:34:70:e8:41:fd:7a:fc:df:99:6a:e1:
ca:cf:7e:80:65:c1:60:47:a5:15:90:eb:4d:f1:03:
89:b1:10:bf:1d:d3:29:05:aa:ad:f7:01:6d:ad:79:
21:33:10:c5:59:95:3f:aa:9f:9a:9c:d0:6d:4e:47:
f8:5e:e7:1b:50:78:3d:0a:6b:db:df:7b:9d:90:88:
97:ea:5e:5d:ff:cc:43:6e:47:d8:be:7c:09:9d:d2:
01:36:30:19:44:51:71:e0:6f:4b:f3:90:3b:5f:df:
49:6b:f0:f4:d6:78:30:74:2a:c9:45:b3:6f:b1:f9:
e3:30:67:21:b5:95:f0:97:8b:cd:fc:cf:63:17:cb:
0f:8c:15:31:49:82:9a:24:1e:41:33:97:d0:7f:eb:
d0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BD:E3:91:CC:91:4D:97:C0:93:05:B7:C2:4E:32:74:6E:06:44:3C
X509v3 Authority Key Identifier:
keyid:8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:56:7e:c2:1a:55:6c:a0:89:b8:d9:76:77:dd:dd:a3:8d:f7:
1b:81:53:fa:b0:5e:79:11:55:c4:07:db:c9:ee:f4:91:d9:76:
f7:ef:df:bd:b8:6b:65:66:c0:77:34:61:ad:65:b6:14:33:8d:
6e:12:e7:53:fe:2d:b3:79:93:23:19:43:ff:d4:97:ba:39:de:
19:61:f3:25:03:10:87:dc:1d:a4:28:04:9d:63:da:c8:12:f7:
b6:f9:8c:d4:8c:e6:7d:90:27:d4:1b:87:a9:cb:fa:e6:98:79:
ed:af:70:54:d4:89:35:7d:51:31:75:22:a9:06:72:6e:70:43:
41:42:5e:65:e3:4c:b5:57:d5:46:f2:90:c4:17:9d:f7:d2:79:
be:b5:4c:95:53:90:43:e9:c0:3d:08:5f:12:e3:8e:89:5f:71:
fa:ab:61:d1:9a:fe:c3:47:20:4d:c4:86:65:97:c2:58:df:e9:
33:38:6b:62:97:f5:c0:8a:91:71:15:5a:11:be:04:9d:bc:5f:
8d:70:8b:a9:05:37:a2:94:89:13:ea:55:0b:a6:a9:d2:ad:a8:
a7:fb:57:55:35:f3:f4:b9:14:ab:c5:3c:5b:a8:14:b3:9b:fd:
fc:64:b7:44:13:c7:63:bf:94:ea:ec:46:e0:cd:a4:89:f1:cc:
2a:5e:d2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 05:51:48 2026 by rpki-client