
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft
File: AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft (raw, json)
Hash identifier: BAMK4p9KDjNCAUCgCJRh6bubPxYV3hTpqOl04lwpvD8=
Subject key identifier: 3A:97:2F:CE:D5:72:20:2E:CC:2F:E2:1F:D0:84:0D:F9:DC:9B:AC:2A
Authority key identifier: AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00
Certificate issuer: /CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400
Certificate serial: 2CAB8DA5CAB08D4C76B902FAD3CE5C5956CCBD85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft
Manifest number: 019D
Signing time: Mon 25 May 2026 16:11:54 +0000
Manifest this update: Mon 25 May 2026 16:06:54 +0000
Manifest next update: Sat 30 May 2026 06:53:54 +0000
Files and hashes: 1: 34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa (hash: xslvgn/MXIkldjGCcYYuvg586s3T/JwWgVZMkj/qTr4=)
2: 34352e3232342e3230322e302f32342d3234203d3e203238313130.roa (hash: RfgHnKxnwzeCcsSQKv/eqA4SzvI7BtLaRvAxSM4jxzA=)
3: AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl (hash: R1A84SqdxTBYEQsUJRJhEADUGuqBHeD7hGxcA8zLFVQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl
rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 29 May 2026 05:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ab:8d:a5:ca:b0:8d:4c:76:b9:02:fa:d3:ce:5c:59:56:cc:bd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400
Validity
Not Before: May 25 16:06:54 2026 GMT
Not After : May 30 06:53:54 2026 GMT
Subject: CN=3A972FCED572202ECC2FE21FD0840DF9DC9BAC2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:c8:c8:37:30:dc:62:93:22:0e:3d:e0:09:
9f:2d:be:63:1a:68:d1:a0:4b:95:f2:c2:0e:f5:00:
05:5f:c8:43:68:23:db:e4:da:c9:d2:a3:58:1f:9d:
f0:8d:c6:e5:69:5d:56:cb:c8:d4:2c:80:b3:3a:cd:
80:de:df:ff:9d:41:62:e3:10:c0:6f:61:13:79:ee:
14:60:07:90:27:07:74:cc:54:fd:8a:a3:79:5d:b5:
d6:f8:58:0f:c4:1c:45:07:88:19:ad:45:fa:c1:38:
19:ea:d3:55:97:cd:95:27:62:47:96:95:17:b5:7a:
e4:87:a3:a9:e0:53:3a:58:d5:33:d1:77:08:68:ce:
1d:e2:7c:e3:14:23:9d:60:3d:fd:f6:4f:33:c0:ea:
3c:d8:c1:9c:50:b3:21:29:62:67:14:eb:d9:5a:de:
54:10:bc:4b:7c:25:27:a1:26:2a:e2:fd:87:a0:54:
f5:87:97:83:71:a6:cf:2d:1c:c3:8e:ee:fa:14:95:
b3:07:8a:21:09:9a:0b:d0:9d:e1:a3:c1:b7:c0:51:
dd:f2:25:9c:29:80:a0:6d:3e:97:e8:4f:c9:ef:a3:
80:79:fe:aa:8a:a3:6b:10:65:2a:0d:29:f8:37:2d:
88:38:83:7b:41:90:97:ca:24:b1:12:7d:50:2e:0a:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:97:2F:CE:D5:72:20:2E:CC:2F:E2:1F:D0:84:0D:F9:DC:9B:AC:2A
X509v3 Authority Key Identifier:
keyid:AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6c:36:ae:b7:fe:53:5a:08:f8:77:ca:3d:a6:aa:ec:c6:f6:
43:70:78:f8:4f:7b:c0:89:ed:47:f8:51:77:2b:b3:79:12:31:
4d:54:4a:76:79:5e:1b:6a:8d:bc:8b:44:70:40:88:26:b6:53:
b8:6b:ea:6f:5c:0e:6b:66:5a:b4:96:03:d0:98:a2:94:20:00:
3b:e9:b3:4a:73:3e:fc:b2:35:ee:fd:a6:7d:24:da:7b:f1:f8:
eb:ec:67:35:23:9c:41:8a:f6:8e:a2:b6:40:ed:ab:dd:45:b0:
b2:15:39:b0:e4:04:f5:0e:4b:66:2f:d7:2d:e7:93:4b:a3:f3:
4e:c5:f4:43:e0:a1:df:53:c6:c9:1c:89:6a:c7:b2:20:eb:a3:
65:2b:16:e2:9c:0a:ce:44:31:f1:90:6e:19:4f:f9:3e:11:90:
cc:2c:e0:9c:89:64:53:b0:f6:04:b0:6b:bf:c4:3f:57:90:3c:
57:6b:61:a8:30:ff:e8:57:c7:af:41:f5:32:45:00:d3:d9:d1:
7b:8e:b7:98:60:5e:e4:89:78:19:b2:e6:1e:e3:d2:2d:fe:68:
24:f4:18:4b:39:f1:93:d3:79:e1:1a:89:6c:53:a2:15:c1:49:
0e:27:be:a4:8e:7d:83:3b:52:e1:57:be:57:1f:03:8a:2b:38:
a0:ee:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 07:48:58 2026 by rpki-client