
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft
File: AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft (raw, json)
Hash identifier: wrF/h/6vXRTvedsDMQzCqGOUvEPT8m8Pt6ViyhCD3A4=
Subject key identifier: 9D:B9:DE:0B:DA:33:25:8F:06:AC:6D:A2:0C:A5:41:A4:69:66:54:DF
Authority key identifier: AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00
Certificate issuer: /CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400
Certificate serial: 15A25164277FD661F7C5D9F02B57F07822A0905B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft
Manifest number: 01CD
Signing time: Mon 24 Aug 2026 13:19:59 +0000
Manifest this update: Mon 24 Aug 2026 13:14:59 +0000
Manifest next update: Sun 30 Aug 2026 08:14:59 +0000
Files and hashes: 1: 34352e3232342e3230322e302f32342d3234203d3e203238313130.roa (hash: RfgHnKxnwzeCcsSQKv/eqA4SzvI7BtLaRvAxSM4jxzA=)
2: AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl (hash: gzVav7dJKGMxQgFgjuMO6imVIsOibkKcF3R9fIxgpAI=)
3: 34352e3232342e3230322e302f32342d3234203d3e20323636393037.roa (hash: xslvgn/MXIkldjGCcYYuvg586s3T/JwWgVZMkj/qTr4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl
rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 30 Aug 2026 08:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a2:51:64:27:7f:d6:61:f7:c5:d9:f0:2b:57:f0:78:22:a0:90:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400
Validity
Not Before: Aug 24 13:14:59 2026 GMT
Not After : Aug 30 08:14:59 2026 GMT
Subject: CN=9DB9DE0BDA33258F06AC6DA20CA541A4696654DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:9f:f2:35:b1:64:a6:ca:e7:5d:ca:44:49:
1b:a0:13:ba:69:c3:e9:11:2f:e1:46:10:4d:64:91:
44:85:c2:1d:73:42:3b:32:4a:22:50:2f:eb:dc:bd:
d1:43:67:19:34:89:cc:62:ec:7d:59:3c:5c:94:33:
3c:77:f5:26:94:f8:f8:a4:94:7e:69:19:eb:e4:d6:
4b:ad:49:ab:05:0f:bb:90:d4:19:8b:ef:d2:b8:e0:
5b:28:d7:7f:50:a8:6e:68:89:0f:36:1c:55:b9:19:
63:d7:78:58:56:06:ec:76:9a:83:8d:a2:9e:b2:89:
28:55:23:af:1a:a0:23:70:45:12:22:53:7b:08:b7:
c9:92:30:d9:e3:a5:0b:2b:8d:de:51:b9:69:c0:64:
08:cd:f5:5c:51:21:fa:65:52:00:3c:e2:d2:23:ea:
1f:fc:05:9a:d1:91:f7:60:52:65:ff:9f:bb:22:6d:
e9:ee:86:0a:0c:30:fe:e2:89:b0:e1:85:d0:8b:bb:
af:ab:d8:fb:d9:b7:6f:43:7c:1a:26:c1:14:01:61:
68:f0:73:30:83:5c:25:46:6a:36:b3:89:0f:91:8b:
94:99:e0:60:3b:be:32:26:80:f5:14:fc:d9:d6:c8:
87:0f:51:7c:ca:fe:ec:c8:fd:57:b6:20:99:c7:b7:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B9:DE:0B:DA:33:25:8F:06:AC:6D:A2:0C:A5:41:A4:69:66:54:DF
X509v3 Authority Key Identifier:
keyid:AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:05:54:3c:33:bb:55:85:0d:97:32:5f:e7:5d:45:52:8b:3e:
be:a2:40:98:32:72:14:7f:73:df:be:0b:1d:85:b6:b5:f7:8a:
a5:fb:d8:a8:01:e7:a3:f4:c4:a7:4a:e2:70:41:46:7b:52:41:
c1:77:67:9c:f7:ee:42:a7:18:43:dc:7c:0b:bf:03:bd:f2:75:
4c:66:63:6b:e3:fe:9b:29:02:16:e8:fe:41:34:60:aa:9b:46:
84:48:9f:84:09:97:6b:76:02:8e:f4:36:68:40:30:db:72:e5:
81:c3:a1:87:40:7a:b5:d7:82:12:f8:bf:e6:5f:5d:d0:c2:27:
a3:da:f9:1b:18:78:ae:1d:f8:99:cc:c3:78:d0:79:66:c8:00:
5f:4e:36:4b:41:00:76:54:47:67:c8:13:37:4c:4f:fa:3f:35:
af:2e:da:f4:3e:97:8d:a2:88:9a:c5:cf:92:c4:a8:a8:de:0d:
b5:b0:7e:30:c8:77:4d:bf:61:be:d7:a8:8b:22:0e:47:0a:83:
cb:b8:ef:cf:23:19:dc:30:a2:84:d3:b6:73:3e:85:20:b4:7e:
b0:49:63:a9:7c:d2:ea:fb:d1:24:1b:57:3a:25:64:aa:d0:87:
33:66:2c:f9:62:ad:60:ec:cc:6b:bd:2b:e3:b8:bb:38:dd:7a:
2b:56:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:52:45 2026 by rpki-client