
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
File: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft (raw, json)
Hash identifier: +oP2DyiIGTlBAs/y12gTGvXkX055tMXEWbu1iF9JvMM=
Subject key identifier: 86:68:6A:F2:24:D1:E6:11:FC:4F:02:12:2F:AE:4D:CE:45:C3:83:0F
Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8
Certificate issuer: /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
Certificate serial: 42890FDA1ACBFFCBBDCB6A51FB133429E94577EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
Manifest number: 01D7
Signing time: Fri 25 Sep 2026 02:01:13 +0000
Manifest this update: Fri 25 Sep 2026 01:56:13 +0000
Manifest next update: Tue 29 Sep 2026 21:35:13 +0000
Files and hashes: 1: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl (hash: SWJ4xDKsDu9Ps/N6BchIMgw6zBOYpmkH0kxpMUGhcv4=)
2: 323830313a31333a323830303a3a2f34382d3438203d3e203237393531.roa (hash: 7Ii/n0Wix6Zqak6Q/U1A56Cz+tHnXu1gP0IO47DgmfQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl
rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 29 Sep 2026 21:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:89:0f:da:1a:cb:ff:cb:bd:cb:6a:51:fb:13:34:29:e9:45:77:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
Validity
Not Before: Sep 25 01:56:13 2026 GMT
Not After : Sep 29 21:35:13 2026 GMT
Subject: CN=86686AF224D1E611FC4F02122FAE4DCE45C3830F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:dc:80:dc:91:3a:c1:b2:df:eb:e7:e9:cb:
26:a3:2b:27:aa:65:09:60:57:ab:6f:83:c6:28:a5:
b7:a5:0d:ca:c6:d9:20:43:be:ce:5a:3e:3e:88:45:
5f:b2:89:c0:8b:74:b3:f2:b8:e9:d4:40:6e:f2:36:
a0:45:5a:e4:e5:f3:e5:d4:00:ea:72:8a:d9:e7:a0:
08:90:d4:9a:d5:df:39:38:a2:95:80:b6:a6:3d:ec:
f8:08:8e:c8:f7:58:1a:99:d2:3a:5f:9e:43:54:ec:
de:bf:73:08:e8:1e:9d:93:cd:45:55:23:b3:42:2a:
bc:0f:71:12:fa:35:5c:d4:60:c9:1b:e0:29:9c:ed:
5d:57:ff:63:9a:98:ed:04:b3:93:44:99:f5:95:06:
2b:42:19:0f:94:30:f6:7b:f3:f7:3b:84:0d:f3:b8:
21:d9:6a:a4:a8:d4:8f:4f:ae:74:d0:a9:72:cc:94:
ef:7c:2e:27:5b:ef:1d:fd:3e:af:df:9e:1f:1e:a4:
dd:81:1c:3d:0b:b6:0f:56:7d:4e:71:4d:3c:90:c3:
1d:95:91:50:0a:a9:3f:51:a8:69:46:e0:00:da:54:
52:e0:94:07:46:85:aa:19:a6:37:4c:c3:55:1c:8e:
54:07:dd:3d:1b:0a:ff:19:f6:ea:a9:4b:6a:a6:95:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:68:6A:F2:24:D1:E6:11:FC:4F:02:12:2F:AE:4D:CE:45:C3:83:0F
X509v3 Authority Key Identifier:
keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f4:31:b1:1a:9e:92:0a:a1:87:77:e4:fb:9f:6e:d4:3d:68:
70:b0:2e:2e:d4:50:e7:63:56:32:77:21:c7:35:ff:3b:98:45:
fc:a5:c0:7a:e3:f6:61:3a:59:75:f7:6c:01:02:37:5e:5c:1a:
aa:47:8c:bc:c6:5c:95:63:55:d6:62:c0:5a:88:0d:ab:9d:55:
84:12:29:b2:9b:06:4d:2e:7d:96:38:f6:28:90:c0:be:0c:cb:
df:9b:d0:74:2a:ec:09:45:e6:aa:22:b3:8a:fe:b4:12:72:cb:
a4:a2:05:17:db:b6:67:5a:49:c1:26:be:4f:4e:32:97:fd:15:
f4:b8:d8:e1:d2:47:f9:52:10:cf:a1:ba:02:28:37:ac:0d:2f:
59:e3:e5:f2:49:e5:93:77:06:86:28:6d:1a:7e:af:49:19:d0:
60:7e:b6:21:ba:d5:cd:71:11:60:dc:42:05:ab:ae:e8:ee:f9:
e4:10:ba:e8:f0:54:9a:64:8b:1c:f2:9c:4e:25:f5:20:eb:ad:
05:91:5e:19:a5:46:fc:32:20:6c:04:39:42:03:04:42:d2:d2:
74:45:0a:7b:fb:41:b4:b0:4d:4d:fa:10:46:bd:83:f6:ab:13:
0e:3b:b1:00:e4:78:74:67:8e:a5:67:1f:68:b4:d5:ff:69:07:
d0:b1:50:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:40:27 2026 by rpki-client