
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft
File: 24CA8C9C613F74DE73C0153A83A206D0476833FF.mft (raw, json)
Hash identifier: GOvBACMRHmrsDFCnWesj0h6wc+eVHxJApL5plzvrqvs=
Subject key identifier: 2B:DC:A2:0F:92:EE:B2:B8:2D:B8:63:69:E5:56:C3:15:E4:CF:47:65
Authority key identifier: 24:CA:8C:9C:61:3F:74:DE:73:C0:15:3A:83:A2:06:D0:47:68:33:FF
Certificate issuer: /CN=24CA8C9C613F74DE73C0153A83A206D0476833FF
Certificate serial: 17CAFFB66A9A82ECE1647F6FF448ADCF7C89A86E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft
Manifest number: 01DD
Signing time: Thu 15 Oct 2026 15:20:21 +0000
Manifest this update: Thu 15 Oct 2026 15:15:21 +0000
Manifest next update: Wed 21 Oct 2026 09:57:21 +0000
Files and hashes: 1: 34352e3138322e34332e302f32342d3234203d3e203532343638.roa (hash: dB2lynmAIZvV7C+U7A246s3SWRcj9aLqcpEqrn0Mhvw=)
2: 323830333a623536303a3a2f33322d3332203d3e203532343638.roa (hash: 5+3TQxesNfVEYJlhy65H96NZvctd4zdnGw44MZr6Qbo=)
3: 24CA8C9C613F74DE73C0153A83A206D0476833FF.crl (hash: 6s+LmyRkXb0FHwNHLM/0Loe+tiOT2TS4IY2WevC252U=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.crl
rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 21 Oct 2026 05:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ca:ff:b6:6a:9a:82:ec:e1:64:7f:6f:f4:48:ad:cf:7c:89:a8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24CA8C9C613F74DE73C0153A83A206D0476833FF
Validity
Not Before: Oct 15 15:15:21 2026 GMT
Not After : Oct 21 09:57:21 2026 GMT
Subject: CN=2BDCA20F92EEB2B82DB86369E556C315E4CF4765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:c9:d3:1a:53:87:f6:d2:72:30:00:82:fc:
c1:ef:47:6f:30:18:85:8e:50:05:9b:fb:8c:11:17:
5e:70:76:47:bd:d0:9b:de:63:2a:14:61:5c:7d:f8:
6b:6d:f1:f6:19:d7:64:66:d0:04:b2:11:f5:cd:2d:
10:f2:76:e2:b7:16:56:75:04:20:94:24:f1:61:34:
86:54:e5:0b:cb:b8:1c:d2:49:a0:0a:41:fd:ba:5b:
e9:fc:ea:37:76:c4:8c:b0:d6:61:ac:6e:c1:3c:34:
0a:af:16:57:d4:63:e8:1d:be:2f:2b:fa:39:c1:3e:
49:6c:0a:91:04:12:0f:98:0a:ac:e7:19:b5:4e:07:
30:5c:25:45:be:b7:b7:e2:89:21:de:cb:6e:d5:ab:
c1:cc:be:07:01:80:e0:a2:c0:36:6e:e6:f8:ec:4d:
b7:b1:f3:31:49:b6:67:c0:82:47:4d:00:6d:aa:99:
2b:b3:c7:c4:9a:eb:6e:1d:6f:f8:6c:22:f2:0a:c3:
73:9e:97:49:f7:ac:7a:d9:a9:be:25:bc:35:dc:95:
b7:46:a0:21:5c:6d:1f:76:ca:ae:04:2c:a3:13:2a:
bc:73:1d:1c:42:f5:70:16:a1:f4:fc:c8:c9:9b:30:
dd:38:ec:c5:30:d8:93:cc:57:ee:da:68:7a:54:7d:
15:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DC:A2:0F:92:EE:B2:B8:2D:B8:63:69:E5:56:C3:15:E4:CF:47:65
X509v3 Authority Key Identifier:
keyid:24:CA:8C:9C:61:3F:74:DE:73:C0:15:3A:83:A2:06:D0:47:68:33:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ae:a8:1e:bd:1f:55:6b:19:fb:c0:23:d4:58:f7:67:c2:8f:
98:18:80:74:6e:28:73:63:d5:16:ac:d4:a9:08:ec:2f:c3:11:
0d:2c:28:8b:d7:20:a4:e5:6f:ca:74:87:6f:ea:b2:76:4a:b3:
29:d3:8c:14:2b:a4:8c:86:28:39:61:ac:bf:5b:bd:cd:40:6f:
51:86:f4:d2:0a:6e:45:bc:4b:b5:aa:99:81:18:bf:e4:7e:cd:
4e:a0:f1:f5:d2:f1:37:bd:14:8d:6c:9a:0a:26:c9:24:d8:df:
2b:40:9b:e3:d8:2c:0a:43:44:d1:76:7b:4e:77:a8:15:57:24:
31:de:a6:e5:51:4f:8b:69:17:7b:2f:a9:c8:f6:9c:fc:d6:12:
77:ea:56:c4:5d:cf:95:c6:9e:72:4e:3d:28:3b:bd:43:d5:8a:
54:4f:88:0d:d9:23:af:34:df:20:06:1b:55:9f:a4:ad:f9:00:
6b:51:e1:11:2d:61:44:df:0a:d0:8e:61:a2:f6:14:4a:d0:a8:
92:0a:9b:1a:3c:22:ed:64:a1:bd:5d:08:24:66:97:a8:f3:7e:
92:78:4c:6c:ff:20:16:bd:22:8b:90:6f:f9:4f:1c:95:e1:f6:
08:26:54:41:23:56:39:a0:a3:0e:a7:60:3b:f4:bd:59:c6:e2:
f7:5e:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 03:23:15 2026 by rpki-client