
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft
File: 89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft (raw, json)
Hash identifier: bamJRfupZSxjybmRCCkvllfd2BvkfY8LA0mMfxPWOR4=
Subject key identifier: 85:4C:20:74:18:38:7F:50:C4:2A:E1:4F:C2:86:C8:0A:77:9C:85:88
Authority key identifier: 89:D9:CC:04:70:C7:AC:B3:61:4E:88:23:D1:7A:12:7C:C1:79:6D:04
Certificate issuer: /CN=89D9CC0470C7ACB3614E8823D17A127CC1796D04
Certificate serial: 78DD8EB3600DB3BF9DE98112F93B1EF4AAC4BADE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft
Manifest number: 0179
Signing time: Tue 24 Mar 2026 12:55:52 +0000
Manifest this update: Tue 24 Mar 2026 12:50:52 +0000
Manifest next update: Mon 30 Mar 2026 03:18:52 +0000
Files and hashes: 1: 89D9CC0470C7ACB3614E8823D17A127CC1796D04.crl (hash: OntUcpYjEULQQXdBRZHTmwWwS92FL9mr9h6NCtQvozs=)
2: 3230312e3135382e302e302f32312d3234203d3e203238353134.roa (hash: 2antrxF+gAlA7/8d77vgevgQx+le1b+6FkbKIJn3uIs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.crl
rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 03:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:dd:8e:b3:60:0d:b3:bf:9d:e9:81:12:f9:3b:1e:f4:aa:c4:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89D9CC0470C7ACB3614E8823D17A127CC1796D04
Validity
Not Before: Mar 24 12:50:52 2026 GMT
Not After : Mar 30 03:18:52 2026 GMT
Subject: CN=854C207418387F50C42AE14FC286C80A779C8588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:55:e5:73:2c:37:e2:49:68:11:45:dd:b4:
20:45:72:60:a5:01:bf:83:d3:8e:78:b6:e2:6a:64:
e0:e1:78:c0:70:ab:df:9e:a2:6e:01:0a:da:71:66:
a0:12:75:5a:35:57:8f:ef:e8:8a:2a:6a:e7:db:85:
8b:5d:6f:70:2d:bb:ce:7a:ac:8b:0b:cc:bc:57:c4:
71:74:7f:14:ce:6c:4d:7b:82:03:ec:98:c7:7d:24:
14:dd:40:fd:f5:c1:6c:81:bc:7a:40:08:b5:07:d6:
e1:27:10:7a:f7:81:cd:86:ff:e0:9f:0d:79:ca:84:
12:10:6c:9d:d2:51:2a:a1:d3:12:a3:7c:f2:3d:20:
51:98:2f:54:20:a1:04:28:93:a9:1b:37:5d:b1:41:
c3:3c:63:78:93:8f:22:81:96:0b:e0:e9:16:47:93:
06:99:3b:ea:c5:eb:b5:59:22:4f:01:01:24:33:4f:
16:c0:46:e8:82:17:bc:63:90:0b:18:18:53:ac:ad:
7d:d9:cb:4b:1a:0d:bd:0d:cd:44:cb:99:db:f1:3f:
90:d4:be:9c:09:a7:9a:96:7f:57:e4:7d:9b:05:db:
82:fc:3b:72:86:bd:05:46:9a:dd:be:d5:13:6d:a3:
85:fd:33:50:cb:ea:c5:e1:1d:4d:5e:35:0e:b9:cc:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:20:74:18:38:7F:50:C4:2A:E1:4F:C2:86:C8:0A:77:9C:85:88
X509v3 Authority Key Identifier:
keyid:89:D9:CC:04:70:C7:AC:B3:61:4E:88:23:D1:7A:12:7C:C1:79:6D:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bd:09:42:36:49:44:fd:b6:1d:83:92:2f:fa:44:b0:8a:71:
d6:ad:72:04:8a:65:b9:47:64:86:a4:4b:bd:7d:39:3d:24:a1:
68:11:5b:a6:6d:a1:4a:f2:f1:6c:de:0f:e8:67:50:2c:b2:d1:
a5:8c:22:01:70:10:54:b7:a6:87:61:2b:d0:42:77:bb:f8:e4:
52:a2:ab:8f:ea:44:4c:64:92:f8:4d:1f:92:68:9b:81:3d:3d:
a7:f7:f1:90:3a:98:b1:97:4f:d4:a4:a9:cb:0d:a2:c5:1e:ad:
96:4e:d0:aa:c8:6d:3c:3f:a1:ee:25:96:2e:5a:8b:a9:e6:a9:
22:59:38:15:a1:a7:34:f4:8a:74:4c:54:46:64:df:50:fd:70:
61:2c:85:2b:07:d7:57:d2:b5:6c:01:03:cd:65:4a:b2:6f:2f:
6e:d8:e5:49:94:18:a7:2c:30:c8:f6:06:b3:4e:24:13:ef:84:
03:7c:da:e5:36:93:c3:e2:fe:b4:31:78:b4:0e:2b:b1:bb:36:
2a:04:7e:bd:dc:50:11:00:0d:d3:ae:eb:2f:7a:fc:ec:c4:53:
d0:8b:85:11:56:13:f4:ec:c5:57:9f:18:c1:e9:ff:1d:49:17:
3f:70:2a:9f:18:99:79:4e:05:00:3d:25:a6:b5:3a:f8:b1:4d:
21:f4:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:10:20 2026 by rpki-client