
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.mft
File: DEB0660E0FB445D40E3783241A89F0309182FEF5.mft (raw, json)
Hash identifier: h/1VewwsUesH907NqimtoJHffWdjEFdx2LDeb1FWaM8=
Subject key identifier: A3:C8:1C:C5:03:01:AA:9C:C2:8B:08:90:D5:07:7C:47:F9:0D:6F:04
Authority key identifier: DE:B0:66:0E:0F:B4:45:D4:0E:37:83:24:1A:89:F0:30:91:82:FE:F5
Certificate issuer: /CN=DEB0660E0FB445D40E3783241A89F0309182FEF5
Certificate serial: 2CF817FEFDD5244490DE9592E6EA07755680F02B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.mft
Manifest number: 01DE
Signing time: Sun 18 Oct 2026 18:02:09 +0000
Manifest this update: Sun 18 Oct 2026 17:57:09 +0000
Manifest next update: Fri 23 Oct 2026 21:05:09 +0000
Files and hashes: 1: 3137392e302e3230382e302f32302d3234203d3e20323633323332.roa (hash: 3EbOoSSQAg6Lci2PP77e0ZYH3FYHRLnMGj5RJxst3To=)
2: 323830333a346538303a3a2f33322d3438203d3e20323633323332.roa (hash: 9KYbMB9lGmJq018qRfVIKmodp/kTsN76M/Wj4TWl9lA=)
3: DEB0660E0FB445D40E3783241A89F0309182FEF5.crl (hash: Ui/zrGcF70tSGMl+nOWACeqAyvTXnipptFL30vQ3cHA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.crl
rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 23 Oct 2026 18:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f8:17:fe:fd:d5:24:44:90:de:95:92:e6:ea:07:75:56:80:f0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEB0660E0FB445D40E3783241A89F0309182FEF5
Validity
Not Before: Oct 18 17:57:09 2026 GMT
Not After : Oct 23 21:05:09 2026 GMT
Subject: CN=A3C81CC50301AA9CC28B0890D5077C47F90D6F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:cd:c0:60:80:31:f2:ba:ac:ff:e1:6e:0a:
5e:1a:c5:14:d0:52:34:bd:f4:0c:89:a9:de:b7:6c:
77:87:e0:0c:14:04:5c:54:bf:bb:85:d1:07:86:1f:
a4:cb:8e:f0:bc:10:b8:03:ac:d4:3b:54:07:71:c4:
db:bc:ec:2d:b3:30:7b:66:69:1c:1a:2f:c0:dd:57:
8d:03:75:3f:72:02:a6:b8:bb:a7:3b:09:b9:a0:85:
cc:03:dc:d2:7c:87:00:8d:39:91:3b:47:43:0f:02:
8f:be:99:23:41:b6:e2:b4:b6:69:92:12:91:13:b7:
36:9e:3d:93:ea:79:7f:b5:de:4b:0f:3f:40:5b:15:
6f:84:65:ba:07:48:30:19:45:78:c5:dd:b5:a5:95:
84:05:fc:af:d8:a0:8d:d0:01:15:6d:f5:0f:b6:69:
6b:35:cd:42:3b:f9:78:80:40:c9:2f:09:69:ff:e4:
a7:2d:d3:ce:64:04:30:bd:c4:e8:eb:82:5b:e7:91:
53:ed:3f:12:07:63:43:c7:41:ea:12:3b:41:af:22:
6a:b3:4e:8a:51:01:16:53:5e:37:52:f9:52:2f:ff:
7a:25:a5:41:95:fe:2d:81:7e:f8:18:41:df:bc:78:
6f:12:09:1e:2c:c7:60:cb:3f:c7:f7:26:d5:b0:f8:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C8:1C:C5:03:01:AA:9C:C2:8B:08:90:D5:07:7C:47:F9:0D:6F:04
X509v3 Authority Key Identifier:
keyid:DE:B0:66:0E:0F:B4:45:D4:0E:37:83:24:1A:89:F0:30:91:82:FE:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8e:22:6b:41:84:90:fa:78:9d:62:30:47:ad:1f:03:47:c1:
a8:eb:c3:f2:37:85:63:8d:61:1d:cd:3a:d7:f3:a6:54:9f:82:
ee:62:a0:2d:bd:26:17:da:64:58:d3:f4:1d:09:75:e9:33:17:
38:48:93:f2:65:02:d1:e4:25:07:5c:de:c5:9d:25:9b:66:1f:
39:d3:b3:f9:97:f5:13:c3:43:7a:5f:da:55:52:c5:75:75:03:
b7:6b:e1:7c:02:a3:37:3b:31:90:36:dc:e8:36:25:d0:0d:e5:
de:d8:3c:49:7c:00:ef:69:6c:c6:fb:1c:d1:34:b9:a2:1f:27:
c0:df:5b:43:87:eb:3e:a4:7d:73:1b:3d:7b:d8:95:59:f0:fb:
78:9a:26:ea:e8:67:25:b7:0f:f8:fd:1e:7f:e7:1e:6e:54:d1:
a0:3d:09:ad:54:2e:30:19:d2:ba:70:d3:7c:2f:9e:d5:be:19:
50:a4:a0:07:12:05:95:cd:fb:62:3d:5a:ef:e4:06:be:4f:da:
70:47:1a:7f:85:e7:16:98:02:77:da:9d:5a:98:88:d7:05:7a:
ee:00:57:8c:f6:32:ca:a7:fa:3d:1b:26:0f:46:e7:5c:75:08:
f5:9d:b1:9d:71:57:96:45:b7:91:03:fa:40:a5:49:0d:35:f0:
3d:f8:00:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:59:41 2026 by rpki-client