
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft
File: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft (raw, json)
Hash identifier: BNnq7W7qegSpAAW7w/Al6Kv65h2g4cMUsvX/nHMLdYM=
Subject key identifier: 24:26:6F:B8:55:98:09:1E:A5:C8:1A:36:23:B0:4C:F4:8E:78:E5:23
Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5
Certificate issuer: /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5
Certificate serial: 7DDD6EC70ACB4EAAC02D7B8C9E7C0431F3C5FFAA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft
Manifest number: 01DF
Signing time: Sat 10 Oct 2026 23:17:00 +0000
Manifest this update: Sat 10 Oct 2026 23:12:00 +0000
Manifest next update: Thu 15 Oct 2026 05:28:00 +0000
Files and hashes: 1: 323830333a3332303a3a2f33322d3332203d3e20323636373130.roa (hash: d0+wEbbwR2kTQu0lXgYAYWdTD0+C2PsPGF8JdfVP9Pc=)
2: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl (hash: h7rf77xm4gHMT2xzbTPSKtCt7ycNEE5oyg1d6zQEd7w=)
3: 34352e3233302e382e302f32322d3234203d3e20323636373130.roa (hash: PjdW6Gt115D0xt6IJ0qEdbS+zE7pSztNB769lXNLMxo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl
rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 05:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:dd:6e:c7:0a:cb:4e:aa:c0:2d:7b:8c:9e:7c:04:31:f3:c5:ff:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5
Validity
Not Before: Oct 10 23:12:00 2026 GMT
Not After : Oct 15 05:28:00 2026 GMT
Subject: CN=24266FB85598091EA5C81A3623B04CF48E78E523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:43:70:99:0f:17:a7:86:57:8f:2d:ff:d2:
6e:a3:33:45:0c:aa:1d:3a:93:75:76:58:b8:14:2f:
d2:fc:a0:98:f5:07:59:72:8e:23:56:51:e9:08:87:
2e:9b:5f:30:a1:92:f9:e7:53:44:f5:31:11:4d:68:
a2:1f:01:50:27:66:ca:b1:41:48:d3:88:8d:4d:4f:
f6:a8:7c:f0:51:1f:36:7f:60:01:2e:8d:33:37:12:
59:2d:a8:67:e0:db:00:13:77:8f:0b:b0:b7:bd:28:
67:d0:b9:00:7a:38:6f:fd:92:73:9e:35:f1:8d:fd:
ef:72:22:51:f8:85:f8:1f:65:fe:34:55:31:17:34:
3b:f3:93:2b:a5:5e:7d:96:1e:2a:be:20:ef:a0:5b:
1c:94:d2:a1:9d:e0:74:83:5b:7d:6a:68:28:fa:fe:
db:5b:71:54:17:e2:f3:ae:6c:b1:09:ed:93:05:09:
a2:80:36:42:22:50:ae:dc:78:a8:1e:b4:fc:f7:85:
a4:c3:ba:91:41:c8:cd:7a:a7:33:f6:14:55:ff:d8:
23:26:07:45:1c:e5:d5:b4:65:81:08:9d:02:d5:95:
ae:2e:03:85:16:c4:e0:d7:61:d5:47:18:82:56:f7:
fb:85:2a:d9:36:cd:a0:a3:b8:ce:c0:bc:7f:de:4a:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:26:6F:B8:55:98:09:1E:A5:C8:1A:36:23:B0:4C:F4:8E:78:E5:23
X509v3 Authority Key Identifier:
keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2c:90:2a:d8:59:ab:bb:48:b0:97:3b:e6:e3:82:6f:af:a5:
b0:ca:8e:69:44:4a:6b:38:a9:a3:3f:5d:73:bd:f7:ee:27:52:
1a:0b:43:18:07:80:2c:d4:a5:ff:b1:3c:f6:ef:5f:02:80:76:
18:9b:ae:78:99:f3:94:c7:dd:e2:2c:8e:d3:1a:0a:b1:99:e7:
02:87:bd:39:c6:ed:e7:7b:6a:74:5e:ca:09:b1:4b:e3:66:74:
bb:f4:61:5c:bc:c2:ac:ac:53:76:c4:6c:1d:c0:aa:2b:f8:69:
2a:9b:14:80:5b:65:2e:63:20:fa:a9:61:b4:28:af:53:59:2e:
8b:12:c8:32:5e:99:34:d9:71:f9:00:86:0b:6c:f1:cf:31:5f:
85:84:cc:24:44:a6:95:1b:75:96:b3:a6:54:9d:1d:92:5f:8d:
9f:3f:fe:91:34:a9:61:40:94:6d:27:56:a6:b9:76:d4:18:44:
48:31:25:d9:c6:09:3f:73:fe:cf:1d:69:d5:87:0f:f0:b3:6a:
2e:f2:21:36:81:8d:1d:b5:dd:08:84:f8:46:7b:c9:15:87:85:
4e:2b:a4:a1:33:f7:ce:ef:64:bf:95:ac:f8:39:ac:8a:d8:20:
0a:c6:0b:38:68:53:68:9b:86:4b:1d:b8:a2:7d:cf:9b:e2:a4:
0a:b3:1a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:37:33 2026 by rpki-client