
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json)
Hash identifier: 9Z5NNut7s2dRdTJKfOKbtAFhNVBQF6Rb6YAMj4RuILo=
Subject key identifier: 7E:81:CB:47:AE:53:CE:8A:54:E9:87:CA:08:A6:63:FE:BE:40:15:90
Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Certificate serial: 4E2F52569162A5C53994AA49A74AC9B07A452F51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
Manifest number: 01D6
Signing time: Sun 04 Oct 2026 07:42:25 +0000
Manifest this update: Sun 04 Oct 2026 07:37:25 +0000
Manifest next update: Fri 09 Oct 2026 20:33:25 +0000
Files and hashes: 1: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: gxIzBxX178ncK53evtDc0uCy8AUoT69xHMOF7G1Ae9k=)
2: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=)
3: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: 4YT76mg5dITWNiH2hE5kgjyBgua4a3LhZgbWUTw9x8I=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl
rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 07 Oct 2026 22:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2f:52:56:91:62:a5:c5:39:94:aa:49:a7:4a:c9:b0:7a:45:2f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Validity
Not Before: Oct 4 07:37:25 2026 GMT
Not After : Oct 9 20:33:25 2026 GMT
Subject: CN=7E81CB47AE53CE8A54E987CA08A663FEBE401590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:7a:06:56:d6:c2:1f:9e:69:94:4f:c4:d1:
3c:36:cd:6d:ac:6f:21:d9:d5:4d:7f:b1:5f:e9:6c:
fc:ce:54:95:f9:cd:dc:9c:bf:6f:bb:2c:1e:0d:ce:
0a:39:4c:dd:ea:a2:97:c2:7b:4b:93:10:fc:4c:ab:
88:1e:d7:3c:b8:76:4f:62:77:ed:10:4a:17:33:5a:
14:39:a8:f3:0c:40:d4:4c:5b:2b:fd:6f:3d:48:ca:
ea:fe:4e:81:f3:b9:b0:1e:ca:9b:60:ec:1a:87:b7:
47:87:92:3f:9d:21:de:9f:30:4b:8d:4d:b6:d8:96:
76:5a:12:b3:68:34:3c:50:55:32:c1:54:5e:c1:15:
6f:66:9b:e4:51:61:77:a6:a6:f1:57:fc:46:07:9e:
c1:d8:66:34:5f:48:79:0e:f2:3b:c4:82:76:a8:2c:
3a:9a:35:2a:a3:f6:7a:4d:05:4b:f6:50:8b:e2:2c:
0c:2d:5b:b1:0d:42:6e:59:be:92:a7:6e:4b:72:be:
02:76:5f:4c:45:5a:d3:e7:6b:0f:17:84:2d:ca:9a:
5d:43:88:c2:18:c8:95:f4:41:05:80:06:fe:79:12:
6a:35:77:1c:b0:11:c0:fc:ca:64:a7:11:b4:3f:f2:
80:c3:dc:94:9e:a2:38:3f:85:21:56:ee:75:10:96:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:81:CB:47:AE:53:CE:8A:54:E9:87:CA:08:A6:63:FE:BE:40:15:90
X509v3 Authority Key Identifier:
keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9a:af:b2:b9:96:d5:f4:14:17:ed:e8:ec:28:93:0a:3f:71:
98:cb:4b:b8:d3:58:98:57:65:95:7f:17:af:80:b0:5e:7b:00:
cd:25:54:75:44:8d:a4:15:6a:7d:f1:ae:df:cd:04:47:3b:27:
f2:6b:ba:8b:68:6c:a3:d5:e4:fd:62:dc:9b:60:22:b9:07:52:
bc:74:4d:46:11:96:9a:53:f6:49:a4:4a:5c:43:e1:e7:d1:ba:
01:0a:1e:dd:3c:0a:2b:85:b2:6b:2f:ee:77:86:e6:c2:40:60:
5f:36:57:53:9b:0f:5a:26:ce:2c:57:19:70:da:d5:44:6e:14:
ff:44:ed:65:d3:38:55:7d:65:90:12:2f:ee:03:66:44:8b:22:
01:2a:04:88:5a:58:55:83:23:2e:2b:09:58:5f:1b:7d:49:ae:
69:14:41:1c:4f:16:c2:30:7d:85:36:f0:2f:e4:ff:f5:e3:4f:
ad:76:dc:eb:c9:64:e8:9c:70:78:d8:08:26:96:92:0d:cc:b7:
dd:3f:96:2d:7c:fc:a7:37:bf:c0:0f:6a:a8:0b:6f:3b:f8:97:
00:cd:a6:d9:bf:19:ad:fb:14:fe:54:0e:cd:d9:0a:69:da:45:
e3:8f:ea:6d:72:50:03:39:05:98:09:03:09:07:53:dc:df:ef:
b5:c9:86:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:17:53 2026 by rpki-client