
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
File: D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft (raw, json)
Hash identifier: GMEZBaonozvFDuIiNfdk2JQ+WmmuUH1B98Xatn5ZFuw=
Subject key identifier: DC:12:21:B4:06:4E:2D:93:5E:1A:2D:87:5E:E1:9E:54:7C:41:C7:90
Authority key identifier: D2:5A:64:5B:A2:C0:88:2C:C1:32:2B:68:10:B6:0C:BB:EF:E3:79:3E
Certificate issuer: /CN=D25A645BA2C0882CC1322B6810B60CBBEFE3793E
Certificate serial: 53793220EDEE90AB03702D9707DF19D5927EAC43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
Manifest number: 01DF
Signing time: Tue 27 Oct 2026 18:57:28 +0000
Manifest this update: Tue 27 Oct 2026 18:52:28 +0000
Manifest next update: Mon 02 Nov 2026 16:26:28 +0000
Files and hashes: 1: 3138372e3130322e3230302e302f32322d3234203d3e20323730303435.roa (hash: FiOVxIFEbNyIuHPOpuJ1yoZjlseHdNUkk+/BOxqoqK0=)
2: D25A645BA2C0882CC1322B6810B60CBBEFE3793E.crl (hash: hDG51QtkBfLyZAwD8b+4fKMaTAQXoIKVbTlhFYrzVqE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.crl
rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 15:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:79:32:20:ed:ee:90:ab:03:70:2d:97:07:df:19:d5:92:7e:ac:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D25A645BA2C0882CC1322B6810B60CBBEFE3793E
Validity
Not Before: Oct 27 18:52:28 2026 GMT
Not After : Nov 2 16:26:28 2026 GMT
Subject: CN=DC1221B4064E2D935E1A2D875EE19E547C41C790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:8d:3a:0f:c1:22:15:5b:80:c9:33:fb:46:
bd:48:80:d0:73:8a:c1:2f:1a:ce:8a:2c:ec:62:00:
52:62:d6:0b:4c:96:1a:e7:51:7e:11:f2:e3:98:61:
20:6a:40:e5:91:51:ad:19:75:18:ac:b5:15:f1:94:
86:cf:3a:cc:f0:a6:20:6e:ef:21:7b:e3:77:91:4b:
38:e8:3b:5e:4f:10:17:17:29:19:bb:dd:81:94:46:
af:f9:d1:d0:84:78:a4:0a:3a:aa:97:9d:68:78:6c:
d6:db:45:d9:90:f7:22:a0:87:5b:19:ac:ae:ab:d6:
55:04:4e:32:87:38:c5:35:79:b2:f8:40:62:ec:c3:
d1:cf:89:ac:dd:ac:03:51:c0:17:51:d9:2e:b7:c6:
56:f3:e6:4a:25:9f:42:d7:3c:da:2b:c1:8c:aa:03:
20:db:ab:8c:52:06:31:84:8b:9a:36:8f:c5:c9:bf:
fb:00:25:4a:92:ed:a2:10:a2:6c:cc:3f:66:71:0c:
59:e2:0b:80:a7:8e:75:bb:9c:31:92:05:63:0d:0d:
a8:43:62:42:fa:a8:08:d2:58:8a:28:9e:c9:25:c5:
9e:79:07:56:4b:cc:d5:de:08:78:aa:db:4b:d8:b7:
fc:f3:1b:d3:44:73:f1:b5:22:ae:7f:7f:96:17:be:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:12:21:B4:06:4E:2D:93:5E:1A:2D:87:5E:E1:9E:54:7C:41:C7:90
X509v3 Authority Key Identifier:
keyid:D2:5A:64:5B:A2:C0:88:2C:C1:32:2B:68:10:B6:0C:BB:EF:E3:79:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:eb:2b:b4:8d:55:fd:46:3e:70:e5:9e:ea:ee:03:be:67:7e:
72:e2:7c:3a:49:74:14:5d:e7:03:43:11:c7:57:49:df:0f:d1:
50:00:97:29:3a:d3:e6:5f:c7:b6:a6:42:80:24:e1:1e:d8:1c:
c4:ad:3a:1a:57:85:1a:89:8f:cc:18:ae:84:fe:f2:aa:d1:0d:
05:ed:f3:03:5e:72:9b:6a:94:dc:c9:0d:7a:55:d3:6e:df:dc:
bf:53:5b:d7:a7:ec:55:2c:88:a4:9a:5f:de:d4:25:19:73:34:
c1:29:21:3b:ba:5a:cc:60:0a:9f:2a:85:72:c3:6b:62:cd:5c:
f3:0d:b3:43:2d:73:42:de:60:94:d0:07:8f:04:46:51:f7:72:
13:db:3f:04:6b:cb:bd:b0:0f:02:9b:99:d9:35:ec:a8:ac:3d:
ae:e2:b2:a6:6c:b1:35:32:2a:8a:06:47:91:df:74:5d:7e:aa:
0c:b6:d8:0a:ac:2f:c9:3e:e2:34:a2:13:65:f0:ff:5b:95:8d:
8c:b0:ba:4a:66:b4:17:05:e5:e0:9f:04:28:3f:a8:19:85:1f:
b8:25:0e:bb:f5:b4:32:3c:37:e1:5b:d6:b4:c2:43:9e:ea:b6:
a5:03:aa:fc:fd:56:c2:ca:1c:9d:16:90:48:db:7a:b0:72:55:
18:81:29:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:12:53 2026 by rpki-client