
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.mft
File: D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.mft (raw, json)
Hash identifier: E9Kn86hsLCJ8/TsxJwzvP/WbIDAwfSR42QQHn+F4040=
Subject key identifier: 6A:EF:FB:DB:2F:18:18:2E:26:B9:41:69:52:D6:EB:A8:76:55:7A:3A
Authority key identifier: D8:8F:4C:A6:AD:DA:45:B1:B1:D8:BA:7E:BF:A5:ED:7C:5D:60:CC:FA
Certificate issuer: /CN=D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA
Certificate serial: 5658E9296FDA14235783BFBCA297B2B798429992
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.mft
Manifest number: 25
Signing time: Tue 24 Mar 2026 18:29:17 +0000
Manifest this update: Tue 24 Mar 2026 18:24:17 +0000
Manifest next update: Sun 29 Mar 2026 20:07:17 +0000
Files and hashes: 1: 3230302e33332e3137302e302f32342d3234203d3e2037303837.roa (hash: 06WWTeOemu5katZsG+ompdSbIShLHz/BIesx9BnkTr8=)
2: D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.crl (hash: FEQcZFElgEh2xTOazOxlha/cxPoPa0GB/QillHvhxc0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.crl
rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 20:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:58:e9:29:6f:da:14:23:57:83:bf:bc:a2:97:b2:b7:98:42:99:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA
Validity
Not Before: Mar 24 18:24:17 2026 GMT
Not After : Mar 29 20:07:17 2026 GMT
Subject: CN=6AEFFBDB2F18182E26B9416952D6EBA876557A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:21:a1:3b:d4:1c:a1:d3:02:ef:d9:a1:69:
9c:ef:27:64:b2:6d:5f:e5:3b:fa:27:27:2e:fe:ff:
93:f7:94:23:c3:f1:6e:a9:f7:bc:ad:14:cd:6f:11:
bd:ba:4a:34:51:9f:23:90:09:67:1a:e9:56:e2:3b:
10:00:82:f8:5a:a0:40:f5:44:58:cb:d4:53:c2:f4:
58:7e:2a:48:7d:cc:08:95:2c:80:d6:03:2b:c4:d0:
c4:50:2f:e0:46:34:ec:15:24:d8:cf:c0:97:60:69:
4b:d2:29:6d:02:d4:0b:e3:4c:41:82:f8:41:49:a2:
4d:23:0d:65:0a:f3:8a:3a:8e:85:fd:e9:61:56:e5:
ea:5d:73:08:ed:93:e0:0f:d1:d0:46:68:c4:54:cd:
5f:d1:24:97:50:4e:b0:06:40:c7:12:36:bc:6e:8d:
f4:d8:a6:fa:24:7f:2f:5d:b1:6a:b6:16:8a:33:2b:
18:7a:bf:45:48:f5:1e:79:c9:9c:43:fc:58:03:24:
a0:2a:52:a0:2a:fb:f2:45:8d:ab:ee:bc:63:54:00:
90:0d:b7:fd:51:41:b4:84:21:e1:25:2e:6e:f1:e9:
d1:f6:5d:21:4f:74:ee:a5:95:0e:e4:92:5a:2c:d6:
9c:8a:08:1f:3a:0d:bd:a8:85:08:54:f4:1c:be:64:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EF:FB:DB:2F:18:18:2E:26:B9:41:69:52:D6:EB:A8:76:55:7A:3A
X509v3 Authority Key Identifier:
keyid:D8:8F:4C:A6:AD:DA:45:B1:B1:D8:BA:7E:BF:A5:ED:7C:5D:60:CC:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95388A6FAFE9452630C06A1E4124FD0DA9286B497A1BB3D57DA7C24DDD947D47/0/D88F4CA6ADDA45B1B1D8BA7EBFA5ED7C5D60CCFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:83:ef:af:3d:e6:48:99:22:9e:c4:e6:50:c9:16:3f:8d:60:
4a:51:80:a3:13:9e:6e:47:16:76:a6:ac:6a:76:42:91:dc:91:
8e:15:65:32:ea:6f:31:b9:33:27:64:1c:c2:e5:ee:4e:b6:90:
da:6a:49:9a:b0:e9:dc:90:27:d8:c1:ae:47:06:5a:74:4f:1a:
f4:4b:10:09:d9:5f:2d:cf:4d:71:67:c0:84:89:29:51:7d:63:
62:44:cb:cd:6e:0e:9a:cc:f4:ec:9d:81:5c:b9:a7:87:4e:f1:
1f:27:b4:8f:0f:31:47:51:99:49:a7:04:d6:67:ba:36:bd:da:
31:4d:e1:a7:d7:8c:c4:51:41:ce:4e:c2:8a:15:50:ec:4d:76:
55:a3:55:68:b8:ee:36:f3:d0:de:f6:69:0a:8e:ff:88:22:e6:
94:8b:ec:f9:1a:cf:f1:77:31:f3:90:02:88:11:56:b4:23:fd:
5c:2c:da:da:b5:68:71:db:e4:d0:ff:de:75:29:d8:d4:4b:72:
1c:c9:f2:85:77:f4:2c:d5:b3:26:78:a0:77:79:8a:81:c4:96:
5a:11:b0:9a:92:08:5d:13:18:4f:23:34:e5:f6:45:ce:b4:a7:
ec:58:4c:bf:ae:e3:f5:ea:1a:bb:d2:98:fb:9e:b0:56:91:bf:
f3:e7:ab:ba
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUVljpKW/aFCNXg7+8opeyt5hCmZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg4RjRDQTZBRERBNDVCMUIxRDhCQTdFQkZBNUVEN0M1
RDYwQ0NGQTAeFw0yNjAzMjQxODI0MTdaFw0yNjAzMjkyMDA3MTdaMDMxMTAvBgNV
BAMTKDZBRUZGQkRCMkYxODE4MkUyNkI5NDE2OTUyRDZFQkE4NzY1NTdBM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTcCGhO9QcodMC79mhaZzvJ2Sy
bV/lO/onJy7+/5P3lCPD8W6p97ytFM1vEb26SjRRnyOQCWca6VbiOxAAgvhaoED1
RFjL1FPC9Fh+Kkh9zAiVLIDWAyvE0MRQL+BGNOwVJNjPwJdgaUvSKW0C1AvjTEGC
+EFJok0jDWUK84o6joX96WFW5epdcwjtk+AP0dBGaMRUzV/RJJdQTrAGQMcSNrxu
jfTYpvokfy9dsWq2FoozKxh6v0VI9R55yZxD/FgDJKAqUqAq+/JFjavuvGNUAJAN
t/1RQbSEIeElLm7x6dH2XSFPdO6llQ7kklos1pyKCB86Db2ohQhU9By+ZAr1AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUau/72y8YGC4muUFpUtbrqHZVejowHwYDVR0j
BBgwFoAU2I9Mpq3aRbGx2Lp+v6XtfF1gzPowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NTM4OEE2RkFGRTk0NTI2MzBDMDZBMUU0MTI0RkQwREE5
Mjg2QjQ5N0ExQkIzRDU3REE3QzI0REREOTQ3RDQ3LzAvRDg4RjRDQTZBRERBNDVC
MUIxRDhCQTdFQkZBNUVEN0M1RDYwQ0NGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODhGNENBNkFEREE0NUIxQjFE
OEJBN0VCRkE1RUQ3QzVENjBDQ0ZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTUzODhBNkZBRkU5NDUyNjMwQzA2QTFFNDEyNEZEMERBOTI4NkI0OTdB
MUJCM0Q1N0RBN0MyNERERDk0N0Q0Ny8wL0Q4OEY0Q0E2QUREQTQ1QjFCMUQ4QkE3
RUJGQTVFRDdDNUQ2MENDRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARg++vPeZImSKexOZQyRY/jWBK
UYCjE55uRxZ2pqxqdkKR3JGOFWUy6m8xuTMnZBzC5e5OtpDaakmasOnckCfYwa5H
Blp0Txr0SxAJ2V8tz01xZ8CEiSlRfWNiRMvNbg6azPTsnYFcuaeHTvEfJ7SPDzFH
UZlJpwTWZ7o2vdoxTeGn14zEUUHOTsKKFVDsTXZVo1VouO4289De9mkKjv+IIuaU
i+z5Gs/xdzHzkAKIEVa0I/1cLNratWhx2+TQ/951KdjUS3IcyfKFd/Qs1bMmeKB3
eYqBxJZaEbCakghdExhPIzTl9kXOtKfsWEy/ruP16hq70pj7nrBWkb/z56u6
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:34:02 2026 by rpki-client