
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft (raw, json)
Hash identifier: 8CMoeyVW2iF7xQ3RF/H78zDl+SetWlDgL8TMqD5hWFk=
Subject key identifier: 99:C5:24:3F:90:60:FD:29:BA:4A:1B:DC:C7:B5:0E:89:BD:C1:85:B5
Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF
Certificate issuer: /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
Certificate serial: 053F3DDA37DCF5A759A905D357276C384BE803A0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
Manifest number: 0208
Signing time: Fri 30 Oct 2026 03:20:13 +0000
Manifest this update: Fri 30 Oct 2026 03:15:13 +0000
Manifest next update: Wed 04 Nov 2026 15:12:13 +0000
Files and hashes: 1: AS28414.roa (hash: rOU0mQOi/2elHsPXJcG80hVyfwscmcNmlJJeUC6o8fs=)
2: AS22884.roa (hash: wtutw+Q4M5RjiHjnJFAbDSqQhRAXoqOMY63st0zZL6c=)
3: AS17072.roa (hash: jGJSWYrqe+8NmTt0z6px2dajdGJCbSknZ/xPv3DS+go=)
4: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl (hash: NWgN5S8KnFuM3XG8ioQzeyLBAaBmYYHs9N0G1onSx/M=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl
rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 04 Nov 2026 15:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:3f:3d:da:37:dc:f5:a7:59:a9:05:d3:57:27:6c:38:4b:e8:03:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
Validity
Not Before: Oct 30 03:15:13 2026 GMT
Not After : Nov 4 15:12:13 2026 GMT
Subject: CN=99C5243F9060FD29BA4A1BDCC7B50E89BDC185B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:cf:7f:2f:97:33:77:11:36:6f:49:d3:50:
ad:e0:d3:7e:92:35:55:50:19:91:88:e0:a5:16:96:
53:fc:16:71:d5:9b:dc:31:6d:c5:b9:2f:bc:56:4f:
75:48:f3:ea:48:04:12:d2:0b:5a:14:8a:d8:04:44:
fb:7f:61:93:1f:0f:a3:ca:94:e5:95:c7:98:f4:eb:
7b:6e:3a:85:e1:53:a6:8b:5b:f4:e1:d0:7c:20:e9:
3c:45:b8:95:33:20:81:b3:7a:38:41:33:86:3f:6b:
6a:dd:24:18:2a:18:a3:16:32:9c:6f:72:b4:1c:08:
a1:9e:9a:af:74:db:14:c1:f4:d9:25:aa:91:45:d3:
f5:d6:34:7d:7b:76:d7:36:70:6e:20:4f:bb:d3:28:
16:9e:54:88:67:7b:d7:46:3c:87:29:d7:9f:4a:e4:
8a:b0:16:01:09:ff:42:3f:94:e6:75:b2:1e:31:90:
e0:5b:f6:1c:59:9b:38:ff:4b:45:30:80:4f:34:49:
06:9e:cf:d5:86:11:02:c4:1d:3e:76:95:ba:e5:9f:
b8:6b:18:55:81:14:70:0b:d0:28:cb:26:94:d3:75:
4a:80:a6:ba:e9:cb:3d:72:14:95:eb:ea:93:32:7d:
89:54:20:c4:34:64:ea:25:31:5a:d6:36:97:a9:ce:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C5:24:3F:90:60:FD:29:BA:4A:1B:DC:C7:B5:0E:89:BD:C1:85:B5
X509v3 Authority Key Identifier:
keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1f:f6:10:16:e6:52:37:8d:eb:ee:93:b6:2b:4c:ca:75:2a:
23:a5:c9:24:d9:66:20:36:13:85:e0:fb:ca:12:ea:f4:87:24:
59:89:56:2c:68:58:74:d2:8e:5c:f6:b2:fc:cc:b7:33:bd:7b:
83:42:0e:ec:65:37:25:9c:19:48:47:d0:c2:b7:7e:27:40:ea:
3e:81:01:eb:b2:60:98:ac:0b:8c:29:0e:ff:5e:e0:8a:09:af:
6d:c4:f8:97:89:6c:72:53:03:ad:74:f9:37:f1:4c:3e:a0:3d:
36:17:e5:19:00:cb:b8:b3:fd:07:c0:11:fa:b8:09:c3:3d:f3:
a6:21:e4:77:24:71:87:1a:e2:9d:62:7c:b7:8d:bf:fc:22:df:
dc:62:e0:fa:05:53:bd:26:08:a2:bd:0d:6b:83:62:05:e1:bb:
84:69:81:05:4a:b6:b2:73:fc:06:c3:9c:55:cf:44:e7:79:dc:
cb:67:3e:dc:09:93:e7:5b:f9:6f:f8:e9:b4:e8:92:74:f2:35:
14:e5:11:99:94:d5:74:fa:41:35:9f:f0:90:f3:64:6d:c9:c4:
30:d2:7f:5e:36:15:7b:89:7b:a8:34:ba:d4:1f:af:a2:c0:3a:
3f:02:07:98:cd:a5:0c:67:45:61:4e:5b:17:55:08:af:20:c3:
66:b7:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 11:34:28 2026 by rpki-client