
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.mft
File: AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.mft (raw, json)
Hash identifier: +5prdlsgTudjaH2mwrUVz0ap7IcU8VWk9OTBnRqTGKc=
Subject key identifier: D2:26:FE:1F:E3:D3:70:5D:B6:7A:D3:AC:A6:94:44:6C:D0:BD:A7:D6
Authority key identifier: AF:9C:F8:82:C0:72:5B:96:10:7D:E3:3B:C5:AC:CD:99:BE:2D:E1:B0
Certificate issuer: /CN=AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0
Certificate serial: 1604B8FC29CB11488FDFA425787A13905A34E722
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.mft
Manifest number: 11
Signing time: Tue 13 Oct 2026 17:33:51 +0000
Manifest this update: Tue 13 Oct 2026 17:28:51 +0000
Manifest next update: Sun 18 Oct 2026 00:39:51 +0000
Files and hashes: 1: 3138392e38352e33392e302f32342d3234203d3e203332363133.roa (hash: RIDWO4IRTdKlNnQAqS6OP9ayG+1/ZWkAyZRyHmPCuok=)
2: 3138392e38352e33372e302f32342d3234203d3e20323730313339.roa (hash: ftUTpfVijazSuQJ7gEC8zUFH+gRpejyQQHaOnRg/+ug=)
3: 3138392e38352e33362e302f32342d3234203d3e20323730313339.roa (hash: Zb+8O8v61pJK/i4V4Y0RV79r5CDJRq+5LcjgSAHVfJY=)
4: AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.crl (hash: x+Dlw3t2p4ZKJhs4dcs/Iw7FRjUQbXuTvZsS1edSj5I=)
5: 3138392e38352e33382e302f32342d3234203d3e203332363133.roa (hash: zkbo5Jxjq6LTzV0U1AE2gSx4sj4+jf9KxNqicT+NCWY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.crl
rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 00:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:04:b8:fc:29:cb:11:48:8f:df:a4:25:78:7a:13:90:5a:34:e7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0
Validity
Not Before: Oct 13 17:28:51 2026 GMT
Not After : Oct 18 00:39:51 2026 GMT
Subject: CN=D226FE1FE3D3705DB67AD3ACA694446CD0BDA7D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:57:91:b0:fa:5a:ad:9f:01:a4:d9:4d:2f:
7a:6c:61:90:e8:8d:12:18:e0:26:65:76:84:24:65:
8c:e3:a3:ec:6a:16:a7:4c:c6:1e:fb:eb:c2:a7:81:
dc:d0:0e:1d:b4:c3:58:da:58:95:e7:14:9b:6c:6b:
0d:8f:17:0d:f5:bc:5e:0e:f7:95:6d:30:95:9b:51:
f7:0b:59:c0:01:0f:4a:c0:a6:ce:5d:7e:6b:07:04:
de:8a:cf:3b:a8:eb:78:4d:f3:da:a5:bd:96:b8:a7:
82:20:d2:8f:ef:9d:21:58:d4:a8:90:98:ac:dc:5c:
42:62:1e:2f:6c:73:4a:65:34:8f:05:f2:a5:d9:24:
2a:76:36:49:1a:7c:58:53:8d:7a:3a:4a:eb:be:c7:
ae:14:1b:35:fe:1a:6e:35:9c:42:ad:c9:7c:40:e6:
d8:77:3f:89:99:1c:0d:da:c5:74:83:b6:eb:35:ae:
de:6b:ff:39:ea:2c:0a:db:3c:a3:14:44:9b:5f:b2:
bc:22:89:39:e3:87:ae:fa:d4:15:40:e5:c3:52:2b:
d4:31:b0:fa:4f:d5:d6:ee:6c:63:a7:99:24:88:3b:
3e:ac:a1:12:ab:91:69:4f:20:05:d2:32:9b:3f:a7:
72:c7:1e:45:c2:a9:0f:9a:43:6c:de:62:48:c6:a8:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:26:FE:1F:E3:D3:70:5D:B6:7A:D3:AC:A6:94:44:6C:D0:BD:A7:D6
X509v3 Authority Key Identifier:
keyid:AF:9C:F8:82:C0:72:5B:96:10:7D:E3:3B:C5:AC:CD:99:BE:2D:E1:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:88:8f:e5:27:1b:4b:10:04:54:0e:46:41:50:3b:1f:02:cc:
35:d1:9e:ba:f4:4e:a1:98:95:89:a5:bd:9a:67:a4:22:5e:7b:
9f:34:fd:24:7b:f5:13:6b:7a:b0:e4:8d:51:8d:04:51:52:34:
bc:3d:c5:2e:5c:7c:d2:48:68:8d:73:47:86:68:26:39:ba:fb:
45:5f:cc:f1:b8:96:6a:78:6c:1e:38:a3:cd:25:7d:31:4c:3d:
14:8a:82:3f:6f:2e:22:40:32:f8:f3:f2:3a:33:ca:a1:26:f9:
2a:b2:44:0c:42:f5:44:3b:9c:ec:03:24:84:58:4a:96:4d:c1:
17:e8:13:32:ad:0f:7f:f4:c3:49:83:69:05:19:36:50:1d:ee:
5e:1b:d1:7b:77:40:90:db:b8:2c:52:87:74:ce:52:ac:5e:b1:
f1:a4:ed:e6:e2:8b:0c:f2:74:f7:13:d0:d5:6c:9b:b6:88:1e:
83:7b:ba:fe:3d:44:b4:7d:31:c7:30:62:79:22:a9:61:00:73:
08:db:86:59:81:88:94:20:9a:fe:94:db:ba:f9:88:70:81:54:
78:bf:cd:28:00:97:e7:a9:e0:b3:c7:c4:d0:e9:fd:ee:36:f6:
ad:7f:ca:d8:b5:a2:5b:4b:5b:57:d7:7d:73:26:47:05:b1:88:
e8:51:18:b2
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUFgS4/CnLEUiP36QleHoTkFo05yIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY5Q0Y4ODJDMDcyNUI5NjEwN0RFMzNCQzVBQ0NEOTlC
RTJERTFCMDAeFw0yNjEwMTMxNzI4NTFaFw0yNjEwMTgwMDM5NTFaMDMxMTAvBgNV
BAMTKEQyMjZGRTFGRTNEMzcwNURCNjdBRDNBQ0E2OTQ0NDZDRDBCREE3RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh11eRsPparZ8BpNlNL3psYZDo
jRIY4CZldoQkZYzjo+xqFqdMxh7768KngdzQDh20w1jaWJXnFJtsaw2PFw31vF4O
95VtMJWbUfcLWcABD0rAps5dfmsHBN6Kzzuo63hN89qlvZa4p4Ig0o/vnSFY1KiQ
mKzcXEJiHi9sc0plNI8F8qXZJCp2NkkafFhTjXo6Suu+x64UGzX+Gm41nEKtyXxA
5th3P4mZHA3axXSDtus1rt5r/znqLArbPKMURJtfsrwiiTnjh6761BVA5cNSK9Qx
sPpP1dbubGOnmSSIOz6soRKrkWlPIAXSMps/p3LHHkXCqQ+aQ2zeYkjGqKCzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU0ib+H+PTcF22etOsppREbNC9p9YwHwYDVR0j
BBgwFoAUr5z4gsByW5YQfeM7xazNmb4t4bAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNTkwNzc5QTE5MUYxNjYyNzIzQjM3NTEyMTczMjA2MDI1
NzM4N0Y3QTA2NEMyRTYzQ0ExODgyNTFCQUM3QURBLzAvQUY5Q0Y4ODJDMDcyNUI5
NjEwN0RFMzNCQzVBQ0NEOTlCRTJERTFCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjlDRjg4MkMwNzI1Qjk2MTA3
REUzM0JDNUFDQ0Q5OUJFMkRFMUIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTU5MDc3OUExOTFGMTY2MjcyM0IzNzUxMjE3MzIwNjAyNTczODdGN0Ew
NjRDMkU2M0NBMTg4MjUxQkFDN0FEQS8wL0FGOUNGODgyQzA3MjVCOTYxMDdERTMz
QkM1QUNDRDk5QkUyREUxQjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0iI/lJxtLEARUDkZBUDsfAsw1
0Z669E6hmJWJpb2aZ6QiXnufNP0ke/UTa3qw5I1RjQRRUjS8PcUuXHzSSGiNc0eG
aCY5uvtFX8zxuJZqeGweOKPNJX0xTD0UioI/by4iQDL48/I6M8qhJvkqskQMQvVE
O5zsAySEWEqWTcEX6BMyrQ9/9MNJg2kFGTZQHe5eG9F7d0CQ27gsUod0zlKsXrHx
pO3m4osM8nT3E9DVbJu2iB6De7r+PUS0fTHHMGJ5IqlhAHMI24ZZgYiUIJr+lNu6
+YhwgVR4v80oAJfnqeCzx8TQ6f3uNvatf8rYtaJbS1tX131zJkcFsYjoURiy
-----END CERTIFICATE-----
Generated at Wed Oct 14 17:51:46 2026 by rpki-client