
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
File: AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft (raw, json)
Hash identifier: J4Mgadxt4FHt2TZWTndWJp5kZo10TXY6FFuAACWQfxk=
Subject key identifier: 5E:CA:A1:B0:8F:E2:D7:46:13:B3:65:CD:35:BE:E5:9F:0A:4D:7F:EC
Authority key identifier: AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2
Certificate issuer: /CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2
Certificate serial: 171286DB9F7C44392A2B96DFB289459F24649362
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
Manifest number: E0
Signing time: Sat 03 Oct 2026 04:12:12 +0000
Manifest this update: Sat 03 Oct 2026 04:07:12 +0000
Manifest next update: Thu 08 Oct 2026 13:10:12 +0000
Files and hashes: 1: AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl (hash: 0zXd8qfncq/UYZ5ToZIYbQWpnzXfcOuDjgAr/qDnrxs=)
2: 323830333a643964303a3a2f33322d3332203d3e20323734313538.roa (hash: 7RJK0Em0iwss8nYTAQelXTOjROtUTUP647/HD5UXgUI=)
3: 3230302e33332e3130382e302f32342d3234203d3e20323734313538.roa (hash: b0YAaScv5fcisUrBcb579zgag15WT+TTXxx7hMhEMKs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl
rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 07 Oct 2026 22:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:12:86:db:9f:7c:44:39:2a:2b:96:df:b2:89:45:9f:24:64:93:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2
Validity
Not Before: Oct 3 04:07:12 2026 GMT
Not After : Oct 8 13:10:12 2026 GMT
Subject: CN=5ECAA1B08FE2D74613B365CD35BEE59F0A4D7FEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:53:58:62:58:2a:8e:ea:48:ce:27:5a:cf:
53:7f:e1:3f:08:0c:54:d5:2d:33:80:04:36:6b:91:
a6:2c:96:df:0e:81:a0:52:9b:bc:60:9b:a0:65:bb:
6e:cc:fa:1d:ac:43:c0:3e:63:cd:9e:27:98:00:e2:
e8:c9:db:b1:58:77:bc:f1:0d:95:ab:d1:89:9d:e3:
6c:95:ac:6a:5c:0d:e7:a3:46:43:45:50:c4:6a:9b:
89:a1:f9:ab:4f:e6:08:ab:12:ab:d8:27:af:af:62:
32:46:bb:16:76:e0:38:66:5a:9a:1d:e0:65:e0:9b:
51:ec:ca:db:d9:93:92:b4:43:08:d0:4a:ca:69:c4:
b1:20:80:9b:53:a3:98:18:ba:44:ac:03:3d:b5:de:
a4:3f:1a:cf:0d:0e:e9:41:d9:88:22:54:e9:07:c8:
da:05:cf:6b:04:b5:f1:a1:8c:52:23:d9:7d:93:64:
63:5d:83:19:61:df:36:a3:f2:95:89:1b:2a:40:95:
dc:c2:b2:c6:75:41:f8:d4:3c:fa:5a:85:f5:2f:be:
3e:9f:25:b2:cc:53:a3:9b:fe:d0:88:c4:90:7b:b4:
ae:51:84:de:a9:c7:48:ec:f5:3e:6c:f5:0f:b7:64:
45:ed:81:4b:b8:84:c3:b4:72:90:bd:83:a0:49:77:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CA:A1:B0:8F:E2:D7:46:13:B3:65:CD:35:BE:E5:9F:0A:4D:7F:EC
X509v3 Authority Key Identifier:
keyid:AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a2:58:ed:9b:68:f3:64:09:f3:de:66:27:09:52:b6:a1:97:
03:4c:21:79:6d:30:7e:b9:9c:05:81:80:fe:3a:43:4a:16:53:
03:53:a8:c4:a5:c7:54:07:c8:2e:67:4b:a4:b2:c3:c0:ce:f7:
bf:1a:e0:1c:4e:b0:14:bd:78:46:3a:d1:d7:5a:2f:a0:1f:3c:
d5:5f:38:3e:24:ae:11:09:d6:55:4e:54:6b:fb:c7:51:8a:56:
67:0b:c9:64:cf:87:72:33:f7:aa:52:58:ec:95:8d:ff:cd:3c:
a1:c2:c1:2a:d5:6a:36:87:39:08:0c:e3:5a:20:f8:64:71:3c:
e8:55:8b:66:85:10:a5:b5:d7:ef:ba:f8:3a:61:8a:2f:09:52:
07:22:59:e1:3f:17:ff:d3:cc:33:df:f1:6c:12:58:00:6d:7b:
57:df:77:4c:3b:a3:9b:60:5d:ec:9c:ac:71:35:94:90:17:ba:
77:94:70:39:a5:e7:93:f8:4a:01:7b:c5:71:f9:79:57:a3:12:
db:b8:95:9d:81:5d:40:5a:ef:43:4a:09:7f:fa:a9:c9:d6:85:
c0:8a:38:36:f0:69:49:d2:c2:90:63:1d:50:5b:bf:8e:3f:7d:
c3:84:9b:4b:04:af:04:3b:b0:26:f3:5d:2e:b4:c5:42:2b:09:
be:70:dc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:50:58 2026 by rpki-client