
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft
File: DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft (raw, json)
Hash identifier: KW+BNK1+qfkIVqD3V/sezqVGEabsnP5vDvl3gfeD6PQ=
Subject key identifier: 5B:D7:F9:32:C3:C0:2A:49:77:87:ED:D8:D8:47:45:2A:09:C0:73:97
Authority key identifier: DE:8A:21:D3:81:A2:A8:57:4B:0F:6A:2D:86:54:9E:47:F4:FB:87:D8
Certificate issuer: /CN=DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8
Certificate serial: 30A3631F3DEC0791CDF6F37798282B7FEA5818A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft
Manifest number: B2
Signing time: Mon 12 Oct 2026 17:17:11 +0000
Manifest this update: Mon 12 Oct 2026 17:12:11 +0000
Manifest next update: Sat 17 Oct 2026 22:55:11 +0000
Files and hashes: 1: 323830313a31653a663830303a3a2f34382d3438203d3e203133343839.roa (hash: 3bbm1o0szMOByJgWYIPWgM/agwZCfsJLftWPpjehzRo=)
2: DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl (hash: EquG2MFuuDywwpYE7fbbZCLOx2ubKB8pR7rttGz9Hcg=)
3: 323830313a31653a663830303a3a2f34382d3438203d3e203237393531.roa (hash: i4PBn1iQdOI25l0vJOwvxOXhEwdYni12+Q655DOPG/M=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl
rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 09:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a3:63:1f:3d:ec:07:91:cd:f6:f3:77:98:28:2b:7f:ea:58:18:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8
Validity
Not Before: Oct 12 17:12:11 2026 GMT
Not After : Oct 17 22:55:11 2026 GMT
Subject: CN=5BD7F932C3C02A497787EDD8D847452A09C07397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:fe:71:af:c0:c8:6d:33:92:f2:85:33:c7:
9d:f5:70:ff:8e:13:be:9a:4d:02:9e:ff:2b:4b:d8:
19:62:54:67:e2:1f:f3:63:3a:2c:be:92:05:14:ac:
1d:1f:76:c9:00:3e:74:7a:4e:cb:c4:48:39:21:4b:
75:a4:da:62:2d:e8:5d:25:56:cb:13:02:29:be:4e:
73:11:20:bc:c8:67:ee:be:12:13:78:70:d9:35:65:
f2:ff:eb:87:5d:3e:3a:a2:29:a9:e3:77:12:7a:59:
61:03:e4:e6:3d:b8:b7:0b:5d:45:21:65:60:37:6d:
66:b0:63:a6:bd:e4:f3:c5:a9:dc:08:1d:e8:6b:81:
b0:31:04:2d:22:9d:e3:65:62:90:83:66:95:1e:bb:
ae:d6:02:2a:a8:72:20:b0:97:75:6a:a1:50:da:9c:
d9:09:14:38:32:cf:94:2e:77:40:6e:3f:d4:c3:ff:
0f:03:25:c0:f2:c0:53:89:8f:a2:27:05:89:6a:bb:
1a:87:a1:fe:41:94:69:85:92:f5:5c:1f:cb:31:9a:
49:be:0a:b9:cf:30:3a:cf:ce:ee:24:9a:7f:41:0a:
43:36:8c:1b:73:9d:3b:aa:72:8e:57:98:18:7e:28:
99:13:3f:b2:5a:82:36:33:2b:a7:4f:b0:a4:6f:1b:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D7:F9:32:C3:C0:2A:49:77:87:ED:D8:D8:47:45:2A:09:C0:73:97
X509v3 Authority Key Identifier:
keyid:DE:8A:21:D3:81:A2:A8:57:4B:0F:6A:2D:86:54:9E:47:F4:FB:87:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4a:20:84:82:56:98:4f:bf:2b:b5:58:fa:45:90:8a:69:1f:
0f:f4:63:ea:de:ac:2c:f2:f0:1c:85:c7:1a:bf:e6:13:c2:42:
dd:79:06:05:4a:b7:8d:2f:c6:b2:42:36:ef:bc:4f:b3:58:69:
53:aa:a9:8f:06:d6:1f:07:18:a3:e8:eb:22:ee:6a:63:03:1a:
2c:99:57:ad:5d:42:65:b2:bf:c7:26:f0:87:98:6d:cb:30:21:
0e:4e:1f:3a:75:71:c8:2b:f4:98:d8:cc:a2:40:7c:f1:17:51:
0e:94:39:ae:e5:24:8a:29:09:ce:aa:be:3a:46:fb:6d:98:ed:
a0:f7:17:73:1a:4e:4c:76:03:c4:cd:36:b3:4c:83:cd:f7:e8:
a4:7b:0f:9f:82:ac:29:69:f3:5a:7e:a5:9a:ea:8a:e4:c0:5e:
5d:3a:ec:95:13:63:cc:df:71:4c:82:af:33:d1:d3:11:f4:e4:
34:18:78:72:80:df:ad:69:39:cd:5a:56:ae:83:38:75:99:3e:
e4:52:96:07:b2:28:e1:a9:0e:d2:c7:a9:4d:0a:77:3d:78:e8:
28:76:0a:04:0d:21:18:fc:f6:bf:71:94:0d:f2:e0:b5:5b:20:
6b:90:67:41:26:bf:75:13:99:a9:3b:44:a7:35:2a:c0:b2:3a:
26:e2:c2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:49:06 2026 by rpki-client