
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft
File: D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft (raw, json)
Hash identifier: 7rhmeNOoGoBoAVMagkYCkpisvMpF3i87jszAE/hlzA4=
Subject key identifier: 94:C7:ED:CC:52:A4:55:7D:44:38:0C:00:D3:6C:47:4F:42:F4:90:27
Authority key identifier: D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0
Certificate issuer: /CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0
Certificate serial: 048D881916A543976473C8D66FFCCD41F960449A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft
Manifest number: 87
Signing time: Fri 17 Apr 2026 07:08:13 +0000
Manifest this update: Fri 17 Apr 2026 07:03:13 +0000
Manifest next update: Wed 22 Apr 2026 11:50:13 +0000
Files and hashes: 1: 323830333a343165303a3a2f33322d3332203d3e20323639393935.roa (hash: 9a73hHXsUpINg4/Jlvrnj1XEPuNRON7CSa8QHkSYsnI=)
2: 3230302e3130382e3139312e302f32342d3234203d3e20323639393935.roa (hash: HTar7+pZfbldc2ylEfFBE6h06Z0KculQNaqKWJvTnig=)
3: D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl (hash: WMVYnIX4/Bu4NwFj605ueMMftujJE4bf36I5Pn55TWE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl
rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 22 Apr 2026 04:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:8d:88:19:16:a5:43:97:64:73:c8:d6:6f:fc:cd:41:f9:60:44:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0
Validity
Not Before: Apr 17 07:03:13 2026 GMT
Not After : Apr 22 11:50:13 2026 GMT
Subject: CN=94C7EDCC52A4557D44380C00D36C474F42F49027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:dc:26:f0:06:05:83:89:fd:08:da:a2:39:
d9:25:ae:91:91:53:a6:60:df:48:fe:e0:55:44:56:
61:66:34:3f:fc:8e:2e:84:ab:13:a2:57:d4:a3:bc:
df:46:dc:bb:d1:be:72:70:16:f5:d1:0b:b3:ee:8f:
c5:23:b2:36:a2:05:cb:7e:97:d0:36:d5:ce:5e:d5:
1e:bd:d0:35:8b:50:a2:7d:0e:b4:e5:6a:42:65:25:
30:70:a5:b5:d8:5e:08:cb:ba:fb:6c:50:b2:35:08:
1f:6b:9c:78:36:08:a2:66:3c:a6:68:bc:4e:ad:91:
1d:1c:a6:78:56:81:03:33:74:4f:11:6b:cb:2b:06:
4e:c9:e1:8d:36:73:6d:f6:25:bf:b2:50:2f:3b:23:
31:3f:99:8b:5b:40:4e:50:04:1e:bd:61:7c:ad:6a:
67:f0:de:c9:11:b7:8c:32:ba:be:36:29:ca:19:e2:
49:51:10:0b:f8:21:d1:92:e4:90:54:e6:dd:f2:42:
6a:5a:e4:d1:f8:28:64:79:9b:df:57:2b:74:dd:70:
49:87:26:24:b9:87:b6:5a:a7:a9:fb:07:6f:18:00:
53:e4:fa:13:ee:6b:e2:51:be:9a:5d:9c:40:ec:50:
d5:3d:82:b9:7e:85:99:e7:91:04:64:d4:74:bf:2c:
a7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:ED:CC:52:A4:55:7D:44:38:0C:00:D3:6C:47:4F:42:F4:90:27
X509v3 Authority Key Identifier:
keyid:D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:40:e3:bf:d7:99:7f:aa:38:72:b2:fe:75:6a:c6:2c:b3:80:
46:c5:33:f6:9c:52:02:c8:59:01:a8:59:1b:56:06:fb:44:f9:
0f:9d:c4:47:d2:00:f8:25:26:d1:a9:8c:74:4c:50:ad:ca:43:
c7:a6:5b:43:78:ec:5a:45:95:3f:ab:02:a4:43:bd:fc:96:6b:
3c:70:30:c4:db:67:f5:4b:ff:e1:a0:18:95:ed:cc:ce:1a:0d:
12:25:fc:8f:50:f2:2a:b8:c1:4d:bb:c1:de:22:49:1f:6a:84:
c9:7f:2d:b4:77:f7:de:1d:c8:25:61:72:ae:66:bd:ae:91:ba:
8e:2a:1b:aa:cb:e5:e6:27:9a:fb:05:6c:ae:76:05:d6:2a:61:
61:8b:be:7d:97:8a:ad:61:d5:13:a0:c8:f6:36:43:21:f6:04:
6f:a3:88:fa:a0:c3:2b:aa:20:67:09:8e:bb:d2:05:22:15:d8:
7b:1b:e1:97:6e:0e:3c:bf:55:2b:04:d6:9b:d2:ce:33:bb:cf:
9b:11:01:82:b3:93:0b:6f:8c:d8:f9:49:54:fd:b3:87:6f:2b:
c2:f8:de:cc:b6:27:7d:6f:44:e8:43:73:ae:f5:a4:85:80:5d:
b6:09:26:02:fe:f8:dc:51:37:ff:e4:19:f6:fc:ec:f6:0e:6e:
3c:01:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:56:39 2026 by rpki-client