
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.mft
File: 8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.mft (raw, json)
Hash identifier: xd1QyLW5xQQ7CALiUx1FWZ2NS6d9yboCSyF1puAKaMM=
Subject key identifier: E1:67:EB:41:68:18:19:5E:9E:F2:31:8D:17:78:67:79:D2:DE:07:E9
Authority key identifier: 8F:88:AC:48:39:4D:A9:AB:A2:BA:9C:35:9E:01:BB:67:E1:A7:2C:14
Certificate issuer: /CN=8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14
Certificate serial: 48F15F3B1FD56A1B640EFB2F8066C3BD0FEDD4EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.mft
Manifest number: 01ED
Signing time: Wed 28 Oct 2026 07:20:05 +0000
Manifest this update: Wed 28 Oct 2026 07:15:05 +0000
Manifest next update: Mon 02 Nov 2026 11:44:05 +0000
Files and hashes: 1: 34352e3138302e3234302e302f32322d3234203d3e20323639373334.roa (hash: 2cft7rWdh3rQrNFGwWC6DfegD/wq9368xmHKUQCLoXQ=)
2: 8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.crl (hash: dglmNZ/LmA5G9qRl2yGKl7a65teS/gE9fcxNmDuUUTc=)
3: 323830333a663136303a3a2f33322d3430203d3e20323639373334.roa (hash: YGchC45uWEtdhTLsBEDMOSFHmureXrbiz0YNhaueFy8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.crl
rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 15:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f1:5f:3b:1f:d5:6a:1b:64:0e:fb:2f:80:66:c3:bd:0f:ed:d4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14
Validity
Not Before: Oct 28 07:15:05 2026 GMT
Not After : Nov 2 11:44:05 2026 GMT
Subject: CN=E167EB416818195E9EF2318D17786779D2DE07E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:a3:98:18:4e:ac:c0:bf:fd:3f:87:18:14:
68:75:a7:ca:5d:40:99:f0:22:f7:cf:f7:3c:cc:14:
6a:a9:10:ad:8c:4c:2a:07:07:b8:97:6a:6d:0d:4b:
e3:77:a8:97:18:45:bf:89:2d:b5:b7:9b:11:a8:16:
93:8a:a6:79:28:93:b6:36:25:e2:3c:6e:bd:71:c6:
58:b5:20:b2:48:70:19:f3:78:7e:cb:7d:84:1f:c9:
f8:dc:ed:53:f1:c7:bb:b2:d2:81:43:19:8c:f5:4e:
f5:a5:9d:60:38:ce:ed:61:a6:66:83:dc:ca:ce:36:
27:ca:87:8b:77:25:74:01:f3:19:3c:91:1e:d9:07:
ca:7c:30:9f:c7:6d:de:67:3f:86:fd:29:fa:b7:07:
31:4c:3f:59:2e:5c:ed:0c:7c:01:0e:9e:33:5b:e2:
d4:31:7d:4e:c7:3c:60:69:41:07:fd:b4:1f:52:9f:
43:66:2d:e3:7d:b7:fe:bf:40:0a:cb:74:66:ec:2c:
1e:98:7a:7e:11:8a:9b:76:15:f0:ef:18:1a:ab:1e:
3d:1e:e8:e0:2c:fc:d2:8c:af:4c:52:d7:1c:28:90:
e1:1c:22:c4:74:90:7a:89:67:ea:7d:79:20:6d:61:
03:ae:40:bb:00:ff:3c:09:f4:cd:2d:6a:ec:43:f0:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:EB:41:68:18:19:5E:9E:F2:31:8D:17:78:67:79:D2:DE:07:E9
X509v3 Authority Key Identifier:
keyid:8F:88:AC:48:39:4D:A9:AB:A2:BA:9C:35:9E:01:BB:67:E1:A7:2C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ef:9a:46:d4:73:a5:3a:42:af:ef:f1:9d:57:db:45:3d:91:
65:fc:4f:0c:0b:0c:69:0f:d2:db:73:ed:be:25:04:a4:69:0b:
57:94:dd:e2:6c:e0:6c:64:60:68:b5:8d:79:4a:49:bb:8f:71:
1e:61:8d:69:2f:6c:20:5a:8b:1f:45:1f:6e:f0:df:47:63:f8:
25:03:49:b2:83:df:34:18:d0:19:31:51:2e:73:6a:34:79:cf:
59:1b:81:0c:e3:0a:62:04:91:ef:d8:78:46:55:37:6d:6d:5a:
c2:1b:d4:5b:a8:fc:2d:d7:c7:8b:c2:f5:dd:fd:27:6c:1c:77:
a1:e8:1f:b9:93:c6:f5:b9:eb:4a:45:f7:f8:a1:98:44:4f:d6:
2a:91:b0:98:a1:33:50:9d:cd:1c:c7:c1:d3:9d:e8:47:4d:6d:
a7:fe:87:3d:43:88:c0:e4:d9:dd:cb:09:3a:91:15:41:ad:34:
82:90:5c:c1:1a:23:56:7c:d1:d0:35:52:a2:97:03:d9:47:62:
8d:ae:08:ea:d2:47:9d:db:51:77:07:43:4c:e4:1f:28:c8:fb:
ed:dc:0b:f0:f3:f8:e3:c3:17:df:bb:f9:ef:76:86:6f:81:1a:
bc:31:99:ed:a2:dc:ad:76:f9:e9:8f:98:2a:9e:20:1f:76:0c:
42:86:f3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 11:15:23 2026 by rpki-client