
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
File: 35D619733A3D3A776B2D5FB84305186B942E249A.mft (raw, json)
Hash identifier: TkAFYH1zP1OjcrkmIl5uViRG3YLIChuAmpAn3vlG4Mg=
Subject key identifier: 94:D8:67:14:11:C9:B2:25:FA:0E:69:72:65:A0:3B:9D:A9:6D:6A:D5
Authority key identifier: 35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A
Certificate issuer: /CN=35D619733A3D3A776B2D5FB84305186B942E249A
Certificate serial: 56AF6ADF26761F7C120BA2B5B9D1B5414576C1D1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
Manifest number: 01E1
Signing time: Sat 10 Oct 2026 15:31:14 +0000
Manifest this update: Sat 10 Oct 2026 15:26:14 +0000
Manifest next update: Fri 16 Oct 2026 00:52:14 +0000
Files and hashes: 1: 3133382e3235352e3131362e302f32322d3234203d3e20323635353031.roa (hash: s3mpc4Av7VjG+AxmE4HJoP0uggg1DRcgn29nUDYyAZc=)
2: 323830363a3230393a3a2f33322d3634203d3e20323635353031.roa (hash: RyakyuPMhGPYEcwhCTyBXEJAMVL91nht35pPpuXXOnU=)
3: 323830363a3230393a3a2f33322d3634203d3e20323730313536.roa (hash: b6a+EtmXHLjS5zjLJgu5nBqdAvBFVctb+7UeKH7n1kk=)
4: 3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa (hash: xD99dg1O9X3Of5qjxoXfMHy1z2RGDME6ypchS7wihCc=)
5: 35D619733A3D3A776B2D5FB84305186B942E249A.crl (hash: R5c8fhOcYURi3g+wrHNrwAT7SgeGcH+oOxrtTRQNCcw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl
rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 06:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:af:6a:df:26:76:1f:7c:12:0b:a2:b5:b9:d1:b5:41:45:76:c1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35D619733A3D3A776B2D5FB84305186B942E249A
Validity
Not Before: Oct 10 15:26:14 2026 GMT
Not After : Oct 16 00:52:14 2026 GMT
Subject: CN=94D8671411C9B225FA0E697265A03B9DA96D6AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:1f:29:88:2b:0b:9f:80:91:5c:64:d3:69:
ac:12:af:bb:d0:bd:9b:46:4c:46:9f:f9:5c:a4:5f:
81:d3:ed:b1:a6:72:31:5b:0e:9d:64:88:de:a8:0d:
78:1e:3e:b2:fe:25:cc:83:35:07:fa:21:05:d3:a1:
61:9e:3c:be:18:8d:0a:a7:ac:19:38:c3:fc:6a:ce:
08:55:35:fc:fb:17:bf:bd:8a:0b:02:55:22:94:6f:
ec:1e:0f:43:55:b2:2a:31:aa:52:c7:71:71:08:77:
3c:74:be:92:d6:31:09:9f:06:a5:96:55:f3:3a:3d:
4e:ad:52:43:33:7e:5e:a3:63:b2:ca:2c:ac:66:c2:
85:6d:c1:11:0c:c2:90:42:a0:24:a3:f4:2a:08:46:
a6:f5:f4:30:82:6d:72:52:b5:7c:fe:c7:74:f4:0e:
df:a2:4e:86:68:24:7e:9b:6f:ef:d0:8f:7b:9f:b2:
79:5e:31:db:4f:82:c9:71:0e:18:88:93:9d:f4:0b:
b1:5f:e3:d7:90:93:46:a0:28:db:7c:83:be:74:80:
87:26:33:7e:1c:44:84:e5:ce:fd:b2:90:fe:1c:ac:
3e:3e:f5:a6:22:6d:37:29:f5:b4:31:a3:1a:34:a1:
30:fa:f6:b4:f6:3e:fb:e6:41:90:9f:3c:dd:53:73:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:67:14:11:C9:B2:25:FA:0E:69:72:65:A0:3B:9D:A9:6D:6A:D5
X509v3 Authority Key Identifier:
keyid:35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c8:55:19:4b:3c:d9:11:2e:e1:65:e2:d7:e6:64:11:ad:df:
a5:77:8f:e8:14:d9:8a:44:30:8f:c5:9e:b4:3e:2b:03:8a:c8:
b5:8c:65:d1:17:76:58:ec:4d:21:ac:e8:d1:92:f5:12:1f:b4:
a4:2b:73:d6:b1:ec:2f:aa:c1:6c:aa:7d:a0:09:cd:d5:4c:ea:
fe:64:98:3e:af:63:a0:5d:e4:fe:fb:fc:65:57:30:9b:c9:21:
ae:17:82:ea:17:c9:4c:67:04:5a:83:48:54:97:68:98:c3:dd:
c2:34:08:43:98:cc:05:67:37:17:e5:7a:b8:e4:83:13:ec:27:
c0:fe:e1:bb:df:a7:80:47:ae:d6:bb:a5:b4:8c:20:a1:f7:34:
0e:79:cc:70:cd:57:22:51:a5:1a:d9:18:d3:2d:0d:f4:98:92:
99:30:91:e7:7e:32:4c:5d:23:fa:ce:49:c0:26:11:d9:a9:c4:
84:a7:ae:e6:4f:db:f0:06:9a:dd:a6:a7:ca:09:95:94:db:9c:
d7:38:92:c3:8e:3a:ba:64:ea:f8:0a:87:63:8c:04:8f:e8:8c:
4c:2e:36:e6:06:28:a6:4a:69:9a:c2:e9:49:b1:06:da:0c:b0:
06:d8:55:ff:aa:4f:d9:3d:99:e6:e7:51:3a:22:46:3c:4c:59:
f3:97:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:32:46 2026 by rpki-client