
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft
File: C868DC422443FA70E7761C0304061EB998BF7378.mft (raw, json)
Hash identifier: hCjRqVwgJK1/gQnGwve14VV4flBtsmYE637DGe08rpc=
Subject key identifier: 18:56:BD:2D:AD:13:34:47:D4:7D:81:18:02:17:D0:16:C3:9E:C9:AB
Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
Certificate issuer: /CN=C868DC422443FA70E7761C0304061EB998BF7378
Certificate serial: 334928FAFBFB4C0F4CBD7116BCADA74C88BCA588
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft
Manifest number: 021E
Signing time: Mon 02 Nov 2026 01:37:42 +0000
Manifest this update: Mon 02 Nov 2026 01:32:42 +0000
Manifest next update: Sat 07 Nov 2026 05:07:42 +0000
Files and hashes: 1: AS28513.asa (hash: WSveOWwMNcZp83B6OMxG7RXUM+3xDDuvInwv6+ZwuY4=)
2: AS19373.roa (hash: fZBEXJOFe74BX0Rutlv9m5Yh4nGd5mQFqaxdzEIHTJk=)
3: AS46090.roa (hash: 0K1oq2z+6KJeAXPuu4Ga5hco4ialqKs5jFFP7qoGIuM=)
4: AS198949.roa (hash: 77hQ1Ydqcn0I3w2Fvb/7B4xSJrf6Zw6cfSxCt13AvnY=)
5: AS11519.roa (hash: 7345QLmtYvraIhRtDBfRxOzF5YCphXqgnFEsU5yWjpY=)
6: AS20940.roa (hash: BkaTuMZHi5dZpS0cNURumAT+ARoI871lcHTz4MqBc6Y=)
7: C868DC422443FA70E7761C0304061EB998BF7378.crl (hash: iHLQpgJnrb4LhxkLBzv/+3QSkwyfrIu9za55xG3So4k=)
8: AS3905.roa (hash: RAau9rBLAMJYdg6JlVXPp367gHxmz0jdXUG6uBM6Yec=)
9: AS8151.roa (hash: zR3wRBnfF6F/0io5GileuR/2Fx4j93q1e9aOcZnZKVI=)
10: AS7399.roa (hash: IGPt1VPqKPvkSVMzilsQUb5A+ONtyGO4vK1anvJFIZc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Nov 2026 05:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:49:28:fa:fb:fb:4c:0f:4c:bd:71:16:bc:ad:a7:4c:88:bc:a5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378
Validity
Not Before: Nov 2 01:32:42 2026 GMT
Not After : Nov 7 05:07:42 2026 GMT
Subject: CN=1856BD2DAD133447D47D81180217D016C39EC9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:26:83:88:95:42:bb:24:6e:95:cb:80:28:
73:4d:a2:56:d3:d5:2c:dd:72:f5:5a:34:c9:95:54:
f5:76:49:93:c9:54:3c:8e:66:72:1d:69:4d:26:2e:
7b:b1:9f:16:b5:41:c5:04:4a:a4:d8:0b:18:a8:d7:
86:84:62:78:71:3f:29:df:29:08:93:2d:e9:d8:e5:
5d:64:27:2e:9a:15:a5:10:b3:55:ae:c0:11:11:7e:
7e:37:fe:ef:f5:fd:2d:f0:c4:f5:96:51:1b:83:8a:
40:8e:9d:2a:c2:f9:df:e4:04:40:3f:da:c1:9c:68:
50:b6:1c:c1:a1:bb:ba:fc:69:de:90:20:e8:93:e2:
ec:31:db:4f:67:65:07:a3:ef:5e:19:f0:44:77:7a:
5a:c9:77:42:74:20:f6:6e:df:bf:52:88:23:63:c8:
da:03:4d:d4:88:54:04:85:92:b1:b6:83:74:71:b9:
93:af:bf:bc:d8:16:00:6a:aa:f7:e9:c6:30:d7:92:
a9:0f:9e:5a:2d:50:8b:ab:8b:80:18:47:15:77:42:
31:28:b0:f2:9f:ee:8a:8b:ba:82:1a:6e:4d:93:52:
bd:84:ee:b0:f8:6b:42:6a:fe:04:27:d5:5e:37:83:
50:f7:b6:c9:a4:55:e9:9a:1b:8d:01:11:7e:f2:d1:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:56:BD:2D:AD:13:34:47:D4:7D:81:18:02:17:D0:16:C3:9E:C9:AB
X509v3 Authority Key Identifier:
keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0a:88:7f:89:1c:37:66:c8:5f:f1:6b:3b:45:1c:66:fc:ae:
0e:cc:66:75:8d:dc:dc:ef:54:01:8d:86:6a:e5:a5:25:dc:cc:
29:c5:b1:b1:c2:07:b7:3a:56:93:cb:82:93:bf:38:0e:58:df:
3c:dc:12:bc:60:3e:46:32:4e:2d:05:e1:c1:9d:64:04:b2:c1:
9a:45:d6:94:e3:d5:28:81:10:7f:77:19:31:13:21:51:8f:56:
5d:76:6e:a3:87:df:ee:47:2e:4e:0e:07:ba:19:2c:52:bf:81:
62:0b:88:99:7b:11:c0:5e:1a:75:e3:60:83:63:0a:1a:b0:b0:
fa:99:af:15:db:07:50:24:c1:7b:f0:fb:da:21:46:72:b1:43:
47:50:53:91:04:97:6a:ae:39:21:67:b5:78:dc:5b:89:bd:11:
39:85:27:c7:71:ca:a2:1b:72:9e:d2:f0:18:82:76:46:58:27:
27:43:bb:fd:4a:99:17:df:69:0c:aa:cc:e6:32:f5:be:5c:9c:
9d:1f:f4:f2:0d:d1:4e:fd:b2:93:aa:60:a5:c0:e6:3f:2f:0c:
c1:96:ae:c1:60:b6:0d:5e:52:46:57:b5:25:39:62:3b:2c:fb:
45:b2:50:1d:d0:15:4e:0e:ba:bc:90:ec:96:da:8f:75:ed:6a:
94:2e:69:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:28:33 2026 by rpki-client