
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
File: 2D8A5D8A34E265B308F626454D8A6E920C65D608.mft (raw, json)
Hash identifier: sQiBwLXvPqKAic1hV5WS+PFspNPE0XTnjIeM785hA5A=
Subject key identifier: F3:65:29:B0:E9:1D:8D:5F:B4:EC:F6:ED:55:AE:EA:7E:D2:9A:1D:58
Authority key identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08
Certificate issuer: /CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
Certificate serial: 02264B4BF1D85823DDC7003AB0C663E3A71AC5BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
Manifest number: 8F
Signing time: Mon 02 Mar 2026 09:20:20 +0000
Manifest this update: Mon 02 Mar 2026 09:15:20 +0000
Manifest next update: Fri 06 Mar 2026 12:22:20 +0000
Files and hashes: 1: 2D8A5D8A34E265B308F626454D8A6E920C65D608.crl (hash: 6EZzd55Bt4Qw962sZOVDKs+sui8tuv0NcMMe/0fOd+s=)
2: 323830333a3539303a3a2f33322d3332203d3e20323732393634.roa (hash: ZtjREPCj/eeu/E9mBRi9OvFD2ENA47U6yaCq0Q6c32c=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl
rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Mar 2026 12:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:26:4b:4b:f1:d8:58:23:dd:c7:00:3a:b0:c6:63:e3:a7:1a:c5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
Validity
Not Before: Mar 2 09:15:20 2026 GMT
Not After : Mar 6 12:22:20 2026 GMT
Subject: CN=F36529B0E91D8D5FB4ECF6ED55AEEA7ED29A1D58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:d9:25:e5:9b:12:33:12:fd:51:fe:71:a7:
ac:18:58:59:22:5b:5c:8e:33:ff:53:ea:ff:fa:72:
c2:f7:9a:89:04:50:6c:eb:c4:99:21:83:e5:6c:ee:
32:a0:8a:37:05:e8:47:81:c7:c7:d2:73:ae:79:c0:
40:1f:1f:79:b1:dd:e4:23:fa:d3:03:94:93:84:07:
85:fd:d8:68:be:e3:20:05:2d:13:aa:77:8b:95:33:
3c:8a:59:6d:94:19:d7:67:a9:e8:d0:f3:cd:42:0b:
97:ef:e8:ae:9a:78:ce:9f:c2:cd:d9:96:39:6e:3f:
8d:8c:99:59:47:eb:aa:71:22:b5:ab:77:ac:db:27:
0a:93:b1:82:26:c8:f3:e5:67:b9:bb:f4:81:19:37:
0d:0e:28:be:18:2d:5d:3f:33:0f:f6:d7:a9:71:2d:
2b:02:50:f1:55:7e:ad:c9:54:97:af:8d:06:e9:44:
6a:67:45:53:69:66:14:d4:68:ad:38:d7:82:c1:43:
4c:f0:97:34:6f:7a:84:64:83:e0:6d:da:df:1e:99:
84:f8:40:20:a0:c1:54:2f:cb:38:c4:96:02:65:dc:
e1:3a:df:d4:bd:36:42:37:b3:ba:6d:0e:26:c7:cd:
24:59:63:12:eb:90:ce:94:9d:13:78:f8:a7:df:83:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:65:29:B0:E9:1D:8D:5F:B4:EC:F6:ED:55:AE:EA:7E:D2:9A:1D:58
X509v3 Authority Key Identifier:
keyid:2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b3:de:d0:20:3b:2a:c2:a4:da:b0:2a:73:f6:78:5a:19:cb:
14:9b:a9:ea:df:5a:76:70:e8:26:ac:c4:62:f8:fa:85:99:ab:
16:26:54:85:c0:3d:ac:be:11:81:96:90:3b:b1:64:7f:1d:3e:
f5:c5:61:53:eb:25:eb:26:30:71:39:12:12:5d:24:94:a3:f7:
88:67:a9:70:66:f2:ed:cb:b6:8e:57:48:23:6c:72:16:7e:38:
f1:ff:fe:7d:c0:a0:a5:64:85:fd:14:64:6e:dd:86:17:f3:2d:
cc:14:36:06:ec:1b:97:49:7b:ad:92:92:6d:5a:2c:a6:bb:a1:
a8:eb:a9:82:8f:b2:d2:a2:9d:ea:9c:b2:b6:0d:20:b7:2c:6c:
62:49:29:0b:0f:0e:be:92:5d:f8:37:58:47:c7:fa:5c:f3:d7:
cd:c0:52:5e:c2:7f:35:fe:3b:9c:df:8f:b6:18:9f:5f:95:b2:
31:69:3d:84:cc:4a:b1:c0:e0:eb:1f:b3:bb:c1:7e:f3:7e:e4:
c4:1e:44:dc:aa:cd:23:1f:cf:7b:76:66:27:99:01:17:12:26:
e7:fc:2a:f4:1d:48:b4:c3:48:f8:63:f1:a1:9c:2d:8d:77:fa:
a4:4d:71:f9:c3:54:5d:a0:81:ba:1b:ae:ff:d5:6a:ab:36:e7:
1e:38:98:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:32:26 2026 by rpki-client