
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
File: D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft (raw, json)
Hash identifier: v/X5qD26ABEK1UyAt1r1a5uiUXh49tTwMXFxOEfiWBQ=
Subject key identifier: 06:19:1A:68:1B:9C:CC:C3:6C:6C:9C:AB:2F:45:19:25:63:6E:C7:CE
Authority key identifier: D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52
Certificate issuer: /CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
Certificate serial: 16581FBB210CB50CFE562AD253A87B6BDBFDDF32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
Manifest number: 01DB
Signing time: Sat 17 Oct 2026 05:48:42 +0000
Manifest this update: Sat 17 Oct 2026 05:43:42 +0000
Manifest next update: Fri 23 Oct 2026 03:22:42 +0000
Files and hashes: 1: 34352e3137332e3138322e302f32332d3234203d3e20323637383237.roa (hash: OpEvqGpXZ1NhkLusoCwX9nCVxS/H9uMeazRwOm9M3T0=)
2: D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl (hash: BVBwRWk9uz3ZdD3DhVvz09o+aPHd8S2Yr1Gj3JHkySs=)
3: 34352e3137332e3138312e302f32342d3234203d3e20323637383237.roa (hash: Bf03kZFX4aTDpv9rMaSfA6rZQRBFqB3GV+XKp7tF7UU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl
rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 23 Oct 2026 03:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:58:1f:bb:21:0c:b5:0c:fe:56:2a:d2:53:a8:7b:6b:db:fd:df:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
Validity
Not Before: Oct 17 05:43:42 2026 GMT
Not After : Oct 23 03:22:42 2026 GMT
Subject: CN=06191A681B9CCCC36C6C9CAB2F451925636EC7CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:83:c1:2d:63:43:92:83:47:cb:0c:77:63:
12:31:4b:68:6a:8a:30:51:23:ed:c0:fa:a0:12:2e:
c0:e0:e5:7d:24:0d:5b:37:a7:d1:45:d0:70:99:32:
f5:10:fa:48:7d:0a:a1:c7:6f:ce:eb:68:26:26:60:
ce:2f:45:52:06:4a:64:7c:2f:24:a9:bd:ce:19:37:
8f:75:3e:ee:85:a1:25:a0:9c:36:06:f1:39:e5:15:
0d:2a:31:ea:cb:01:a7:15:7e:94:e3:fd:05:16:46:
bd:68:9b:d8:41:d4:c5:13:e5:91:ca:ab:57:48:e5:
52:22:60:3c:8f:70:5c:4b:93:5a:a8:4c:b3:cc:b1:
35:04:75:1b:56:52:50:e3:de:92:01:b3:ca:da:d2:
49:f6:9b:10:92:c3:11:09:f0:25:38:10:fc:6d:fc:
80:5e:8a:48:12:73:54:91:85:27:af:8d:d0:1b:aa:
e0:cb:a5:34:0b:11:b1:fd:48:11:2d:99:0d:65:d1:
30:eb:06:99:34:33:3b:66:1c:d9:4d:24:62:b6:45:
32:5d:27:da:18:bf:aa:4c:34:a6:bb:e2:38:97:3f:
55:9c:d3:23:73:91:44:0c:46:c4:79:6d:35:20:da:
45:0c:e0:78:b3:6e:a8:ff:2b:b8:73:92:49:95:e2:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:19:1A:68:1B:9C:CC:C3:6C:6C:9C:AB:2F:45:19:25:63:6E:C7:CE
X509v3 Authority Key Identifier:
keyid:D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f0:6c:a6:f3:42:3a:7b:70:e3:65:58:cc:4d:72:6f:42:15:
50:f5:02:da:21:e0:b9:b6:42:53:27:bb:48:ec:0d:44:60:3e:
2c:19:10:70:a6:70:1f:14:0a:ac:c3:0d:cb:c3:88:94:dd:a4:
0a:73:52:bc:02:b2:d7:21:f1:eb:29:91:c5:66:8a:4b:4f:b0:
4b:93:e9:24:fc:88:27:2f:b3:60:01:2a:29:3c:ff:e3:89:06:
a8:82:ce:8f:a8:58:cd:16:28:55:20:65:11:61:39:b6:01:37:
9f:98:27:67:e9:65:bc:f6:bb:98:e0:81:eb:9c:d8:d5:a1:e5:
32:87:74:5c:0c:d5:f6:50:1d:8a:ed:b6:f7:8c:e0:9c:44:ba:
a1:f3:a0:f8:b0:ba:0d:60:ae:3f:db:95:3a:9f:cd:2e:32:5d:
4d:de:54:6b:38:c0:b9:19:ef:24:4e:e8:39:97:65:b1:2f:3a:
e6:e6:0b:ff:6f:a9:b7:b4:2d:10:1b:dc:aa:d0:4d:e9:43:f0:
b2:74:4a:3c:6d:4d:09:6f:f3:d4:ed:17:59:49:1e:10:1d:b2:
57:69:9b:9a:00:4d:9a:5a:05:7d:a0:34:33:99:d6:a5:8a:46:
95:3e:dc:e2:7b:ed:d4:67:36:31:f3:44:21:44:44:c5:c5:fe:
f6:b4:a1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:20:36 2026 by rpki-client