
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft (raw, json)
Hash identifier: GOxyPPpXYVbwWW2UkLhs/eCb1DPLl0UDoPa7Pj5SZek=
Subject key identifier: AF:27:72:5A:53:47:1F:D8:59:4C:A3:09:2A:BC:81:3F:C0:12:2A:BF
Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF
Certificate issuer: /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
Certificate serial: 641D9E69509082A3A832EF438A3D476CC8F0BFA8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
Manifest number: 019D
Signing time: Fri 17 Apr 2026 05:47:25 +0000
Manifest this update: Fri 17 Apr 2026 05:42:25 +0000
Manifest next update: Wed 22 Apr 2026 14:54:25 +0000
Files and hashes: 1: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl (hash: mEckbJFcp7XoyoZJS0Om2dWqUi7tRplxD+mf6XyTPbk=)
2: AS22884.roa (hash: SO1rpw0F1gPMBy50R/ScjIa/qZ2TVF5tcGoFxJDFQJw=)
3: AS28414.roa (hash: oLB6f9LZPceeei3hsyIsrm72NY62QAbK78fW/F63gaU=)
4: AS17072.roa (hash: R+2q09GH0ungPp49w2zD7B0xJwqCbDNeaRUE/LWRMzQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl
rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 22 Apr 2026 04:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:1d:9e:69:50:90:82:a3:a8:32:ef:43:8a:3d:47:6c:c8:f0:bf:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
Validity
Not Before: Apr 17 05:42:25 2026 GMT
Not After : Apr 22 14:54:25 2026 GMT
Subject: CN=AF27725A53471FD8594CA3092ABC813FC0122ABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:dd:ca:29:55:30:2e:73:8f:83:5a:11:66:
2b:d5:7a:7e:62:a7:c9:4d:75:20:91:2a:24:34:3c:
22:8b:32:d4:3c:f4:29:f4:5d:54:58:fe:fc:d4:66:
6a:72:cd:fd:30:e0:3d:5b:90:35:1b:e1:b5:c4:31:
b7:76:f5:cb:fa:ed:28:b3:92:fd:1d:9c:4d:45:f0:
1d:0c:e3:a5:ec:ab:15:8a:12:4b:e6:24:a3:55:82:
8e:fc:f1:3b:ca:41:4c:b5:ee:3a:a4:b6:20:5f:1d:
a0:fe:35:63:bd:fa:39:e4:73:26:37:28:f4:e8:9f:
8c:20:9b:a3:30:e1:af:99:c8:0d:57:4f:44:71:a3:
16:06:76:5a:a5:41:e2:67:2a:4e:b6:6a:9d:65:15:
e4:5c:5e:f6:c5:4b:79:58:d5:4e:75:6d:83:36:c8:
0a:2d:aa:ab:da:de:d1:bc:c9:37:63:55:19:e7:01:
52:50:53:81:23:0d:42:5d:c9:56:9e:bc:3c:04:a2:
da:32:88:34:ab:f5:7f:45:ad:bd:a7:2b:b3:e8:3f:
37:38:cb:13:d2:92:ea:4d:35:8d:95:9a:8b:3b:35:
7e:6f:df:ec:de:87:09:8e:04:c5:de:28:51:04:24:
d9:37:89:fa:e8:1d:e2:c5:75:ed:7f:a1:33:63:d4:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:72:5A:53:47:1F:D8:59:4C:A3:09:2A:BC:81:3F:C0:12:2A:BF
X509v3 Authority Key Identifier:
keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:21:05:5f:26:e1:ce:4f:56:05:9c:18:29:7d:ba:4d:ae:f5:
ea:79:cd:d6:3d:6a:3e:bb:34:2b:05:af:27:18:b2:dc:bd:a3:
5e:92:6d:5d:b6:cf:02:73:74:87:cb:77:4a:35:37:22:6b:6e:
2c:58:ea:fb:fa:46:02:62:20:8c:ff:48:c6:eb:38:29:28:40:
3f:a9:ff:a7:fb:16:91:ae:ee:d4:76:b6:71:35:2d:53:a1:ee:
37:88:15:2c:80:62:c9:c1:c6:58:a3:cf:65:c7:db:a7:32:da:
58:f6:33:13:16:eb:b7:4b:7f:dd:2e:5b:77:97:33:71:97:ed:
7e:ef:8d:0c:27:f0:3a:19:b9:3d:5c:61:37:ce:47:07:31:77:
aa:58:72:06:84:ba:9c:a9:6e:0c:77:04:2b:d4:a4:a8:8c:00:
7e:9a:e5:3b:1c:ce:91:3d:21:b1:70:cc:c5:4f:cb:9e:d1:0c:
81:4f:7b:59:70:a4:a4:e2:b5:86:92:77:13:7a:31:93:75:44:
b3:f4:9e:1e:df:73:d8:92:44:ee:94:cf:04:39:04:7f:ce:98:
0d:d4:92:0f:49:11:5c:c9:e3:f2:30:50:9b:75:85:0f:92:51:
6e:9c:94:25:31:16:f4:f9:64:39:9b:93:2d:30:14:33:72:88:
bd:02:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:18:11 2026 by rpki-client