
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft
File: 3214A9089E97D5F53B714A9F9256A933E4595E53.mft (raw, json)
Hash identifier: RAVIKxOuuISUUehUESvVgw5lIr+xWEVCcexBITqofv4=
Subject key identifier: 90:2B:9F:29:EA:E6:D1:DB:08:C6:2A:AD:AE:54:AF:A9:5A:9D:73:22
Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53
Certificate issuer: /CN=3214A9089E97D5F53B714A9F9256A933E4595E53
Certificate serial: 1ECED8E8DFBE28E1936A9F2B7591D24AE5DA492E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft
Manifest number: 01EA
Signing time: Sat 17 Oct 2026 21:58:38 +0000
Manifest this update: Sat 17 Oct 2026 21:53:38 +0000
Manifest next update: Fri 23 Oct 2026 15:47:38 +0000
Files and hashes: 1: 34352e3137382e33372e302f32342d3234203d3e203232373234.roa (hash: xaKtE1MoBwmMjQ2M7GSssNsCsTneR6B01lvyhKGJO6g=)
2: 3214A9089E97D5F53B714A9F9256A933E4595E53.crl (hash: k8y72ubDDL7ctQuvESXmOEdKf1srRB8seji934UECBw=)
3: 34352e3137382e33392e302f32342d3234203d3e203232373234.roa (hash: Ygo5kX2uL4dEFXl0h58eb0BlX1+Hgw5z6BzV/dvqZnw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl
rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 23 Oct 2026 15:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ce:d8:e8:df:be:28:e1:93:6a:9f:2b:75:91:d2:4a:e5:da:49:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53
Validity
Not Before: Oct 17 21:53:38 2026 GMT
Not After : Oct 23 15:47:38 2026 GMT
Subject: CN=902B9F29EAE6D1DB08C62AADAE54AFA95A9D7322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:f5:1b:e2:c6:f9:e5:d0:07:df:6b:e0:92:
42:a0:d7:38:25:aa:e5:6b:47:e8:99:0c:00:f6:05:
c0:3f:30:8b:31:c6:fb:e9:c2:7b:67:fa:a8:91:4f:
30:30:8f:46:a1:c8:76:a8:94:b5:a3:3f:a5:99:80:
cb:ff:67:61:52:c9:55:4b:8f:67:27:50:1e:a5:50:
16:7f:e1:c1:5f:ae:50:de:1a:b0:94:c6:85:25:4c:
55:ee:d1:be:69:d1:a6:f5:17:28:e5:b4:d5:2c:dc:
d3:75:2f:02:4c:25:6e:b6:fa:5f:c7:95:4b:4c:e2:
3d:f8:c0:37:2b:53:e1:a1:95:f4:ab:a3:94:fc:c5:
7a:0e:b9:2d:63:9f:79:55:8d:24:e0:e4:7d:f3:c6:
2c:3b:e3:a6:36:6b:dc:cc:f3:9a:40:c3:8a:0a:ca:
70:72:21:02:85:47:92:56:58:04:41:80:69:8e:8a:
09:f7:a9:37:06:a6:74:14:2a:7a:b4:ec:ff:d1:d0:
8d:90:e4:99:a8:28:76:5c:fe:9a:11:da:36:fb:46:
80:5e:93:5d:a8:b9:6a:a1:22:f7:12:36:2b:fd:5a:
09:46:5f:10:2c:b8:de:92:3f:c4:54:00:fd:84:69:
b9:a2:23:7a:9d:20:59:f3:0b:3a:60:1e:55:3d:9e:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2B:9F:29:EA:E6:D1:DB:08:C6:2A:AD:AE:54:AF:A9:5A:9D:73:22
X509v3 Authority Key Identifier:
keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:dd:df:f8:ce:48:84:2c:af:b7:89:ab:16:8b:57:91:35:2f:
fe:d1:a2:d4:54:51:15:ee:76:44:2b:7f:d7:b8:6b:0f:fd:50:
31:db:94:72:7e:32:80:a4:fd:ce:b1:30:6b:e3:1f:0c:fe:e4:
81:fa:cb:2c:70:31:5a:ac:e6:b7:8c:0d:28:b1:d5:a1:26:11:
56:5e:54:d3:e8:a0:80:a6:58:16:40:03:d0:17:79:ed:44:25:
59:3a:3a:a7:c0:41:82:7a:29:9c:05:33:23:24:24:b9:01:e2:
56:a1:e8:57:64:a8:44:4b:76:9d:17:6e:4e:a9:94:d0:42:1a:
c6:02:b6:c9:6d:cd:65:89:6b:7a:3a:97:d6:ee:4f:53:b5:e6:
9b:07:07:61:ad:53:79:13:68:df:08:52:1b:b5:bb:7a:a8:57:
ec:da:62:16:21:f2:b1:7a:7a:b5:92:68:be:8b:e1:b9:70:a4:
c2:10:9e:a4:4f:97:35:4f:49:f2:c9:64:ba:f0:d9:9e:23:b5:
ac:91:f2:0b:1e:39:eb:da:5b:e7:ca:ab:64:5a:41:0a:e4:26:
dc:8a:52:e9:8a:44:39:31:00:33:e8:c9:00:95:9b:d1:2f:95:
66:c1:3c:6c:35:4e:d3:b7:a7:88:6a:80:ca:be:80:f2:e4:b7:
11:3a:42:05
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUHs7Y6N++KOGTap8rdZHSSuXaSS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIxNEE5MDg5RTk3RDVGNTNCNzE0QTlGOTI1NkE5MzNF
NDU5NUU1MzAeFw0yNjEwMTcyMTUzMzhaFw0yNjEwMjMxNTQ3MzhaMDMxMTAvBgNV
BAMTKDkwMkI5RjI5RUFFNkQxREIwOEM2MkFBREFFNTRBRkE5NUE5RDczMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3QPUb4sb55dAH32vgkkKg1zgl
quVrR+iZDAD2BcA/MIsxxvvpwntn+qiRTzAwj0ahyHaolLWjP6WZgMv/Z2FSyVVL
j2cnUB6lUBZ/4cFfrlDeGrCUxoUlTFXu0b5p0ab1FyjltNUs3NN1LwJMJW62+l/H
lUtM4j34wDcrU+GhlfSro5T8xXoOuS1jn3lVjSTg5H3zxiw746Y2a9zM85pAw4oK
ynByIQKFR5JWWARBgGmOign3qTcGpnQUKnq07P/R0I2Q5JmoKHZc/poR2jb7RoBe
k12ouWqhIvcSNiv9WglGXxAsuN6SP8RUAP2EabmiI3qdIFnzCzpgHlU9nq2rAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUkCufKerm0dsIxiqtrlSvqVqdcyIwHwYDVR0j
BBgwFoAUMhSpCJ6X1fU7cUqfklapM+RZXlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMTI2OTU1Rjg2NzdFODU4MzZENkMwMDNFMzhCRTNDRTcy
N0IyQzk3RkQ2MjU1ODFCMDA4ODc5M0NFMTlERUFGLzAvMzIxNEE5MDg5RTk3RDVG
NTNCNzE0QTlGOTI1NkE5MzNFNDU5NUU1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjE0QTkwODlFOTdENUY1M0I3
MTRBOUY5MjU2QTkzM0U0NTk1RTUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzEyNjk1NUY4Njc3RTg1ODM2RDZDMDAzRTM4QkUzQ0U3MjdCMkM5N0ZE
NjI1NTgxQjAwODg3OTNDRTE5REVBRi8wLzMyMTRBOTA4OUU5N0Q1RjUzQjcxNEE5
RjkyNTZBOTMzRTQ1OTVFNTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDU3d/4zkiELK+3iasWi1eRNS/+
0aLUVFEV7nZEK3/XuGsP/VAx25RyfjKApP3OsTBr4x8M/uSB+ssscDFarOa3jA0o
sdWhJhFWXlTT6KCAplgWQAPQF3ntRCVZOjqnwEGCeimcBTMjJCS5AeJWoehXZKhE
S3adF25OqZTQQhrGArbJbc1liWt6OpfW7k9TteabBwdhrVN5E2jfCFIbtbt6qFfs
2mIWIfKxenq1kmi+i+G5cKTCEJ6kT5c1T0nyyWS68NmeI7WskfILHjnr2lvnyqtk
WkEK5CbcilLpikQ5MQAz6MkAlZvRL5VmwTxsNU7Tt6eIaoDKvoDy5LcROkIF
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:21:56 2026 by rpki-client