
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.mft
File: D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.mft (raw, json)
Hash identifier: Ssgieh3fyviAlXQ1MCDVid14G80QNrGtqpir0myWC/g=
Subject key identifier: 31:11:E2:82:58:2C:D0:C2:05:1B:BA:E1:9B:82:8A:82:8D:03:72:DC
Authority key identifier: D5:FA:C1:4B:3F:2B:69:C2:46:42:E1:33:8A:FE:00:4B:BF:C2:B5:9A
Certificate issuer: /CN=D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A
Certificate serial: 2DB3AD489D2EF843A55C4B0F2B12C0C64F6062F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.mft
Manifest number: 01E1
Signing time: Sat 24 Oct 2026 12:36:49 +0000
Manifest this update: Sat 24 Oct 2026 12:31:49 +0000
Manifest next update: Wed 28 Oct 2026 12:38:49 +0000
Files and hashes: 1: 3138312e3139312e38302e302f32322d3234203d3e20323635373930.roa (hash: hIA15CJztsl+ixkmxBi6838/p0JwSQaV3oOG6Y8mv6Q=)
2: D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.crl (hash: TAYlYhv7tlfJQ7yESeUeqyqAi0cwFPyf95bfYA/BCIM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.crl
rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Oct 2026 12:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b3:ad:48:9d:2e:f8:43:a5:5c:4b:0f:2b:12:c0:c6:4f:60:62:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A
Validity
Not Before: Oct 24 12:31:49 2026 GMT
Not After : Oct 28 12:38:49 2026 GMT
Subject: CN=3111E282582CD0C2051BBAE19B828A828D0372DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fa:8c:17:58:f1:ed:4e:12:71:fe:d8:a3:c0:
84:db:12:e5:e7:f3:c0:5b:9e:5c:52:d1:ba:d8:b3:
c4:c0:d2:2e:2d:dd:cf:4c:92:c1:ed:39:fe:5b:1b:
2e:7a:ac:8c:5c:6c:12:eb:ab:9f:0c:7a:44:27:0a:
35:ee:da:c8:57:e1:0b:8e:ff:5d:6e:bb:2c:ca:90:
2e:0e:f0:70:f9:d6:55:9f:06:c7:69:18:02:10:bc:
21:d0:06:5f:cd:7f:e1:f9:49:21:87:3a:9a:19:c2:
09:e9:f7:fb:a4:85:3a:48:c4:cd:e3:21:d8:c4:e2:
ee:b6:eb:9f:48:bb:7c:d3:14:0d:d7:7b:fd:dc:07:
2c:ff:d0:d2:6c:aa:38:35:76:1b:f2:8c:60:e6:9f:
fc:dc:e0:a7:9b:9f:0f:30:64:60:2a:aa:d2:47:c5:
19:2d:b3:3b:cc:9a:2b:ae:3a:36:fc:ec:97:cf:33:
ca:35:32:90:5d:d3:bc:32:5d:26:cf:4c:2e:51:b7:
ba:e7:b7:b3:76:c8:63:fd:ab:d9:86:0a:f8:bb:4d:
ca:71:4a:37:1b:9a:8e:0d:be:ef:7e:fb:56:44:be:
7e:fb:d7:02:4a:40:5d:34:f2:27:74:19:b5:74:fc:
7f:4c:1a:1d:bd:fc:35:85:1d:e3:07:a0:ec:94:f4:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:11:E2:82:58:2C:D0:C2:05:1B:BA:E1:9B:82:8A:82:8D:03:72:DC
X509v3 Authority Key Identifier:
keyid:D5:FA:C1:4B:3F:2B:69:C2:46:42:E1:33:8A:FE:00:4B:BF:C2:B5:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9c:d6:1e:94:3b:6d:f1:e5:a9:ab:81:2f:b2:51:dc:86:4b:
e6:7e:e3:19:5f:f0:46:c7:f3:70:e7:df:e7:99:66:30:34:12:
fb:c1:ac:d5:f9:91:ea:3b:ff:95:b2:9c:6f:b6:34:b7:bc:f4:
aa:be:1d:f4:40:e7:2d:70:02:92:14:2e:06:92:c8:d1:b3:54:
cb:19:03:a4:9c:eb:ef:d0:7b:9a:19:57:52:b4:6f:3b:d1:f3:
4a:3e:5f:53:b3:54:73:76:ba:15:b7:2e:bc:1e:51:64:10:f5:
b8:d2:a0:5f:f4:09:ed:44:6f:a1:9c:ab:5c:16:40:ed:96:da:
1d:be:03:28:91:e5:c3:c6:fa:10:d1:8f:29:8d:3a:77:67:19:
ad:3e:d5:03:92:e9:1a:5d:c6:71:64:94:c2:aa:4e:d4:b7:46:
57:61:29:85:63:c4:90:0b:76:1a:07:de:a8:82:23:2c:e3:cf:
9c:cc:60:fe:b4:f8:c3:ed:55:e6:7e:4b:13:13:c8:5c:7f:67:
c5:b4:fa:1d:f1:c2:6f:57:5f:fe:5a:0f:ae:6c:37:1b:25:0c:
03:ca:19:cf:c7:6b:39:68:60:a2:89:f2:75:59:1b:6b:56:11:
00:62:4e:95:3d:82:39:03:48:53:64:44:20:ff:f5:77:a3:06:
69:4d:0e:05
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIULbOtSJ0u+EOlXEsPKxLAxk9gYvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVGQUMxNEIzRjJCNjlDMjQ2NDJFMTMzOEFGRTAwNEJC
RkMyQjU5QTAeFw0yNjEwMjQxMjMxNDlaFw0yNjEwMjgxMjM4NDlaMDMxMTAvBgNV
BAMTKDMxMTFFMjgyNTgyQ0QwQzIwNTFCQkFFMTlCODI4QTgyOEQwMzcyREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ+owXWPHtThJx/tijwITbEuXn
88BbnlxS0brYs8TA0i4t3c9MksHtOf5bGy56rIxcbBLrq58MekQnCjXu2shX4QuO
/11uuyzKkC4O8HD51lWfBsdpGAIQvCHQBl/Nf+H5SSGHOpoZwgnp9/ukhTpIxM3j
IdjE4u62659Iu3zTFA3Xe/3cByz/0NJsqjg1dhvyjGDmn/zc4Kebnw8wZGAqqtJH
xRktszvMmiuuOjb87JfPM8o1MpBd07wyXSbPTC5Rt7rnt7N2yGP9q9mGCvi7Tcpx
Sjcbmo4Nvu9++1ZEvn771wJKQF008id0GbV0/H9MGh29/DWFHeMHoOyU9OzzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUMRHiglgs0MIFG7rhm4KKgo0DctwwHwYDVR0j
BBgwFoAU1frBSz8racJGQuEziv4AS7/CtZowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMjU4NTYzMzdFQTQyRTgwQTVCODk2OTU5QzAxRERGMzlE
NDA1OTM2NEQ5MjgwNzA3MTM0N0E4M0ZFMDVBNTQ5LzAvRDVGQUMxNEIzRjJCNjlD
MjQ2NDJFMTMzOEFGRTAwNEJCRkMyQjU5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENUZBQzE0QjNGMkI2OUMyNDY0
MkUxMzM4QUZFMDA0QkJGQzJCNTlBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDI1ODU2MzM3RUE0MkU4MEE1Qjg5Njk1OUMwMURERjM5RDQwNTkzNjRE
OTI4MDcwNzEzNDdBODNGRTA1QTU0OS8wL0Q1RkFDMTRCM0YyQjY5QzI0NjQyRTEz
MzhBRkUwMDRCQkZDMkI1OUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBInNYelDtt8eWpq4EvslHchkvm
fuMZX/BGx/Nw59/nmWYwNBL7wazV+ZHqO/+VspxvtjS3vPSqvh30QOctcAKSFC4G
ksjRs1TLGQOknOvv0HuaGVdStG870fNKPl9Ts1RzdroVty68HlFkEPW40qBf9Ant
RG+hnKtcFkDtltodvgMokeXDxvoQ0Y8pjTp3ZxmtPtUDkukaXcZxZJTCqk7Ut0ZX
YSmFY8SQC3YaB96ogiMs48+czGD+tPjD7VXmfksTE8hcf2fFtPod8cJvV1/+Wg+u
bDcbJQwDyhnPx2s5aGCiifJ1WRtrVhEAYk6VPYI5A0hTZEQg//V3owZpTQ4F
-----END CERTIFICATE-----
Generated at Sun Oct 25 08:52:11 2026 by rpki-client