
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
File: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft (raw, json)
Hash identifier: 5InL0gGPUMIQn+ivsOTEXdqsfSOlgBRbCxyeTu9VqWc=
Subject key identifier: BD:87:A8:80:EE:0C:E9:97:85:E4:98:A4:31:37:7F:28:F7:F7:FE:3A
Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB
Certificate issuer: /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
Certificate serial: 7DFAC4CD0B55FFCCF7266F65F4B9845907A87E09
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
Manifest number: 01AF
Signing time: Fri 12 Jun 2026 07:31:39 +0000
Manifest this update: Fri 12 Jun 2026 07:26:39 +0000
Manifest next update: Wed 17 Jun 2026 07:18:39 +0000
Files and hashes: 1: 323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (hash: ja5NzAS9zsurXlmAUDmehMIKhNL3KuIVCRoF+SlYZZk=)
2: 34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (hash: RjYwFPygnV0CajzN68cgTzZl3h7UfXxe+Bz7fg/no0g=)
3: 34352e3232382e3233322e302f32342d3234203d3e20323636363936.roa (hash: E0b13OM4B4olC5DtkwtnTO/VSW7DATHGA0OuT98pPXA=)
4: 323830333a6432303a3a2f33322d3332203d3e20323635363834.roa (hash: xgPx+dQWjLclN9xE6E/XYKB+eEv0I0+Tt3Ke/JN4uVA=)
5: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl (hash: rawGI3Pfq0Xcex1JtTwxXUVWWUu/846eQs3h4TAYkPY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl
rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 17 Jun 2026 07:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:fa:c4:cd:0b:55:ff:cc:f7:26:6f:65:f4:b9:84:59:07:a8:7e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
Validity
Not Before: Jun 12 07:26:39 2026 GMT
Not After : Jun 17 07:18:39 2026 GMT
Subject: CN=BD87A880EE0CE99785E498A431377F28F7F7FE3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d1:76:00:ba:54:3f:c3:a5:af:e2:3b:ed:9c:
d9:36:98:2a:cb:66:33:99:05:ee:e7:8e:32:15:f0:
30:e2:80:7c:48:6a:e0:a9:ce:02:55:67:69:b9:95:
c2:df:17:64:73:85:1e:7c:18:b2:f8:b7:36:6d:c3:
d1:9a:aa:20:64:ce:cd:35:68:07:0f:b9:a4:16:5e:
55:dd:46:e2:90:13:1c:ee:fc:99:6c:77:f0:e1:19:
67:f0:18:ec:b8:72:30:7e:5d:77:8e:4d:ab:aa:9f:
19:a0:ba:d4:5d:56:46:5c:d2:07:23:99:5b:36:93:
41:38:e6:52:e9:9f:6e:ad:f2:67:d7:fd:58:d6:2f:
a2:aa:da:08:19:69:fe:34:b9:93:b0:5c:58:ab:fd:
99:5e:33:fe:df:d8:cd:1e:67:bf:61:a8:49:08:c0:
2a:5e:bc:0d:4b:eb:ca:31:f6:00:77:38:0e:32:1a:
6f:17:56:a5:ca:d2:d8:69:92:59:3f:14:1f:83:5c:
6e:0a:95:af:a7:25:4e:18:b6:f6:fa:f5:8d:88:4a:
f9:85:ca:1f:7f:f2:e5:e3:16:3a:1e:2f:b9:4f:ac:
be:3b:15:58:5d:39:9e:38:f0:68:7e:47:58:ad:e8:
6e:24:8d:c5:f9:dd:ae:0e:e6:e3:7b:ca:ae:dd:fc:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:87:A8:80:EE:0C:E9:97:85:E4:98:A4:31:37:7F:28:F7:F7:FE:3A
X509v3 Authority Key Identifier:
keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b7:15:bd:1a:0e:76:b2:dd:d2:7f:02:c1:c0:68:3d:9b:d1:
2e:43:ad:51:3d:af:27:15:af:ae:90:30:18:0a:c0:59:b3:19:
e3:74:2e:52:15:55:e1:f0:0c:25:af:44:7a:43:7d:a2:f6:6c:
a5:1f:b3:42:74:a7:0d:18:cc:70:40:96:19:ea:09:04:09:5e:
00:1a:34:e5:1e:20:16:ea:e0:b8:09:c1:6c:79:ae:4b:67:ea:
84:25:84:9e:91:38:ad:bb:f8:9a:45:47:e5:2c:7e:8b:77:22:
1b:64:ca:2d:72:ab:f4:d9:bf:41:5b:85:6f:ca:3b:8f:5d:c2:
86:9a:bb:2b:05:d3:05:3f:c9:f9:ec:98:db:aa:6d:e8:08:20:
34:9e:3c:26:8b:90:7e:9c:0c:55:ad:ff:99:9e:6b:f5:05:df:
37:51:4a:07:b6:f7:b4:19:d6:6c:07:e5:eb:a5:7b:03:8f:0f:
b6:a0:64:b9:25:9e:07:7f:27:df:41:ac:6a:e8:e9:a2:56:4d:
76:54:99:a6:ec:7f:4d:87:a3:60:15:6f:86:33:11:df:64:28:
e0:07:47:4f:22:e1:b2:95:24:8e:fc:26:34:26:43:2f:6f:18:
68:2e:6d:46:e5:e9:f3:d4:f2:72:2e:53:26:95:e7:d7:f2:92:
1f:e3:4d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:21 2026 by rpki-client