
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
File: C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft (raw, json)
Hash identifier: jRA0YvClLRJUh7cLVAh+ftnvkcKaq+WkbI3zzk5ahuE=
Subject key identifier: 0C:3A:16:1A:38:CA:04:CB:BD:8C:B9:4A:61:F5:AC:0B:9D:A4:99:9C
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Certificate issuer: /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial: 2624BF5BF1E0C70133E8CD01A83D7393F294091A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
Manifest number: 0137
Signing time: Sat 01 Nov 2025 07:00:34 +0000
Manifest this update: Sat 01 Nov 2025 06:55:34 +0000
Manifest next update: Wed 05 Nov 2025 11:01:34 +0000
Files and hashes: 1: 3134382e3233302e342e302f32342d3234203d3e20323635363036.roa (hash: a/gojYHCvsFM6jBHuxepap7EE9LkCtyN8QYEF5Zr+XU=)
2: 3230302e3232352e36302e302f32332d3234203d3e20323635363036.roa (hash: 51+0gME+kWYR4n9Zv1GXIzpivNmbXgiaRnHXCoCEIdw=)
3: 3134382e3233302e31352e302f32342d3234203d3e20323635363036.roa (hash: MTHdrMkq2VH+rC8vck35GFmtT142z8Bb+2JdfcKSSH0=)
4: C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl (hash: 2WVA6Mt22j/9qChB4BK92MGBMfB8RQ329mslXtpAUWI=)
5: 34352e3138382e3132342e302f32322d3234203d3e20323635363036.roa (hash: 0HZY/OU0B5PnaoDotnKIoc0/2dgWlzYBOZymyWVafQQ=)
6: 323830363a3336323a3a2f33322d3430203d3e20323635363036.roa (hash: dYOaP/k/Yr3aKGk0pwYKE+kEBwxEZa/obMbN+aZge1U=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:24:bf:5b:f1:e0:c7:01:33:e8:cd:01:a8:3d:73:93:f2:94:09:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Validity
Not Before: Nov 1 06:55:34 2025 GMT
Not After : Nov 5 11:01:34 2025 GMT
Subject: CN=0C3A161A38CA04CBBD8CB94A61F5AC0B9DA4999C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:81:18:52:49:44:72:da:d9:7d:95:59:5e:
55:c3:8a:1a:d5:dc:29:54:9a:42:1f:af:50:5d:62:
e3:c5:fc:a8:fa:70:af:e3:ca:90:3b:a8:58:fd:a1:
83:be:f8:e7:e3:0c:eb:a4:b1:d2:04:3a:af:82:40:
67:2f:13:3f:99:9b:c9:38:65:b0:8c:f5:2b:3c:36:
09:d1:e7:41:43:6d:7f:fb:35:26:eb:1f:3e:fc:61:
30:e2:01:ba:02:84:5c:26:25:5e:19:69:a4:20:dc:
99:a6:4b:9d:08:dc:aa:cc:65:cd:71:2b:29:3f:79:
50:9a:e2:23:d0:1b:20:70:99:6b:45:4b:54:ca:45:
14:67:00:ee:c1:30:cb:58:76:b7:10:54:95:d9:e0:
35:66:af:30:8b:7a:46:f2:97:d8:29:c9:7a:77:84:
61:9d:ff:d5:23:d7:0b:f5:b0:7d:39:b0:d4:d4:cf:
a0:30:13:ef:b1:54:9b:a8:89:ce:82:6d:89:91:55:
dd:29:90:d3:1b:66:47:a9:92:e0:f5:fa:56:b7:0b:
d4:dc:c9:93:9f:e8:a9:bb:c5:21:b2:9d:38:62:96:
54:32:91:26:ad:39:44:9a:38:1c:3a:55:66:25:bd:
4f:a0:41:86:3e:6b:ae:b8:79:fc:f2:ff:b7:fe:dd:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3A:16:1A:38:CA:04:CB:BD:8C:B9:4A:61:F5:AC:0B:9D:A4:99:9C
X509v3 Authority Key Identifier:
keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ec:41:63:f3:81:36:66:46:d5:b3:8e:fd:7c:c2:d4:cd:fc:
58:d8:2d:0f:f7:12:97:40:71:95:bb:72:b0:35:ce:05:bd:69:
1b:a0:69:1a:6c:5c:5c:e6:02:92:cd:10:0e:40:3d:27:97:a7:
e7:a6:47:e9:e0:b7:a0:bb:d2:9e:92:d7:d0:7f:72:33:c1:f7:
0c:7f:5f:66:c7:21:df:5b:39:c1:f2:59:34:f3:39:33:1b:7b:
d1:49:7b:7a:9e:cd:37:e7:c1:53:79:96:6c:79:75:61:6b:e7:
47:f7:47:2a:da:7b:82:49:41:55:9d:e8:56:45:c4:1a:5b:53:
da:79:9b:a8:67:c7:6b:61:3b:79:77:fa:3a:80:35:24:e5:20:
3e:1d:33:b2:e4:82:8d:ea:79:3a:d5:e2:c1:0b:8c:70:dd:3b:
48:ca:14:a1:9b:ea:c0:15:2b:4b:eb:ed:b9:be:05:1f:b1:28:
0d:5f:0d:30:9a:df:a4:58:f6:de:44:eb:13:6d:86:08:b1:be:
64:af:09:51:5d:1a:35:47:a3:54:97:eb:67:5c:0b:be:c5:5d:
94:c7:ec:f2:f0:06:c2:e4:8c:af:f8:94:23:c9:c7:70:86:3a:
33:83:be:10:27:be:37:5b:6b:bb:cf:5d:ed:ac:5e:e6:cd:0c:
2d:bb:6c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 21:51:27 2025 by rpki-client