
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
File: 6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft (raw, json)
Hash identifier: PeL5GdhmI6Irqtgt5yUUiySBV1QhSOL1lvpWyYFymmk=
Subject key identifier: B4:47:14:B4:1F:7B:0B:EE:28:A3:32:AA:C2:F0:8F:D0:BF:D3:80:4C
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Certificate issuer: /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial: 347CDE970E91AF16B1D32F5657F328560F585D5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
Manifest number: 012D
Signing time: Sat 01 Nov 2025 11:27:59 +0000
Manifest this update: Sat 01 Nov 2025 11:22:59 +0000
Manifest next update: Fri 07 Nov 2025 00:55:59 +0000
Files and hashes: 1: 3137372e3132342e38352e302f32342d3234203d3e20323730313532.roa (hash: 0mbKu1xZ7+nqKXvTh4RhfqMDUOfUA3NXKTVu2gztBCY=)
2: 3137372e3132342e38352e302f32342d3234203d3e203238343332.roa (hash: lrm+UIjfmfIuTjoAo4MD9po36+uUreI33kUjSPjMCUk=)
3: 3137372e3132342e38362e302f32342d3234203d3e203238343332.roa (hash: 8pY1toGsXrahUyChPa6O5C0oCDA84cukfBrLczJERSg=)
4: 6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl (hash: kwS46KQGIynD8W1tayxIXSCdnLnYxgkPOadG4revL2Y=)
5: 3137372e3132342e38342e302f32322d3232203d3e203238343332.roa (hash: FlVYzkL34mQ7qjfyCUio3x9mmpEUK/9lvAFevIK49uM=)
6: 3137372e3132342e38372e302f32342d3234203d3e203238343332.roa (hash: 3wIENJj2AYxWFGWT6DauA/SKsAPbKC0mnOeIUH1PaSk=)
7: 3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa (hash: w3pe6/RyMd+225qYh2miIgXUTb4or/xTJT3Gjhfs6/o=)
8: 3137372e3132342e38342e302f32342d3234203d3e203238343332.roa (hash: Xjpn6s/En9ysoFuWzcfNVXBIc+gfP9h2lwiuQwbX5zQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 21:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7c:de:97:0e:91:af:16:b1:d3:2f:56:57:f3:28:56:0f:58:5d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Validity
Not Before: Nov 1 11:22:59 2025 GMT
Not After : Nov 7 00:55:59 2025 GMT
Subject: CN=B44714B41F7B0BEE28A332AAC2F08FD0BFD3804C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:bf:24:2e:1f:e3:79:ea:28:85:30:4e:15:
a0:df:e2:14:49:15:1d:f3:bc:00:2a:55:47:e3:e8:
95:44:ba:47:7a:14:b6:c6:ee:ce:61:99:07:5a:a5:
c3:00:27:d5:ef:b7:18:93:20:e6:81:2f:79:23:7f:
b9:fe:48:0d:c8:e4:dd:86:93:25:44:f6:06:a4:4f:
d7:23:6d:64:91:12:b9:c0:8e:d5:72:6c:31:fe:8a:
3b:f3:e6:20:07:15:6c:74:89:8f:6a:c9:05:dd:5b:
09:35:14:61:a7:20:c1:c2:43:64:53:dd:da:da:d7:
73:9e:33:dc:1d:be:15:c5:77:1e:c1:85:52:32:9f:
ce:69:2d:e6:f1:f2:8e:ab:96:7d:e8:a7:b8:75:47:
bd:6e:03:7c:6d:0a:5c:42:08:7c:cd:65:21:1d:5b:
c2:df:86:f1:8c:0e:06:9a:e4:57:ef:14:ac:f1:91:
68:43:25:2a:dd:c0:f3:ea:3c:f7:8d:40:1c:af:58:
82:3b:f5:6d:3c:96:c3:71:07:9e:6f:52:5f:cf:c5:
4a:04:ec:af:92:89:97:d6:46:eb:a1:52:42:51:f0:
3a:c2:36:ea:ff:34:7b:9d:b9:da:ab:7e:0f:d1:5f:
ab:2a:3b:ac:30:37:ba:b1:dc:91:68:f0:4b:58:5c:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:47:14:B4:1F:7B:0B:EE:28:A3:32:AA:C2:F0:8F:D0:BF:D3:80:4C
X509v3 Authority Key Identifier:
keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f8:14:e3:8c:78:45:d2:af:74:cd:a5:28:32:71:fb:10:ca:
79:89:87:ea:5a:1f:93:df:15:08:c8:a7:f9:ff:69:93:a4:2d:
2e:0a:83:ed:f5:33:f6:97:e1:82:4d:a6:55:ff:bc:76:78:7f:
50:b1:29:f5:23:71:8a:08:5f:22:e9:b2:e7:9e:a0:40:83:ff:
51:b6:58:c4:ea:ef:b1:2b:31:fd:3b:72:a8:ae:70:69:af:0c:
bc:d3:05:09:f7:4f:df:ed:ee:13:96:ac:ce:fd:42:9d:46:e7:
5d:7f:d5:8a:c5:4c:e0:a5:80:a0:33:ed:0e:c2:45:1e:4c:7e:
a1:6d:99:12:1a:87:91:9b:7a:c9:6a:5f:0b:d6:73:7a:a2:66:
6a:cc:a4:08:16:f3:ff:92:06:db:d7:c7:5c:c4:10:f4:0a:0f:
be:b5:ec:29:fc:4f:36:6e:9d:01:9a:e2:11:cb:e8:bd:a5:37:
55:c8:02:7b:7a:11:a9:dd:03:85:f2:c7:bd:5e:31:b1:73:1c:
5a:ca:b5:ee:f1:6e:9a:a5:2e:86:a0:0a:ef:1e:a3:fb:60:34:
63:80:86:ce:a0:3d:0e:75:cc:de:00:db:4e:ad:31:d1:de:a7:
0c:04:90:c8:46:9b:c2:34:2d:6c:da:50:de:8f:1a:cf:e8:b8:
96:d8:4a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 11:23:22 2025 by rpki-client