
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft
File: 220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft (raw, json)
Hash identifier: BUIY5xh0hZ3xjCmNzT9V0sJAxsYMkfu8bn6dLT21lI8=
Subject key identifier: 08:B1:03:92:BB:17:50:F7:5A:B6:C3:04:60:0B:DF:64:2A:DA:5E:D7
Authority key identifier: 22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
Certificate issuer: /CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
Certificate serial: 1F2D29DB7FA511C9546C38F9C65D2C2EFE31BDE4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft
Manifest number: 0130
Signing time: Fri 31 Oct 2025 01:54:13 +0000
Manifest this update: Fri 31 Oct 2025 01:49:13 +0000
Manifest next update: Wed 05 Nov 2025 21:52:13 +0000
Files and hashes: 1: 220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl (hash: hDt2GxcXuUO4sOH0etknVHyLu5EZLgSe7AwWiHaqPQI=)
2: 3137302e3234352e35362e302f32322d3234203d3e20323632323334.roa (hash: stdoBnPxigW2/tJ+vz7rsMc1H55/cgGPWcQS15sspK4=)
3: 3137392e34392e3131322e302f32312d3234203d3e20323632323334.roa (hash: R2JSj/c5FCaqtBYdAS6U7R+yqIbLAzmGdEMfhjvfmk0=)
4: 3133312e3130382e3233322e302f32322d3234203d3e20323632323334.roa (hash: HCiEmN4N8WHXla6wIDAk771mUsAzi+3rCmAniYtte+c=)
5: 323830333a646230303a3a2f33322d3438203d3e20323632323334.roa (hash: IJALdVmNN1AgDpzEzbtEykGeHrj3Tgwn0yNVf0UL/aQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl
rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2d:29:db:7f:a5:11:c9:54:6c:38:f9:c6:5d:2c:2e:fe:31:bd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
Validity
Not Before: Oct 31 01:49:13 2025 GMT
Not After : Nov 5 21:52:13 2025 GMT
Subject: CN=08B10392BB1750F75AB6C304600BDF642ADA5ED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:13:5b:a5:f1:a1:46:5e:98:5f:c9:00:f3:
8b:8e:b7:fb:9f:a4:32:8d:5d:ec:cf:ad:5c:ff:f4:
ae:12:c9:3a:0c:03:ac:30:07:5c:91:d9:91:d5:31:
2d:f9:2f:ed:2c:a3:8d:54:03:e3:90:44:34:bb:9a:
e1:a0:85:17:58:85:bb:99:3b:e8:e4:c4:80:45:26:
07:0b:01:ec:2e:51:fe:aa:99:76:c0:69:37:87:20:
d8:02:59:c9:97:82:46:34:65:c4:19:c3:d9:04:5d:
45:77:5f:e7:cc:75:72:41:ef:f5:40:7d:6a:af:57:
73:a4:72:50:f3:2d:ef:89:6c:eb:8b:77:d7:6f:8f:
43:9b:e4:50:60:40:b6:92:d4:67:fe:dc:33:cb:92:
ef:6e:c9:d5:aa:fd:f1:28:d9:fe:72:a7:84:a9:ec:
43:40:19:26:27:4d:07:90:4c:15:c5:92:50:d4:dd:
70:74:bd:57:8e:9b:e3:93:ab:6f:aa:8f:1a:f7:07:
6d:f0:f6:6e:63:02:49:d0:d2:6f:78:70:ee:9e:c7:
17:43:50:4f:f8:39:d5:48:1e:25:f0:a6:d8:c4:98:
32:21:2e:4b:14:f7:19:a6:27:3e:51:da:9f:d2:94:
48:1b:12:da:36:99:bd:7e:31:06:24:6d:0a:c8:b4:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B1:03:92:BB:17:50:F7:5A:B6:C3:04:60:0B:DF:64:2A:DA:5E:D7
X509v3 Authority Key Identifier:
keyid:22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:29:a3:f9:37:73:57:70:69:af:4e:e2:1c:cf:ec:d2:fc:a9:
dc:8f:f9:f6:0c:1c:ee:9f:cd:79:1b:e5:04:8e:b0:1d:54:38:
7b:06:f5:d2:24:77:82:ad:36:8d:98:ce:ad:df:ec:db:47:2d:
16:73:2e:eb:9f:ba:98:01:ff:5c:1d:6b:56:95:be:d6:72:93:
a2:04:0c:10:7d:39:7d:4c:99:24:a1:ed:b3:e2:3c:5f:bb:4e:
94:e0:86:fb:1d:06:42:fa:d7:ac:52:5a:44:da:0d:f2:45:96:
00:88:2c:ad:03:bd:36:9c:6e:08:fb:59:1c:4e:6a:1b:90:2c:
0a:b6:35:44:c2:6f:43:72:67:cc:4c:9e:a3:a0:90:a2:df:6b:
d7:64:aa:52:1d:62:0f:ce:bf:ea:01:f6:32:e5:51:32:ac:25:
7c:54:08:70:f8:aa:d8:34:cc:9a:64:a8:5e:0f:64:44:b1:eb:
63:41:c3:e5:82:ff:77:1d:70:11:d1:5a:6d:b3:9f:8e:b7:71:
6d:3c:84:cb:71:42:11:50:aa:41:04:c5:19:4e:37:72:66:11:
ad:a2:ca:06:aa:37:a6:84:09:16:94:f4:6c:8e:1f:fc:1a:70:
28:41:2e:ed:14:46:7b:81:2a:86:18:20:ac:99:f3:a2:43:90:
05:42:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 21:43:36 2025 by rpki-client