
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft
File: CDE9A086136079BC935532C1329B043B4912BF62.mft (raw, json)
Hash identifier: sVPQbVWnXBDJU5jgw4ZdJqUnS41CexlJCp8/wXG8uNM=
Subject key identifier: DE:84:C3:07:4E:78:EA:B1:DD:A4:E9:26:AE:93:7F:E9:4E:79:13:1C
Authority key identifier: CD:E9:A0:86:13:60:79:BC:93:55:32:C1:32:9B:04:3B:49:12:BF:62
Certificate issuer: /CN=CDE9A086136079BC935532C1329B043B4912BF62
Certificate serial: 702FBDA649BB0618836A2664DB90947B2E0F5856
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft
Manifest number: 012C
Signing time: Fri 31 Oct 2025 08:07:41 +0000
Manifest this update: Fri 31 Oct 2025 08:02:41 +0000
Manifest next update: Wed 05 Nov 2025 10:53:41 +0000
Files and hashes: 1: 323830333a636636303a3a2f33322d3332203d3e20323639383333.roa (hash: DAWfUBJxhL/E2Uz/2dU/mnXFUcL+tMpbjshPWq8OILY=)
2: CDE9A086136079BC935532C1329B043B4912BF62.crl (hash: 5NhyOtYwxROMvtdoOUmpDrnIZjL4MRidWxLTsNgP7ws=)
3: 34352e3138382e32302e302f32322d3234203d3e20323639383333.roa (hash: kHeTSpTYh6OdL0w4DvDN/TDfQuBaK/PDRfAKHxPTS9c=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.crl
rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 10:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:2f:bd:a6:49:bb:06:18:83:6a:26:64:db:90:94:7b:2e:0f:58:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDE9A086136079BC935532C1329B043B4912BF62
Validity
Not Before: Oct 31 08:02:41 2025 GMT
Not After : Nov 5 10:53:41 2025 GMT
Subject: CN=DE84C3074E78EAB1DDA4E926AE937FE94E79131C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:cd:e3:7c:ef:d0:16:10:0e:1f:8c:75:77:
9a:c3:27:c8:c2:4f:b3:69:fa:a5:23:27:06:d8:46:
a7:d9:97:cc:4c:b0:96:64:1d:f3:79:6d:de:d0:ff:
10:08:c7:80:b1:c1:21:d1:53:5a:53:1c:1d:93:7c:
b8:cb:11:6c:d8:d9:07:1a:d9:30:28:8b:8a:ba:59:
ae:13:8b:c3:b2:10:6f:56:35:67:7b:0a:b8:08:e8:
d2:7f:be:98:a8:dc:2c:a6:06:28:c9:1a:13:9f:1a:
50:8d:fa:66:9a:a7:b4:18:e5:68:a9:d2:24:52:66:
98:38:50:c3:20:68:24:42:2f:d5:36:0b:6d:26:94:
8f:22:88:51:ba:b2:d3:6e:57:57:69:f0:2c:38:a5:
b3:89:a6:4b:ea:a4:3a:f0:97:a0:fe:22:46:fb:b2:
92:ec:39:10:72:d1:9b:d4:3e:6b:be:54:c5:dc:73:
57:1d:b4:97:53:94:78:62:72:28:44:df:d0:58:8c:
0a:b6:00:a4:1f:38:79:4e:45:e4:73:8f:8c:7a:61:
58:fd:6e:04:31:11:e3:5d:eb:ea:c1:a6:17:d6:27:
f5:25:87:13:10:e5:ba:fe:9f:8c:a8:ec:09:b7:ee:
a4:e2:fc:49:0d:5b:e1:1e:af:72:62:f2:75:5c:f1:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:84:C3:07:4E:78:EA:B1:DD:A4:E9:26:AE:93:7F:E9:4E:79:13:1C
X509v3 Authority Key Identifier:
keyid:CD:E9:A0:86:13:60:79:BC:93:55:32:C1:32:9B:04:3B:49:12:BF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c6:dc:61:d1:cf:af:29:78:af:84:04:d9:14:49:f3:df:4e:
20:ac:1b:b1:a6:7a:1d:65:23:ea:e9:4d:6e:47:90:21:4f:96:
77:57:04:10:78:ae:e1:5d:b8:dd:09:1d:52:4e:20:ba:d8:47:
84:22:e2:9d:79:de:8d:5c:42:61:e3:b6:2f:1e:81:6d:ce:b1:
e6:dc:63:52:cf:05:b5:9d:d3:4a:ea:8f:99:12:83:67:16:08:
87:7a:4a:2b:e0:72:66:62:71:2a:5b:bb:26:85:c2:da:e0:2d:
7c:9d:8f:09:66:ed:ef:38:07:99:5c:7e:4b:78:25:ae:b1:07:
d4:2c:a1:28:5e:69:2c:43:13:ce:65:69:b1:08:5f:ed:c8:ff:
ee:f5:35:cf:00:a9:80:f2:50:62:6a:f0:0d:d6:a6:c5:4d:86:
dc:9d:af:80:30:38:33:bd:ed:4c:f9:e1:ce:7d:03:4d:40:79:
46:7a:b0:18:bb:41:1a:d6:bb:67:3e:03:5c:df:b1:55:ff:a3:
af:83:f6:90:cd:06:a5:90:8a:00:29:fb:c1:97:1b:9b:83:a5:
bf:59:72:5d:fa:ee:50:f5:f8:ff:d0:4b:d7:88:ee:1c:70:f0:
78:61:25:2a:4f:c3:8f:39:89:50:1f:31:4c:8a:f3:03:9b:a6:
23:c7:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 11:44:20 2025 by rpki-client