
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
File: 538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft (raw, json)
Hash identifier: Cson34BIQ5R5lJrbfSHezCfJNitQbzBQzlOhL7zxC1c=
Subject key identifier: 55:CA:8F:1C:6F:21:7A:1C:41:D3:DA:DE:31:59:8D:4A:48:F1:86:65
Authority key identifier: 53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56
Certificate issuer: /CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
Certificate serial: 0621E4C68EB5FB06B9CED39307725F2DF8FE5650
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
Manifest number: 012E
Signing time: Sat 01 Nov 2025 12:23:26 +0000
Manifest this update: Sat 01 Nov 2025 12:18:26 +0000
Manifest next update: Fri 07 Nov 2025 02:08:26 +0000
Files and hashes: 1: 34352e3232382e37362e302f32322d3235203d3e20323636363832.roa (hash: Qj1LKzDil2G8jfRYcM+NQ5C78K436vCkYIuF6PD7p4c=)
2: 34352e3232382e37362e302f32322d3234203d3e20323636363832.roa (hash: X8Sd9rr701dSiL89yNgvS6Q1b0L6cbaVNSkxdbqaPgY=)
3: 538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl (hash: ksHKLOOkxXHQ/NMLDQAz1k0rGELtL4cf96X2eTcFbBo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl
rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 21:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:21:e4:c6:8e:b5:fb:06:b9:ce:d3:93:07:72:5f:2d:f8:fe:56:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
Validity
Not Before: Nov 1 12:18:26 2025 GMT
Not After : Nov 7 02:08:26 2025 GMT
Subject: CN=55CA8F1C6F217A1C41D3DADE31598D4A48F18665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:9c:9c:36:94:80:32:6f:dd:8e:15:dd:0b:
ce:5c:f6:05:62:02:70:60:c6:47:eb:96:c9:4a:ec:
53:24:e8:76:bf:57:85:ff:1f:aa:32:96:7d:fd:03:
12:65:2a:3d:3e:54:8e:ab:7d:d8:ed:d1:82:69:28:
fc:b2:07:e4:70:35:a8:47:d3:19:c6:5f:84:8a:4e:
be:29:e7:c0:7d:7e:fb:6e:45:0c:ed:3d:d8:2b:1d:
e0:07:b0:60:b9:ee:76:76:d6:1f:40:49:ed:4a:36:
55:7f:5a:0e:b7:dd:32:e2:35:7e:e0:8b:63:ea:be:
eb:b7:ad:8f:ae:18:94:91:57:2f:c8:ee:3f:93:5d:
f4:30:28:e4:70:3a:6b:b2:01:d7:3d:59:64:b2:97:
e3:bc:a1:f3:9f:d9:23:dc:c4:86:58:16:8c:26:cd:
8f:15:10:5b:99:f1:0c:5d:e8:00:1e:89:07:f9:29:
d9:1c:35:c0:66:72:7e:c2:9e:c3:d4:71:10:2b:16:
b0:fb:21:20:66:e3:3e:27:ae:02:ca:b0:af:73:09:
dd:94:39:2d:f5:b0:2b:0d:fb:b7:4f:1d:6e:d5:50:
aa:36:ea:ae:b6:1f:ba:2b:76:bd:af:ef:c3:f3:73:
43:cf:61:49:08:5f:a8:f8:24:52:14:37:04:91:f9:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CA:8F:1C:6F:21:7A:1C:41:D3:DA:DE:31:59:8D:4A:48:F1:86:65
X509v3 Authority Key Identifier:
keyid:53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:67:8a:fc:43:14:90:cf:cc:f1:ab:4c:73:d8:00:99:e4:11:
4e:57:90:86:bc:32:a4:b5:a2:e8:e9:40:36:ff:7b:ed:9f:8e:
7b:66:0c:1c:36:2a:ea:48:1f:e8:40:fe:5a:76:7a:fc:e0:85:
b6:86:24:c9:17:56:46:b8:82:f1:b8:56:82:38:26:9b:2a:d8:
67:4b:d4:16:73:5a:8a:03:1b:f8:79:fa:9d:9f:a9:bd:10:eb:
d6:27:0c:9b:57:aa:da:b2:e5:38:24:c2:bc:f0:db:c8:84:07:
bf:80:0d:8f:d2:5a:9e:42:92:49:40:35:8e:3f:65:f3:c8:26:
b6:f9:3a:ac:dd:86:3f:28:2e:5d:66:5c:fe:64:dc:38:cc:8f:
37:6f:68:7f:65:0b:8f:e4:1c:be:f5:99:3d:c9:e8:b5:75:94:
30:a4:e6:9b:e9:40:c0:1e:bd:08:84:6e:23:ca:98:39:60:a7:
12:61:21:af:99:3d:8e:c7:fb:07:eb:e2:d8:68:c1:75:c9:db:
1b:c7:cd:19:8a:b5:d1:ca:fa:81:ab:b5:b8:37:bf:b6:48:0a:
80:d0:4a:f6:af:d9:03:8c:50:3b:8d:4a:36:51:9b:39:f0:fa:
49:06:5d:a0:99:02:9b:67:3f:5e:d0:26:c1:13:1e:e8:b0:be:
71:e8:a8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 10:21:48 2025 by rpki-client