
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.mft
File: 2944F2D96674AA0C160B60053EA3A61E1232E82C.mft (raw, json)
Hash identifier: DklASZLy18Qpj/toLNLX0oD5glLU7ZQoKQTUApMobAI=
Subject key identifier: 03:0D:0A:FD:9D:A7:DC:FA:C8:C8:CC:E8:19:1D:70:1E:2A:E2:1E:76
Authority key identifier: 29:44:F2:D9:66:74:AA:0C:16:0B:60:05:3E:A3:A6:1E:12:32:E8:2C
Certificate issuer: /CN=2944F2D96674AA0C160B60053EA3A61E1232E82C
Certificate serial: 11AD3B8A4316660539E8691E3E19A526E2945335
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.mft
Manifest number: 0136
Signing time: Sat 01 Nov 2025 18:11:21 +0000
Manifest this update: Sat 01 Nov 2025 18:06:21 +0000
Manifest next update: Thu 06 Nov 2025 04:59:21 +0000
Files and hashes: 1: 3136342e3136332e3138382e302f32322d3234203d3e203238333938.roa (hash: glMa0Xr0uwFkE9NplVG886NgnVAcrNgvNuCfM0k5hGI=)
2: 323830363a3265643a3a2f33322d3332203d3e203238333938.roa (hash: YQKtyJ4vmFMrL6AC4QDmz+9CQgT1ahpz4ckVXCIC08w=)
3: 2944F2D96674AA0C160B60053EA3A61E1232E82C.crl (hash: lQ6Oxp5IcsEEPSgUC2ZR+l5CiGGnk0rMIKcbRiHkWtg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.crl
rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ad:3b:8a:43:16:66:05:39:e8:69:1e:3e:19:a5:26:e2:94:53:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2944F2D96674AA0C160B60053EA3A61E1232E82C
Validity
Not Before: Nov 1 18:06:21 2025 GMT
Not After : Nov 6 04:59:21 2025 GMT
Subject: CN=030D0AFD9DA7DCFAC8C8CCE8191D701E2AE21E76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:43:bf:55:0d:de:38:7f:51:0a:e7:96:0e:b7:
ff:e3:e0:4c:e9:ec:4f:ef:8e:3a:a4:84:56:71:0d:
2d:a9:5c:43:a2:a8:ef:81:40:b8:dd:5f:b6:ed:92:
4e:4d:4d:69:f9:46:1a:5a:59:d5:8a:bc:16:6f:43:
21:5a:37:68:91:52:3b:59:b8:ec:4d:2a:2b:94:ab:
1a:47:07:d8:30:35:e6:5e:07:0a:85:31:67:f0:1a:
d7:5d:fc:01:fe:bc:b2:db:23:b2:59:fa:cf:da:a6:
51:54:4a:8b:43:8d:85:49:7c:f4:7b:d0:b9:e1:09:
3f:98:a3:b9:ac:55:3b:52:43:0e:fb:e7:7b:8c:2d:
94:7b:f3:85:d8:f7:0a:7e:cb:60:36:ea:ab:3a:a0:
19:79:df:fe:fe:8e:a8:10:c6:c7:d7:d0:8b:98:80:
8c:da:19:3c:0c:7b:f1:ae:34:b9:78:d2:ea:20:e1:
c9:4c:43:03:8e:df:a7:8d:90:37:14:e5:9f:47:28:
e9:48:f1:9e:03:69:04:c1:29:11:52:59:15:97:09:
f3:68:39:6f:5a:3b:e8:78:8b:cd:73:0a:06:72:f8:
dc:12:fb:bd:bf:17:da:23:f0:88:c7:c1:d7:08:ff:
c1:eb:f1:ac:20:fd:32:5a:35:85:dc:00:7e:f2:a5:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0D:0A:FD:9D:A7:DC:FA:C8:C8:CC:E8:19:1D:70:1E:2A:E2:1E:76
X509v3 Authority Key Identifier:
keyid:29:44:F2:D9:66:74:AA:0C:16:0B:60:05:3E:A3:A6:1E:12:32:E8:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:74:aa:c7:00:d9:ab:07:f5:3f:9b:f2:17:42:6b:bf:14:ea:
2b:d4:58:33:93:be:a2:58:6c:29:98:69:45:b0:dc:94:ed:d5:
ee:eb:4f:aa:c5:4d:fb:35:67:d2:dd:f2:56:34:09:3c:25:62:
16:8f:c8:14:d7:bd:60:25:2e:f2:95:c9:78:02:36:5d:69:bf:
8e:20:ae:dd:9c:7b:75:fd:7f:da:a4:00:92:ed:43:aa:50:1b:
21:5e:c8:70:1b:2d:ac:87:80:8d:5b:5b:ba:55:05:5c:8f:31:
c2:51:4a:10:6e:9b:1a:53:9d:96:9e:72:9c:77:b8:2d:d0:d3:
bd:d7:f9:54:7a:6f:d4:95:4e:81:95:9d:49:73:61:a5:5e:44:
d0:6c:4a:f0:a2:9a:e1:60:38:d5:5d:52:c0:e1:78:21:c6:06:
e4:bb:dc:90:47:e4:8d:ef:a6:02:07:f0:25:79:27:b3:b8:dc:
5f:56:3f:48:77:80:c3:91:de:b3:fd:b2:47:71:55:3d:fb:be:
e1:0f:16:3f:b3:4f:61:2f:39:44:0f:2a:8b:93:7f:b5:79:c7:
c0:ac:fd:83:eb:77:8d:42:eb:c6:ea:f7:e2:98:90:32:03:db:
d2:04:16:7a:d6:8f:92:8d:56:bf:f6:6f:a0:88:66:dd:24:4f:
09:24:c7:69
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUEa07ikMWZgU56GkePhmlJuKUUzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0NEYyRDk2Njc0QUEwQzE2MEI2MDA1M0VBM0E2MUUx
MjMyRTgyQzAeFw0yNTExMDExODA2MjFaFw0yNTExMDYwNDU5MjFaMDMxMTAvBgNV
BAMTKDAzMEQwQUZEOURBN0RDRkFDOEM4Q0NFODE5MUQ3MDFFMkFFMjFFNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmQ79VDd44f1EK55YOt//j4Ezp
7E/vjjqkhFZxDS2pXEOiqO+BQLjdX7btkk5NTWn5RhpaWdWKvBZvQyFaN2iRUjtZ
uOxNKiuUqxpHB9gwNeZeBwqFMWfwGtdd/AH+vLLbI7JZ+s/aplFUSotDjYVJfPR7
0LnhCT+Yo7msVTtSQw7753uMLZR784XY9wp+y2A26qs6oBl53/7+jqgQxsfX0IuY
gIzaGTwMe/GuNLl40uog4clMQwOO36eNkDcU5Z9HKOlI8Z4DaQTBKRFSWRWXCfNo
OW9aO+h4i81zCgZy+NwS+72/F9oj8IjHwdcI/8Hr8awg/TJaNYXcAH7ypWVTAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUAw0K/Z2n3PrIyMzoGR1wHiriHnYwHwYDVR0j
BBgwFoAUKUTy2WZ0qgwWC2AFPqOmHhIy6CwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRjFDNEZCNTQ0MTdGNDU5OTRGMDAyRjZFQjgzQjdDQUY1
QTNGMzY4M0IzMzc2RUVBNjIzRTIyRkFBMTcyMTM0LzAvMjk0NEYyRDk2Njc0QUEw
QzE2MEI2MDA1M0VBM0E2MUUxMjMyRTgyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTQ0RjJEOTY2NzRBQTBDMTYw
QjYwMDUzRUEzQTYxRTEyMzJFODJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUYxQzRGQjU0NDE3RjQ1OTk0RjAwMkY2RUI4M0I3Q0FGNUEzRjM2ODNC
MzM3NkVFQTYyM0UyMkZBQTE3MjEzNC8wLzI5NDRGMkQ5NjY3NEFBMEMxNjBCNjAw
NTNFQTNBNjFFMTIzMkU4MkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4dKrHANmrB/U/m/IXQmu/FOor
1Fgzk76iWGwpmGlFsNyU7dXu60+qxU37NWfS3fJWNAk8JWIWj8gU171gJS7ylcl4
AjZdab+OIK7dnHt1/X/apACS7UOqUBshXshwGy2sh4CNW1u6VQVcjzHCUUoQbpsa
U52WnnKcd7gt0NO91/lUem/UlU6BlZ1Jc2GlXkTQbErwoprhYDjVXVLA4Xghxgbk
u9yQR+SN76YCB/AleSezuNxfVj9Id4DDkd6z/bJHcVU9+77hDxY/s09hLzlEDyqL
k3+1ecfArP2D63eNQuvG6vfimJAyA9vSBBZ61o+SjVa/9m+giGbdJE8JJMdp
-----END CERTIFICATE-----
Generated at Sat Nov 1 21:48:48 2025 by rpki-client