
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.mft
File: D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.mft (raw, json)
Hash identifier: E3rGO40hKoiBZ28HqyqRSC85wXuBMYZjLfC/Aloi1zY=
Subject key identifier: 34:2D:17:07:BF:5B:F7:1C:18:DE:37:12:AB:6D:70:4D:13:F6:DE:AC
Authority key identifier: D6:6B:84:79:A4:BF:E4:E7:C3:D4:0B:FB:86:26:BE:9E:87:84:05:D1
Certificate issuer: /CN=D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1
Certificate serial: 72284CD98FF05046DE7A3A9B0E67DA0FF4E5F3FB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.mft
Manifest number: 0128
Signing time: Sun 26 Oct 2025 07:46:16 +0000
Manifest this update: Sun 26 Oct 2025 07:41:16 +0000
Manifest next update: Fri 31 Oct 2025 16:42:16 +0000
Files and hashes: 1: 323830313a3137313a383a3a2f34352d3435203d3e20323732313135.roa (hash: xCMufBZesSTDXclTIS+GWeMOPx3Orw7sEGeNdD3mOLI=)
2: 323830313a3137313a3a2f34352d3435203d3e20323732313135.roa (hash: 0DWQM3vrY6Eh7pxFIu/TnssXaqHcCDzcXsL3FieexqE=)
3: D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.crl (hash: +fmoM7rLoDmpnKY6G/gpmB/ZTVW8qCJN99uv0H1aJDQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.crl
rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:28:4c:d9:8f:f0:50:46:de:7a:3a:9b:0e:67:da:0f:f4:e5:f3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1
Validity
Not Before: Oct 26 07:41:16 2025 GMT
Not After : Oct 31 16:42:16 2025 GMT
Subject: CN=342D1707BF5BF71C18DE3712AB6D704D13F6DEAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:3c:a2:77:d7:de:df:83:e4:90:07:7c:37:
bd:49:b9:43:d6:af:64:46:56:13:14:73:6b:41:9c:
70:d3:ef:1b:8f:07:d6:44:d4:bb:47:3f:5f:1f:93:
69:12:46:d3:4c:81:84:b4:88:45:b5:27:20:ee:99:
5e:61:ad:ad:7f:a5:45:06:dc:3f:1a:cf:07:fc:52:
66:5c:fb:0b:58:29:fe:3a:92:e0:ab:2f:e8:c8:81:
4a:23:c5:d6:82:99:3f:f2:a1:77:b0:66:db:42:25:
c8:0f:6c:49:4b:ad:c7:8e:f4:30:13:60:03:df:d4:
bb:33:5d:38:ce:67:b8:e5:19:35:a4:b7:fd:e3:09:
6c:71:80:5e:c3:46:0e:3c:89:70:87:5a:5f:68:69:
cc:d4:8d:e2:22:1f:a6:a3:25:35:8b:71:9e:c6:91:
68:42:93:2c:f4:39:e1:77:c4:67:71:d8:1f:81:7f:
e8:92:7e:a9:5b:72:61:16:83:97:e3:ad:db:89:2c:
2a:6e:7c:88:91:2b:b7:5d:ce:36:6d:c5:4c:cb:d9:
79:d1:08:9b:e8:45:ae:7d:5a:81:d1:1d:11:c3:b0:
a3:73:34:44:87:2a:44:24:6c:1a:86:98:3d:11:37:
aa:18:5f:ab:c2:2b:71:39:46:e0:33:69:45:6d:dc:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:17:07:BF:5B:F7:1C:18:DE:37:12:AB:6D:70:4D:13:F6:DE:AC
X509v3 Authority Key Identifier:
keyid:D6:6B:84:79:A4:BF:E4:E7:C3:D4:0B:FB:86:26:BE:9E:87:84:05:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:10:af:46:90:0a:46:97:dc:cc:c4:8f:18:32:14:6c:ae:d6:
39:f3:a1:9f:1d:30:76:d0:26:70:5b:2f:ab:67:0a:76:6e:8a:
13:22:0b:78:1f:01:90:89:5d:a2:54:0e:2f:b3:af:ba:20:cb:
f4:e1:67:8a:d7:4c:b2:bf:8f:05:36:e7:41:38:6f:a2:82:87:
c7:3d:97:84:76:eb:8d:e8:78:7c:b8:e0:84:42:e9:44:55:5c:
83:5d:23:2d:5e:7c:19:e9:d7:fb:58:fd:69:9b:78:08:a2:ef:
2f:95:b4:80:ca:1f:ad:3d:9b:27:4c:dc:71:60:1d:be:98:23:
11:2c:a2:52:99:96:86:8a:9f:08:a3:84:d1:23:ce:e0:81:9c:
24:69:76:1c:9a:97:a2:b3:50:38:a1:12:cd:3a:9f:ea:8e:84:
11:b3:2e:94:bb:0d:22:e4:60:8f:b5:c3:71:55:b7:dc:f8:95:
8a:2f:76:02:5d:8e:7a:12:24:ac:33:9e:98:0a:fe:92:70:60:
fb:04:f0:74:e0:0a:9f:e8:74:51:ff:6e:b2:f0:9c:57:7b:2b:
32:e0:0c:4f:55:86:42:9d:98:54:35:1f:d0:d7:70:c0:f0:aa:
92:6f:6d:f8:0e:56:df:db:5e:52:71:32:4f:d1:1f:18:bc:49:
ce:39:9c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:34:50 2025 by rpki-client