
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
File: BCDD50591AFBE01DD1E89006B709D14B69D79567.mft (raw, json)
Hash identifier: nIKC7hS7jixpo2hBlQnGHsaJowcSy9iJb/m6HC1zE5o=
Subject key identifier: 94:08:B9:43:08:EA:17:E9:DB:8B:17:63:5F:72:44:BC:AF:02:C1:D5
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Certificate issuer: /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial: 07333727EFA0A33EC8B01D0143CFB07849900171
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
Manifest number: 013E
Signing time: Sun 16 Nov 2025 05:04:43 +0000
Manifest this update: Sun 16 Nov 2025 04:59:43 +0000
Manifest next update: Fri 21 Nov 2025 10:46:43 +0000
Files and hashes: 1: 3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa (hash: xopTA6jKSIsdkIE6jBzhXIFqdR5+llPDfkKoskVciXA=)
2: 3139302e3130362e33322e302f32312d3234203d3e20323633323434.roa (hash: IKpYtNnPqJi7A2I065akkFAJXM/1P20XrCW6mLLJ8DY=)
3: 323830303a6362303a3a2f33322d3438203d3e20323633323434.roa (hash: HG79+FZ1IJmtzxISYDc5++PcOk2TMTwJhOCfg+BwQeE=)
4: BCDD50591AFBE01DD1E89006B709D14B69D79567.crl (hash: Pd7R2x4CH36i25c0bkl+F/n3mIz3EemhgbKVg05DREQ=)
5: 3138362e302e3138302e302f32322d3234203d3e20323633323434.roa (hash: 0DlXsm98HlB5uDzTYzIjyDBNM1DJ5k3QRekEzRjOxzQ=)
6: 3133312e37322e3133322e302f32322d3234203d3e20323633323434.roa (hash: 9BHe64mInmx7D9r4r9/CtM7RjflnHnNO52klk8Xfo/4=)
7: 3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa (hash: r3mpym8MNwnvHxIuYSgXnngQZcrxT6L1+B3uUPWi9dY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 21 Nov 2025 04:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:33:37:27:ef:a0:a3:3e:c8:b0:1d:01:43:cf:b0:78:49:90:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Validity
Not Before: Nov 16 04:59:43 2025 GMT
Not After : Nov 21 10:46:43 2025 GMT
Subject: CN=9408B94308EA17E9DB8B17635F7244BCAF02C1D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:bd:84:1c:a3:32:22:71:0e:53:dd:27:2e:
e2:0b:61:69:e8:de:30:ca:cc:48:84:95:7f:6a:a0:
8e:42:04:0c:6e:79:18:13:95:e4:c4:08:1e:7a:25:
f2:73:cf:db:f4:83:c1:3b:6b:38:fd:a6:d7:33:41:
0d:f9:a8:9f:0a:67:36:fe:7d:7f:1a:47:4f:b5:d4:
5a:f7:ec:cb:f5:a2:aa:05:9b:22:92:f8:22:c3:45:
d4:d6:20:c7:57:cd:63:74:8a:71:35:49:55:7d:8f:
2f:50:98:08:f9:91:0c:f0:39:24:79:75:0d:43:0d:
0e:26:57:d9:12:de:b5:5b:d5:62:6c:d2:63:17:dd:
73:08:16:39:54:43:09:6c:c2:c5:76:6a:88:5d:dc:
4d:23:42:ee:13:87:84:75:1e:b9:79:b3:b3:0d:4a:
8e:af:93:fb:f9:93:34:14:8d:a4:71:50:cb:f3:2f:
99:05:e8:e7:9b:f7:08:2b:66:c3:0c:ad:18:20:30:
e3:dd:c0:62:14:02:3d:bb:87:06:2d:5e:1b:56:fc:
d5:4b:24:67:2d:29:1f:21:d8:7f:5d:59:43:c0:23:
80:cc:02:4f:23:e5:26:3f:17:6b:70:c0:13:23:cb:
2d:1e:9f:43:10:7d:29:8e:9a:a9:9a:ec:75:5f:38:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:08:B9:43:08:EA:17:E9:DB:8B:17:63:5F:72:44:BC:AF:02:C1:D5
X509v3 Authority Key Identifier:
keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:61:56:b5:81:57:26:d5:5d:61:2d:6a:a8:b7:7a:29:35:2e:
ef:0d:83:ef:2e:21:44:9b:0f:29:94:83:77:b6:9a:b5:80:16:
e2:c1:ee:6e:3e:78:06:90:9e:23:5d:12:fc:f1:07:03:97:76:
5d:f8:a7:6b:6d:c3:1b:d9:73:1f:d1:61:ee:06:46:99:41:da:
08:7b:35:d4:e1:3f:7e:3f:af:06:3f:70:4c:0b:c0:d2:22:24:
6e:9d:de:7b:4b:72:88:07:a3:40:14:13:2d:ee:26:65:ac:b5:
89:aa:ad:fb:7e:a4:d7:de:e2:7d:e3:44:99:34:81:ea:2b:79:
3a:a4:03:57:01:e4:a2:19:d0:fd:14:41:12:01:9d:a7:0c:b2:
38:07:20:30:d9:52:73:f1:40:f4:00:de:01:37:b7:fc:09:36:
bd:1f:21:ae:bd:22:a5:05:0e:30:7e:d0:e1:2f:ce:27:b5:ef:
40:fa:9b:35:5f:e7:54:bc:fc:24:c1:f0:14:57:d8:2c:e4:07:
d1:8e:b4:d3:05:a1:57:8e:bd:cd:c6:6a:32:e9:7c:47:1e:26:
c7:28:a8:0a:05:8d:40:0f:c0:a4:27:76:64:da:f9:f7:7f:d1:
d8:1c:e6:9b:cd:ac:18:a3:78:31:fb:62:ef:31:dc:6c:eb:9d:
4c:3d:03:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 11:16:51 2025 by rpki-client