
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/172F9FB27327C9B0586968A8311D612A6A2D1067.mft
File: 172F9FB27327C9B0586968A8311D612A6A2D1067.mft (raw, json)
Hash identifier: IZScV8ErkGEjsJp0CkN8F+gpcgJapLoOepmwTTdJzXc=
Subject key identifier: 97:EC:83:79:4E:64:22:BF:EB:8B:3A:E5:20:28:5B:A5:3A:E6:4F:2C
Authority key identifier: 17:2F:9F:B2:73:27:C9:B0:58:69:68:A8:31:1D:61:2A:6A:2D:10:67
Certificate issuer: /CN=172F9FB27327C9B0586968A8311D612A6A2D1067
Certificate serial: 093A4131480A06A680CC0000831483ADC85F8249
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/172F9FB27327C9B0586968A8311D612A6A2D1067.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/172F9FB27327C9B0586968A8311D612A6A2D1067.mft
Manifest number: 013D
Signing time: Mon 17 Nov 2025 10:01:10 +0000
Manifest this update: Mon 17 Nov 2025 09:56:10 +0000
Manifest next update: Sat 22 Nov 2025 11:19:10 +0000
Files and hashes: 1: 3230302e31342e37392e302f32342d3234203d3e20323632313438.roa (hash: o2fs+dJHfzfzObfbUUxbRU5BbARSpaPnTyr6czTkCMQ=)
2: 172F9FB27327C9B0586968A8311D612A6A2D1067.crl (hash: 0NhAboFeEW44VVG4PymxMhYfkmHmQEhUm9GHGEK1M5M=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/172F9FB27327C9B0586968A8311D612A6A2D1067.crl
rsync://repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/172F9FB27327C9B0586968A8311D612A6A2D1067.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/172F9FB27327C9B0586968A8311D612A6A2D1067.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 21 Nov 2025 04:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:3a:41:31:48:0a:06:a6:80:cc:00:00:83:14:83:ad:c8:5f:82:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172F9FB27327C9B0586968A8311D612A6A2D1067
Validity
Not Before: Nov 17 09:56:10 2025 GMT
Not After : Nov 22 11:19:10 2025 GMT
Subject: CN=97EC83794E6422BFEB8B3AE520285BA53AE64F2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:b2:ec:96:7f:ea:41:89:d5:06:d6:b1:1e:
69:88:9c:b2:da:e4:1a:6b:c2:18:e6:47:44:6d:62:
82:a8:05:9c:48:4c:4b:c3:53:54:5f:39:71:21:83:
f5:b4:53:dc:66:d6:38:0e:dc:ec:cf:b0:fe:ae:cd:
dc:ea:8b:4e:27:fd:c6:cd:88:2f:df:7a:83:ee:44:
e1:3d:13:44:b6:1e:2b:8c:2a:38:fe:aa:c3:87:d0:
90:cc:40:8a:11:ed:6d:84:7f:d5:56:c4:87:ba:60:
95:cd:fe:dd:2a:74:91:00:9e:f9:1c:d1:ca:22:89:
d5:f4:96:97:b7:4b:5f:27:54:a3:5a:b8:22:c6:bf:
03:40:fb:6e:33:bd:e6:f5:6b:93:5b:a7:7c:5a:31:
42:3c:75:91:94:bb:0e:0b:4f:f7:9b:7c:8d:8a:f9:
ee:19:c0:30:25:e3:25:23:6d:fd:ba:72:fb:12:a1:
6b:c3:d4:c2:6f:9a:2b:bd:e9:d6:ad:48:1d:ee:95:
a9:4b:2a:0f:81:b7:70:35:72:1e:51:41:78:0d:b9:
42:cf:56:c1:4d:78:12:0e:09:2c:92:53:c0:2d:02:
de:89:2c:17:5f:1f:f4:d1:34:00:7e:6d:a6:6a:ae:
69:66:e5:e0:ef:b8:2a:0d:1f:7b:0c:3c:22:bb:0d:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:83:79:4E:64:22:BF:EB:8B:3A:E5:20:28:5B:A5:3A:E6:4F:2C
X509v3 Authority Key Identifier:
keyid:17:2F:9F:B2:73:27:C9:B0:58:69:68:A8:31:1D:61:2A:6A:2D:10:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/172F9FB27327C9B0586968A8311D612A6A2D1067.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/172F9FB27327C9B0586968A8311D612A6A2D1067.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/172F9FB27327C9B0586968A8311D612A6A2D1067.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a9:53:76:67:27:48:25:a4:f8:8d:25:17:33:ea:c3:89:42:
f9:90:b0:15:c4:e2:98:39:46:e7:d4:86:20:a9:9c:07:57:ef:
f2:fa:d4:68:28:bf:71:68:1a:ca:d7:07:5c:ae:d3:93:2a:a8:
f2:8f:fc:28:27:9e:6b:84:18:95:a6:d4:05:c0:86:18:6f:87:
69:a1:41:3a:50:e2:da:35:39:8c:2a:95:98:90:8f:e1:2f:be:
7b:f1:6d:25:b3:e3:c5:76:50:68:58:7f:7a:ba:49:cc:19:6e:
de:1b:4f:1b:c8:b1:9e:2f:6b:c5:70:b8:31:bf:63:94:c7:71:
2b:0c:a0:a5:b1:49:46:28:8e:a3:92:71:f9:90:68:d9:a4:d2:
10:23:e9:0f:71:3f:0f:b9:2d:a5:14:07:0e:b5:3c:0a:7e:18:
dd:64:58:23:d0:e0:01:e3:e9:14:79:79:68:48:b0:85:96:99:
e4:40:8e:86:6f:8e:4b:1c:d5:50:30:7e:1a:81:41:c3:e9:c7:
ff:c2:7d:fa:1c:4d:92:f1:60:df:ce:73:31:a1:b9:be:74:56:
87:c4:8b:a4:e3:be:1e:62:57:e4:83:98:f0:65:3f:65:ae:15:
20:c6:aa:03:7c:91:0d:82:22:68:b4:b3:7a:e0:1a:22:a0:81:
ea:66:42:a6
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUCTpBMUgKBqaAzAAAgxSDrchfgkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcyRjlGQjI3MzI3QzlCMDU4Njk2OEE4MzExRDYxMkE2
QTJEMTA2NzAeFw0yNTExMTcwOTU2MTBaFw0yNTExMjIxMTE5MTBaMDMxMTAvBgNV
BAMTKDk3RUM4Mzc5NEU2NDIyQkZFQjhCM0FFNTIwMjg1QkE1M0FFNjRGMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdLLsln/qQYnVBtaxHmmInLLa
5BprwhjmR0RtYoKoBZxITEvDU1RfOXEhg/W0U9xm1jgO3OzPsP6uzdzqi04n/cbN
iC/feoPuROE9E0S2HiuMKjj+qsOH0JDMQIoR7W2Ef9VWxIe6YJXN/t0qdJEAnvkc
0coiidX0lpe3S18nVKNauCLGvwNA+24zveb1a5Nbp3xaMUI8dZGUuw4LT/ebfI2K
+e4ZwDAl4yUjbf26cvsSoWvD1MJvmiu96datSB3ulalLKg+Bt3A1ch5RQXgNuULP
VsFNeBIOCSySU8AtAt6JLBdfH/TRNAB+baZqrmlm5eDvuCoNH3sMPCK7DRr7AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUl+yDeU5kIr/rizrlIChbpTrmTywwHwYDVR0j
BBgwFoAUFy+fsnMnybBYaWioMR1hKmotEGcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzE5RUJGNzc2ODg5OUE1MTlGQUQ2QzIzMEQwNTZGOUQz
MDI0MjE4OTQ3QzdBOTg3QTA5M0QyMjc2ODgzQ0I3LzAvMTcyRjlGQjI3MzI3QzlC
MDU4Njk2OEE4MzExRDYxMkE2QTJEMTA2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNzJGOUZCMjczMjdDOUIwNTg2
OTY4QTgzMTFENjEyQTZBMkQxMDY3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcxOUVCRjc3Njg4OTlBNTE5RkFENkMyMzBEMDU2RjlEMzAyNDIxODk0
N0M3QTk4N0EwOTNEMjI3Njg4M0NCNy8wLzE3MkY5RkIyNzMyN0M5QjA1ODY5NjhB
ODMxMUQ2MTJBNkEyRDEwNjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhqVN2ZydIJaT4jSUXM+rDiUL5
kLAVxOKYOUbn1IYgqZwHV+/y+tRoKL9xaBrK1wdcrtOTKqjyj/woJ55rhBiVptQF
wIYYb4dpoUE6UOLaNTmMKpWYkI/hL7578W0ls+PFdlBoWH96uknMGW7eG08byLGe
L2vFcLgxv2OUx3ErDKClsUlGKI6jknH5kGjZpNIQI+kPcT8PuS2lFAcOtTwKfhjd
ZFgj0OAB4+kUeXloSLCFlpnkQI6Gb45LHNVQMH4agUHD6cf/wn36HE2S8WDfznMx
obm+dFaHxIuk474eYlfkg5jwZT9lrhUgxqoDfJENgiJotLN64BoioIHqZkKm
-----END CERTIFICATE-----
Generated at Mon Nov 17 23:31:33 2025 by rpki-client