
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft
File: FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft (raw, json)
Hash identifier: TzhPYx2WvRlJeCBzAE9Z2BksrUsSB7HP2fehX/KpBY0=
Subject key identifier: C8:9A:32:B4:17:C3:2B:46:3A:10:97:65:36:59:2F:33:B5:F8:28:01
Authority key identifier: FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90
Certificate issuer: /CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790
Certificate serial: 01670715766C4126996678E8EE134E3533DE029C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft
Manifest number: 012A
Signing time: Wed 22 Oct 2025 20:06:07 +0000
Manifest this update: Wed 22 Oct 2025 20:01:07 +0000
Manifest next update: Tue 28 Oct 2025 11:36:07 +0000
Files and hashes: 1: 323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa (hash: ZfOff7SqfHXRn/eHzIpB9NJ8eiuSXWQf5FRRWZW+WMY=)
2: 34352e3138382e3231392e302f32342d3234203d3e20323639383434.roa (hash: o1CtWFmm1iYAEHlmYU6qbJHOxBRSEcrAqO3Y+pjmBQI=)
3: FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl (hash: l5iqK/SAyp9/o7i8P592wOXIm9pPH6uFUQ0SbKPuMyA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl
rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Oct 2025 11:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:67:07:15:76:6c:41:26:99:66:78:e8:ee:13:4e:35:33:de:02:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790
Validity
Not Before: Oct 22 20:01:07 2025 GMT
Not After : Oct 28 11:36:07 2025 GMT
Subject: CN=C89A32B417C32B463A10976536592F33B5F82801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:16:3a:1f:44:cb:2a:02:a0:a7:57:a0:a4:
06:7f:19:ee:1f:40:88:7d:9e:38:90:42:76:46:d1:
4e:38:ef:0f:a8:bc:3c:8b:c3:fb:48:f0:25:3b:1e:
9e:84:e3:ef:de:45:07:f9:66:5a:89:02:00:2e:64:
90:5f:79:f2:51:10:bc:fe:73:28:61:5b:aa:1c:93:
03:7a:eb:2a:f7:42:39:8e:55:0c:da:af:f0:7c:f8:
c7:8b:b8:cc:8e:1a:33:95:3c:a8:4b:5f:77:d4:c3:
90:6f:4f:75:41:90:91:d7:6b:0b:2d:b1:b3:5f:aa:
8a:ff:ea:6b:7e:cb:9f:dc:42:b0:6c:d9:fd:2e:66:
7c:88:5e:dc:74:68:34:0d:9c:0e:fa:c4:b3:9a:0d:
72:8d:6b:2c:3b:ce:34:9b:b1:cc:a0:3c:f8:25:77:
17:10:15:f8:2b:ad:f5:38:4c:17:c2:b1:d7:e2:1b:
f6:62:f6:45:ad:db:32:06:97:4f:65:7b:17:01:9b:
2d:76:99:d0:15:fe:d6:71:18:9d:3b:e3:24:92:c4:
69:ca:cb:42:d8:9f:31:e7:c5:5c:8b:eb:00:43:40:
a6:d6:6f:f3:1e:a6:8f:1a:ef:3a:11:d9:6b:25:7d:
6f:b1:1d:6c:27:40:7e:6c:72:ed:c4:20:2d:4c:6b:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9A:32:B4:17:C3:2B:46:3A:10:97:65:36:59:2F:33:B5:F8:28:01
X509v3 Authority Key Identifier:
keyid:FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:94:eb:b7:32:7f:08:bb:05:db:a3:22:96:13:bf:3a:cc:7b:
62:00:6b:a3:01:42:39:8b:33:54:de:9e:00:0a:a1:b4:76:25:
9a:1d:bc:a3:57:ed:f8:26:4e:b4:7d:2c:a7:07:89:14:4d:b5:
41:a9:59:cb:66:65:07:a6:0e:3f:85:82:71:6b:35:cc:80:b4:
00:8b:41:be:35:c0:2f:b8:af:9b:c2:0a:e2:c0:7c:eb:8d:c7:
1e:3c:87:f7:b3:9c:59:5c:91:bc:55:81:d0:17:ec:d3:b3:59:
15:ec:07:07:91:eb:01:97:32:63:44:ed:33:54:5a:6c:47:cf:
c8:da:d4:8a:de:c4:1b:e9:36:dc:06:9b:cb:4e:2f:b0:80:7c:
9a:73:9b:a8:28:0f:b1:a9:1e:d5:c0:66:da:51:f5:58:74:4d:
20:d9:86:ee:b4:ce:10:f5:1f:e4:1c:3c:d1:eb:e2:f3:fe:b2:
47:07:b7:4b:ff:86:07:67:83:56:38:90:28:f4:e2:c0:03:48:
ef:ce:d4:4a:26:32:5f:a5:98:41:ee:a0:ff:eb:7f:36:90:4e:
bf:b3:d1:e2:bd:ba:f8:dd:4a:a1:51:38:20:30:c1:82:80:99:
22:92:1f:84:49:dd:07:e3:0e:6a:d5:f7:06:58:45:1b:86:e2:
2b:5f:92:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 15:15:49 2025 by rpki-client