
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft
File: CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft (raw, json)
Hash identifier: MYTFyAcbLFXyre+ZhSEkIM4v8RnQEY2vIUcrO4waOkM=
Subject key identifier: 9C:A0:E5:7B:F0:C2:98:7F:B5:38:D7:32:53:20:A0:CA:3C:D1:4D:0B
Authority key identifier: CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8
Certificate issuer: /CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
Certificate serial: 3BE368D8FC0F03ED3956880A72769AEEE7118FF1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft
Manifest number: 012F
Signing time: Fri 31 Oct 2025 20:09:14 +0000
Manifest this update: Fri 31 Oct 2025 20:04:14 +0000
Manifest next update: Wed 05 Nov 2025 23:54:14 +0000
Files and hashes: 1: 34352e3233382e3139362e302f32322d3234203d3e20323636383438.roa (hash: 9owNYvK25s6oeRTK6GascakMzPiZCH/nB5fBSXTVmJM=)
2: CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl (hash: SgMckOKWX+e7UUuAg9rdsmyGwyEr+tLJupCCas4w4Y0=)
3: 323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa (hash: 2+XmeKfr5+7wE9g0O2n79jEQ7h3FK3qGsg+q2Hdei20=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl
rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e3:68:d8:fc:0f:03:ed:39:56:88:0a:72:76:9a:ee:e7:11:8f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
Validity
Not Before: Oct 31 20:04:14 2025 GMT
Not After : Nov 5 23:54:14 2025 GMT
Subject: CN=9CA0E57BF0C2987FB538D7325320A0CA3CD14D0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:02:19:f8:94:ce:fe:1b:00:ae:85:7d:94:
b5:17:4d:94:0f:ab:d6:1b:41:2c:12:37:1e:f8:3f:
df:34:73:5a:d7:31:6b:de:91:7c:77:cc:1c:c6:5c:
e9:21:c0:97:f7:ee:db:a5:84:f3:d2:7d:f5:3e:97:
b6:c2:2a:a1:29:ea:a8:db:7e:96:cd:ff:ba:21:df:
f7:23:51:d8:79:a3:fd:3b:12:f6:7b:b5:3f:57:23:
f3:ed:3c:d4:0e:ac:a6:42:72:c4:8b:d8:2e:0e:6e:
09:b1:98:29:2d:6d:a5:ed:b5:bd:c4:92:a4:f5:cc:
7f:04:1f:4a:d3:ee:c0:b3:a5:c9:65:7a:25:a8:77:
51:9e:5c:2b:a1:25:86:b8:b7:2c:62:61:c9:3c:21:
d9:b2:fc:88:dc:ab:cb:3b:8e:23:1e:19:e4:70:43:
bb:73:d4:88:94:08:56:0e:79:d2:63:34:89:eb:5f:
99:bd:97:1d:a4:71:00:3d:d8:35:01:de:00:00:48:
9f:46:ab:5a:69:6b:27:71:5a:28:f2:62:81:08:9c:
0a:4d:25:02:72:e3:3c:d5:21:34:db:9b:1d:6c:85:
d8:fd:e1:fc:88:e8:77:72:4b:24:3b:44:54:bc:a9:
09:07:4d:61:46:bb:56:79:0d:f5:89:3e:c4:67:1d:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A0:E5:7B:F0:C2:98:7F:B5:38:D7:32:53:20:A0:CA:3C:D1:4D:0B
X509v3 Authority Key Identifier:
keyid:CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:11:79:31:32:77:cd:9c:65:bf:78:19:9e:89:a0:81:70:e3:
44:4a:e9:08:42:37:6a:ca:c2:8f:ab:c6:d3:4d:5c:d3:ce:6e:
42:26:14:8f:b9:d4:89:19:a2:be:05:f8:a6:30:51:91:3d:9e:
19:63:ae:74:6b:4a:32:97:54:eb:b8:35:5d:25:e0:e6:dc:95:
3b:16:05:5f:a3:18:76:46:0c:97:d9:29:ef:70:39:f7:e1:6e:
af:76:97:5a:8c:de:b7:ca:ef:59:4b:7f:1d:2d:84:4c:51:1a:
8e:07:b4:2e:00:c1:b4:e7:ed:d4:fe:41:ac:2d:a3:46:47:7a:
f3:64:0d:8e:73:5b:ef:b6:4d:1d:33:02:27:47:02:ca:7a:a6:
69:64:6a:ce:43:3d:78:26:fa:1f:dd:cb:39:c4:e1:af:7b:77:
b9:c7:ec:f9:40:44:20:69:8b:0a:1f:41:11:45:92:74:87:42:
1d:87:29:b3:bb:d2:79:38:af:69:da:cf:6a:69:c0:78:40:70:
7e:df:2e:89:ac:a0:d0:b9:88:95:1f:3a:7e:f2:42:d6:2c:fe:
f6:5b:36:e7:b6:99:69:72:a3:5a:11:58:d3:62:06:d6:19:8d:
36:e1:d8:1b:f8:76:e2:32:69:ae:af:a1:9e:90:e8:4b:2e:56:
62:f0:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 04:07:49 2025 by rpki-client