
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft
File: 864255909469F50CE15FE2F07B617FAAD2741BE0.mft (raw, json)
Hash identifier: YPaUsCPQb2IoVWPyM2qWEu3TGpqci4oHInMJShIl9j8=
Subject key identifier: 59:51:28:1A:2D:D4:88:75:68:A6:B9:7C:F4:12:27:1D:23:FF:9B:75
Authority key identifier: 86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0
Certificate issuer: /CN=864255909469F50CE15FE2F07B617FAAD2741BE0
Certificate serial: 4460A13DE6EC2E3EB154FA921C9F0FFEF55E732F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft
Manifest number: 012B
Signing time: Tue 11 Nov 2025 03:59:57 +0000
Manifest this update: Tue 11 Nov 2025 03:54:57 +0000
Manifest next update: Sun 16 Nov 2025 05:03:57 +0000
Files and hashes: 1: 323830333a616631303a3a2f33322d3332203d3e20323732313232.roa (hash: vc8OTOt3siLEEkeHcBsWTWr4S72f3+sI9SPidoH5RF0=)
2: 864255909469F50CE15FE2F07B617FAAD2741BE0.crl (hash: mCEKc1YXoUhneqbGFX2cv4KAddQGgN1KcrhcJY4cUrI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl
rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 16 Nov 2025 05:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:60:a1:3d:e6:ec:2e:3e:b1:54:fa:92:1c:9f:0f:fe:f5:5e:73:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864255909469F50CE15FE2F07B617FAAD2741BE0
Validity
Not Before: Nov 11 03:54:57 2025 GMT
Not After : Nov 16 05:03:57 2025 GMT
Subject: CN=5951281A2DD4887568A6B97CF412271D23FF9B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:1f:e8:da:12:9e:8b:9f:ec:b7:ed:36:4c:
ef:f2:2b:44:be:b3:1c:dc:e8:d4:84:21:58:21:f2:
fa:a8:4a:96:1c:bf:5d:c9:8a:e8:5a:92:2e:bb:f8:
0f:15:2b:bd:60:80:e1:e9:cb:7b:31:a7:08:22:42:
14:9d:83:57:61:30:42:0e:73:f2:9a:a1:ca:40:70:
a1:0f:c5:9f:8f:1a:03:16:1a:96:57:97:eb:6c:c4:
67:cb:1d:e0:37:2e:38:17:8a:da:fd:02:67:f3:b8:
6b:4d:49:4d:fe:9d:5e:2a:b1:d1:f3:ba:ee:62:78:
a0:fa:be:42:ac:34:bb:37:32:c8:cd:0a:3e:5d:fe:
52:34:10:bc:42:da:3c:d9:2a:93:a8:80:a5:b3:53:
c8:e7:6e:5a:3f:b5:85:01:6e:9a:25:6f:64:64:24:
f0:7b:ea:85:1b:dc:83:8c:0d:ba:29:a7:81:74:8e:
ad:d9:30:79:83:4d:78:b6:e3:6b:e8:8e:8d:ab:e6:
ca:d6:35:8d:6b:16:bc:8d:74:c1:57:16:9a:a0:22:
a8:17:70:3d:04:bc:45:fa:40:af:db:49:59:65:f0:
e9:70:4e:d9:1c:dc:34:3a:b0:13:a8:3a:35:34:f3:
a5:39:d7:21:61:9a:4d:ef:98:bd:1e:ed:ea:91:7a:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:51:28:1A:2D:D4:88:75:68:A6:B9:7C:F4:12:27:1D:23:FF:9B:75
X509v3 Authority Key Identifier:
keyid:86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a5:70:10:58:ae:e1:7b:06:3c:fe:d9:69:08:47:c2:72:32:
a0:d3:63:1c:fc:1c:a3:ce:9b:e3:12:c1:43:d8:3e:97:43:48:
02:39:bb:8d:14:31:31:fc:42:1d:d5:ce:00:2e:b1:59:a1:12:
7f:7b:8a:06:de:cf:bf:29:93:d2:10:27:95:0f:c2:ca:29:a3:
fb:f6:32:e6:7f:44:77:d3:2d:42:9a:eb:45:db:91:87:6b:80:
95:14:de:b1:1a:f5:ea:65:e9:ea:02:a7:63:30:69:23:8e:c3:
e5:4c:76:b8:05:5e:97:29:82:92:38:7e:72:9c:f1:44:2c:80:
10:ca:b2:ee:94:cb:1e:42:7a:d9:84:f2:2d:39:ea:db:a7:e4:
a0:d1:e4:57:1b:3c:e4:08:14:18:2c:be:5b:0c:40:e0:0e:a3:
e4:03:35:39:d1:79:f5:54:75:7e:92:54:d0:12:2e:40:2a:76:
ec:a1:81:82:f2:b6:e0:77:f8:23:4c:8a:1e:2f:54:b5:c2:7d:
c1:36:93:74:f1:7e:f4:59:e1:0e:21:9e:98:46:4c:0f:96:39:
dc:e4:c8:6c:30:1c:ba:e4:6d:fc:2e:14:30:fa:9e:a5:77:59:
f3:5a:f7:a1:23:9d:b9:be:84:d2:48:90:fe:ab:5c:d8:ba:03:
d4:40:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 12 11:02:40 2025 by rpki-client