
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
File: 2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft (raw, json)
Hash identifier: T/G2NchsTOLuEAZb8fdKmhGczUgcTMCr3312V8ABd0I=
Subject key identifier: DC:06:92:4A:81:4E:D5:FF:CA:FF:0B:BC:80:5A:15:27:2F:C7:B6:21
Authority key identifier: 2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
Certificate issuer: /CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Certificate serial: 700163BB81CB005FF88059C383EA83F9D759FE06
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
Manifest number: 0133
Signing time: Sun 02 Nov 2025 11:36:56 +0000
Manifest this update: Sun 02 Nov 2025 11:31:56 +0000
Manifest next update: Sat 08 Nov 2025 00:45:56 +0000
Files and hashes: 1: 34352e3136362e3137362e302f32342d3234203d3e20323637373330.roa (hash: x2fLoH5lYH0GGz2fgAo5yloGS8diO2Drx0TDPnBBluw=)
2: 34352e3136362e3137362e302f32322d3234203d3e20323637373330.roa (hash: AHvurBmKbsGk+iz2BihXgXJPBi02Chka7n5NfHDxZ5U=)
3: 34352e3136362e3137392e302f32342d3234203d3e20323637373330.roa (hash: 85OATkV1touSDVh6ddcIqa0GsiVvloC0qfiJp35ogu8=)
4: 2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl (hash: nx0YNj9Bvg0tQYifd9E84TyJoICqlwIbpkqZVZGvYrY=)
5: 34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa (hash: AnXPIL2R6ZPQq/8ZZd4soNM9BKqUvlrS4OrFG66FXgQ=)
6: 34352e3136362e3137372e302f32342d3234203d3e20323637373330.roa (hash: xQ9isc0nK1JfL1PnF7pKEI/Q1zjOmKSWyA/0ujQT1Y0=)
7: 323830333a363561303a3a2f33322d3438203d3e20323637373330.roa (hash: s28vZlX11dUi+udBwGAOQwL+SoXyFDmX6ATIBg96pXM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl
rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 21:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:01:63:bb:81:cb:00:5f:f8:80:59:c3:83:ea:83:f9:d7:59:fe:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Validity
Not Before: Nov 2 11:31:56 2025 GMT
Not After : Nov 8 00:45:56 2025 GMT
Subject: CN=DC06924A814ED5FFCAFF0BBC805A15272FC7B621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:03:12:8a:3e:1b:04:fa:de:0d:a4:03:e0:
20:46:ae:a3:1e:da:36:e9:0e:a6:d2:8d:3b:a6:c8:
64:cd:78:d9:99:59:93:9b:f3:a8:9c:2f:1e:ca:e5:
89:2f:9d:ff:61:db:a7:ef:4b:c4:fe:0f:46:72:79:
6c:9c:d8:22:bc:3d:cc:31:08:e1:9a:ea:87:9e:4e:
e3:c7:2c:15:87:6b:cc:c5:95:5a:21:c6:bf:8a:42:
96:92:39:7e:e0:9d:d9:be:17:89:ba:6d:9e:cf:6a:
9e:ee:fa:60:ae:9c:34:90:87:66:17:8d:c0:34:8c:
81:fc:9a:fc:4c:7a:00:ac:24:f9:c5:fe:fa:f9:90:
18:ed:49:3c:5c:2f:ff:aa:35:9e:c2:39:53:96:be:
4a:b9:e9:b7:06:26:f6:0c:0a:3d:21:21:73:e3:a6:
b5:47:b0:e3:0d:aa:3a:5f:58:33:2c:be:c6:b9:d7:
44:da:12:01:8a:30:fa:21:91:88:6c:29:db:93:81:
eb:f1:b8:20:73:20:15:45:55:7f:2b:17:68:5f:28:
71:13:5b:61:61:6c:09:3d:49:12:0f:0d:39:6f:e6:
f7:ed:e5:b6:61:b6:00:f5:f7:3a:fc:17:58:dd:69:
af:19:ea:6f:48:18:da:b7:45:a2:de:d1:bb:a7:d4:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:92:4A:81:4E:D5:FF:CA:FF:0B:BC:80:5A:15:27:2F:C7:B6:21
X509v3 Authority Key Identifier:
keyid:2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:83:1c:63:81:ad:78:1e:9e:20:3c:d9:1e:ae:8b:b2:11:b7:
c7:38:78:67:5e:10:bb:9b:41:1c:bb:c8:ba:e5:76:fe:51:3e:
75:f0:f5:99:b3:a0:28:f5:10:a6:85:ed:f4:2f:ae:b8:5a:b3:
1a:8c:90:fa:69:25:05:6a:c5:44:80:ad:1e:0d:97:89:5e:48:
58:0c:da:25:b3:39:bd:56:c7:16:0d:11:9e:56:08:52:83:ca:
32:3f:fa:83:7a:c4:03:cf:7f:b1:5e:e6:3c:49:f2:36:65:f7:
cb:0c:cb:8d:28:ab:64:e8:f1:98:77:f4:8c:52:31:c0:e8:df:
7c:c0:14:5e:9d:ac:b3:b6:8c:ac:8c:9d:c9:93:63:a3:7e:54:
1a:da:97:8d:a0:f5:67:ff:51:7a:16:18:9e:82:7f:f4:fe:31:
39:98:77:b4:a1:41:7c:e0:ad:3c:51:c7:f2:c5:ac:64:73:04:
43:ef:38:52:96:54:e2:27:45:74:b5:d4:44:92:11:f2:2e:4c:
40:0f:d1:1a:f2:f3:66:be:75:0e:01:6c:98:f8:4f:02:16:1d:
ac:98:e5:df:44:ab:8c:20:b6:f0:80:13:e2:bf:b8:91:66:c2:
53:3e:d4:3a:43:f2:fe:3d:b6:e7:0d:90:a6:bb:aa:b9:7a:e0:
10:99:61:83
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUcAFju4HLAF/4gFnDg+qD+ddZ/gYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ3NzE4NDM4RkIyMzI2MzkwNzVGM0JCMEU3REU1NENE
MjBBQTkxRDAeFw0yNTExMDIxMTMxNTZaFw0yNTExMDgwMDQ1NTZaMDMxMTAvBgNV
BAMTKERDMDY5MjRBODE0RUQ1RkZDQUZGMEJCQzgwNUExNTI3MkZDN0I2MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ywMSij4bBPreDaQD4CBGrqMe
2jbpDqbSjTumyGTNeNmZWZOb86icLx7K5Ykvnf9h26fvS8T+D0ZyeWyc2CK8Pcwx
COGa6oeeTuPHLBWHa8zFlVohxr+KQpaSOX7gndm+F4m6bZ7Pap7u+mCunDSQh2YX
jcA0jIH8mvxMegCsJPnF/vr5kBjtSTxcL/+qNZ7COVOWvkq56bcGJvYMCj0hIXPj
prVHsOMNqjpfWDMsvsa510TaEgGKMPohkYhsKduTgevxuCBzIBVFVX8rF2hfKHET
W2FhbAk9SRIPDTlv5vft5bZhtgD19zr8F1jdaa8Z6m9IGNq3RaLe0bun1OSZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU3AaSSoFO1f/K/wu8gFoVJy/HtiEwHwYDVR0j
BBgwFoAULXcYQ4+yMmOQdfO7Dn3lTNIKqR0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzM5ODM4MEFFQ0U4QUU4MDZBQjdFRTk3MjUyRTE5RkI4
MkYzMzQ3OEFGMzNDODA0RjQ4MThDOThBRjYyREFCLzAvMkQ3NzE4NDM4RkIyMzI2
MzkwNzVGM0JCMEU3REU1NENEMjBBQTkxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDc3MTg0MzhGQjIzMjYzOTA3
NUYzQkIwRTdERTU0Q0QyMEFBOTFELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjczOTgzODBBRUNFOEFFODA2QUI3RUU5NzI1MkUxOUZCODJGMzM0NzhB
RjMzQzgwNEY0ODE4Qzk4QUY2MkRBQi8wLzJENzcxODQzOEZCMjMyNjM5MDc1RjNC
QjBFN0RFNTRDRDIwQUE5MUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCngxxjga14Hp4gPNkerouyEbfH
OHhnXhC7m0Ecu8i65Xb+UT518PWZs6Ao9RCmhe30L664WrMajJD6aSUFasVEgK0e
DZeJXkhYDNolszm9VscWDRGeVghSg8oyP/qDesQDz3+xXuY8SfI2ZffLDMuNKKtk
6PGYd/SMUjHA6N98wBRenayztoysjJ3Jk2OjflQa2peNoPVn/1F6Fhiegn/0/jE5
mHe0oUF84K08UcfyxaxkcwRD7zhSllTiJ0V0tdREkhHyLkxAD9Ea8vNmvnUOAWyY
+E8CFh2smOXfRKuMILbwgBPiv7iRZsJTPtQ6Q/L+PbbnDZCmu6q5euAQmWGD
-----END CERTIFICATE-----
Generated at Mon Nov 3 01:09:17 2025 by rpki-client