
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
File: 49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft (raw, json)
Hash identifier: 7XU/Zsc9WHC/QH0E598GoP5sjFH02VJjlR/Ws5ih6hg=
Subject key identifier: 40:F8:F2:8A:75:6D:86:AB:13:E4:90:78:14:9F:0B:4F:AE:71:2D:F8
Authority key identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
Certificate issuer: /CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Certificate serial: 40130078AD3C6FA203AC36A7D96FEB54B26730C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
Manifest number: 0140
Signing time: Mon 17 Nov 2025 11:42:04 +0000
Manifest this update: Mon 17 Nov 2025 11:37:04 +0000
Manifest next update: Sat 22 Nov 2025 12:34:04 +0000
Files and hashes: 1: 3139302e3132312e3137362e302f32302d3234203d3e203237373531.roa (hash: 3Dr2oGh7JYGjFW77vNSai2cbP4g2Yd4KvX1lvITR1O8=)
2: 3230302e35392e3232342e302f31392d3234203d3e203237373531.roa (hash: tK/VW2lytfuNn0A266sABYMXm5GPOyAcvW3ekwcbZyg=)
3: 49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl (hash: WREE12Tk8zKgUzlsz5DhbeUpuqgA1lwsXqTMiSODV9A=)
4: 323830333a623630303a3a2f33322d313234203d3e203237373531.roa (hash: ji9QviBBUjlT4wooPPlSPC8PKPlx4RF6U43j01IEdKw=)
5: 3139302e3130382e3232342e302f31392d3234203d3e203237373531.roa (hash: EsVOIums8iQYcbIzqrDW3hte8T+9Q0l0QtGzLG1/14c=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl
rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 21 Nov 2025 04:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:13:00:78:ad:3c:6f:a2:03:ac:36:a7:d9:6f:eb:54:b2:67:30:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Validity
Not Before: Nov 17 11:37:04 2025 GMT
Not After : Nov 22 12:34:04 2025 GMT
Subject: CN=40F8F28A756D86AB13E49078149F0B4FAE712DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:cb:15:5a:ce:56:43:3c:1c:2b:d7:68:aa:
20:6a:7e:0e:4d:7a:f2:21:74:09:16:8b:2b:36:05:
c4:78:5a:26:c9:3e:fd:75:af:88:1c:16:d0:a5:1a:
b3:9c:7c:f0:1d:84:2b:07:2d:fa:ef:7a:45:80:a4:
e8:67:75:8f:dd:2d:58:65:61:9e:6f:58:29:6a:63:
fa:a2:c0:96:45:34:1f:89:95:a3:41:72:74:a0:5f:
a0:b2:62:ad:f5:29:be:64:17:08:25:b2:11:ad:d0:
e5:23:22:4e:11:54:2b:fe:0f:a8:c6:1b:d6:4a:16:
e6:e2:c2:77:1d:f5:82:07:e4:75:9a:90:dd:78:40:
76:0f:31:de:b1:93:bc:f3:18:fa:c2:3c:01:c2:a9:
ca:43:06:0f:9d:f4:14:87:b7:69:dd:bf:14:53:d4:
48:3d:e9:c4:44:23:c8:2a:44:c0:0b:3b:39:a0:51:
65:38:d5:a3:58:78:c7:f3:53:09:c2:8d:21:8d:05:
42:5a:02:1f:e5:c7:de:00:b8:4e:1c:01:74:91:6d:
7b:59:05:77:88:ce:de:35:fe:9c:f2:dd:be:9d:a3:
03:7a:d2:25:b6:b0:8c:af:0b:7c:83:b4:0c:1f:58:
18:0c:af:38:64:3f:e7:47:ba:89:2f:dd:e6:77:06:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F8:F2:8A:75:6D:86:AB:13:E4:90:78:14:9F:0B:4F:AE:71:2D:F8
X509v3 Authority Key Identifier:
keyid:49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c2:d4:6b:df:99:25:a4:a6:47:d7:a1:57:51:30:19:8f:75:
4b:6c:40:a5:42:97:b2:a0:d1:ae:8c:79:67:e4:70:be:20:47:
aa:ff:fa:0c:3a:6b:3b:56:0c:5e:de:98:59:b6:53:f2:bb:30:
57:bb:15:8c:a6:64:6c:fe:c5:a0:a8:55:f1:68:3f:f7:35:8b:
cb:79:c4:b1:e5:41:8c:b0:f4:fa:c2:33:18:c2:21:fe:3b:b4:
c2:8f:ec:b4:64:72:4c:80:24:8c:ac:cb:94:7c:c6:4b:ad:41:
dd:65:5b:63:ac:2a:14:30:d5:10:26:84:b8:ac:fc:37:83:6f:
32:9f:76:d9:36:92:37:98:b1:fb:d9:96:a2:0c:6d:14:7b:93:
4e:ff:a5:3d:2e:e7:b3:4e:b8:3a:01:d3:a2:98:01:9c:72:93:
ea:11:f1:48:ba:c3:d8:ba:ac:bf:71:0e:aa:94:4d:66:68:45:
7f:ed:47:fd:df:b0:e3:7b:7b:c1:55:c7:82:c0:7f:56:3a:99:
f7:99:43:14:64:b4:94:3b:6b:88:c7:0b:ff:9f:81:e0:da:61:
b7:c6:11:16:3a:a8:23:f3:9a:b9:b2:53:11:11:eb:7a:56:59:
10:7c:1a:4e:5b:24:61:ba:03:a7:1c:62:6b:c5:19:ba:60:70:
d5:90:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 20:52:38 2025 by rpki-client