
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft
File: CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft (raw, json)
Hash identifier: sPn888/7I1eJn4odRx4kPewrSUh/63VL03uqjRYGf8A=
Subject key identifier: D1:36:D2:22:60:96:42:57:73:CA:2A:C8:22:CB:C6:BB:98:57:DC:2A
Authority key identifier: CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3
Certificate issuer: /CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3
Certificate serial: 67E076E2AE0034824110E5FC316C782D96DADBEE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft
Manifest number: 013B
Signing time: Wed 12 Nov 2025 00:02:21 +0000
Manifest this update: Tue 11 Nov 2025 23:57:21 +0000
Manifest next update: Mon 17 Nov 2025 23:13:21 +0000
Files and hashes: 1: 3230362e3232312e38302e302f32302d3234203d3e203130363937.roa (hash: A63DPWaGu4ncao5SbuzzNORnyJp3efH7wi7W3ibdfqs=)
2: 323830333a376538303a3a2f33322d3332203d3e203130363937.roa (hash: 0Qn0E7vPhpgg1CGcGhP6Q7/IBFamZE+35UWnAibGbyk=)
3: CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl (hash: iuhDA9u9t0KnWwBWqlw2Zi0zAsf8t9Q22++9hhOFLxw=)
4: 3230362e3232312e38302e302f32302d3234203d3e20323634373937.roa (hash: RPlSJwAa9hJihfh1yMG/936mXOrCgRuCAxGXhLPTmYA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl
rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 16 Nov 2025 21:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e0:76:e2:ae:00:34:82:41:10:e5:fc:31:6c:78:2d:96:da:db:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3
Validity
Not Before: Nov 11 23:57:21 2025 GMT
Not After : Nov 17 23:13:21 2025 GMT
Subject: CN=D136D2226096425773CA2AC822CBC6BB9857DC2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:ca:54:cc:4c:df:3d:e8:42:65:34:e5:30:
5f:29:de:d4:bb:ac:4c:4d:d4:18:e7:de:ab:7e:66:
12:98:83:69:bd:36:16:5b:60:9e:11:67:5b:01:3e:
b4:4e:46:3d:cd:69:96:50:5e:92:94:fd:37:b7:17:
9e:52:2b:38:1c:84:27:d1:27:a2:fc:b8:80:4d:58:
a8:9d:6c:63:75:25:90:24:cd:d5:f6:c8:c1:41:7a:
a7:0f:39:8c:42:58:b5:a3:e6:48:27:8a:a0:ca:8c:
e2:ee:73:72:0e:90:ef:20:e4:12:4f:d6:2c:d4:12:
4c:ce:d7:9c:9b:4a:91:6e:5e:6f:3a:a7:1f:fa:70:
f4:fa:8e:33:14:d7:4b:e4:f0:bf:e8:54:85:25:bb:
6c:27:10:46:2d:a4:18:db:e4:ed:89:a5:66:89:0d:
27:a7:17:3a:65:6f:3b:d5:75:b4:75:cb:26:32:a3:
06:79:2c:0c:f9:cc:21:c5:6f:2e:59:51:ed:35:97:
9e:1a:73:d0:8e:64:39:82:1e:ca:39:a3:3e:b8:08:
b4:45:be:69:95:c8:86:66:9d:44:a1:e6:f7:cb:c0:
d3:46:3a:10:f9:8e:d0:61:81:d3:44:cf:19:5e:4d:
5d:f0:ae:a1:14:3a:54:85:50:fc:a7:34:c4:9b:cd:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:36:D2:22:60:96:42:57:73:CA:2A:C8:22:CB:C6:BB:98:57:DC:2A
X509v3 Authority Key Identifier:
keyid:CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ee:26:f2:ed:bc:e5:da:12:dc:ce:ab:3e:00:0c:28:4d:1c:
c3:70:87:f2:b6:10:19:02:f2:4b:d9:6b:6a:ec:64:9f:87:cf:
e6:9f:34:a8:16:da:76:1b:6a:f3:56:b1:5b:df:c6:92:2d:59:
0a:72:05:80:75:9e:82:c7:b4:b1:a9:3d:70:d1:ba:a1:97:9f:
70:05:37:ba:6e:d4:84:4b:9e:37:5a:fe:01:3c:80:74:b4:f9:
da:7b:e4:d9:2e:6f:9f:81:08:47:7e:03:38:ec:33:cd:92:8a:
56:f6:d8:11:9e:6e:29:ff:2a:c8:b6:99:9d:fd:e1:47:2f:20:
96:5a:2b:cd:aa:af:76:f4:bc:96:4c:79:2b:73:07:86:1f:86:
dd:d3:2a:d2:79:c8:29:20:f0:72:57:e4:6d:83:96:55:70:bc:
0c:f2:17:59:39:8f:f0:8e:48:81:77:e7:37:c3:64:38:fc:46:
00:f2:b5:cb:fc:31:9f:b9:9c:62:35:86:23:3b:f5:de:c1:9d:
74:7e:12:14:fc:06:9c:f1:46:0b:1d:97:24:67:0e:9f:8c:d8:
b4:9c:e2:1c:49:52:26:0c:d2:a9:2f:4c:41:9b:e0:8b:87:74:
75:d7:c9:65:1b:c5:2f:87:1a:ec:52:a2:b4:99:05:3a:b1:ae:
4a:b6:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 13 04:06:16 2025 by rpki-client