
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
File: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft (raw, json)
Hash identifier: Tx/fW+8jPwn6u4ajnl0Z3J5JSP26IQUlyImfwoN8yAE=
Subject key identifier: B6:3D:14:AD:66:40:D6:20:EB:8D:7D:B6:BD:43:50:46:D1:FD:5F:14
Authority key identifier: CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C
Certificate issuer: /CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C
Certificate serial: 2921D203E7DAE154AB85D4B6AC17DB07246E26EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
Manifest number: 012A
Signing time: Fri 31 Oct 2025 16:47:30 +0000
Manifest this update: Fri 31 Oct 2025 16:42:30 +0000
Manifest next update: Thu 06 Nov 2025 12:51:30 +0000
Files and hashes: 1: CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl (hash: XfpyS63SAxLuRlMAXshvCayd12t1I/bP7xW7O8c4NlE=)
2: 3136342e3136332e3132302e302f32332d3234203d3e20323635383334.roa (hash: ITajnx8AoEh3NK9eg3wJYTD8jN+mIdo7dvHMiOnMIP8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl
rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:21:d2:03:e7:da:e1:54:ab:85:d4:b6:ac:17:db:07:24:6e:26:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C
Validity
Not Before: Oct 31 16:42:30 2025 GMT
Not After : Nov 6 12:51:30 2025 GMT
Subject: CN=B63D14AD6640D620EB8D7DB6BD435046D1FD5F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:c9:4d:38:4c:20:0f:c9:75:3d:12:ce:f8:
3f:80:fd:d7:a0:a1:b0:a8:bc:e2:7c:4f:97:13:91:
2b:75:a8:8a:5d:26:55:08:22:52:90:29:7f:7d:09:
08:21:d3:3d:c4:c8:84:97:54:4f:95:25:a0:91:52:
25:f9:d5:fd:cd:85:08:32:d3:20:b0:fd:88:48:95:
ee:7d:02:98:68:ee:53:aa:74:a6:37:30:a9:6a:25:
b6:80:0e:fb:69:48:4b:d2:f2:53:19:fb:7e:20:bd:
a5:ab:07:57:3b:52:9d:a4:14:41:ea:a7:96:ea:b0:
44:d7:d4:db:05:87:1e:34:ae:47:73:5b:21:1a:ee:
fe:40:eb:f5:31:76:ea:bd:b1:90:47:db:e2:9d:03:
4b:5b:da:92:f7:13:84:0d:88:c8:47:19:ce:65:e8:
39:38:b4:c6:97:48:2e:4f:b1:a6:e0:4c:ec:3b:b2:
f0:2d:44:e0:56:60:71:48:fe:0d:48:a2:e0:39:0b:
b0:29:c4:65:fd:ae:9e:72:77:3b:e0:fa:b6:14:f7:
5a:80:38:c8:72:d4:30:29:77:42:d2:ba:46:50:db:
d8:d8:86:e4:5a:56:86:88:eb:3c:89:03:e9:8f:e5:
71:19:0d:d6:88:1a:7f:f6:51:7f:9c:e4:44:bf:7f:
27:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3D:14:AD:66:40:D6:20:EB:8D:7D:B6:BD:43:50:46:D1:FD:5F:14
X509v3 Authority Key Identifier:
keyid:CD:C0:19:8C:D4:C6:56:C4:AD:CE:C7:37:0D:69:F6:1C:4A:BE:DB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4959E52195AB77942D3818718838B5682BF0C3A84185DEA593C25CB2EB5723CE/0/CDC0198CD4C656C4ADCEC7370D69F61C4ABEDB1C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bb:10:85:ea:01:fb:1f:aa:da:63:44:30:b1:de:71:ca:7d:
01:f7:30:62:cb:f3:0a:93:88:c0:1f:04:e6:43:d7:b2:2e:6c:
27:6d:c2:50:89:8d:52:5d:5a:2d:4c:8a:0f:a9:c3:93:83:b3:
7e:38:4d:6e:a5:45:9e:b2:1f:34:1a:33:8a:7f:93:f6:a0:46:
a9:a4:f3:6f:f1:e2:27:f6:b4:6c:cc:5c:ec:46:52:4d:e8:fb:
bf:a8:08:8b:2c:00:ef:e9:c8:64:57:cb:79:b9:ce:64:a7:ad:
ee:2f:68:01:9d:3d:bb:f7:b6:9e:06:22:d4:6f:f4:1d:ef:bc:
39:12:85:9a:69:82:8e:a4:90:36:01:98:d5:7c:a8:a6:db:51:
21:dd:b7:bf:ee:6e:e3:23:c5:e0:2d:27:d3:49:f6:8a:9a:25:
23:54:a1:dd:23:53:e5:39:79:fd:62:9a:d1:fe:2b:b7:86:8b:
e8:bc:b8:c0:9e:14:3a:98:14:7d:40:87:31:77:86:a2:c7:e8:
02:c8:59:71:17:2f:6a:80:7e:ae:af:bf:fa:5a:99:c0:4d:31:
20:af:a8:92:38:c7:8c:88:e4:b2:df:b8:26:9f:bf:3b:0d:a1:
f5:95:21:a0:d1:f5:a2:1e:15:4c:5a:22:0d:64:e6:91:c6:da:
96:12:07:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 03:30:50 2025 by rpki-client