
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
File: 8CECD8998683594E93B9972D95397E3623CDB7A8.mft (raw, json)
Hash identifier: xGKs7G3BzzzJyzkuzHnegGDZV8H68vc26A5aL3HPNfg=
Subject key identifier: 96:EA:99:CC:8E:D3:F4:EC:FD:42:E1:89:1E:E2:94:C5:5D:A3:28:9F
Authority key identifier: 8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8
Certificate issuer: /CN=8CECD8998683594E93B9972D95397E3623CDB7A8
Certificate serial: 51C60C07CB393F1722346AD264D9C5BD1ED5A7D2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
Manifest number: 0110
Signing time: Sat 25 Oct 2025 20:23:40 +0000
Manifest this update: Sat 25 Oct 2025 20:18:40 +0000
Manifest next update: Thu 30 Oct 2025 07:33:40 +0000
Files and hashes: 1: 3133312e3235352e3133392e302f32342d3234203d3e20323731383631.roa (hash: +DFzi9xgHlw57h5KMxGRsk/tBwNLgrrMth+O5GVl6Vs=)
2: 8CECD8998683594E93B9972D95397E3623CDB7A8.crl (hash: OBeSa2JZtP4wY45mD/9RtetMItrmAOuIcENVM9kS0iA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl
rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c6:0c:07:cb:39:3f:17:22:34:6a:d2:64:d9:c5:bd:1e:d5:a7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CECD8998683594E93B9972D95397E3623CDB7A8
Validity
Not Before: Oct 25 20:18:40 2025 GMT
Not After : Oct 30 07:33:40 2025 GMT
Subject: CN=96EA99CC8ED3F4ECFD42E1891EE294C55DA3289F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:2f:ed:22:37:ba:55:b5:0b:fb:ce:28:e6:
3e:71:67:4b:ff:23:8f:47:50:ef:e4:7a:b7:7e:b8:
ad:16:97:17:d0:12:04:43:15:9d:ef:c1:ba:bf:d8:
3d:5b:24:93:b5:1b:ed:71:9a:c9:5c:a2:52:53:a0:
1c:8f:e9:9e:e5:ff:f2:1a:d6:29:dc:7f:79:1c:ae:
26:4c:df:10:ed:7e:4b:bf:95:fe:9a:45:d3:7a:a8:
10:cd:21:9c:01:eb:ee:34:f8:a6:4f:0b:e8:a5:c0:
be:ec:9a:e6:cc:5e:04:aa:46:21:7f:43:58:ac:34:
51:e8:ba:a0:eb:13:30:6d:c5:50:f8:ff:2a:c6:4f:
cb:1e:f1:69:a1:07:8d:ce:80:6d:55:28:a2:0a:9f:
a4:e2:37:8f:9b:de:6a:cb:c9:2c:cb:3b:37:dd:2c:
cc:f2:e6:c9:ec:1e:d8:5d:ec:5f:f8:b7:8f:ef:98:
6f:8b:04:c8:8a:2c:2e:bf:60:d6:5c:9b:66:4c:b8:
98:7e:b2:89:52:04:d5:2b:6a:99:29:62:f1:b2:21:
4c:78:02:8c:79:1c:53:9f:be:20:62:df:73:58:df:
71:ad:98:77:ff:35:ce:0b:8b:22:fb:b8:3e:6a:52:
fd:05:e6:95:d0:a8:cf:55:7e:d5:bf:20:e1:0c:06:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EA:99:CC:8E:D3:F4:EC:FD:42:E1:89:1E:E2:94:C5:5D:A3:28:9F
X509v3 Authority Key Identifier:
keyid:8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f8:12:2a:44:5c:d3:27:c7:92:16:82:14:a7:62:fb:18:c5:
31:94:94:95:50:de:fe:7e:f7:3b:77:92:52:d0:29:c5:c2:0f:
d7:9a:e0:39:91:3c:97:aa:76:db:61:de:fe:79:d5:b3:04:10:
6e:bd:61:55:62:af:8e:b7:d4:45:a5:92:d8:53:59:5f:9b:4a:
9d:74:0d:03:af:99:d5:1f:03:f3:44:19:80:04:79:f0:0f:13:
b3:8a:62:30:05:89:dc:c7:bf:7f:b3:ba:dd:0d:d6:dd:59:4b:
0d:b9:6a:a0:c6:6f:39:de:3b:c7:ee:ff:5e:39:24:69:c5:e0:
a3:6c:0f:7f:ac:80:3e:b6:46:12:d8:d2:53:bd:1c:10:2c:34:
e1:cd:94:e9:84:d6:0d:dd:8c:ab:5e:51:af:4d:d3:cf:2a:e4:
ea:75:ee:2f:f3:23:a5:e3:ce:16:89:b9:4f:aa:39:d4:5f:ae:
ca:59:26:56:9d:ee:05:f3:5c:6c:de:7e:4f:81:06:1d:eb:4a:
63:5f:9d:20:d8:f2:8c:88:8b:8d:85:6a:ca:88:c6:af:bf:e9:
4a:af:6c:97:08:3f:c3:58:cc:e9:75:c1:ca:f0:23:91:1f:cf:
65:95:b4:e7:95:a5:5c:ea:28:94:e3:18:d8:4d:1d:4e:6c:2e:
4b:0d:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:40:23 2025 by rpki-client