
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
File: 2152913C2D5333E6F48DA45B339F5C285841364B.mft (raw, json)
Hash identifier: gLqeuyhXR+IKSBEqKpdWjEhGoutojfgNrSlX4Y3l0gg=
Subject key identifier: 25:68:3D:38:C5:92:61:08:8D:0D:76:FC:33:AE:9F:B7:5B:C5:10:2F
Authority key identifier: 21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
Certificate issuer: /CN=2152913C2D5333E6F48DA45B339F5C285841364B
Certificate serial: 374B91A98A5964C15E22649584641FE1F948E32A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
Manifest number: 0130
Signing time: Thu 30 Oct 2025 15:33:39 +0000
Manifest this update: Thu 30 Oct 2025 15:28:39 +0000
Manifest next update: Wed 05 Nov 2025 15:32:39 +0000
Files and hashes: 1: 3139302e3231312e3136302e302f32312d3234203d3e20323632353839.roa (hash: QSYklESbGpTBYnLlMXWGdGvmWPOvjNsNehXg1LCC/Ug=)
2: 3139302e3231312e3136302e302f32302d3234203d3e203532323830.roa (hash: 3tlV1KZH3rDVGHiIirxyLiiuTplF19WWHSCa2xYxI34=)
3: 323830303a3637303a3a2f33322d3332203d3e20323632353839.roa (hash: LIc8g4j12EjSBq6s3uLe0ei4dmDU3JeReg3vmDdykiw=)
4: 3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa (hash: 7hL8H/QT0H3pNjeDIcC6CHdP9ozfDuFwvBu42dZF9c8=)
5: 2152913C2D5333E6F48DA45B339F5C285841364B.crl (hash: CjGXuLgkUxEUyew5G8Gggx6Z5gj9+HRTdGfdkEj4+uo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl
rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:4b:91:a9:8a:59:64:c1:5e:22:64:95:84:64:1f:e1:f9:48:e3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2152913C2D5333E6F48DA45B339F5C285841364B
Validity
Not Before: Oct 30 15:28:39 2025 GMT
Not After : Nov 5 15:32:39 2025 GMT
Subject: CN=25683D38C59261088D0D76FC33AE9FB75BC5102F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:a7:aa:45:af:c5:dd:94:c8:ec:15:0c:79:
47:91:38:b8:3b:f5:6c:b0:aa:ee:0c:33:d6:c4:9f:
5c:c4:fd:6a:4b:21:9d:24:ef:2d:ff:bc:2d:f1:19:
a2:1d:61:78:af:5f:5e:07:e4:68:50:7d:f7:cb:ec:
73:d4:6b:43:06:a6:51:8e:4d:70:8b:b0:42:d9:38:
cc:31:81:4d:b2:92:30:56:95:f4:71:e6:da:f1:f4:
ca:f5:d1:0b:c7:f2:ec:ba:08:25:67:61:ef:6f:ae:
bf:6f:fa:b0:07:7b:48:a3:79:0f:ee:c9:22:54:8b:
41:48:72:81:3b:c9:b9:0e:44:de:2c:09:08:3b:b7:
6e:08:5f:10:9f:13:3f:1b:22:b0:12:94:e8:0e:af:
ee:4f:44:8b:d7:19:00:16:22:d7:ee:cd:d3:13:41:
23:43:27:8d:f5:e2:a3:29:8e:07:17:11:46:69:4e:
50:a4:d9:c8:9d:cc:1b:32:d5:e0:2b:d7:6a:f2:14:
f3:32:c7:63:e2:5d:ed:be:e1:99:3d:1c:15:a0:2f:
25:0e:a2:91:31:d7:a2:6b:90:1f:8e:ec:e9:40:79:
39:45:5a:de:bc:66:65:ca:48:4a:51:6f:1e:20:be:
6a:88:f0:89:b8:73:c3:13:7c:ee:e6:9b:69:75:db:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:68:3D:38:C5:92:61:08:8D:0D:76:FC:33:AE:9F:B7:5B:C5:10:2F
X509v3 Authority Key Identifier:
keyid:21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:92:5b:13:2b:12:3b:f1:a9:eb:41:16:cb:bf:a5:bd:0d:a3:
20:5d:f8:29:2b:79:6d:6f:fc:f2:3a:73:c6:6f:ec:c7:b0:17:
c5:c2:3c:14:bd:b2:cf:9b:31:61:21:47:8e:bf:b8:be:97:be:
27:09:53:b4:f5:c2:2a:b2:00:21:0e:c1:a6:ab:a6:18:91:cd:
85:b4:d4:f7:0e:5a:96:a8:eb:43:57:a7:4d:7e:c8:d4:bb:91:
e7:d4:69:4f:6a:2f:f6:57:a5:4a:83:3a:50:80:04:01:f6:0c:
b1:2f:a8:09:02:17:07:bc:85:2a:ea:56:ca:7c:81:c3:7d:e9:
bb:f6:f9:bc:c0:96:f0:09:e2:5c:a7:7c:75:6e:82:a9:17:c8:
42:ea:15:4d:d7:f4:94:5b:aa:ed:f5:5c:d7:9c:c7:ad:8f:36:
dc:b5:4a:47:13:4f:87:80:56:2b:58:b8:14:ec:27:78:b8:df:
3f:cd:63:83:d9:bc:10:df:b6:4f:b4:d0:90:5b:2b:f2:dc:fd:
01:e2:fd:69:80:55:74:c2:87:ba:9d:37:62:44:af:8e:b2:4b:
3f:39:3d:aa:84:18:50:f7:d3:17:82:c8:63:eb:3c:18:22:51:
1d:41:ba:7e:ac:06:8c:e7:65:a8:93:9b:77:42:39:8c:19:3d:
9b:43:ce:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 03:52:25 2025 by rpki-client