
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/B43E01D488885BFC75C9118EA9837A33A19423D0.mft
File: B43E01D488885BFC75C9118EA9837A33A19423D0.mft (raw, json)
Hash identifier: RZJ5EfjFRf5qXUaOc5XDvY4wj87mtew9O91ay0zXNCc=
Subject key identifier: 3E:73:A0:BC:A7:47:85:75:E2:7B:2A:28:1D:B5:5F:F8:AA:43:15:71
Authority key identifier: B4:3E:01:D4:88:88:5B:FC:75:C9:11:8E:A9:83:7A:33:A1:94:23:D0
Certificate issuer: /CN=B43E01D488885BFC75C9118EA9837A33A19423D0
Certificate serial: 456D4C62FED77504B558CF93453233E9D51B0988
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B43E01D488885BFC75C9118EA9837A33A19423D0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/B43E01D488885BFC75C9118EA9837A33A19423D0.mft
Manifest number: 0121
Signing time: Fri 07 Nov 2025 09:22:54 +0000
Manifest this update: Fri 07 Nov 2025 09:17:54 +0000
Manifest next update: Tue 11 Nov 2025 23:47:54 +0000
Files and hashes: 1: 323830333a386665303a3a2f33322d3634203d3e20323731373834.roa (hash: hj/YtQsYOV6ESzRtKy37n9uucemg3vlQaOoLZXcGGTE=)
2: B43E01D488885BFC75C9118EA9837A33A19423D0.crl (hash: lBNRwJ/EE4AcOQU/rLh+Au/iYbcdyl6y4zl6gwOM4ec=)
3: 3137372e3133362e38342e302f32322d3234203d3e20323731373834.roa (hash: 8dBURn0trJY3eGK7blIecrbuCW3Bu6Fjgk85r8H4fVM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/B43E01D488885BFC75C9118EA9837A33A19423D0.crl
rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/B43E01D488885BFC75C9118EA9837A33A19423D0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B43E01D488885BFC75C9118EA9837A33A19423D0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 11 Nov 2025 18:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6d:4c:62:fe:d7:75:04:b5:58:cf:93:45:32:33:e9:d5:1b:09:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B43E01D488885BFC75C9118EA9837A33A19423D0
Validity
Not Before: Nov 7 09:17:54 2025 GMT
Not After : Nov 11 23:47:54 2025 GMT
Subject: CN=3E73A0BCA7478575E27B2A281DB55FF8AA431571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:11:08:39:45:b2:cd:db:6f:ae:83:7b:25:
69:b0:41:8e:75:1e:5e:27:a1:c9:ac:6e:9c:f4:d1:
92:6d:58:50:78:b4:ae:04:b5:59:d1:24:77:f5:3d:
55:67:37:ab:da:92:48:e5:32:8b:15:5e:36:61:c0:
70:d5:f0:47:61:26:be:0c:25:98:9a:eb:db:44:10:
be:2f:1e:aa:13:c8:85:8b:9e:6c:1a:23:58:0b:1f:
7d:34:23:91:45:46:7b:e2:88:8c:10:f7:e8:f1:b6:
a9:f5:4f:26:0d:49:c6:77:13:24:77:39:bc:91:91:
7e:ee:81:23:b7:17:35:1c:e8:c2:2a:9c:92:a5:d8:
c7:b9:10:31:28:48:cf:5f:85:2d:82:ad:36:ba:f8:
80:f5:72:5c:a7:7f:d0:16:00:79:9a:99:52:be:23:
c2:f3:26:be:d2:5a:52:dd:96:3f:9e:98:43:ae:16:
a5:e4:2f:e5:84:eb:33:fa:d5:10:05:95:5c:fd:f4:
78:0d:32:29:ee:61:9a:2a:1e:8b:a3:6f:7f:22:82:
dc:7f:08:e2:2a:64:af:49:20:b9:e2:59:66:fe:a9:
76:b6:3f:91:50:f7:49:1b:22:b9:ce:83:1f:4d:c4:
f3:91:37:20:ea:b2:10:55:43:cc:2b:7b:71:37:69:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:73:A0:BC:A7:47:85:75:E2:7B:2A:28:1D:B5:5F:F8:AA:43:15:71
X509v3 Authority Key Identifier:
keyid:B4:3E:01:D4:88:88:5B:FC:75:C9:11:8E:A9:83:7A:33:A1:94:23:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/B43E01D488885BFC75C9118EA9837A33A19423D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B43E01D488885BFC75C9118EA9837A33A19423D0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/B43E01D488885BFC75C9118EA9837A33A19423D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f8:fd:1a:c5:37:b7:a8:ba:71:34:e4:e1:c7:03:1f:e2:6a:
7a:49:40:26:28:58:5b:b4:92:59:c6:72:1a:3b:4a:30:f5:41:
a7:54:a0:fc:dd:cf:9f:ec:c4:36:30:ec:29:16:31:00:dd:af:
26:e6:22:75:3f:5b:56:f0:41:a7:d0:d8:26:0d:e3:21:ab:0b:
60:5f:ec:bc:f5:32:e0:04:39:c1:90:49:b3:60:a6:42:40:bf:
be:a7:ef:15:5e:c9:07:90:64:c7:18:fd:cf:35:fb:aa:45:2a:
49:49:59:84:64:20:42:22:70:f0:3b:39:ff:83:84:f4:2c:02:
18:85:2b:36:6d:e9:e7:fb:41:ec:cf:f8:e2:e6:4f:ba:38:d8:
6f:71:91:48:da:b4:53:e0:91:e7:98:b5:42:dd:57:c7:53:2e:
60:3e:f5:6e:8b:d8:e6:a1:0f:8a:33:1c:8d:94:d5:13:17:88:
45:6e:b4:44:2e:10:ea:e7:be:f9:20:a2:c8:70:9a:ce:a9:04:
5c:41:50:51:8f:8d:b7:e5:34:18:db:05:a5:d8:32:f1:d3:9e:
16:6d:24:f1:19:73:de:02:35:eb:37:47:78:3a:6b:70:d4:37:
dc:e4:fb:29:1d:27:55:df:3b:14:0f:21:15:f6:e8:6b:73:11:
b3:0d:1e:12
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIURW1MYv7XdQS1WM+TRTIz6dUbCYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQzRTAxRDQ4ODg4NUJGQzc1QzkxMThFQTk4MzdBMzNB
MTk0MjNEMDAeFw0yNTExMDcwOTE3NTRaFw0yNTExMTEyMzQ3NTRaMDMxMTAvBgNV
BAMTKDNFNzNBMEJDQTc0Nzg1NzVFMjdCMkEyODFEQjU1RkY4QUE0MzE1NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bREIOUWyzdtvroN7JWmwQY51
Hl4nocmsbpz00ZJtWFB4tK4EtVnRJHf1PVVnN6vakkjlMosVXjZhwHDV8EdhJr4M
JZia69tEEL4vHqoTyIWLnmwaI1gLH300I5FFRnviiIwQ9+jxtqn1TyYNScZ3EyR3
ObyRkX7ugSO3FzUc6MIqnJKl2Me5EDEoSM9fhS2CrTa6+ID1clynf9AWAHmamVK+
I8LzJr7SWlLdlj+emEOuFqXkL+WE6zP61RAFlVz99HgNMinuYZoqHoujb38igtx/
COIqZK9JILniWWb+qXa2P5FQ90kbIrnOgx9NxPORNyDqshBVQ8wre3E3aS19AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUPnOgvKdHhXXieyooHbVf+KpDFXEwHwYDVR0j
BBgwFoAUtD4B1IiIW/x1yRGOqYN6M6GUI9AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84N0U3RUI0RTFFQUJDMDc4MDA3QThBNjIzNTZEMDdBMEIy
NUVGQkEyRjFEMTNCNUNBNkI1MTRFNjdGQkE0NDMxLzAvQjQzRTAxRDQ4ODg4NUJG
Qzc1QzkxMThFQTk4MzdBMzNBMTk0MjNEMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNDNFMDFENDg4ODg1QkZDNzVD
OTExOEVBOTgzN0EzM0ExOTQyM0QwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODdFN0VCNEUxRUFCQzA3ODAwN0E4QTYyMzU2RDA3QTBCMjVFRkJBMkYx
RDEzQjVDQTZCNTE0RTY3RkJBNDQzMS8wL0I0M0UwMUQ0ODg4ODVCRkM3NUM5MTE4
RUE5ODM3QTMzQTE5NDIzRDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBg+P0axTe3qLpxNOThxwMf4mp6
SUAmKFhbtJJZxnIaO0ow9UGnVKD83c+f7MQ2MOwpFjEA3a8m5iJ1P1tW8EGn0Ngm
DeMhqwtgX+y89TLgBDnBkEmzYKZCQL++p+8VXskHkGTHGP3PNfuqRSpJSVmEZCBC
InDwOzn/g4T0LAIYhSs2benn+0Hsz/ji5k+6ONhvcZFI2rRT4JHnmLVC3VfHUy5g
PvVui9jmoQ+KMxyNlNUTF4hFbrRELhDq5775IKLIcJrOqQRcQVBRj4235TQY2wWl
2DLx054WbSTxGXPeAjXrN0d4Omtw1Dfc5PspHSdV3zsUDyEV9uhrcxGzDR4S
-----END CERTIFICATE-----
Generated at Sat Nov 8 15:16:01 2025 by rpki-client