
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft
File: 09452D3964845A96D0C2242C6550EF5DDE90180A.mft (raw, json)
Hash identifier: nXrSfZ/FZEiSZVIfOjIc8UFh9WM9SlM0bNovpFm9fxo=
Subject key identifier: A9:95:2C:EF:B6:19:B0:27:C1:6B:68:2D:DF:91:7E:D1:AD:4D:07:ED
Authority key identifier: 09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A
Certificate issuer: /CN=09452D3964845A96D0C2242C6550EF5DDE90180A
Certificate serial: 1E2B2F7D653C34EF827B439454E9A8873444FE12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft
Manifest number: 04
Signing time: Sat 25 Oct 2025 21:44:29 +0000
Manifest this update: Sat 25 Oct 2025 21:39:29 +0000
Manifest next update: Fri 31 Oct 2025 20:16:29 +0000
Files and hashes: 1: 34352e3232392e38362e302f32342d3234203d3e20323636373035.roa (hash: Pfr6859cFfG0sBLTdjPs00WhawlAyb1KWQveG3bDB0I=)
2: 323830333a646432303a3a2f33322d3332203d3e20323636373035.roa (hash: UfR+ItPhQD6E1Xv4dLcqFTXeVWBfmMJvdIrkR0Y6kyM=)
3: 34352e3232392e38342e302f32332d3234203d3e20323636373035.roa (hash: u+fIFJ6Wri7Y64qpJXKnD2P5KQvmAcX2xv6Tu5za4b8=)
4: 09452D3964845A96D0C2242C6550EF5DDE90180A.crl (hash: I/4z2TkWHstqtgF8mlSGgK8CupgK2sAHlmySsftKc0w=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl
rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:2b:2f:7d:65:3c:34:ef:82:7b:43:94:54:e9:a8:87:34:44:fe:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09452D3964845A96D0C2242C6550EF5DDE90180A
Validity
Not Before: Oct 25 21:39:29 2025 GMT
Not After : Oct 31 20:16:29 2025 GMT
Subject: CN=A9952CEFB619B027C16B682DDF917ED1AD4D07ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:1d:0d:37:74:c3:85:8f:c7:d9:f6:e2:36:
34:3a:e4:48:b1:0e:1c:55:99:67:69:2d:61:e3:d0:
65:69:27:eb:3c:af:c3:ad:19:6c:bb:da:43:6f:6b:
f4:ba:6e:21:75:47:5c:60:b7:94:64:e4:a1:47:a2:
01:0f:35:4e:30:06:be:4b:3d:e6:93:b8:85:63:7d:
51:7d:39:b7:cc:1f:4e:84:1f:be:6f:bb:7b:ad:c1:
2b:df:aa:af:35:0c:9a:63:4e:59:ff:bc:2b:68:a2:
5e:9b:b8:5f:44:18:60:12:18:b9:be:53:ff:6f:f1:
c1:7e:77:d1:f5:05:3a:40:7f:bd:b9:04:c3:32:84:
60:ce:ed:d9:60:56:c1:70:df:91:24:86:c6:12:ce:
6a:d2:f0:99:8a:77:ef:51:9a:b7:af:1e:3f:98:2d:
c9:68:f0:5b:24:31:b7:c8:58:83:3f:77:02:21:09:
4e:fb:9b:19:fb:9f:a6:1d:a8:35:ae:08:e4:6d:81:
02:72:b7:b8:b2:16:3e:5c:80:2f:d3:32:35:44:0c:
5f:70:bd:ca:2e:b3:15:d8:c8:fb:26:07:3d:c8:fa:
96:c2:d5:db:82:da:4e:6e:8b:14:a2:47:6b:0c:9d:
c8:81:73:59:71:66:49:ce:af:6f:a6:54:27:c9:3e:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:2C:EF:B6:19:B0:27:C1:6B:68:2D:DF:91:7E:D1:AD:4D:07:ED
X509v3 Authority Key Identifier:
keyid:09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f1:8c:99:e5:17:9a:4d:d5:22:67:42:19:25:3d:90:17:fa:
fb:ab:4a:43:17:da:3e:fd:f6:27:a1:5a:ba:ca:5a:66:d0:be:
39:ed:4a:21:ae:af:1f:0d:c2:df:3b:0c:a1:d6:4b:e3:4d:7a:
6f:7a:2a:a4:b7:75:10:a5:cd:d3:e5:0f:c3:16:e4:bc:cb:f7:
26:4e:6a:21:02:11:cb:86:5c:9f:16:0e:66:d0:e6:b5:cf:20:
ae:a9:4d:1c:76:04:82:8b:1e:0f:78:47:a3:16:95:c9:a3:4a:
e5:d4:92:0d:6b:a1:55:0a:ad:eb:a9:23:6a:1a:99:f3:49:59:
76:ee:6d:b2:26:bb:f9:e1:c7:78:d9:ea:87:93:83:cf:2b:d4:
de:bd:cd:53:81:87:2a:8a:6b:de:b8:20:91:1c:5f:17:5a:97:
72:de:9d:e1:9e:72:2b:ff:66:41:d5:96:e5:b5:32:a1:5b:1f:
06:4a:03:35:4d:60:dd:d1:73:05:25:5f:39:94:05:75:1c:cc:
ec:16:b8:e0:85:41:c3:96:ee:2f:11:cd:a0:3a:14:42:5d:de:
67:dd:80:e9:ad:f0:a2:7c:17:d0:8c:19:d3:f9:54:7d:a0:23:
15:e7:f1:9a:3c:99:6a:d4:86:41:13:e4:85:48:db:bb:e6:c7:
5d:ce:86:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:26:08 2025 by rpki-client