
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.mft
File: 1AE1F7F878280542E5E790B352C0AEC7268C8C90.mft (raw, json)
Hash identifier: G9Jpv+3m2yE0tNbBXmvij5UutApomaPsmSLiJZDAKF0=
Subject key identifier: 4A:CF:1D:C3:80:D3:5B:C3:52:FF:7B:CA:A6:89:5B:1F:7F:E1:C9:B3
Authority key identifier: 1A:E1:F7:F8:78:28:05:42:E5:E7:90:B3:52:C0:AE:C7:26:8C:8C:90
Certificate issuer: /CN=1AE1F7F878280542E5E790B352C0AEC7268C8C90
Certificate serial: 30677B249E11F256B1F4393147FDC83D8A235EC7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.mft
Manifest number: 0131
Signing time: Fri 31 Oct 2025 08:27:54 +0000
Manifest this update: Fri 31 Oct 2025 08:22:54 +0000
Manifest next update: Thu 06 Nov 2025 06:23:54 +0000
Files and hashes: 1: 3230302e33312e3232342e302f32302d3234203d3e203130393634.roa (hash: 20Skg/VXLRXGUHdlmdVX2WHO0QNl314V4J+Q/AWjTXY=)
2: 1AE1F7F878280542E5E790B352C0AEC7268C8C90.crl (hash: jZWJsceYjswlmFeqnFe7SZd33ewkAnMzLPDEOIVYc60=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.crl
rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:67:7b:24:9e:11:f2:56:b1:f4:39:31:47:fd:c8:3d:8a:23:5e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AE1F7F878280542E5E790B352C0AEC7268C8C90
Validity
Not Before: Oct 31 08:22:54 2025 GMT
Not After : Nov 6 06:23:54 2025 GMT
Subject: CN=4ACF1DC380D35BC352FF7BCAA6895B1F7FE1C9B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:51:95:91:6a:e9:dd:4a:08:54:cd:9e:66:
c5:c2:1b:b6:f7:2e:08:ae:a7:61:74:b8:5c:29:64:
32:0c:6e:9e:25:2d:77:13:df:89:57:f4:95:59:49:
96:bd:7c:1c:d2:c2:ed:7b:54:11:c1:89:e8:0f:4b:
25:0e:fd:c0:22:05:f1:a3:06:8e:32:db:93:b1:91:
e7:bc:a9:30:ad:51:02:23:d7:77:97:86:5b:36:4a:
ac:55:63:44:9b:41:e2:fc:40:e5:88:e9:b4:c7:2c:
43:22:d5:9f:56:e1:9a:05:06:df:0d:39:2b:26:a0:
9b:d3:77:d5:fb:8b:2d:d5:a2:a1:93:50:35:29:f5:
16:ca:a3:fb:a2:55:33:e2:e0:59:48:df:83:bf:61:
e7:39:9b:3f:5e:54:4d:39:fe:ff:7c:46:38:5a:a4:
a7:39:f3:dc:f3:3f:9b:d7:57:94:ae:2d:66:99:ce:
36:32:9c:83:c9:fe:51:ec:89:5e:9a:2b:40:a2:29:
54:82:92:cb:9e:73:48:a7:43:a8:80:9c:9b:ed:82:
28:3e:fe:5e:a9:26:7f:7d:75:70:2d:c4:0b:27:d5:
b6:7b:14:9d:04:31:3d:9a:28:50:b6:85:40:bd:62:
c8:10:c9:4d:59:d2:bb:bd:5c:45:e7:aa:e3:a1:b6:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:1D:C3:80:D3:5B:C3:52:FF:7B:CA:A6:89:5B:1F:7F:E1:C9:B3
X509v3 Authority Key Identifier:
keyid:1A:E1:F7:F8:78:28:05:42:E5:E7:90:B3:52:C0:AE:C7:26:8C:8C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:09:00:7e:e8:c5:6a:b4:48:e4:f8:fa:36:d3:d8:d3:3a:65:
62:ad:0d:36:30:ab:34:be:cf:17:5f:0d:46:af:6b:95:59:9b:
8b:fd:90:f3:67:df:a3:22:04:39:c1:78:1e:7e:99:f6:d4:42:
7c:af:d8:89:24:18:62:67:fe:b1:1d:72:cc:e1:8c:b3:57:f2:
b3:1f:ee:52:1e:e4:aa:e2:f1:c3:e8:54:26:00:c0:b6:d7:57:
25:8a:88:a4:f0:f8:05:e7:79:ff:7e:cb:b7:51:a1:49:96:75:
bd:02:79:96:f1:df:62:07:1a:0b:67:e6:5d:dd:58:3d:15:3a:
53:89:7f:78:c2:15:9a:05:0c:c2:75:98:0e:10:25:17:33:65:
e0:4c:1f:f3:33:f5:c4:3a:01:1d:18:56:33:e4:4a:03:5d:94:
e4:c1:a1:cf:d4:fe:43:c6:99:7b:e0:af:cf:e9:4f:c9:54:32:
27:6b:d8:df:d9:e0:69:d4:a4:fa:88:f0:bb:58:30:60:e6:6a:
d0:db:70:49:bc:9c:32:cc:9c:02:bf:27:53:17:b8:72:c2:94:
e1:56:06:63:d5:2f:56:07:94:d4:db:ca:a9:4f:60:56:80:80:
84:01:5b:74:74:f4:a3:61:ad:41:1f:94:5d:f5:ad:b9:48:1b:
5c:3d:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:31:49 2025 by rpki-client