
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
File: 889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft (raw, json)
Hash identifier: zUVuTiDW5USJcJy9/x74uIDc3sGQRE+Zi0cq0blh+E4=
Subject key identifier: B9:3A:DD:99:D3:9F:0C:A3:86:E6:2D:A8:00:6C:AA:65:32:7C:84:B8
Authority key identifier: 88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91
Certificate issuer: /CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
Certificate serial: 1509776131F5C66DBBD3C3B898C7C0D4980F974B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
Manifest number: 0131
Signing time: Wed 12 Nov 2025 19:18:16 +0000
Manifest this update: Wed 12 Nov 2025 19:13:16 +0000
Manifest next update: Tue 18 Nov 2025 18:00:16 +0000
Files and hashes: 1: 889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl (hash: FZmGwVngVihLFzrfG4n4LA4TM10+/uJsk6F9vd2QPZ0=)
2: 34352e3139312e3139352e302f32342d3234203d3e20323639393333.roa (hash: 2JnT8LngpPtGR3HlKUCN52wxvco9mE6ll2JYf4Ka/Yk=)
3: 323830333a386165303a3a2f33322d3438203d3e20323639393333.roa (hash: o0JbiL7PQkPBSZZyiZ9yRs2FutaDcqR0ZkHLtn5XxYw=)
4: 34352e3139312e3139322e302f32332d3234203d3e20323639393333.roa (hash: vZQuTqj/nx111kG0MXXOXHVqdTEbNClQ6EDqHRSTVQQ=)
5: 34352e3139312e3139322e302f32322d3232203d3e20323639393333.roa (hash: uWULA3oo8EV68bY5PqZ6+AfqGZoLlyWlowD/N4/QPzc=)
6: 34352e3139312e3139342e302f32342d3234203d3e20323732383738.roa (hash: 1h9Hf5WULkAg1ZWjJoXr/2Dqs2TnvESri8I60F5REC0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl
rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 16 Nov 2025 21:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:09:77:61:31:f5:c6:6d:bb:d3:c3:b8:98:c7:c0:d4:98:0f:97:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
Validity
Not Before: Nov 12 19:13:16 2025 GMT
Not After : Nov 18 18:00:16 2025 GMT
Subject: CN=B93ADD99D39F0CA386E62DA8006CAA65327C84B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a1:cb:a1:4b:1e:83:55:56:4e:2b:bb:19:ed:
fd:f1:77:2a:2a:9c:66:c0:d1:c6:b7:80:46:f4:d9:
96:b0:13:9b:e9:48:d3:ba:65:24:93:a3:b4:97:c8:
52:0b:3a:af:2e:01:bc:ab:20:e8:f6:ea:fb:15:e8:
77:3f:fe:2e:64:c4:90:a5:76:7f:1f:f2:51:66:26:
83:d5:1a:15:cb:e3:75:11:a9:06:e1:d3:f8:a3:08:
ea:52:0c:36:0c:16:65:93:a8:00:19:67:a5:b4:28:
cb:4b:52:51:4b:ec:af:00:83:18:3c:13:91:af:73:
90:1a:32:66:43:35:7b:1f:02:3f:1c:2e:c9:d0:a8:
89:ed:26:70:70:80:76:7a:aa:58:50:6f:e5:ad:71:
db:d4:bc:17:38:69:bf:62:30:a9:4d:e4:d8:21:43:
7e:c2:61:50:13:97:9a:24:f0:31:9c:ad:a0:26:4a:
00:5e:80:ef:3f:de:fd:43:23:b9:fd:2c:88:a0:90:
8d:ac:0e:0a:b8:09:10:b3:d6:46:e9:91:7a:50:e5:
44:36:c5:dd:64:07:e5:80:ad:c4:5d:ad:af:0d:4e:
32:c2:38:08:17:4f:89:b5:69:03:fe:96:4f:94:0e:
68:76:ef:e7:fc:37:cc:ab:69:bf:ef:94:7e:ec:7c:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3A:DD:99:D3:9F:0C:A3:86:E6:2D:A8:00:6C:AA:65:32:7C:84:B8
X509v3 Authority Key Identifier:
keyid:88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8c:2f:a8:86:0d:7d:91:de:95:7a:c1:47:58:a8:9c:86:f4:
31:6d:f9:a4:40:18:8e:e1:b9:41:7e:85:3d:1f:b1:2c:2e:3d:
3a:69:e2:c2:52:3b:c1:c4:bb:97:0a:9c:49:a7:b2:52:cf:95:
1d:1f:d2:91:37:cc:13:6c:70:a2:fd:38:f1:d4:bb:45:3f:19:
34:c1:04:c0:c1:a7:75:16:21:cf:5b:a8:fb:61:d4:5b:63:22:
94:39:b9:ee:2f:6d:5c:b2:2f:29:6c:01:38:23:c4:ce:96:02:
1f:df:87:1b:cd:74:1c:d5:2a:7d:48:7a:d2:d3:55:4a:34:10:
bf:6d:d8:8b:2a:34:2f:13:5f:e3:74:bf:02:c8:0b:1c:6f:9a:
a3:91:2f:9f:8e:69:93:d5:20:90:3a:41:1c:05:2e:b2:28:fb:
97:db:15:92:d2:c7:d9:b0:32:85:71:77:5c:b9:49:7e:26:28:
64:17:95:7f:4b:d0:53:e6:7e:54:d5:a3:84:7c:b2:82:01:31:
31:2c:72:59:13:65:87:34:13:3f:96:10:aa:fb:f1:1a:ad:21:
b3:99:08:c1:a2:cd:fd:d2:25:e2:61:0b:40:fb:cf:eb:f3:21:
0f:f7:b2:e9:01:cf:6b:0d:00:19:d6:11:64:6b:5f:8f:8e:ed:
6f:41:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 13 13:36:57 2025 by rpki-client