
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.mft
File: BD9037968409387615A2867C81BDF4EE88009203.mft (raw, json)
Hash identifier: l/0E+XJedtX7UMdXJP4z5UVmCv2tmyZQMHLZZ8R6gxA=
Subject key identifier: DF:5F:BF:21:92:6B:DC:D9:FA:70:EC:5B:B6:49:77:1A:41:70:48:F7
Authority key identifier: BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03
Certificate issuer: /CN=BD9037968409387615A2867C81BDF4EE88009203
Certificate serial: 274060550795614E82AEE9BC0B6D303E306F1965
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.mft
Manifest number: 0137
Signing time: Mon 03 Nov 2025 12:36:25 +0000
Manifest this update: Mon 03 Nov 2025 12:31:25 +0000
Manifest next update: Fri 07 Nov 2025 18:09:25 +0000
Files and hashes: 1: 34352e3136322e3138302e302f32342d3234203d3e20323637373034.roa (hash: orzK4+iNoIt2vqDL7aNzQxo6NOcpJ4Vwbjp3kmK5H/U=)
2: 34352e3136322e3138332e302f32342d3234203d3e20323637373034.roa (hash: kyOKphWu4mJXOolnb9OYZZ6DfdZjzx55gGs8NNyJUcM=)
3: BD9037968409387615A2867C81BDF4EE88009203.crl (hash: aznRrqce6k+uerj0kMKAKyJobLupOJNUML1EGkFlYAo=)
4: 323830333a623161303a3a2f33322d3438203d3e20323637373034.roa (hash: EO2IznDSrqp2YHroJZN5svH/gGanRP1o120o3qUeepE=)
5: 34352e3136322e3138302e302f32322d3232203d3e20323637373034.roa (hash: n7OaqPymjd5l5NYhQoWBi3KRsSbTBVcX/cN1vIUbAzg=)
6: 34352e3136322e3138312e302f32342d3234203d3e20323637373034.roa (hash: pDACbHJ9vO/VZN6Wh7ZgZ1nHbXKKRK+mXnO4eU8CaEo=)
7: 34352e3136322e3138322e302f32342d3234203d3e20323637373034.roa (hash: G6A/4u4O605MjRwAWS1uY5O4AWWS1GhXJo9ZMujgCg0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl
rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 07 Nov 2025 18:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:40:60:55:07:95:61:4e:82:ae:e9:bc:0b:6d:30:3e:30:6f:19:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD9037968409387615A2867C81BDF4EE88009203
Validity
Not Before: Nov 3 12:31:25 2025 GMT
Not After : Nov 7 18:09:25 2025 GMT
Subject: CN=DF5FBF21926BDCD9FA70EC5BB649771A417048F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:b9:03:7d:f5:b9:3c:a0:1e:a3:79:81:20:
40:b5:27:5d:4e:73:f9:07:f9:b5:2a:04:e3:44:12:
3c:6a:86:f7:19:85:12:cf:6c:e9:29:b2:49:42:c6:
52:bb:38:4e:33:9b:44:9c:19:35:88:82:ce:73:ae:
ac:c6:fd:07:b9:09:dd:e6:e6:af:45:24:b7:51:22:
2b:b8:c8:64:96:00:9d:fc:ba:31:10:76:4b:d5:7f:
bd:1f:74:42:71:61:01:6b:6b:19:91:29:bb:36:ff:
41:14:6f:a1:00:b7:fa:2e:00:2e:ed:4d:a5:88:19:
18:6c:86:8a:0e:9d:24:1e:60:48:f2:3a:23:2b:d7:
a4:48:b8:d9:0d:0b:93:76:e8:0d:d2:46:7a:21:47:
7c:06:79:57:f5:e8:31:a3:a7:12:33:a6:31:3b:5f:
da:ab:af:ed:0a:95:0c:8d:b6:ae:2f:fb:47:d2:57:
8f:57:75:07:56:a2:33:63:70:41:d5:66:8b:df:c7:
e0:f6:fd:23:06:f7:05:5e:75:d1:7d:fb:bc:43:fa:
e8:36:18:fc:e3:e1:c4:c5:39:ee:69:25:f0:ad:1d:
87:18:81:72:fd:60:20:36:bd:da:48:82:76:63:70:
e0:a2:64:4d:6d:b5:3a:81:fd:b6:07:5c:2f:9f:83:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5F:BF:21:92:6B:DC:D9:FA:70:EC:5B:B6:49:77:1A:41:70:48:F7
X509v3 Authority Key Identifier:
keyid:BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4c:7b:74:47:b9:13:7d:9d:69:63:6f:c4:bc:9a:ca:f7:b4:
ab:8a:f3:97:a5:d4:83:1f:ae:38:cd:e9:72:4b:bc:2c:e6:b4:
f1:6e:73:4c:9f:81:9e:86:07:ce:a5:30:c0:6f:83:1c:c9:c3:
46:ad:1a:d2:e2:25:97:6b:13:26:eb:3b:8e:cd:e2:80:e6:18:
58:65:bc:a6:4d:9d:53:e6:4d:10:d4:3e:a3:0c:84:50:c5:7d:
ba:88:c3:48:58:90:db:57:b1:3a:45:8b:45:a1:d0:19:60:27:
65:39:d5:32:10:4e:af:8c:a7:63:ed:0f:ed:62:6b:95:a8:bd:
fd:51:b0:54:3b:99:a3:c4:c6:87:a5:a4:21:87:d0:b8:a4:5b:
c9:d1:73:bd:15:51:df:bf:b3:24:18:2d:fd:2f:5d:0c:ce:75:
4b:08:22:d4:c7:c7:27:7b:83:e1:68:8f:df:68:2d:2b:a1:c8:
01:2f:c5:2a:27:3e:fb:a7:a3:95:44:33:4c:75:68:77:08:03:
16:cb:7e:6c:fa:22:31:b4:4f:e6:41:a3:1d:ce:47:c6:d1:23:
52:60:df:17:78:63:0e:74:b0:6a:d7:b4:04:0c:0d:33:4d:de:
6e:df:0d:cd:9e:c1:70:92:9a:ef:ac:5f:56:0d:3a:92:a5:a1:
06:42:a3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:18:34 2025 by rpki-client