
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
File: 2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft (raw, json)
Hash identifier: DZNBw7i/bxD0M6Gis8ne+agrRx+DOtiC9kjjn1f1Y4o=
Subject key identifier: A6:A2:52:5F:27:D1:72:00:8E:B5:43:9E:C3:31:19:E4:BE:C2:48:07
Authority key identifier: 2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B
Certificate issuer: /CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B
Certificate serial: 48557D97C2B9AAA206EAB1F136B22A898C5633E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
Manifest number: 0130
Signing time: Sun 26 Oct 2025 04:34:18 +0000
Manifest this update: Sun 26 Oct 2025 04:29:18 +0000
Manifest next update: Thu 30 Oct 2025 05:03:18 +0000
Files and hashes: 1: 323830313a31333a643830303a3a2f34382d3438203d3e203134303830.roa (hash: kkafS8rLlGBeQ6VUx0AiD6jnTOHLthXrAqZWKLP0AKs=)
2: 323830313a31333a643830383a3a2f34382d3438203d3e203139343239.roa (hash: pCCwwwI4kK35qb09IHCCQu4MrgMz9s784gSsBRbVivw=)
3: 2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl (hash: 0LXAxQjgQj96c5V3tLcEJxAAtU4OICK1c8Ms5Rp/3Sc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl
rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:55:7d:97:c2:b9:aa:a2:06:ea:b1:f1:36:b2:2a:89:8c:56:33:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B
Validity
Not Before: Oct 26 04:29:18 2025 GMT
Not After : Oct 30 05:03:18 2025 GMT
Subject: CN=A6A2525F27D172008EB5439EC33119E4BEC24807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:60:05:7f:30:64:91:87:17:b7:87:d8:59:
d3:e2:3a:dc:5e:c1:a0:3c:22:65:9c:b8:7a:2b:64:
c7:02:b0:67:44:1c:d5:1f:01:ec:75:eb:94:56:1b:
1b:4b:ea:6c:48:51:d2:83:55:ef:8d:98:76:35:f4:
52:a2:25:48:3d:94:1b:cf:de:bd:28:c5:a0:69:80:
ee:25:1e:e1:a4:64:c8:56:f8:13:e4:8c:c9:b0:3c:
88:7b:7d:39:f9:56:94:d7:f3:9e:59:27:e9:49:2d:
65:2b:04:ef:84:09:52:1f:a8:ab:8a:cf:00:14:03:
8c:2b:6c:2e:e2:98:2a:a0:bd:ce:3f:19:07:e8:d2:
40:ff:2b:bf:9b:d2:7f:f4:b3:ea:f6:70:d5:22:0b:
c4:77:13:db:b0:cb:0d:5c:bd:8d:3a:54:fb:03:1e:
c0:e2:21:bd:4f:8a:ef:9d:f2:e5:98:c5:b6:1f:db:
2d:db:20:33:06:ef:36:6e:4e:70:28:18:e2:64:b2:
e1:48:5b:82:1e:a9:66:80:88:aa:23:a9:ed:e3:a0:
9a:59:37:35:e6:96:76:e4:64:1d:8d:70:3f:2d:a3:
3c:87:4f:14:33:ae:15:38:8f:da:c6:59:9f:a5:e2:
45:56:b7:a9:d0:14:8f:57:9b:65:e8:39:ad:13:5a:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:52:5F:27:D1:72:00:8E:B5:43:9E:C3:31:19:E4:BE:C2:48:07
X509v3 Authority Key Identifier:
keyid:2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:23:7d:a3:44:df:8f:1d:4f:2c:14:1a:df:e1:12:fd:d1:00:
db:77:14:a7:90:1a:d2:e2:a1:bb:71:9b:6f:c1:20:fd:2c:71:
b4:a0:4f:b9:c3:bf:58:6a:44:dc:d6:c8:5e:7f:f1:57:b5:22:
8d:2b:7a:d8:8e:cc:68:87:44:4a:c8:b6:d6:78:2a:b5:c3:57:
23:1a:bb:a4:85:58:48:ae:c0:02:07:fc:40:a6:32:47:00:17:
05:c4:03:3e:16:53:4e:fd:90:a6:4e:86:9e:e5:95:0a:81:8f:
5e:f4:96:1f:13:a8:6e:25:ba:f2:27:c4:0a:1a:98:de:06:fc:
d0:c9:25:97:1c:f1:ad:d7:02:43:50:bc:a4:7b:90:3b:8e:90:
4c:93:b1:99:cc:ed:9f:26:8a:d0:1c:02:7b:8c:28:fd:19:f1:
62:96:28:85:8d:02:d8:1f:a5:de:de:96:26:c1:ea:de:9b:bc:
33:7f:c1:dd:5c:1c:16:2f:43:3c:9b:36:be:ea:ba:b6:cc:02:
9a:78:aa:b9:3b:95:69:11:74:50:18:95:59:01:50:75:92:bd:
b2:0b:c8:d3:ed:51:b8:53:d0:bd:b6:fc:7f:20:df:0a:6f:25:
1c:71:01:7d:2e:aa:df:e7:40:d6:b4:cf:6c:72:2e:ef:41:52:
63:b9:60:f6
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUSFV9l8K5qqIG6rHxNrIqiYxWM+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRENTNCRDY5RDNBMzQ3N0Y1MzcyRUYzNjg5RDNBQzZC
Q0M1RDExQjAeFw0yNTEwMjYwNDI5MThaFw0yNTEwMzAwNTAzMThaMDMxMTAvBgNV
BAMTKEE2QTI1MjVGMjdEMTcyMDA4RUI1NDM5RUMzMzExOUU0QkVDMjQ4MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/GAFfzBkkYcXt4fYWdPiOtxe
waA8ImWcuHorZMcCsGdEHNUfAex165RWGxtL6mxIUdKDVe+NmHY19FKiJUg9lBvP
3r0oxaBpgO4lHuGkZMhW+BPkjMmwPIh7fTn5VpTX855ZJ+lJLWUrBO+ECVIfqKuK
zwAUA4wrbC7imCqgvc4/GQfo0kD/K7+b0n/0s+r2cNUiC8R3E9uwyw1cvY06VPsD
HsDiIb1Piu+d8uWYxbYf2y3bIDMG7zZuTnAoGOJksuFIW4IeqWaAiKojqe3joJpZ
NzXmlnbkZB2NcD8tozyHTxQzrhU4j9rGWZ+l4kVWt6nQFI9Xm2XoOa0TWgczAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUpqJSXyfRcgCOtUOewzEZ5L7CSAcwHwYDVR0j
BBgwFoAULdU71p06NHf1Ny7zaJ06xrzF0RswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REE4QzgwODA1QkNBNENGNjNEREE0RkJBRTczRTYxODUx
RDcyNEI2RTc2MTkxOTY4MUEzMkZGODIxMjIzM0JFLzAvMkRENTNCRDY5RDNBMzQ3
N0Y1MzcyRUYzNjg5RDNBQzZCQ0M1RDExQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREQ1M0JENjlEM0EzNDc3RjUz
NzJFRjM2ODlEM0FDNkJDQzVEMTFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOURBOEM4MDgwNUJDQTRDRjYzRERBNEZCQUU3M0U2MTg1MUQ3MjRCNkU3
NjE5MTk2ODFBMzJGRjgyMTIyMzNCRS8wLzJERDUzQkQ2OUQzQTM0NzdGNTM3MkVG
MzY4OUQzQUM2QkNDNUQxMUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATI32jRN+PHU8sFBrf4RL90QDb
dxSnkBrS4qG7cZtvwSD9LHG0oE+5w79YakTc1shef/FXtSKNK3rYjsxoh0RKyLbW
eCq1w1cjGrukhVhIrsACB/xApjJHABcFxAM+FlNO/ZCmToae5ZUKgY9e9JYfE6hu
JbryJ8QKGpjeBvzQySWXHPGt1wJDULyke5A7jpBMk7GZzO2fJorQHAJ7jCj9GfFi
liiFjQLYH6Xe3pYmwerem7wzf8HdXBwWL0M8mza+6rq2zAKaeKq5O5VpEXRQGJVZ
AVB1kr2yC8jT7VG4U9C9tvx/IN8KbyUccQF9Lqrf50DWtM9sci7vQVJjuWD2
-----END CERTIFICATE-----
Generated at Sun Oct 26 11:34:25 2025 by rpki-client