
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
File: CD0CE589373B27C7377B95716717C42DB8B1FF08.mft (raw, json)
Hash identifier: o0Nxlfll8kM0Toxf+jjwPbqzZ5i2sUAtLTgijdTOoyk=
Subject key identifier: 7A:CE:49:AB:9E:32:8F:CA:7F:1D:04:90:F8:3E:83:63:63:07:BB:95
Authority key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
Certificate issuer: /CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Certificate serial: 191A34F03420320E0A45FC68A3BAFD069F5A7B2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
Manifest number: 0136
Signing time: Sat 08 Nov 2025 11:37:34 +0000
Manifest this update: Sat 08 Nov 2025 11:32:34 +0000
Manifest next update: Wed 12 Nov 2025 17:35:34 +0000
Files and hashes: 1: 34352e3136372e31322e302f32322d3234203d3e203133393539.roa (hash: QSR5ZPL9FuneXJ7EHqO6U7y3Wi/iju9YvODDsaoP79o=)
2: 34352e3136372e31322e302f32322d3234203d3e20323635353334.roa (hash: CoSYKas4sI8Qf+u+dneG3qLNre6vdVMb/a87M2bDQ+k=)
3: 323830363a3331313a3a2f33322d3332203d3e203133393539.roa (hash: V1jTdiIClL8ktJS9JduEpU56fttDHqulLMyqE4LKRsw=)
4: CD0CE589373B27C7377B95716717C42DB8B1FF08.crl (hash: MMDOgEQaq8eocXtwQxZhdXeWHz8/TEVbVTbtwp7Z6k8=)
5: 323830363a3331313a3a2f33322d3332203d3e20323635353334.roa (hash: TZOgNVMXbo3PDCnkRLxR0R9HhJ+AbqusAcdj3vgq7X8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 12 Nov 2025 17:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1a:34:f0:34:20:32:0e:0a:45:fc:68:a3:ba:fd:06:9f:5a:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Validity
Not Before: Nov 8 11:32:34 2025 GMT
Not After : Nov 12 17:35:34 2025 GMT
Subject: CN=7ACE49AB9E328FCA7F1D0490F83E83636307BB95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:b6:08:92:83:d5:1d:8d:28:ea:8a:79:30:
91:e8:30:42:07:d5:c6:51:a0:c4:c9:8a:b8:2a:76:
b5:13:6e:8e:c4:d1:ed:3d:ea:3b:4b:38:61:80:94:
42:e0:95:e2:ec:a5:4b:56:5d:da:5a:8e:71:fa:a6:
65:1a:d3:fd:fd:60:ae:5a:9f:96:19:58:49:99:29:
86:95:39:1d:d2:da:b9:e3:23:9f:2a:94:57:1e:91:
e6:aa:93:e0:40:05:a3:39:20:c1:d6:95:8b:11:5b:
77:eb:d9:e4:31:1f:22:0e:d6:af:07:e5:08:5f:09:
4d:60:ae:7d:b4:1d:49:f8:b7:6b:84:70:28:c2:c4:
9d:ba:75:f4:80:06:0a:de:83:9d:e7:8d:c7:08:c2:
18:fb:48:31:bd:42:df:7a:a7:ff:9a:34:b2:d0:2c:
14:75:b1:50:8a:d6:89:90:aa:e3:cb:3f:db:0d:c1:
b2:9d:d1:5b:5f:e0:bd:4f:5d:66:f4:67:3a:cb:74:
a9:a5:c1:70:96:29:1e:7d:f6:6d:78:b0:9b:0b:45:
09:50:16:ec:42:4a:06:79:86:0a:2c:38:f3:90:11:
6c:5b:ad:47:67:a3:24:e9:26:1e:e2:39:53:cc:ba:
d6:6f:e1:d4:98:dc:d4:24:1e:ef:b7:f5:cd:bc:b5:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CE:49:AB:9E:32:8F:CA:7F:1D:04:90:F8:3E:83:63:63:07:BB:95
X509v3 Authority Key Identifier:
keyid:CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:39:23:85:b5:84:ac:27:aa:99:85:ab:1b:91:7d:dc:3d:63:
39:60:13:0e:d7:98:52:95:ec:97:42:1d:97:d9:96:1b:ca:c2:
0f:b2:3e:94:1c:ae:54:68:b5:68:d2:44:ae:ab:43:83:ae:d2:
e8:c3:ba:68:31:6a:19:9b:a0:e0:c0:98:8f:ef:97:e8:82:06:
89:f2:cd:fb:43:c2:64:19:2f:00:d1:f9:5e:53:00:8c:d1:0d:
e7:6a:fc:5b:da:b6:a6:35:40:69:45:a8:28:25:e5:0a:d5:65:
b6:08:e1:5f:6e:35:85:1c:0e:b8:ae:51:26:32:2a:a9:2f:a5:
09:6d:98:26:cc:5d:23:0c:58:c3:18:72:b9:ea:7a:04:ba:be:
a3:4d:0f:5c:3f:10:8b:ab:62:c8:59:54:17:a0:3e:f4:d8:b5:
52:9b:2d:1f:74:37:68:47:fa:a1:8e:f4:6f:c3:f1:aa:ea:81:
51:63:42:ce:53:33:c8:e4:47:3f:b2:89:cd:37:37:a0:f6:77:
76:0b:d4:f9:c8:dd:8a:97:51:91:c6:6e:2a:bc:3b:54:87:c2:
4a:b2:97:6f:ed:19:cd:56:70:c8:42:dc:3f:35:54:a9:44:b8:
dd:05:01:cf:7f:7b:ef:f4:da:cf:85:21:4e:71:f3:b3:75:7a:
f7:c0:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 00:48:52 2025 by rpki-client