
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4A12F708F6E69CB004597CDB85183A10FDC397C029B0A39BFFA64D9838B83FB/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.mft
File:                     98CE1CC64A7A92ECAEB302776732E8D0EACA257B.mft (raw, json)
Hash identifier:          kjDH9QquUypUw4Qp/JIk80Q2NLpz3ggIVzzCv9etJ6w=
Subject key identifier:   1E:20:6C:4E:7D:E7:5D:2F:0A:BA:95:88:20:C3:4B:FB:78:2B:79:0D
Authority key identifier: 98:CE:1C:C6:4A:7A:92:EC:AE:B3:02:77:67:32:E8:D0:EA:CA:25:7B
Certificate issuer:       /CN=98CE1CC64A7A92ECAEB302776732E8D0EACA257B
Certificate serial:       3037153279C19776E5BF27E407B0F791A153684D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4A12F708F6E69CB004597CDB85183A10FDC397C029B0A39BFFA64D9838B83FB/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.mft
Manifest number:          012D
Signing time:             Thu 30 Oct 2025 08:24:48 +0000
Manifest this update:     Thu 30 Oct 2025 08:19:48 +0000
Manifest next update:     Mon 03 Nov 2025 15:31:48 +0000
Files and hashes:         1: 98CE1CC64A7A92ECAEB302776732E8D0EACA257B.crl (hash: Zm5CL3e2oGFx8hQZBOXzrjh4O0YTKnpKKSBTqAaH5CA=)
                          2: 34352e3136362e3234302e302f32322d3232203d3e20323633373631.roa (hash: G4Odj/eR7Y3PNuJJRULg5Am/xKFHZTgX4Oxu3kxdqiM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C4A12F708F6E69CB004597CDB85183A10FDC397C029B0A39BFFA64D9838B83FB/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C4A12F708F6E69CB004597CDB85183A10FDC397C029B0A39BFFA64D9838B83FB/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 15:31:48 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:37:15:32:79:c1:97:76:e5:bf:27:e4:07:b0:f7:91:a1:53:68:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98CE1CC64A7A92ECAEB302776732E8D0EACA257B
        Validity
            Not Before: Oct 30 08:19:48 2025 GMT
            Not After : Nov  3 15:31:48 2025 GMT
        Subject: CN=1E206C4E7DE75D2F0ABA958820C34BFB782B790D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:57:af:d5:b3:67:86:3e:0c:ba:99:ce:a3:
                    b6:a4:11:50:fc:6d:94:67:ce:ca:df:11:5e:91:43:
                    bd:fe:83:89:16:3f:4e:c4:c6:0c:a7:45:5e:7f:39:
                    a2:76:6e:39:38:0a:73:0a:3c:28:be:65:14:cc:ae:
                    30:a2:19:04:c2:89:53:c3:ee:ff:64:c5:d0:bf:36:
                    1a:d0:f2:ea:37:a9:ed:6e:6e:01:28:91:78:1f:fc:
                    1a:d7:43:a3:7f:82:79:15:5a:ce:bb:22:24:08:25:
                    c2:f7:24:bb:9b:2c:4a:ee:67:59:48:71:9a:21:7c:
                    18:47:87:fc:36:6b:9c:9b:34:f8:b1:f3:57:54:89:
                    61:38:58:2b:b3:60:bf:49:ae:6d:f9:4a:4e:70:bb:
                    d9:7c:2e:e1:d1:bd:a0:9f:73:fe:71:64:fe:db:7b:
                    11:28:e7:88:31:fe:11:3e:af:33:15:3d:b0:e0:8f:
                    08:13:bc:a0:8c:47:c9:3b:04:5d:0e:b1:52:05:c4:
                    3c:9d:ea:74:c9:65:a0:17:bc:37:76:14:ca:12:fc:
                    c6:b7:dd:ab:96:01:24:ee:c5:f1:61:5d:23:a2:7e:
                    0d:b0:e9:65:2f:0a:73:08:c2:d1:35:bf:2b:7f:10:
                    39:7c:19:38:7d:ac:9f:56:3d:5e:e4:75:25:f1:14:
                    f4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:20:6C:4E:7D:E7:5D:2F:0A:BA:95:88:20:C3:4B:FB:78:2B:79:0D
            X509v3 Authority Key Identifier:
                keyid:98:CE:1C:C6:4A:7A:92:EC:AE:B3:02:77:67:32:E8:D0:EA:CA:25:7B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4A12F708F6E69CB004597CDB85183A10FDC397C029B0A39BFFA64D9838B83FB/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.cer
            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4A12F708F6E69CB004597CDB85183A10FDC397C029B0A39BFFA64D9838B83FB/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         00:5f:dd:2c:67:59:1e:08:b5:32:db:24:49:1e:bb:a1:b0:80:
         72:4b:1e:3e:77:58:e4:a7:40:d1:7d:76:2f:61:5c:ca:73:44:
         0e:61:fa:62:c0:9d:85:3e:e2:c7:8a:45:29:52:22:af:a1:47:
         ab:87:03:9f:c5:59:33:09:f4:0b:86:db:c3:60:75:99:72:88:
         d6:cb:b4:2a:df:58:64:c5:05:c0:c6:63:d7:05:9e:92:b3:d1:
         d3:aa:de:67:3f:98:5c:df:f1:70:c4:e1:0f:91:8c:18:4c:30:
         8d:4e:87:3a:3d:57:8f:e8:53:18:db:d6:7c:67:19:fb:95:7f:
         2d:ce:55:28:a0:76:a8:ba:1d:b8:85:fe:2e:51:60:b1:8b:08:
         99:8e:37:91:34:6f:9b:1d:fa:94:00:c2:83:9b:57:48:02:cc:
         c9:f4:38:09:99:08:98:13:1f:f1:c1:66:0e:cc:2b:e7:2d:51:
         c9:c9:39:3e:5f:3a:b8:ef:b4:1f:b0:5e:aa:4f:18:c0:e1:19:
         b4:8b:1f:24:58:04:e5:15:f9:ab:3f:8e:a4:b6:24:be:76:6e:
         48:ff:f3:37:25:a8:85:d0:3b:1a:92:a7:83:6a:de:a8:2f:e9:
         91:4c:78:f2:8b:cf:89:9a:fb:e4:05:f4:31:b4:ba:6f:fe:c2:
         48:19:f4:9f
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUMDcVMnnBl3blvyfkB7D3kaFTaE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThDRTFDQzY0QTdBOTJFQ0FFQjMwMjc3NjczMkU4RDBF
QUNBMjU3QjAeFw0yNTEwMzAwODE5NDhaFw0yNTExMDMxNTMxNDhaMDMxMTAvBgNV
BAMTKDFFMjA2QzRFN0RFNzVEMkYwQUJBOTU4ODIwQzM0QkZCNzgyQjc5MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XFev1bNnhj4MupnOo7akEVD8
bZRnzsrfEV6RQ73+g4kWP07ExgynRV5/OaJ2bjk4CnMKPCi+ZRTMrjCiGQTCiVPD
7v9kxdC/NhrQ8uo3qe1ubgEokXgf/BrXQ6N/gnkVWs67IiQIJcL3JLubLEruZ1lI
cZohfBhHh/w2a5ybNPix81dUiWE4WCuzYL9Jrm35Sk5wu9l8LuHRvaCfc/5xZP7b
exEo54gx/hE+rzMVPbDgjwgTvKCMR8k7BF0OsVIFxDyd6nTJZaAXvDd2FMoS/Ma3
3auWASTuxfFhXSOifg2w6WUvCnMIwtE1vyt/EDl8GTh9rJ9WPV7kdSXxFPQfAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUHiBsTn3nXS8KupWIIMNL+3greQ0wHwYDVR0j
BBgwFoAUmM4cxkp6kuyuswJ3ZzLo0OrKJXswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNEExMkY3MDhGNkU2OUNCMDA0NTk3Q0RCODUxODNBMTBG
REMzOTdDMDI5QjBBMzlCRkZBNjREOTgzOEI4M0ZCLzAvOThDRTFDQzY0QTdBOTJF
Q0FFQjMwMjc3NjczMkU4RDBFQUNBMjU3Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OENFMUNDNjRBN0E5MkVDQUVC
MzAyNzc2NzMyRThEMEVBQ0EyNTdCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzRBMTJGNzA4RjZFNjlDQjAwNDU5N0NEQjg1MTgzQTEwRkRDMzk3QzAy
OUIwQTM5QkZGQTY0RDk4MzhCODNGQi8wLzk4Q0UxQ0M2NEE3QTkyRUNBRUIzMDI3
NzY3MzJFOEQwRUFDQTI1N0IubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAX90sZ1keCLUy2yRJHruhsIBy
Sx4+d1jkp0DRfXYvYVzKc0QOYfpiwJ2FPuLHikUpUiKvoUerhwOfxVkzCfQLhtvD
YHWZcojWy7Qq31hkxQXAxmPXBZ6Ss9HTqt5nP5hc3/FwxOEPkYwYTDCNToc6PVeP
6FMY29Z8Zxn7lX8tzlUooHaouh24hf4uUWCxiwiZjjeRNG+bHfqUAMKDm1dIAszJ
9DgJmQiYEx/xwWYOzCvnLVHJyTk+Xzq477QfsF6qTxjA4Rm0ix8kWATlFfmrP46k
tiS+dm5I//M3JaiF0DsakqeDat6oL+mRTHjyi8+JmvvkBfQxtLpv/sJIGfSf
-----END CERTIFICATE-----
Generated at Fri Oct 31 09:31:09 2025 by rpki-client