
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft
File: 2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft (raw, json)
Hash identifier: o3OoKfMfTeucG9HFaHS2E/SL5WTNSLCkUHHzDgZvtGM=
Subject key identifier: 9B:9F:C8:CE:C9:81:E0:32:F6:5B:9D:E7:BA:91:C2:54:1A:9E:17:84
Authority key identifier: 2F:8C:36:80:D6:F8:8B:72:EC:06:F1:32:6C:AA:0A:34:8A:E4:FA:A9
Certificate issuer: /CN=2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9
Certificate serial: 111DC80A90A276026EDB83A6F00D2CD24E4D5398
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft
Manifest number: 0135
Signing time: Fri 07 Nov 2025 00:02:17 +0000
Manifest this update: Thu 06 Nov 2025 23:57:17 +0000
Manifest next update: Wed 12 Nov 2025 15:48:17 +0000
Files and hashes: 1: 34352e36352e3234342e302f32322d3234203d3e20323635373231.roa (hash: SK577UfZ4BSuNBPgeLAhn/0duy0WJ+vSxJa9/kdW4qg=)
2: 2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl (hash: /1oKn3EmYIIkKvCVnoaJnXas0E5spaWYg1B1+pFAeg0=)
3: 323830333a346463303a3a2f33322d3438203d3e20323635373231.roa (hash: 9eINwRSHdoIllB2qpGnBwWIaRHXOv28j3zAloDR8YXY=)
4: 3230302e35382e3234302e302f32312d3234203d3e20323635373231.roa (hash: 7HolFbVvC5bEDrcK4sqhAfqq4tuDbBqg/QFGwBgl2ro=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl
rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 12 Nov 2025 15:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1d:c8:0a:90:a2:76:02:6e:db:83:a6:f0:0d:2c:d2:4e:4d:53:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9
Validity
Not Before: Nov 6 23:57:17 2025 GMT
Not After : Nov 12 15:48:17 2025 GMT
Subject: CN=9B9FC8CEC981E032F65B9DE7BA91C2541A9E1784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:cc:84:ae:82:cd:12:7e:26:57:1d:a4:9c:
1c:a6:77:5a:77:03:67:37:89:38:23:03:00:07:36:
7e:f0:79:6b:c1:2c:e7:19:77:22:ac:27:6a:58:6d:
20:53:99:6f:3e:36:4f:e0:55:26:df:41:66:c3:e7:
65:7d:c1:ad:06:4d:35:0a:74:0c:f8:2b:ed:56:eb:
43:48:1b:b9:da:c7:2f:4d:77:5c:01:70:db:19:4c:
ee:2b:7e:f8:51:7f:c4:14:1d:31:a4:bf:fc:a1:f6:
fd:0f:95:65:5a:e4:50:f6:fe:13:c2:90:9a:26:fe:
ae:60:b4:88:55:65:e9:8f:66:b2:2a:7e:5b:a4:8c:
99:9a:f4:07:88:c6:81:ef:27:d1:db:5d:e7:35:d8:
d8:3b:c5:92:2b:f0:e2:c7:f0:c4:9b:dd:ef:78:c1:
37:c2:32:8c:b1:34:a5:c7:27:eb:a1:ed:8d:40:39:
4a:f0:26:a0:25:e0:c5:c0:9c:75:43:24:6a:4d:1f:
16:a4:0d:57:43:dd:06:b6:30:cc:2c:6d:9f:1a:c9:
0c:9b:7a:5a:cf:d6:98:98:60:8a:cd:80:25:aa:d0:
8d:f5:f1:ab:48:33:f6:96:d7:26:03:c2:8d:ee:30:
ba:80:26:85:b6:b4:3e:4c:69:b9:7c:eb:61:2c:9e:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:C8:CE:C9:81:E0:32:F6:5B:9D:E7:BA:91:C2:54:1A:9E:17:84
X509v3 Authority Key Identifier:
keyid:2F:8C:36:80:D6:F8:8B:72:EC:06:F1:32:6C:AA:0A:34:8A:E4:FA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:37:a0:e6:cb:e0:3a:22:8d:64:76:c5:fd:26:ec:c4:60:7e:
46:ab:72:53:70:27:51:95:cb:9a:e8:9e:6b:33:1d:69:aa:f2:
9b:c7:a0:37:70:c7:92:2a:9a:cb:92:20:ad:75:37:37:d8:eb:
69:99:af:57:57:b5:e2:8e:65:ec:b4:22:e0:20:9b:e1:d7:4e:
96:23:d7:b8:8f:35:08:4c:74:36:0f:6c:76:21:ad:95:fe:46:
0a:87:70:4a:8c:ab:e5:50:56:73:22:1b:55:be:f5:1b:19:35:
1b:b3:c9:0b:8c:c8:a2:44:9f:7f:cd:c9:64:ae:74:c2:34:8f:
51:c7:7d:37:0c:46:27:65:e8:d8:6d:cb:29:1e:c9:03:a4:1b:
e9:b4:1b:ef:e9:ed:93:0a:b0:06:f8:d0:9d:07:0d:48:93:1d:
00:72:1f:fd:06:fb:08:0e:87:84:be:e3:5c:a0:7b:95:d9:4d:
df:d1:ae:79:04:78:6d:bc:10:a1:ef:51:34:65:e3:eb:88:31:
34:a1:70:05:37:8a:4d:84:74:65:3c:31:80:44:66:f9:c0:02:
fa:eb:b3:b4:8e:75:8c:b0:10:84:68:c7:28:ad:82:29:5c:ca:
78:a6:92:39:23:9a:ff:de:b2:12:80:af:4d:35:eb:59:57:4d:
c0:9f:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 22:40:44 2025 by rpki-client