
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
File: 9E7F2EB76A05A952625CB92EA40D238CA348F718.mft (raw, json)
Hash identifier: 3Du5nh4lrwyEQI6KPEs9Fp0CYFLK8VAWEV5bxeGlvh0=
Subject key identifier: D9:41:E1:11:FD:5C:F5:96:C7:F0:24:39:93:E4:8C:9D:BE:51:E7:EA
Authority key identifier: 9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18
Certificate issuer: /CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
Certificate serial: 629C6ABBE5DB52812C29B9BE57F7B2433BE9B3E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
Manifest number: 0135
Signing time: Thu 06 Nov 2025 15:27:35 +0000
Manifest this update: Thu 06 Nov 2025 15:22:35 +0000
Manifest next update: Wed 12 Nov 2025 03:50:35 +0000
Files and hashes: 1: 3137302e38302e32372e302f32342d3234203d3e203237393831.roa (hash: aYAvg8k10aW9dP7Fj9v8BXd2e7qGtU+OWOAIdESdQlk=)
2: 3137302e38302e32342e302f32342d3234203d3e203237393831.roa (hash: pIW4RaxERzyb3mabYdUmJuJtuX3eWvenOxc7LKOw9jE=)
3: 9E7F2EB76A05A952625CB92EA40D238CA348F718.crl (hash: 12Y8q2r85T9rmVgP62hVIMEwPcgRsTuWzVEypkd3oPw=)
4: 3230302e302e3138322e302f32342d3234203d3e203237393831.roa (hash: 78A+AkIfAJ2wuL+p89b/B9Vc3VixGXY7h/SgvV0D0vA=)
5: 3230302e302e3138332e302f32342d3234203d3e203237393831.roa (hash: 5TcjF8GjohyAMP6NS+e32QqzvVCjaQtm7FhmtLS3268=)
6: 3137302e38302e32352e302f32342d3234203d3e203237393831.roa (hash: sllmiP/024PgdI1npYTfAq9H/30TOMS2DwC7oOGtQ+U=)
7: 3137302e38302e32362e302f32342d3234203d3e203237393831.roa (hash: 4tmxWgje/NssD+wMjdRqU4gBrg30gFk5YFsKou8Il4o=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl
rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 11 Nov 2025 05:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:9c:6a:bb:e5:db:52:81:2c:29:b9:be:57:f7:b2:43:3b:e9:b3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
Validity
Not Before: Nov 6 15:22:35 2025 GMT
Not After : Nov 12 03:50:35 2025 GMT
Subject: CN=D941E111FD5CF596C7F0243993E48C9DBE51E7EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:a6:8e:1d:0d:c7:e9:0b:47:c8:9f:42:ae:
26:67:d9:53:b2:3b:2d:62:4f:79:17:54:1a:d1:de:
d7:be:0e:78:97:f6:b1:0e:76:c6:55:26:b7:7b:f6:
8b:6b:55:78:e4:d3:05:da:7e:b6:68:65:71:96:6e:
02:9c:33:48:64:79:a7:3c:c3:6d:fd:b0:b2:a9:e2:
a5:f5:63:77:d0:f2:86:4d:0f:46:9b:fa:bd:c9:23:
5b:df:2e:af:7f:0a:2d:19:93:e7:9a:b6:b2:58:d1:
25:bd:8c:b4:bc:7a:f2:df:11:3a:ad:74:39:ff:36:
55:fb:e1:36:25:ed:e1:15:df:2e:0b:03:4e:36:83:
e0:fb:d0:73:c8:2b:09:da:a4:73:c6:4f:f6:75:10:
0f:97:af:a5:6b:b0:73:97:a1:ba:99:e0:f3:ef:7a:
d5:f4:2a:84:69:25:0a:8b:63:88:0a:d1:60:6c:32:
6f:64:d0:27:0c:d4:be:75:3f:23:84:89:ca:f7:f2:
63:60:05:31:da:32:f8:f1:12:07:d6:e8:c0:fd:2d:
26:ff:08:48:fe:cc:a0:f4:0d:c8:71:26:67:61:3c:
a2:85:c0:4d:6e:2e:f0:73:c7:dc:64:13:06:53:b5:
68:a0:d7:a3:a6:79:92:48:54:1d:cc:13:b6:5f:f5:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:41:E1:11:FD:5C:F5:96:C7:F0:24:39:93:E4:8C:9D:BE:51:E7:EA
X509v3 Authority Key Identifier:
keyid:9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d9:ff:2b:a8:9c:02:94:cb:55:11:07:f4:d3:81:31:1d:24:
cd:0c:8c:b1:61:3e:0f:d6:30:55:f0:2e:df:dc:b6:88:4b:e6:
e2:71:72:bb:0f:08:15:69:c4:ee:c6:86:d9:81:02:f2:4c:b7:
af:38:8f:ca:24:e8:d5:09:29:2c:57:75:d1:4e:96:d2:5a:56:
ed:29:36:71:06:27:56:55:c8:9e:c8:91:b6:a7:74:d5:88:c9:
99:9f:4a:56:9f:79:c5:d8:fc:eb:96:39:c2:ad:e3:bc:cc:d6:
29:b9:92:64:60:2c:ca:30:94:d6:6d:17:17:e8:ea:01:32:1c:
f6:49:8d:5e:f0:3e:a1:6d:d4:c1:72:0f:60:5c:d8:bd:f4:68:
3b:ee:c1:02:d6:ff:14:5b:28:a3:83:e7:f2:d7:df:1f:33:2d:
5f:a8:56:f8:c4:a5:93:1b:f8:da:52:b9:76:13:1d:b0:b0:1a:
08:78:79:db:34:23:c3:f8:7a:e5:f4:a7:1c:55:2a:74:2b:cf:
f8:f9:8b:1c:e7:59:d8:ca:e9:53:8f:58:00:8c:e1:25:50:86:
e2:b8:a4:db:f5:f1:47:f4:88:1c:26:57:5b:bc:8b:cd:63:4e:
40:0f:3f:c7:7d:75:02:ee:c4:40:76:32:23:4a:97:7b:75:6c:
7d:d0:b4:fd
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUYpxqu+XbUoEsKbm+V/eyQzvps+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU3RjJFQjc2QTA1QTk1MjYyNUNCOTJFQTQwRDIzOENB
MzQ4RjcxODAeFw0yNTExMDYxNTIyMzVaFw0yNTExMTIwMzUwMzVaMDMxMTAvBgNV
BAMTKEQ5NDFFMTExRkQ1Q0Y1OTZDN0YwMjQzOTkzRTQ4QzlEQkU1MUU3RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN1qaOHQ3H6QtHyJ9CriZn2VOy
Oy1iT3kXVBrR3te+DniX9rEOdsZVJrd79otrVXjk0wXafrZoZXGWbgKcM0hkeac8
w239sLKp4qX1Y3fQ8oZND0ab+r3JI1vfLq9/Ci0Zk+eatrJY0SW9jLS8evLfETqt
dDn/NlX74TYl7eEV3y4LA042g+D70HPIKwnapHPGT/Z1EA+Xr6VrsHOXobqZ4PPv
etX0KoRpJQqLY4gK0WBsMm9k0CcM1L51PyOEicr38mNgBTHaMvjxEgfW6MD9LSb/
CEj+zKD0DchxJmdhPKKFwE1uLvBzx9xkEwZTtWig16OmeZJIVB3ME7Zf9bCBAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU2UHhEf1c9ZbH8CQ5k+SMnb5R5+owHwYDVR0j
BBgwFoAUnn8ut2oFqVJiXLkupA0jjKNI9xgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjdCOEI0QjRFNkU4QzQzNzIyRTk1OEYwMzcwNDZCODlF
OUUyN0YwREYyQUEwOEVCM0RGRDlEQ0NFQ0YxMjQ3LzAvOUU3RjJFQjc2QTA1QTk1
MjYyNUNCOTJFQTQwRDIzOENBMzQ4RjcxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTdGMkVCNzZBMDVBOTUyNjI1
Q0I5MkVBNDBEMjM4Q0EzNDhGNzE4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREI3QjhCNEI0RTZFOEM0MzcyMkU5NThGMDM3MDQ2Qjg5RTlFMjdGMERG
MkFBMDhFQjNERkQ5RENDRUNGMTI0Ny8wLzlFN0YyRUI3NkEwNUE5NTI2MjVDQjky
RUE0MEQyMzhDQTM0OEY3MTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAz2f8rqJwClMtVEQf004ExHSTN
DIyxYT4P1jBV8C7f3LaIS+bicXK7DwgVacTuxobZgQLyTLevOI/KJOjVCSksV3XR
TpbSWlbtKTZxBidWVcieyJG2p3TViMmZn0pWn3nF2PzrljnCreO8zNYpuZJkYCzK
MJTWbRcX6OoBMhz2SY1e8D6hbdTBcg9gXNi99Gg77sEC1v8UWyijg+fy198fMy1f
qFb4xKWTG/jaUrl2Ex2wsBoIeHnbNCPD+Hrl9KccVSp0K8/4+Ysc51nYyulTj1gA
jOElUIbiuKTb9fFH9IgcJldbvIvNY05ADz/HfXUC7sRAdjIjSpd7dWx90LT9
-----END CERTIFICATE-----
Generated at Thu Nov 6 20:47:23 2025 by rpki-client