
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.mft
File: 385D5BC5BD96AA08FBF41C4887360B24A8BF9036.mft (raw, json)
Hash identifier: +u9XuN7B/g449qzyUAdTQpuKUqoiXDGI+tXteK1SF9A=
Subject key identifier: A6:A0:9F:FF:03:7B:A8:35:FB:A2:BA:B5:C0:1E:20:AD:E9:9A:0F:0D
Authority key identifier: 38:5D:5B:C5:BD:96:AA:08:FB:F4:1C:48:87:36:0B:24:A8:BF:90:36
Certificate issuer: /CN=385D5BC5BD96AA08FBF41C4887360B24A8BF9036
Certificate serial: 214CD52078BC70DFA42CBE40028B04FFDB613047
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.mft
Manifest number: 012C
Signing time: Sat 25 Oct 2025 13:44:13 +0000
Manifest this update: Sat 25 Oct 2025 13:39:13 +0000
Manifest next update: Fri 31 Oct 2025 13:04:13 +0000
Files and hashes: 1: 323830333a353638303a3a2f33322d3438203d3e20323633323233.roa (hash: bqXX9qqiFa7eiNZrU0wnOkuhfu1Me4bPolyAavmC5bc=)
2: 385D5BC5BD96AA08FBF41C4887360B24A8BF9036.crl (hash: crsT7OntT/AYq44HO1Q084yiHU6HLvwF9aBtt8S6+BU=)
3: 3139302e3132322e3231362e302f32312d3234203d3e20323633323233.roa (hash: mUUbPeVarxyCzf1q/RssuC3G7XkYoNg+jmRlWLpGGZU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.crl
rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:4c:d5:20:78:bc:70:df:a4:2c:be:40:02:8b:04:ff:db:61:30:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385D5BC5BD96AA08FBF41C4887360B24A8BF9036
Validity
Not Before: Oct 25 13:39:13 2025 GMT
Not After : Oct 31 13:04:13 2025 GMT
Subject: CN=A6A09FFF037BA835FBA2BAB5C01E20ADE99A0F0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:39:8d:c6:b5:36:16:89:0e:42:2d:b6:87:
e0:cf:9f:2d:11:79:9b:bd:cb:7b:08:5d:e9:f7:fd:
3f:af:75:b1:4f:1d:4a:32:f1:97:d9:c4:70:5a:3b:
c7:b6:c4:d6:32:54:c3:bf:c6:fa:35:bd:b3:42:dc:
37:9b:45:4e:37:50:73:fc:04:d4:02:ef:f2:75:52:
b9:6e:14:9f:37:b3:88:23:c6:0b:3b:cb:88:a9:5c:
71:c4:e7:3f:2c:e9:d1:5d:d6:2e:fa:5c:d6:8a:f3:
19:b6:59:bd:19:7b:26:01:07:e3:a6:ed:9f:d0:a1:
75:5e:d2:04:97:73:83:96:2b:98:68:ae:3d:a6:a0:
a4:25:f0:8b:08:59:b6:dc:f7:4a:26:7e:4e:a9:0a:
77:78:5b:07:62:fb:79:03:5d:c9:74:87:7c:5e:21:
4d:c4:ff:73:27:ac:9f:99:b4:89:8a:08:79:ad:3e:
39:b2:45:1a:51:02:19:06:39:c5:d6:f1:c5:a1:68:
e6:35:5b:c8:90:c6:21:e6:bd:2d:10:e9:c9:80:cd:
e9:62:d1:ed:16:64:ee:77:9e:5c:02:37:3e:c6:39:
e3:16:c4:82:21:b1:b3:06:e8:90:7a:a5:ba:1f:58:
58:4b:dc:a9:e0:ca:41:9d:db:ae:3c:1a:17:f9:c0:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:9F:FF:03:7B:A8:35:FB:A2:BA:B5:C0:1E:20:AD:E9:9A:0F:0D
X509v3 Authority Key Identifier:
keyid:38:5D:5B:C5:BD:96:AA:08:FB:F4:1C:48:87:36:0B:24:A8:BF:90:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e0:7c:f7:d2:a9:81:20:cf:5e:c7:ba:f4:74:b6:59:b2:09:
ae:ab:84:2b:57:54:5a:c1:36:95:57:eb:73:83:ed:10:ba:b0:
9c:d7:87:84:cb:cc:aa:0d:63:03:86:2b:32:e3:64:ac:5c:b8:
e7:8a:b2:21:fc:65:99:27:17:ae:f3:c4:17:20:3d:a3:f0:0f:
c7:96:a9:7d:75:7b:f7:af:46:e1:e1:54:fd:d3:45:5a:5c:b3:
75:6d:24:62:eb:f3:46:cb:8c:d2:a5:54:6a:50:78:d9:e6:2a:
80:bd:51:7f:90:7b:16:7f:e2:03:91:b2:0e:bb:92:a5:22:be:
c0:bd:a8:df:30:39:de:b2:ee:cf:dc:a8:1a:90:ac:69:c5:04:
66:d5:8d:67:7f:28:40:cd:4e:dc:ee:7c:82:3b:3d:d9:bb:9c:
a9:ac:45:32:be:df:a9:2c:17:a7:fe:64:21:f7:e2:06:d9:8f:
e6:47:78:dc:50:9d:0e:0e:e5:3a:d0:2f:24:ca:b1:80:40:a0:
01:77:37:03:97:9e:a8:83:2f:5f:1a:21:ec:d5:0c:d2:cc:da:
00:93:74:a3:d1:5a:15:b7:1d:bf:d6:86:44:04:5e:26:3e:b2:
07:78:fa:10:de:42:d6:bf:ba:01:cf:e1:00:e7:3f:1d:50:69:
bc:43:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:35:11 2025 by rpki-client