
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft
File: 3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft (raw, json)
Hash identifier: LkVf5ZpUTs5I9CFIRF3CNNnGz/1JocJ4bu/QMY4OVhU=
Subject key identifier: B6:66:15:24:05:59:8F:16:B7:A9:1C:9B:F9:5F:CF:FA:8A:AC:C1:45
Authority key identifier: 38:45:89:4F:A6:8B:5B:FF:C7:57:05:74:C0:15:E8:DB:A3:97:7E:B3
Certificate issuer: /CN=3845894FA68B5BFFC7570574C015E8DBA3977EB3
Certificate serial: 752A73AC21CAC14E7C72CEB1D13E64F920B0D881
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft
Manifest number: 2E
Signing time: Fri 24 Oct 2025 15:50:12 +0000
Manifest this update: Fri 24 Oct 2025 15:45:12 +0000
Manifest next update: Wed 29 Oct 2025 23:35:12 +0000
Files and hashes: 1: 323830333a383564303a3a2f33322d3332203d3e20323734313636.roa (hash: XuVm7aqw6XDQRV3O9JTv277yLCTvjgZ9A8P8OclEvEw=)
2: 3845894FA68B5BFFC7570574C015E8DBA3977EB3.crl (hash: 8giaERz1bvpe440GnpDTfxDyxdS46ESYCYG0+PLasoI=)
3: 323830333a383564303a383030303a3a2f33332d3333203d3e20323734313636.roa (hash: AGq16ochLwYcwnQ5z4PXvB8M3jPhzKd+VUntYPGzBcI=)
4: 323830333a383564303a3a2f33332d3333203d3e20323734313636.roa (hash: 3WKUs360iJpPsWYIDuAJlBKVJpyd2CoEQ7JdzuILhjU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.crl
rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:2a:73:ac:21:ca:c1:4e:7c:72:ce:b1:d1:3e:64:f9:20:b0:d8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3845894FA68B5BFFC7570574C015E8DBA3977EB3
Validity
Not Before: Oct 24 15:45:12 2025 GMT
Not After : Oct 29 23:35:12 2025 GMT
Subject: CN=B666152405598F16B7A91C9BF95FCFFA8AACC145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7d:5c:ef:27:93:03:e9:55:24:9f:90:dc:ed:
6d:b6:47:fb:f6:25:08:71:0b:5f:a6:db:7c:ac:cc:
4a:46:a7:3f:a7:d1:dc:c3:a9:ad:20:7a:c1:1c:3a:
d2:00:46:66:2f:bd:a6:49:f8:78:64:95:86:b0:5e:
14:f3:5c:e0:f8:e7:83:39:3c:e3:a2:34:f8:db:cf:
95:af:da:b1:9a:c8:87:4b:d1:03:a8:9c:32:1b:72:
af:78:54:db:78:b6:22:e1:da:db:c8:9a:69:4d:38:
3e:9e:7d:60:a0:21:a0:a5:5a:9a:55:17:00:09:1d:
71:d5:35:6c:60:c8:65:f7:5d:c9:02:21:35:7a:c6:
a8:83:0c:5a:48:c3:bd:e7:0d:fd:32:cb:d2:58:5f:
9c:45:52:3a:9c:70:37:12:d5:b5:1d:0c:04:1e:f2:
62:b5:61:85:66:2e:b7:fb:81:f0:e6:3f:12:a5:93:
7b:25:4b:1b:75:e1:4f:ff:53:59:ee:06:04:04:81:
d5:8d:f2:e2:85:fa:74:af:f1:57:7e:c6:46:82:76:
72:a5:33:a3:06:7b:03:26:87:63:26:89:43:1d:3d:
fc:c0:0f:66:91:7a:89:b8:97:d6:fe:8e:b6:63:09:
50:9f:87:a9:5b:47:a7:c2:8b:18:d9:42:b8:9a:c5:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:66:15:24:05:59:8F:16:B7:A9:1C:9B:F9:5F:CF:FA:8A:AC:C1:45
X509v3 Authority Key Identifier:
keyid:38:45:89:4F:A6:8B:5B:FF:C7:57:05:74:C0:15:E8:DB:A3:97:7E:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bc:2a:b6:7d:a4:5c:25:01:37:76:16:c5:b6:d9:d9:e4:75:
70:11:77:0d:13:30:af:62:53:be:8b:af:71:12:aa:b2:6b:90:
30:e4:97:6c:cc:f8:7f:bd:41:0e:d7:9f:00:80:1c:99:d0:cb:
c7:76:1d:ed:35:98:c4:db:86:a5:82:29:ca:cf:73:92:aa:8b:
07:8f:6b:d2:56:d5:9e:51:95:ee:e0:42:31:35:a6:c2:75:38:
dc:94:53:9b:51:e7:86:3d:fc:36:06:2a:2c:ab:02:56:e5:2d:
48:44:ce:85:3f:17:8f:88:3d:78:0c:4b:dd:e2:53:34:80:2f:
5e:40:83:2e:a6:32:f4:38:7f:98:d8:11:21:b1:09:64:04:05:
11:5a:e0:67:c6:fe:a8:da:a6:3a:33:bc:0c:29:fd:08:6d:55:
13:8a:9b:8a:79:0f:24:ee:11:96:56:1e:7f:7b:93:58:ec:a2:
c9:fc:15:9d:b6:4d:9f:c1:4e:24:fe:cf:f5:c5:eb:de:7f:72:
5a:28:a5:d4:5f:9b:3d:6d:43:c7:39:b9:3c:b8:2e:66:d3:e8:
e4:a6:3d:ef:de:9e:d4:ad:2a:8c:ad:b9:43:17:d4:c4:28:4a:
9f:f3:53:35:fe:97:6b:01:0d:09:e3:b3:d1:0f:48:2f:ea:8a:
52:1b:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:31:53 2025 by rpki-client