
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E8EA14623F52D6917C02D3BDBB0BEE40F514AAF27FBBA07F06FDA114FD9EEDD4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.mft
File: CAA1328421C6E0F8808B1011ACD27C9E37113886.mft (raw, json)
Hash identifier: D4SRDwOBjJ11gwr46a+lViqHCLTmu+26Bt3jaMLMC7g=
Subject key identifier: D9:33:22:93:81:8A:F1:1F:2D:5C:03:86:6C:D5:1E:57:A0:5F:73:8B
Authority key identifier: CA:A1:32:84:21:C6:E0:F8:80:8B:10:11:AC:D2:7C:9E:37:11:38:86
Certificate issuer: /CN=CAA1328421C6E0F8808B1011ACD27C9E37113886
Certificate serial: 4A5543B12A8C13CAC12BFA2A28987AD9BF595DFB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E8EA14623F52D6917C02D3BDBB0BEE40F514AAF27FBBA07F06FDA114FD9EEDD4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.mft
Manifest number: 0131
Signing time: Tue 28 Oct 2025 13:40:57 +0000
Manifest this update: Tue 28 Oct 2025 13:35:57 +0000
Manifest next update: Sun 02 Nov 2025 17:20:57 +0000
Files and hashes: 1: CAA1328421C6E0F8808B1011ACD27C9E37113886.crl (hash: V9d8vgv1sHcY8QOD8/+GZrsYG9/14NlaqS7dwKE7bcE=)
2: 323830333a386439303a3a2f33322d3438203d3e20323732393838.roa (hash: BmvnU+DAMQPAhF4PEoRukwUCICT5xhHI8zRpFVz4FOI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E8EA14623F52D6917C02D3BDBB0BEE40F514AAF27FBBA07F06FDA114FD9EEDD4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.crl
rsync://repository.lacnic.net/rpki/lacnic/E8EA14623F52D6917C02D3BDBB0BEE40F514AAF27FBBA07F06FDA114FD9EEDD4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 02 Nov 2025 00:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:55:43:b1:2a:8c:13:ca:c1:2b:fa:2a:28:98:7a:d9:bf:59:5d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAA1328421C6E0F8808B1011ACD27C9E37113886
Validity
Not Before: Oct 28 13:35:57 2025 GMT
Not After : Nov 2 17:20:57 2025 GMT
Subject: CN=D9332293818AF11F2D5C03866CD51E57A05F738B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:83:eb:ac:8a:f9:1e:ef:56:02:cb:ed:e6:a5:
d8:be:20:fc:08:c3:8f:d0:b8:86:0a:0c:4e:2b:60:
ce:e2:67:48:d3:7a:62:bd:f2:d4:90:9b:a9:f0:17:
8c:c2:46:ce:6f:91:ae:3f:e2:01:d8:85:df:7f:5b:
b0:cf:b4:68:f3:ca:66:de:cd:09:61:49:fc:43:b4:
39:1e:44:82:93:d5:17:a2:61:d5:ba:8a:85:eb:21:
7d:a8:6f:e5:16:9b:a5:aa:c4:06:b6:14:90:9c:f9:
3e:13:c3:65:cb:be:be:22:23:5f:58:ae:cc:5c:27:
be:00:71:0f:4e:cf:94:ef:c4:40:f4:7c:48:d0:69:
8e:26:e5:d7:f0:ee:ab:8e:bd:12:9d:a4:3e:9a:e3:
f0:b6:4c:fd:b8:66:ea:99:fb:d0:e1:13:28:87:fe:
7c:42:d5:dd:03:54:67:10:d8:f6:81:e4:02:a1:52:
7d:86:26:24:5d:8e:ec:7a:14:ae:6e:8e:82:3d:09:
d8:49:48:44:9a:23:f1:65:bd:90:07:2d:7c:7e:fb:
5e:e1:f5:ad:4c:c6:9e:0d:4f:78:dc:86:a9:55:89:
06:91:97:40:66:b8:cd:d0:9d:f4:67:6b:a2:e3:de:
24:88:e6:6b:a0:f3:2b:60:02:a0:aa:62:93:a6:1e:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:33:22:93:81:8A:F1:1F:2D:5C:03:86:6C:D5:1E:57:A0:5F:73:8B
X509v3 Authority Key Identifier:
keyid:CA:A1:32:84:21:C6:E0:F8:80:8B:10:11:AC:D2:7C:9E:37:11:38:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E8EA14623F52D6917C02D3BDBB0BEE40F514AAF27FBBA07F06FDA114FD9EEDD4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E8EA14623F52D6917C02D3BDBB0BEE40F514AAF27FBBA07F06FDA114FD9EEDD4/0/CAA1328421C6E0F8808B1011ACD27C9E37113886.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d3:d0:dc:c8:5f:5c:c5:58:a1:17:30:8d:fe:9c:d9:0d:05:
cf:30:90:8c:ae:d1:94:fe:ca:67:90:7d:16:47:d9:5b:79:b7:
2d:9e:1d:22:06:5e:4a:30:91:1a:01:ea:4e:a3:0f:b3:e7:17:
c2:d0:06:9b:5a:48:89:77:7a:8a:d0:33:24:ad:37:33:8c:20:
eb:60:10:a5:f2:c6:e3:77:09:ea:50:9c:ca:f6:86:4a:44:10:
72:78:f2:47:af:b9:6b:84:4c:90:87:a1:ee:ac:74:93:d9:ad:
c8:8a:b0:ef:77:b5:b8:aa:ae:7a:6b:5c:93:29:a6:35:31:e5:
00:24:72:ea:e4:e7:c7:a8:71:73:a8:77:1b:1e:27:c4:7a:b9:
fe:42:ee:43:31:67:35:96:6d:94:c2:70:56:19:6b:eb:cf:f8:
43:7b:5a:45:fa:c2:51:32:c8:cb:e0:4d:01:cd:05:87:73:77:
11:88:9f:d2:51:7e:7f:a2:84:d5:71:10:02:4b:d7:8a:5e:7d:
59:e0:f0:14:90:df:72:6a:0d:4d:e1:e0:9e:43:88:14:b8:07:
f2:d6:73:cc:a0:7e:65:fd:ff:2c:2b:31:78:39:ea:c4:07:ed:
f2:0d:f0:a3:39:fa:50:66:1d:45:5c:bb:5f:0f:59:f6:34:7a:
02:86:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 10:11:54 2025 by rpki-client