
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.mft
File: 88E2BDEA430FFCDFCC0882418C4C3075773024C1.mft (raw, json)
Hash identifier: RQpOJgHUV2Ok+jXiNNn7zgc0Oi9whW5RNtAjJNTmTFs=
Subject key identifier: AE:A5:89:90:FA:85:05:C5:E1:4C:F7:FB:7B:56:B8:25:8A:77:4C:68
Authority key identifier: 88:E2:BD:EA:43:0F:FC:DF:CC:08:82:41:8C:4C:30:75:77:30:24:C1
Certificate issuer: /CN=88E2BDEA430FFCDFCC0882418C4C3075773024C1
Certificate serial: 292776D40275C0DEA7E1F29CCD23ECC5BDDED3C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.mft
Manifest number: 0138
Signing time: Wed 05 Nov 2025 00:10:55 +0000
Manifest this update: Wed 05 Nov 2025 00:05:55 +0000
Manifest next update: Sun 09 Nov 2025 20:36:55 +0000
Files and hashes: 1: 34352e3233362e38382e302f32322d3234203d3e20323636373935.roa (hash: CeB/1WNt6ObhxnW14L45THk+TiiBxyz7zW/YxB7trSs=)
2: 88E2BDEA430FFCDFCC0882418C4C3075773024C1.crl (hash: Zr29x6fPhYEA1noMT1c/8plqVMe/EfUkCxNyyr4WBHs=)
3: 323830333a643061303a3a2f33322d3438203d3e20323636373935.roa (hash: iFt1d3B/w+1hvx6NTrF0HyKSirlkQahfxSMp07JHoYw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.crl
rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:27:76:d4:02:75:c0:de:a7:e1:f2:9c:cd:23:ec:c5:bd:de:d3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88E2BDEA430FFCDFCC0882418C4C3075773024C1
Validity
Not Before: Nov 5 00:05:55 2025 GMT
Not After : Nov 9 20:36:55 2025 GMT
Subject: CN=AEA58990FA8505C5E14CF7FB7B56B8258A774C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:01:27:1f:4e:1b:2b:52:86:fb:26:df:37:
86:28:29:89:ca:83:a4:b3:15:74:46:e5:1a:1b:ac:
cc:ca:98:6f:7a:f0:24:3b:78:a2:43:1f:0e:c4:27:
a0:21:94:ab:eb:94:15:0a:32:e1:cc:1a:a4:76:fc:
33:a8:d7:d5:d3:68:08:51:b7:12:fc:71:be:33:f3:
99:86:73:79:b0:be:e8:a0:80:2e:16:f6:64:c1:51:
64:29:a3:bc:a1:33:86:22:2c:94:dc:2d:c1:a4:ad:
d6:a6:c0:d1:82:c5:e4:9f:79:ff:c2:0e:91:52:84:
4d:67:d2:76:c5:3d:02:3c:47:74:e5:52:46:23:43:
4f:b6:4e:ce:65:c1:db:f6:3e:62:8c:0a:ee:e4:c8:
42:71:46:1c:8b:d1:a6:12:a2:2d:7c:52:15:8e:c0:
8d:21:3b:9c:5f:fa:43:e8:1e:53:f9:01:7e:7e:83:
2f:f1:58:da:f4:26:b4:bb:69:d5:ca:a5:57:37:0d:
d8:9c:15:66:81:34:dc:b1:65:90:60:d2:41:5d:c4:
56:e2:bc:6b:fd:18:ae:44:6a:fb:36:f6:0d:75:47:
ce:26:4c:86:6c:89:b4:ca:c4:b4:35:b0:13:95:e7:
c8:77:bb:fa:0b:99:a6:79:58:22:00:97:48:0c:f5:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A5:89:90:FA:85:05:C5:E1:4C:F7:FB:7B:56:B8:25:8A:77:4C:68
X509v3 Authority Key Identifier:
keyid:88:E2:BD:EA:43:0F:FC:DF:CC:08:82:41:8C:4C:30:75:77:30:24:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b2:59:9a:b0:22:fe:3f:e4:ce:02:b8:bd:44:08:06:6e:52:
1b:87:58:7a:f3:63:57:fe:d4:f2:81:2c:48:47:0e:97:7a:d3:
bb:24:28:d0:a8:06:b2:ae:c8:2d:8c:a2:0a:a4:96:96:65:5b:
2b:96:a4:5a:b2:ac:31:bf:5d:66:e1:ef:19:0c:35:72:98:a8:
e5:ea:ee:fa:0a:b9:61:2e:ce:43:4a:3b:64:4d:5e:87:d1:7e:
1b:05:9f:f5:1d:1c:68:75:ab:34:36:62:dd:da:d8:42:85:ef:
4f:14:df:e1:24:ee:bc:ef:be:94:2d:95:74:b5:f7:ab:84:60:
b3:58:39:f4:18:40:59:17:3b:78:f1:2c:90:4d:30:78:40:15:
26:9e:7f:8b:ae:62:62:50:45:e9:b2:ca:7d:1c:24:8f:24:70:
6b:5d:03:ea:07:74:3c:1d:bd:ba:4c:01:a7:17:5e:e6:e8:d4:
01:81:0a:97:2d:8d:9e:2e:f8:70:3b:c0:97:c4:ef:52:ca:59:
76:d2:01:e0:ac:a4:12:0b:c5:f7:ec:c7:f5:89:5e:6c:f8:f2:
de:e1:82:27:c0:4b:e7:b4:2f:23:f9:51:a5:0c:7c:71:04:ec:
7d:70:5c:e8:11:5c:41:69:89:36:c2:be:ef:c2:bf:f8:50:5f:
9a:4d:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:48:46 2025 by rpki-client