
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft
File: 0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft (raw, json)
Hash identifier: p9yybeoeH3vqH9NYAk+GLexlBe7VAefxpIglor1iB5A=
Subject key identifier: 5A:47:B8:01:E2:5A:9B:76:56:70:D0:CD:41:23:AE:4E:FD:EE:E4:59
Authority key identifier: 0D:3E:5E:EA:EF:56:A3:05:23:E1:76:42:5F:74:1B:EF:D5:AC:37:C8
Certificate issuer: /CN=0D3E5EEAEF56A30523E176425F741BEFD5AC37C8
Certificate serial: 2603633D0ADDD576F2CC14D214F84EE3CFBC4D1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft
Manifest number: 0131
Signing time: Sat 08 Nov 2025 04:38:51 +0000
Manifest this update: Sat 08 Nov 2025 04:33:51 +0000
Manifest next update: Thu 13 Nov 2025 04:16:51 +0000
Files and hashes: 1: 323830313a31633a393830303a3a2f34382d3438203d3e20323732303439.roa (hash: fWAhV0fSxWVI6phPFfJBSJKVYY+0y58sOSMhMnlrRN8=)
2: 323830313a31633a393830303a3a2f34382d3438203d3e203139343239.roa (hash: /laYQOHmaeg+SibxVmaypmol0fYnXrdUPnCAKwPlT+w=)
3: 0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.crl (hash: +XBRSS0G0lZ64CCFXXurjozS4Ota+9bWpQRO1gAz/QM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.crl
rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 13 Nov 2025 04:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:03:63:3d:0a:dd:d5:76:f2:cc:14:d2:14:f8:4e:e3:cf:bc:4d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D3E5EEAEF56A30523E176425F741BEFD5AC37C8
Validity
Not Before: Nov 8 04:33:51 2025 GMT
Not After : Nov 13 04:16:51 2025 GMT
Subject: CN=5A47B801E25A9B765670D0CD4123AE4EFDEEE459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:1d:a1:05:7d:83:cd:3a:d9:6d:d8:c5:62:
16:f6:f2:eb:75:e1:39:40:84:47:56:95:39:9b:0f:
30:24:a6:c9:9b:81:8c:af:a9:b1:d4:88:de:97:ea:
24:4d:34:13:eb:04:ba:33:07:df:50:9c:72:ca:e3:
fc:e7:04:6c:b0:8a:f3:b0:37:5a:d3:af:d8:d1:cf:
20:89:3f:89:96:50:6a:9f:3d:9e:a7:8f:bb:b6:af:
02:39:74:a0:ad:12:7e:13:39:d1:f6:3f:a1:53:b7:
7c:22:c7:5b:22:e3:52:30:81:80:42:54:2e:42:ee:
83:93:39:e2:4d:a7:f7:dd:f6:4d:f2:40:f4:8c:61:
0c:69:87:12:41:62:29:81:d7:3d:38:c4:d9:a9:4f:
cf:12:de:cb:cc:79:87:42:c2:dd:aa:7a:0b:d9:b1:
78:c4:83:b5:4a:b0:6e:e1:da:62:96:00:c6:dc:be:
49:ba:b9:41:b7:9d:bb:ec:01:55:71:d2:34:da:75:
90:53:b2:d6:b8:06:58:96:fc:85:9c:b9:92:90:bc:
c1:79:c6:47:57:21:84:92:c1:f6:79:03:01:ad:2c:
b2:04:b0:9d:60:19:12:36:9a:9c:cc:03:db:72:c1:
87:31:b1:be:22:83:7b:64:d2:77:04:fd:72:04:70:
4e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:47:B8:01:E2:5A:9B:76:56:70:D0:CD:41:23:AE:4E:FD:EE:E4:59
X509v3 Authority Key Identifier:
keyid:0D:3E:5E:EA:EF:56:A3:05:23:E1:76:42:5F:74:1B:EF:D5:AC:37:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4c:a1:39:75:db:48:45:78:a7:c3:43:c0:43:cf:4f:87:43:
78:34:86:0b:e6:8b:be:a6:4b:6f:fe:81:af:49:51:b6:ab:c8:
e4:e6:88:e1:99:11:79:7e:d9:6d:ea:64:b2:dc:96:11:bd:b4:
25:04:01:dc:ad:7a:6d:53:b2:02:9d:44:df:27:28:1b:98:39:
eb:d9:3b:64:21:b6:f8:4b:94:50:98:f8:51:8e:3b:28:6d:02:
63:72:40:db:1e:54:91:25:d5:3a:10:63:7b:0f:7e:af:d4:e3:
e6:10:62:88:0e:b8:5c:fb:4d:c6:04:1f:64:9b:ee:31:96:a9:
0d:66:64:d2:d8:a6:f1:c4:4d:8c:ef:44:5d:13:8b:7e:e0:fe:
d0:5b:d1:8e:3c:4b:eb:c5:ef:98:61:86:97:7c:30:10:22:0a:
4f:87:b4:21:06:50:b9:70:aa:7b:2a:d1:ad:29:67:4a:1d:cb:
f1:22:70:66:2d:05:c9:e5:d4:66:fe:cd:22:94:4c:4a:06:19:
21:fb:32:0b:63:fc:ce:f3:99:72:a7:f9:5a:02:f7:99:d3:4e:
19:53:c9:3e:98:59:34:2c:81:ba:95:fe:0a:83:da:a6:4e:ad:
83:ad:e5:6d:16:4e:5e:7f:85:d7:ee:5e:ec:89:63:95:e6:7a:
06:5d:8c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 14:47:08 2025 by rpki-client