
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
File: C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft (raw, json)
Hash identifier: yerM87uM3LgUMNeJGyc/ePqEQi+DtScMAf+y8SZ402k=
Subject key identifier: 05:67:DC:55:79:20:22:28:E1:6C:72:6C:C8:40:36:C2:48:31:6A:05
Authority key identifier: C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8
Certificate issuer: /CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8
Certificate serial: 691D857C89A85BD302953B8AAAD7545B6573A7F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
Manifest number: 0140
Signing time: Wed 05 Nov 2025 07:40:07 +0000
Manifest this update: Wed 05 Nov 2025 07:35:07 +0000
Manifest next update: Sun 09 Nov 2025 13:01:07 +0000
Files and hashes: 1: C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl (hash: 4eX3xawls2zoNXYn1xcmdrXraNib4qvSKG9+dQSVDZ8=)
2: 323830313a3137323a3a2f34382d3438203d3e203134303830.roa (hash: mGXnjOmUkivco7UWNXNOXRqozorBrbTRwCXCle8sZ60=)
3: 323830313a3137323a323a3a2f34382d3438203d3e203237393531.roa (hash: Rb9y9DwnR6tHMoVEq1jQr1oPiLPO/N9wM0q5+pYQLp8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl
rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:1d:85:7c:89:a8:5b:d3:02:95:3b:8a:aa:d7:54:5b:65:73:a7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8
Validity
Not Before: Nov 5 07:35:07 2025 GMT
Not After : Nov 9 13:01:07 2025 GMT
Subject: CN=0567DC5579202228E16C726CC84036C248316A05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:9c:c8:38:13:fe:9e:5f:1b:b5:24:f8:de:
96:ae:9b:30:b6:25:64:ba:c5:69:36:50:8f:10:89:
c6:1b:4c:56:4d:f4:7e:88:6c:a3:09:a9:6b:57:b2:
c9:2d:a1:b0:54:d4:b2:ca:ef:26:de:bc:f1:de:d8:
9c:58:c9:f8:57:ca:93:e5:d2:bc:db:ed:13:65:5e:
a7:1b:48:94:1a:df:a9:c5:5a:41:06:4c:55:d7:67:
3a:4f:d5:4b:68:79:90:73:9b:16:7d:bf:15:67:12:
db:4a:d1:fe:b5:64:71:03:42:8b:bd:8b:36:e6:b0:
50:c8:52:b5:73:02:b0:2b:27:d6:77:b9:3c:d3:89:
c9:4d:5c:6a:ef:c3:f1:72:53:3f:68:b6:31:04:be:
fb:45:c2:fe:fd:16:da:ae:89:79:da:b8:6d:35:9c:
00:b6:68:10:8a:5f:22:21:a0:31:65:c6:66:65:bb:
2e:5e:34:55:86:56:95:79:07:04:d8:a7:74:dc:c3:
3c:f0:07:a0:07:25:cc:9a:09:f6:7a:27:2e:fe:1b:
4a:dc:c3:b1:fd:68:30:b1:53:71:af:6e:bf:c2:85:
c0:59:b5:70:26:9f:c0:6f:cb:bd:b3:7b:ff:bb:65:
68:3f:24:ec:14:b5:23:ad:8d:eb:42:18:e2:24:cb:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:67:DC:55:79:20:22:28:E1:6C:72:6C:C8:40:36:C2:48:31:6A:05
X509v3 Authority Key Identifier:
keyid:C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7c:c1:a8:84:81:f9:7c:32:eb:fe:cb:fd:53:1a:76:4e:5d:
e8:5a:80:b7:35:47:40:14:54:0c:4f:66:5b:5e:77:cd:e7:1a:
73:d7:cc:ff:14:9d:de:7e:bf:c3:53:48:4d:ee:fb:87:33:3c:
ff:b9:4f:4a:05:9c:34:c8:9d:62:d6:da:19:d2:ee:37:c9:ab:
e5:a0:b7:3e:43:1e:3b:df:40:43:ff:4d:15:3d:dd:d8:bd:5e:
50:56:de:8d:c3:98:03:13:25:0f:27:bf:1e:0e:4e:6a:10:0a:
8f:60:ef:fd:55:f9:28:70:ce:f3:47:62:c9:82:27:5a:17:2a:
0a:8a:b8:f5:f2:a0:3e:bc:4b:2d:38:9f:2f:23:c5:8d:d2:9d:
54:b2:02:fa:60:45:20:89:a1:82:23:2a:1e:c3:83:cc:7f:99:
f1:17:5b:c5:fa:ca:e6:5a:55:c9:b0:e0:a7:52:43:10:bf:a8:
88:fe:02:7e:a9:04:e4:b2:82:8b:75:2b:ed:a3:3a:93:a9:60:
62:3a:52:2d:13:67:9f:32:98:be:7f:bc:18:d5:a3:60:a7:4a:
89:0a:db:e0:5f:a1:3e:34:3d:90:3b:8c:05:52:d4:9a:05:29:
25:a3:e1:df:b4:68:3f:d0:69:58:79:0f:02:81:e5:8a:93:08:
0b:e8:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:51:16 2025 by rpki-client