
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
File: C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft (raw, json)
Hash identifier: w+XtBllwJJNbCa24AHmtvVcSEsUWhtckdc0gNpnOar4=
Subject key identifier: 27:70:34:B5:62:C3:69:5C:4C:DB:F3:16:B1:E4:D2:B2:7F:8D:BE:71
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Certificate issuer: /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial: 6A5BED86AFBC7A1E4252487F04C84FB95F88D882
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
Manifest number: 0139
Signing time: Tue 04 Nov 2025 05:45:59 +0000
Manifest this update: Tue 04 Nov 2025 05:40:59 +0000
Manifest next update: Sun 09 Nov 2025 12:00:59 +0000
Files and hashes: 1: 3134382e3233302e31352e302f32342d3234203d3e20323635363036.roa (hash: MTHdrMkq2VH+rC8vck35GFmtT142z8Bb+2JdfcKSSH0=)
2: 3134382e3233302e342e302f32342d3234203d3e20323635363036.roa (hash: a/gojYHCvsFM6jBHuxepap7EE9LkCtyN8QYEF5Zr+XU=)
3: C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl (hash: 0FMrgQl9r58c9ILQFjNcQqRYymRZ6HLZw5xM7eY03Vs=)
4: 34352e3138382e3132342e302f32322d3234203d3e20323635363036.roa (hash: 0HZY/OU0B5PnaoDotnKIoc0/2dgWlzYBOZymyWVafQQ=)
5: 3230302e3232352e36302e302f32332d3234203d3e20323635363036.roa (hash: 51+0gME+kWYR4n9Zv1GXIzpivNmbXgiaRnHXCoCEIdw=)
6: 323830363a3336323a3a2f33322d3430203d3e20323635363036.roa (hash: dYOaP/k/Yr3aKGk0pwYKE+kEBwxEZa/obMbN+aZge1U=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:5b:ed:86:af:bc:7a:1e:42:52:48:7f:04:c8:4f:b9:5f:88:d8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Validity
Not Before: Nov 4 05:40:59 2025 GMT
Not After : Nov 9 12:00:59 2025 GMT
Subject: CN=277034B562C3695C4CDBF316B1E4D2B27F8DBE71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:57:7d:e0:66:16:5c:0a:0b:26:13:57:d1:
28:9e:2c:63:28:d1:d1:ed:6a:9c:1f:71:4d:04:82:
88:b5:7b:19:ae:1d:dd:5d:2d:2a:2c:4c:6c:7d:d9:
06:2b:08:20:e2:a0:7f:44:e2:ce:22:de:b6:43:5c:
63:85:84:e1:26:83:49:f6:ad:3d:38:84:8d:f8:f6:
90:f7:57:fc:2f:18:a4:e3:27:57:40:55:cc:51:c6:
21:7f:f3:9e:d2:80:04:74:70:68:bf:5c:8e:ae:ea:
7d:34:11:53:24:53:d2:24:cc:46:e1:68:02:66:de:
83:57:e1:2d:eb:13:40:c6:e2:e1:ab:ab:89:f6:18:
fb:94:58:97:56:e6:97:8a:c3:cf:e9:02:ac:71:99:
54:72:94:8a:15:19:cd:6e:e1:b2:67:90:10:98:c2:
9d:da:9f:e7:9c:46:db:57:15:e2:81:83:d2:30:39:
9e:28:60:27:d0:54:02:43:ae:41:c5:00:5d:35:7b:
5f:75:5e:18:79:ed:dd:68:42:59:4e:d3:d7:8e:59:
ea:ae:ac:c6:13:f7:4c:d9:e2:41:f4:9a:06:82:0d:
42:c1:91:64:a9:04:c4:40:d9:03:05:26:9a:98:cf:
bb:12:58:b5:50:d0:db:27:e4:d0:04:a7:5b:21:f4:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:70:34:B5:62:C3:69:5C:4C:DB:F3:16:B1:E4:D2:B2:7F:8D:BE:71
X509v3 Authority Key Identifier:
keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9a:25:37:ab:e1:fa:f9:bb:b7:fb:06:72:a4:57:37:f0:68:
fe:a3:94:55:fc:98:a9:35:98:6e:58:38:d1:e1:b7:7d:8c:87:
50:ee:a4:b5:2f:a6:83:9b:37:73:d8:25:a4:18:47:d0:63:36:
02:37:e0:ba:0a:ff:bd:e8:2d:ce:bf:8e:f6:c7:a8:46:6d:a0:
35:7a:67:96:4d:2c:fc:43:d5:84:a5:e5:31:a3:80:85:f8:04:
a8:a3:44:67:a7:dc:df:1a:01:54:b4:b1:b4:02:82:7e:e8:18:
4f:01:48:24:27:af:95:b9:fe:02:93:43:0f:4e:9d:2c:5c:ff:
73:d4:aa:ac:f6:9e:47:46:22:a0:85:dc:38:28:83:4c:03:9c:
40:ab:21:47:25:dc:a7:38:b0:b3:b1:09:b9:15:af:60:37:b5:
ea:b6:eb:8a:df:df:fb:24:03:be:4e:95:88:29:08:78:8a:ec:
dc:b7:da:76:d8:f0:36:a2:c3:b2:be:ca:6a:81:89:74:80:67:
07:88:e8:de:81:81:24:75:e6:0d:60:46:30:18:35:f5:ae:b9:
8e:df:c0:ac:99:b5:3a:bb:7c:cd:43:28:75:fb:50:b4:37:05:
dd:e0:79:67:aa:29:1f:78:b0:0e:d6:f8:e5:51:58:ad:65:81:
04:18:db:2c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUalvthq+8eh5CUkh/BMhPuV+I2IIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUyMjRBNUMxN0RENTIxQzRCN0Y0OTRCNkFENzFFOTk3
MUQzNEFCRTAeFw0yNTExMDQwNTQwNTlaFw0yNTExMDkxMjAwNTlaMDMxMTAvBgNV
BAMTKDI3NzAzNEI1NjJDMzY5NUM0Q0RCRjMxNkIxRTREMkIyN0Y4REJFNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtq1d94GYWXAoLJhNX0SieLGMo
0dHtapwfcU0Egoi1exmuHd1dLSosTGx92QYrCCDioH9E4s4i3rZDXGOFhOEmg0n2
rT04hI349pD3V/wvGKTjJ1dAVcxRxiF/857SgAR0cGi/XI6u6n00EVMkU9IkzEbh
aAJm3oNX4S3rE0DG4uGrq4n2GPuUWJdW5peKw8/pAqxxmVRylIoVGc1u4bJnkBCY
wp3an+ecRttXFeKBg9IwOZ4oYCfQVAJDrkHFAF01e191Xhh57d1oQllO09eOWequ
rMYT90zZ4kH0mgaCDULBkWSpBMRA2QMFJpqYz7sSWLVQ0Nsn5NAEp1sh9GufAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUJ3A0tWLDaVxM2/MWseTSsn+NvnEwHwYDVR0j
BBgwFoAUxSJKXBfdUhxLf0lLatcemXHTSr4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODIxRjAwNkE2NjgyNTM0RUNGRjBGMTBBMzQ4NDE1MTgz
MTZEQURDMERDMjUwMTgwNDkwMDEyMDg2NjZGNEU3LzAvQzUyMjRBNUMxN0RENTIx
QzRCN0Y0OTRCNkFENzFFOTk3MUQzNEFCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNTIyNEE1QzE3REQ1MjFDNEI3
RjQ5NEI2QUQ3MUU5OTcxRDM0QUJFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDgyMUYwMDZBNjY4MjUzNEVDRkYwRjEwQTM0ODQxNTE4MzE2REFEQzBE
QzI1MDE4MDQ5MDAxMjA4NjY2RjRFNy8wL0M1MjI0QTVDMTdERDUyMUM0QjdGNDk0
QjZBRDcxRTk5NzFEMzRBQkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPmiU3q+H6+bu3+wZypFc38Gj+
o5RV/JipNZhuWDjR4bd9jIdQ7qS1L6aDmzdz2CWkGEfQYzYCN+C6Cv+96C3Ov472
x6hGbaA1emeWTSz8Q9WEpeUxo4CF+ASoo0Rnp9zfGgFUtLG0AoJ+6BhPAUgkJ6+V
uf4Ck0MPTp0sXP9z1Kqs9p5HRiKghdw4KINMA5xAqyFHJdynOLCzsQm5Fa9gN7Xq
tuuK39/7JAO+TpWIKQh4iuzct9p22PA2osOyvspqgYl0gGcHiOjegYEkdeYNYEYw
GDX1rrmO38CsmbU6u3zNQyh1+1C0NwXd4HlnqikfeLAO1vjlUVitZYEEGNss
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:35:10 2025 by rpki-client