
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft
File: 30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft (raw, json)
Hash identifier: zu9FcyzhaGIwueaIOQFfRhp0x+Yzcu407AY2MIaWww4=
Subject key identifier: 90:61:1D:AA:8D:FA:E8:36:A7:FF:0D:9F:CF:4A:85:83:81:D9:3B:54
Authority key identifier: 30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5
Certificate issuer: /CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5
Certificate serial: 1B9084953499B2FCABFFD0FF8E3D4FC347F88BE8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft
Manifest number: 0130
Signing time: Mon 03 Nov 2025 18:54:59 +0000
Manifest this update: Mon 03 Nov 2025 18:49:59 +0000
Manifest next update: Sun 09 Nov 2025 09:08:59 +0000
Files and hashes: 1: 323830333a376232303a3a2f33322d3634203d3e20323636373533.roa (hash: fIhZthSeXfNTXsDCQE/laHD8KBLvWEsEx+9bwwivXJg=)
2: 30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl (hash: N37mJ2LCDMLRKrjESQwPiRobmrebx481pmYg27NyhaE=)
3: 34352e3233322e39362e302f32322d3234203d3e20323636373533.roa (hash: i4mTcsa9PfB2XUK9ciOX0wuhJDSWT4yXMpK+ildHeHw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl
rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:90:84:95:34:99:b2:fc:ab:ff:d0:ff:8e:3d:4f:c3:47:f8:8b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5
Validity
Not Before: Nov 3 18:49:59 2025 GMT
Not After : Nov 9 09:08:59 2025 GMT
Subject: CN=90611DAA8DFAE836A7FF0D9FCF4A858381D93B54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:d4:1a:9c:e7:de:6c:ec:6b:d9:f3:cc:1f:
65:96:f3:6a:93:3e:cb:b9:10:9f:74:d9:64:88:d6:
39:4b:e1:1c:a6:ea:e0:06:fe:ed:c8:56:43:bb:bd:
be:17:d7:4f:34:51:d2:2b:f9:77:66:d7:50:23:91:
c8:c2:f6:d9:33:59:dc:ba:f4:36:4e:c6:58:ea:d4:
ce:c2:01:9d:b5:5a:0b:70:9f:ea:7e:8d:e7:e9:0e:
dc:5f:77:16:74:1f:96:4c:65:01:ef:af:6d:21:d2:
b3:f3:af:15:5b:08:8d:00:62:32:1b:0b:b2:c5:87:
52:d8:9b:03:0f:82:87:8c:6e:08:20:de:54:19:a9:
75:fa:13:6a:a6:0f:fb:79:88:76:49:a8:08:af:c2:
99:bb:f6:8f:3f:90:aa:f7:88:6c:da:2e:ff:b4:43:
33:ea:cf:67:19:00:1f:8d:c6:33:18:c8:2a:83:a6:
e1:c8:f7:97:f2:47:80:3e:0a:02:11:eb:b5:5e:c3:
67:9d:47:09:21:72:a4:66:9d:01:6e:12:fe:a2:b7:
4b:df:3f:05:e7:ad:29:4a:5d:ea:4c:00:48:f0:01:
ed:73:ec:4c:67:87:15:3f:88:3d:a7:8c:c2:de:58:
d4:c6:53:4c:2e:e3:9a:80:aa:56:4e:25:db:d3:d1:
89:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:61:1D:AA:8D:FA:E8:36:A7:FF:0D:9F:CF:4A:85:83:81:D9:3B:54
X509v3 Authority Key Identifier:
keyid:30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:83:37:58:69:07:58:9e:9a:72:b8:11:22:9b:b2:95:a0:cf:
ab:22:6d:8e:69:70:49:e7:35:22:56:35:b0:39:f1:92:27:77:
f2:fb:40:86:26:d8:89:d5:00:86:69:ae:fa:3e:e3:64:27:3c:
05:23:50:56:f9:32:09:3c:9a:4b:f1:80:f0:dc:07:7e:7f:c9:
ce:23:48:22:8d:79:f8:55:46:be:a5:85:87:21:5c:54:b7:a5:
a2:4a:61:c7:2c:77:f9:ef:ec:65:33:64:f6:a1:0c:c3:05:57:
0a:8c:42:5c:e5:9a:25:19:20:3c:75:74:b7:70:ea:45:8d:2c:
4e:3c:cc:6b:13:70:7a:42:b8:60:61:f0:8f:e0:f0:03:38:fd:
75:31:91:33:01:19:57:0c:27:7a:e8:4b:a7:d6:11:f5:75:cc:
f3:9a:69:d3:b4:bb:3a:f8:05:e7:51:0f:af:b8:dd:64:bf:b3:
9f:0c:82:54:9a:44:8d:9f:5e:e3:5a:46:5a:26:ab:d9:16:35:
3e:42:a1:e1:79:8f:03:69:2e:9a:98:73:ad:a7:94:f8:40:9b:
45:4f:89:a9:eb:1b:d3:65:b3:07:e6:e9:71:c7:a0:89:27:21:
ad:d9:76:03:ce:22:bb:ea:98:a6:d2:fd:70:de:42:93:51:d1:
b8:01:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:06:57 2025 by rpki-client