
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
File: 0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft (raw, json)
Hash identifier: VDekGfUTlWv7rhe9GggbtHrhG5JsUXHCDJbHHNvfqmY=
Subject key identifier: 7D:18:E3:14:41:F3:0D:C9:EE:2A:59:88:C7:FA:AD:DD:BB:30:95:B1
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Certificate issuer: /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial: 6DF0C364FC487C04916685FDB58105EC21CDA505
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
Manifest number: 0138
Signing time: Tue 04 Nov 2025 12:09:32 +0000
Manifest this update: Tue 04 Nov 2025 12:04:32 +0000
Manifest next update: Sun 09 Nov 2025 13:03:32 +0000
Files and hashes: 1: 34352e3138392e3139362e302f32342d3234203d3e20323639383538.roa (hash: hAF4R+hD0YTTUSsp8hohgdmpSs18UeLNslce1gQ0WDo=)
2: 34352e3138392e3139362e302f32322d3232203d3e20323639383538.roa (hash: QqOAGWp08U34ckYPMhETMjIGHRx7qgeH6jP3fxVt52Y=)
3: 34352e3138392e3139392e302f32342d3234203d3e20323639383538.roa (hash: C3IX2Ld4McOnmmoQVxQacw/eOCRCKY6ZhhRNBqlXkp0=)
4: 34352e3138392e3139372e302f32342d3234203d3e20323639383538.roa (hash: WIggVM1yi48ELLS46jHgJqM5lqF55JMqa6uoxRasWig=)
5: 0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl (hash: +5C02PNHxra/Y6MKzmFML+nz0gFAJeeWkTSU+k/TMZY=)
6: 34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa (hash: 41SOVAodcLKyryMiH1QxQTtYKkrqbxoQgUAQXwth9BY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f0:c3:64:fc:48:7c:04:91:66:85:fd:b5:81:05:ec:21:cd:a5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Validity
Not Before: Nov 4 12:04:32 2025 GMT
Not After : Nov 9 13:03:32 2025 GMT
Subject: CN=7D18E31441F30DC9EE2A5988C7FAADDDBB3095B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:de:ac:a9:ac:2e:c8:81:2b:c0:f4:27:d0:
92:2f:6b:46:13:7e:11:b3:9d:4b:8a:a7:08:9e:7b:
c9:04:ff:71:22:58:76:5b:62:00:9a:60:6c:a7:b0:
d0:2d:1b:eb:9d:21:ea:7b:c2:d9:32:94:f1:1e:ff:
4d:0a:ef:56:73:b6:ad:57:24:48:08:6f:9d:39:06:
19:58:88:8c:7e:e6:86:d1:b7:4f:93:2e:e3:8d:02:
63:28:7f:05:4b:95:3e:a8:2e:65:23:4b:1a:dc:98:
45:21:93:7d:14:ca:c9:a9:60:5c:78:48:a1:0c:e1:
6d:f8:66:09:59:5b:26:c3:81:8f:2c:ab:12:d1:b4:
9d:7f:a6:1f:96:22:7f:46:9b:a6:fc:c6:6e:48:81:
40:61:f0:b2:09:d9:7d:03:0f:46:67:85:09:d2:2d:
1e:20:43:2f:ea:f5:9c:f0:27:a0:3e:39:1f:74:1d:
5b:7f:3a:71:00:a9:43:63:62:80:51:74:0e:c9:c1:
49:92:40:58:19:53:8b:f7:92:a1:47:a1:b0:91:ee:
3b:e9:d8:92:3d:60:e1:fb:7a:1b:12:03:dd:b2:76:
4f:5d:05:21:b7:5b:c8:30:ee:6d:b8:46:34:9d:79:
56:12:58:71:fb:65:66:05:23:d3:72:e7:87:0d:5c:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:18:E3:14:41:F3:0D:C9:EE:2A:59:88:C7:FA:AD:DD:BB:30:95:B1
X509v3 Authority Key Identifier:
keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d2:b1:5c:c8:6c:97:76:0b:7f:2c:d3:97:4a:62:4c:40:8d:
96:79:0e:b5:30:1e:b3:3e:d6:51:c5:57:d0:cd:6a:1c:cf:28:
6a:07:fd:1e:70:9e:4e:88:d2:dd:c7:63:fd:25:75:51:2b:b3:
45:d7:d1:a6:3f:ea:f8:a0:27:d8:e8:01:ff:eb:4d:ef:9f:5c:
8b:0f:a9:37:87:b4:30:f0:bc:9c:2b:6a:7e:8c:8e:90:8a:cd:
43:9b:6a:0a:0d:67:a7:ff:e2:0f:ee:e7:09:e4:97:7d:29:1e:
ee:dc:5d:03:ef:52:6d:0f:9f:f8:58:7f:c4:ea:d1:8b:fb:08:
be:0a:49:d8:74:8f:5c:40:88:b5:e8:3d:a7:9f:53:71:bb:d8:
ee:86:65:c1:4d:dc:d7:27:91:bc:2b:4d:7b:0e:fe:61:ae:e6:
06:b0:7c:34:7d:0a:e2:14:9e:4d:7b:4b:f0:76:a4:d3:4b:11:
5b:97:f1:0c:1b:90:3a:e1:6f:25:3a:82:b0:37:e0:cf:2e:a7:
c6:d9:ea:1d:47:ee:fc:45:c1:bc:d8:db:a3:27:81:a6:49:04:
31:d3:52:04:c6:55:de:7f:28:6a:56:48:e7:a8:6f:10:50:41:
73:1e:34:4e:52:8c:6f:9c:f2:c3:14:c9:b6:ff:64:c9:02:c8:
3d:e4:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:56 2025 by rpki-client