
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.mft
File: 0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.mft (raw, json)
Hash identifier: gP9/ezkafGNCqq8uQwX7wIMGFLJ+8pjKNpp0i7ulSpw=
Subject key identifier: 40:AE:56:A2:2F:0E:9A:69:F3:D3:0A:DC:E2:FA:44:35:EA:5A:2F:3F
Authority key identifier: 0F:95:9E:8E:89:90:C6:B4:68:4A:74:EC:F5:D6:A8:A2:BE:22:B2:DF
Certificate issuer: /CN=0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF
Certificate serial: 1146C7DB1486F0B61730DBE040D90980857EA876
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.mft
Manifest number: 013B
Signing time: Tue 04 Nov 2025 09:17:53 +0000
Manifest this update: Tue 04 Nov 2025 09:12:53 +0000
Manifest next update: Mon 10 Nov 2025 03:03:53 +0000
Files and hashes: 1: 3137302e3233332e3132342e302f32342d3234203d3e20323634373337.roa (hash: LoXtyzz1bHc5owdYE1Aq4Tmppk1B3wqGKFQwJBhhnz8=)
2: 3137302e3233332e3132362e302f32332d3234203d3e20323634373635.roa (hash: mlzT/5C9+iyRWRbtlC5sdTDTBi2K3kLp91TYNSRkzTU=)
3: 3137302e3233332e3132352e302f32342d3234203d3e20323634373635.roa (hash: 2R5jWoN6dsZ0TxNmMAuXA2oJTkGKXlSAtWOJdyCwafk=)
4: 0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.crl (hash: z3vdM9pDFwiLR0TZ5co/LPoqdblRFiFYORKn2Io5pSI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.crl
rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:46:c7:db:14:86:f0:b6:17:30:db:e0:40:d9:09:80:85:7e:a8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF
Validity
Not Before: Nov 4 09:12:53 2025 GMT
Not After : Nov 10 03:03:53 2025 GMT
Subject: CN=40AE56A22F0E9A69F3D30ADCE2FA4435EA5A2F3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:a1:d3:68:4c:bb:3e:4d:f7:75:7b:7a:67:
ec:b9:75:d0:32:92:f7:37:df:5e:0f:32:36:5a:1f:
ec:5c:1a:21:f5:ed:7e:5b:1d:06:92:18:d9:6a:21:
4f:b3:71:03:75:21:df:5b:79:b4:b1:b8:87:b4:00:
f9:a1:29:5b:65:49:03:71:2a:2c:80:10:7f:1e:08:
d8:b5:75:ed:47:5b:9f:6f:fa:1e:22:29:ed:4c:c8:
94:39:ba:4b:57:42:70:4d:5e:f2:ef:5e:4e:07:1b:
36:51:cb:27:91:7b:2a:35:28:a3:76:04:8f:59:33:
e6:7e:34:46:10:2a:13:5e:7a:c8:3d:33:aa:fa:d7:
eb:65:53:b4:6b:8a:fa:aa:0c:2f:14:b0:7b:bc:82:
6a:9e:b3:62:94:e1:71:39:44:63:0c:ee:4f:28:0e:
38:0d:66:ed:50:fd:a8:df:1d:f4:83:8f:1a:e2:0b:
69:b0:92:42:be:14:99:aa:c4:ad:60:fe:e6:50:1d:
1f:af:f8:d3:82:54:19:1d:7c:23:44:01:22:b6:56:
82:44:3b:f8:82:02:26:05:be:7f:f5:ef:88:c7:07:
d0:0b:1d:63:49:d8:be:59:a1:00:93:78:f8:c7:72:
13:64:2b:81:b6:90:81:dc:71:0e:fa:42:4a:aa:7d:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AE:56:A2:2F:0E:9A:69:F3:D3:0A:DC:E2:FA:44:35:EA:5A:2F:3F
X509v3 Authority Key Identifier:
keyid:0F:95:9E:8E:89:90:C6:B4:68:4A:74:EC:F5:D6:A8:A2:BE:22:B2:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2c:1e:49:4f:be:6d:0d:46:01:94:bc:59:02:b9:1a:b2:eb:
67:1a:10:21:4d:d9:9b:87:97:5a:8f:1b:20:f0:32:18:85:5f:
10:87:20:2c:be:6a:c8:2b:05:15:65:8e:73:08:0b:43:82:b4:
4c:36:20:dc:df:e0:e0:54:df:11:b2:de:df:64:ca:3b:d3:53:
52:65:55:95:af:52:ce:0a:58:ea:38:cb:67:35:c0:e4:40:7f:
2c:b2:0c:7e:e7:e4:4b:d0:07:a5:89:43:b8:aa:73:11:96:65:
ce:08:df:c7:c7:b8:ab:df:fa:f7:db:58:ea:e8:ed:00:7c:bc:
47:fb:b5:d9:6f:56:72:7e:42:91:12:ba:60:4f:63:ca:3a:66:
16:99:ff:6e:ad:10:7e:90:e0:dd:19:21:2a:58:f6:0c:4f:ac:
f2:2a:ba:3a:08:bc:d8:93:ea:cf:38:22:9c:57:0c:1f:ab:ec:
e9:54:fa:04:00:0f:ec:08:f1:c5:c7:36:73:2d:65:29:1b:d2:
e7:bb:a5:5e:9e:b9:34:d4:92:36:21:da:6b:ae:8d:21:99:ad:
a9:63:5c:83:ee:7d:e7:a5:49:cf:e4:0f:48:04:3d:7e:1e:47:
34:aa:96:b3:04:a2:f2:05:f5:c9:1a:94:8c:c3:44:65:06:8a:
51:63:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:34:47 2025 by rpki-client