
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
File: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft (raw, json)
Hash identifier: P88uOVZsNkTRiuSQntUzNoINipYaW7m/1XtqGTwhB50=
Subject key identifier: DF:27:F8:20:B5:AC:04:11:3B:05:A0:DA:6F:1C:1B:EB:0C:06:F3:5E
Authority key identifier: AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B
Certificate issuer: /CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
Certificate serial: 1FA0BD8326694B2908657507B6B34DD7284196E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
Manifest number: 0135
Signing time: Mon 03 Nov 2025 17:03:51 +0000
Manifest this update: Mon 03 Nov 2025 16:58:51 +0000
Manifest next update: Sun 09 Nov 2025 15:44:51 +0000
Files and hashes: 1: AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl (hash: UPGN2QTdePGC7g/QAPiqmzXM9/o5ojh37U86sV5qNfA=)
2: 3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa (hash: +0qop7Ilf9Isuak762oOoJinzztVUgOiRadVElgbPMc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl
rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a0:bd:83:26:69:4b:29:08:65:75:07:b6:b3:4d:d7:28:41:96:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
Validity
Not Before: Nov 3 16:58:51 2025 GMT
Not After : Nov 9 15:44:51 2025 GMT
Subject: CN=DF27F820B5AC04113B05A0DA6F1C1BEB0C06F35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:b4:1a:85:b6:97:19:af:fc:49:6c:15:ce:
c8:c5:1c:cb:b5:71:f8:7e:e7:81:ca:78:cd:c3:89:
7e:58:59:4b:b5:50:41:e0:9e:b6:fe:22:0c:10:05:
c5:2c:11:3d:b5:d9:f3:0d:1c:0d:47:a7:05:18:71:
02:74:92:21:3d:2b:57:21:81:c9:e5:bd:83:07:e5:
6d:b3:19:33:ad:27:ce:d4:87:77:d7:74:da:f9:55:
ac:74:2f:46:63:67:9f:ad:ba:53:3c:df:7a:89:7b:
e8:30:0b:8b:cb:20:52:fd:b0:3e:8a:30:47:79:77:
b6:5e:fb:f0:e7:95:b6:10:85:ec:e1:90:3f:57:a6:
78:3e:10:98:7a:ee:71:dd:9a:2c:55:19:49:cb:61:
78:0e:62:44:12:91:84:0d:82:8a:8c:b8:36:5d:cd:
9e:3f:78:24:8f:1e:71:14:56:c2:ed:50:50:18:ef:
5f:cf:11:7a:c5:37:76:12:00:d8:c5:bd:23:a2:67:
35:ba:86:ce:40:5d:4f:53:e7:73:18:33:8e:a9:fe:
25:62:03:7f:18:fd:02:0a:35:97:d8:a3:49:e3:73:
15:a3:ff:8a:f0:6c:cf:ac:af:01:76:a9:36:dc:54:
17:0a:68:8e:dc:c5:7c:be:e8:94:03:63:fc:1a:ce:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:F8:20:B5:AC:04:11:3B:05:A0:DA:6F:1C:1B:EB:0C:06:F3:5E
X509v3 Authority Key Identifier:
keyid:AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a5:46:de:58:94:90:92:92:a0:f2:37:87:5f:e0:8d:3c:36:
c4:fb:5e:12:5a:f6:fc:04:e5:39:df:0d:8c:db:d6:2f:c0:e5:
34:ea:f7:65:12:8c:95:4f:a1:85:6c:04:89:e7:7a:16:98:2f:
12:13:81:f4:f7:78:d4:5f:65:c7:16:ae:c1:bf:f8:0d:0e:8c:
f5:ff:f6:c6:42:64:98:eb:4b:4b:b9:56:53:af:5d:bc:4e:ca:
0c:c6:eb:b6:02:ac:d8:f8:5c:17:d9:d5:b3:3b:4c:b9:47:39:
09:9a:d7:d9:fc:c5:31:d9:9c:0a:df:42:71:7c:9a:36:e4:62:
e5:73:15:5c:d1:66:04:bd:28:80:67:4a:4e:b0:74:14:7e:cd:
8a:af:98:7a:b0:38:80:1d:ce:b6:f1:fa:06:58:05:25:2b:1b:
28:cb:4c:ba:67:12:8d:56:39:bc:0d:08:fb:e2:b5:88:56:1c:
e1:9d:8a:1b:89:7f:f9:ac:a1:63:7b:9f:2d:ea:e6:2b:7a:4d:
71:51:7c:0d:a3:77:65:c0:36:58:58:16:92:af:4f:1b:49:13:
7d:d4:90:08:b5:95:6c:a3:37:2a:3d:03:3c:b8:8a:19:40:f3:
c8:1a:05:b8:21:49:b5:b7:12:37:d6:23:84:81:91:61:73:1e:
06:f5:50:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:52:21 2025 by rpki-client