
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft
File: 899F313321C13B5591ABC1D56B271A1F6BB60E12.mft (raw, json)
Hash identifier: aB1GwBzCeu7sEYYMFNaExfFCxVrmBgQniyJB/GhbjMQ=
Subject key identifier: F3:2E:5E:77:6C:B8:89:5E:0C:D4:B3:D9:4B:A9:E9:B5:58:B5:CD:7D
Authority key identifier: 89:9F:31:33:21:C1:3B:55:91:AB:C1:D5:6B:27:1A:1F:6B:B6:0E:12
Certificate issuer: /CN=899F313321C13B5591ABC1D56B271A1F6BB60E12
Certificate serial: 3269F9F2518EF0AD0ECF50544F0350E75C9D39B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft
Manifest number: 0134
Signing time: Wed 05 Nov 2025 10:36:40 +0000
Manifest this update: Wed 05 Nov 2025 10:31:40 +0000
Manifest next update: Sun 09 Nov 2025 22:48:40 +0000
Files and hashes: 1: 323830313a31653a383030303a3a2f34382d3438203d3e203532343633.roa (hash: qBxpt9I/moNmLOdo3bArmcRqtfOXLfEDmvJlApfmUjA=)
2: 899F313321C13B5591ABC1D56B271A1F6BB60E12.crl (hash: HdJKLi4aTyekbcLt7z+5dskOych2LZvYtf3X2Lp5E1M=)
3: 3230312e3232302e32392e302f32342d3234203d3e203532343633.roa (hash: xAMiS5i8k4F4Xi8yiRESUmhHV16f78fzptXBIfxHBRY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.crl
rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:69:f9:f2:51:8e:f0:ad:0e:cf:50:54:4f:03:50:e7:5c:9d:39:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899F313321C13B5591ABC1D56B271A1F6BB60E12
Validity
Not Before: Nov 5 10:31:40 2025 GMT
Not After : Nov 9 22:48:40 2025 GMT
Subject: CN=F32E5E776CB8895E0CD4B3D94BA9E9B558B5CD7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:ee:3d:06:cc:ac:14:32:16:64:8d:db:f9:
f1:ec:4e:6f:5d:c0:53:bb:4f:bb:c0:35:2b:34:c1:
6d:af:d1:58:0f:73:c1:b3:40:e6:af:dd:2a:5f:33:
87:ee:b3:6f:35:23:10:84:7a:be:6d:f9:2b:77:23:
1b:fa:f0:75:40:7d:2c:24:64:ba:d8:da:14:33:fb:
e3:d3:da:20:cf:43:3d:b2:85:ed:3c:52:55:c6:d0:
67:39:ba:c5:02:6d:72:cf:32:04:d5:e6:e3:9e:a8:
37:de:7e:25:cc:5c:5f:70:62:fb:56:a2:35:3b:41:
06:61:c2:91:b9:65:db:b7:c5:c8:cb:77:f1:21:75:
47:1c:41:e1:25:dc:50:b7:f6:e9:2a:c9:89:96:e5:
2b:95:af:8f:fc:d9:c1:c2:e2:fd:56:1e:36:ea:73:
72:1d:2b:ee:2f:36:e2:59:c5:89:6c:32:e7:26:02:
a8:c5:18:98:db:f2:91:5d:6d:f3:cb:36:3b:ee:66:
5a:bb:5d:3d:f1:b3:bf:0d:75:24:9f:9f:a3:ec:b6:
24:e1:1a:94:b0:e7:dd:5c:8d:cf:0a:fa:b2:6a:75:
b9:05:b0:7d:6c:c8:7f:bd:c0:3f:77:7b:80:7e:84:
c2:6b:24:49:de:8a:31:e3:98:04:e7:6b:75:98:9e:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2E:5E:77:6C:B8:89:5E:0C:D4:B3:D9:4B:A9:E9:B5:58:B5:CD:7D
X509v3 Authority Key Identifier:
keyid:89:9F:31:33:21:C1:3B:55:91:AB:C1:D5:6B:27:1A:1F:6B:B6:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f5:1e:ab:3c:17:3f:10:6e:de:b2:25:0b:61:be:17:b5:ef:
f9:d5:bb:d5:ed:4b:8c:43:9e:7b:68:41:df:44:84:c9:6d:92:
6d:e7:26:30:28:97:a4:38:5a:c4:ad:2d:31:58:15:17:da:8a:
6d:e1:87:e7:c2:ed:4b:d4:72:0e:2d:7e:b5:a7:bd:30:fd:54:
73:fd:c2:55:7b:0f:3f:04:59:34:86:a1:51:23:c2:3d:46:e9:
55:9f:4d:bd:84:1d:50:71:e0:e4:07:25:f9:9f:aa:e8:6e:e6:
34:85:e8:34:0d:28:d9:61:a0:95:37:a5:15:cb:09:20:89:78:
d1:3d:56:d6:82:c3:0d:41:e4:4a:26:39:cc:3e:cb:55:15:78:
0a:59:04:01:97:fe:ba:71:b2:e8:5b:1c:a4:af:cc:29:9b:2d:
d4:b3:85:6b:da:ae:16:f5:7f:9e:7d:4e:f4:4d:5b:65:1e:1f:
18:7f:91:a2:86:73:79:db:9c:4c:4e:d6:cc:f2:2d:8e:6e:34:
0a:b0:4d:f9:d5:ad:ab:5c:49:92:94:b7:a9:65:88:5b:4f:d5:
84:27:c4:7d:68:45:26:7f:77:fd:97:c1:4b:68:6c:28:4f:91:
d7:e3:fc:78:62:e4:ce:d6:5f:a7:3c:bc:f7:fa:2e:79:71:63:
50:ab:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:19:13 2025 by rpki-client