
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft
File: 217EAB37EEC2C460E29FF931AF05B634C82792CF.mft (raw, json)
Hash identifier: wec28IdYRFsrbXXKQ8PMxH0nyX6b6JsU8028OQ3SO4w=
Subject key identifier: D2:63:C3:7C:A1:93:37:76:6E:DC:5D:1B:60:B7:64:6B:B7:E4:FB:01
Authority key identifier: 21:7E:AB:37:EE:C2:C4:60:E2:9F:F9:31:AF:05:B6:34:C8:27:92:CF
Certificate issuer: /CN=217EAB37EEC2C460E29FF931AF05B634C82792CF
Certificate serial: 6511E97FDA824D9E5A20198E7A116A533AF14E7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft
Manifest number: 0133
Signing time: Tue 04 Nov 2025 04:09:59 +0000
Manifest this update: Tue 04 Nov 2025 04:04:59 +0000
Manifest next update: Sun 09 Nov 2025 19:50:59 +0000
Files and hashes: 1: 3134382e3231342e302e302f31362d3234203d3e2032373038.roa (hash: XQiUkKBu6wXM+gexa9UmCy1etG815t2gAgit917BbhY=)
2: 217EAB37EEC2C460E29FF931AF05B634C82792CF.crl (hash: xWe8p6oLpFcF+s+tDPcwNFFaQlvBJeybhDE9PTdPRuM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.crl
rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:11:e9:7f:da:82:4d:9e:5a:20:19:8e:7a:11:6a:53:3a:f1:4e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217EAB37EEC2C460E29FF931AF05B634C82792CF
Validity
Not Before: Nov 4 04:04:59 2025 GMT
Not After : Nov 9 19:50:59 2025 GMT
Subject: CN=D263C37CA19337766EDC5D1B60B7646BB7E4FB01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:b0:a9:32:ce:ba:2e:65:7e:d0:95:fc:d2:
18:95:44:99:cc:ea:89:de:79:95:aa:da:51:5c:ee:
1c:a8:10:90:6c:9c:f9:f1:2b:b8:ea:3e:92:8e:a1:
1b:6f:48:73:bc:42:df:c4:19:ab:3f:34:e9:37:77:
9d:39:37:6c:eb:38:65:fa:14:c6:cd:b8:34:88:54:
ae:38:cf:eb:43:56:67:4f:10:65:e0:b3:52:8c:68:
fd:cf:9e:22:4d:55:c8:83:ca:35:4b:ec:26:ef:d5:
00:8e:7f:d6:eb:21:ab:75:f3:b6:47:e7:ff:bb:53:
51:db:33:67:0b:1c:2a:f7:28:01:45:d0:af:6a:eb:
54:5d:d7:aa:34:9c:7c:58:9d:21:38:9a:e7:95:c0:
11:96:a1:ce:1c:0f:c9:c9:71:5f:83:a4:e1:1d:2c:
c9:dc:a7:b3:2b:ee:ce:6c:0c:c0:1a:72:d0:67:41:
a6:a8:6f:68:f7:78:94:53:57:4f:d1:36:a6:f9:b5:
15:86:92:bc:26:58:08:bf:50:d7:07:85:20:b7:8a:
9e:83:1c:e4:29:b2:4f:97:b4:33:24:83:ee:40:b9:
9a:f3:e2:7c:9c:64:53:4c:81:e5:11:74:cf:78:1c:
5e:22:e6:b2:21:29:54:9e:00:3f:c6:d4:2b:70:22:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:63:C3:7C:A1:93:37:76:6E:DC:5D:1B:60:B7:64:6B:B7:E4:FB:01
X509v3 Authority Key Identifier:
keyid:21:7E:AB:37:EE:C2:C4:60:E2:9F:F9:31:AF:05:B6:34:C8:27:92:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7c:99:11:eb:9c:80:b5:2b:05:d0:9a:07:5a:90:22:b4:c7:
b2:10:79:20:14:30:b1:f2:67:d6:d0:cd:c5:23:50:84:2d:9e:
b4:fb:bb:29:f8:72:a2:39:9d:ee:2b:08:e1:16:97:43:97:9e:
f1:9e:62:e9:ff:68:94:a0:f6:b5:93:ad:58:98:fc:47:36:d0:
cc:57:2d:68:c5:1d:e8:c7:4d:6a:b3:79:f1:50:79:a7:9a:c2:
f1:6b:c8:36:19:4a:50:83:25:cd:a9:a9:ae:e7:71:90:3a:cf:
93:0a:4f:1f:57:5d:95:76:cc:15:0e:9e:d2:8c:e4:9f:e0:e0:
d2:58:60:ff:0e:a7:c9:e1:c0:49:15:5a:25:b0:51:e9:78:80:
bf:9f:db:f5:1b:9f:f0:3b:b0:a3:14:e7:1c:4f:ce:de:f6:a9:
a0:c0:75:ba:de:d4:df:11:72:3d:ec:55:9c:bf:08:8d:05:48:
10:d3:51:e5:08:1a:b7:d2:f8:fb:f1:9b:ec:e0:e0:a9:5b:5a:
ed:24:d7:b4:94:3a:84:25:ec:92:50:a1:72:8f:3e:f9:0a:6e:
0e:a9:0c:c6:fc:4e:ce:0d:0e:be:4d:43:d9:8b:d9:80:72:bc:
76:12:ce:c7:5b:40:58:8f:9c:31:0c:18:d2:65:d1:e5:a0:44:
c8:3b:3f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:43:43 2025 by rpki-client