
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
File: D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft (raw, json)
Hash identifier: WNX8wIJlNVLVL6ekHypmVE0jX4Rw++vzcf12ibEyVJA=
Subject key identifier: E2:CF:66:6D:59:F4:24:9A:13:2F:AF:1F:C7:0C:85:8C:38:50:BE:A8
Authority key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B
Certificate issuer: /CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
Certificate serial: 6E4885E322B1C1D3F7E8FA542E5A958D06F02349
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
Manifest number: 0139
Signing time: Mon 03 Nov 2025 14:02:06 +0000
Manifest this update: Mon 03 Nov 2025 13:57:06 +0000
Manifest next update: Sat 08 Nov 2025 19:03:06 +0000
Files and hashes: 1: 323830333a623230303a3a2f33322d3438203d3e203532323431.roa (hash: 3On1XVpEl3GN2nuqEyHkkVcnUfGWvNLDTKqn000MRF0=)
2: 3139302e39392e39362e302f32302d3234203d3e203532323431.roa (hash: O/46B4/u/eHOyJFeGsRSsHAhdDpnVI0nukknP3HeWiE=)
3: D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl (hash: AIBEliNHBZ5GU832KL6AEfeH94l4iaSP6c7AlRvItyE=)
4: 323830333a623230303a3a2f33322d3438203d3e203532333636.roa (hash: XKA1MlyxnJrXu8kNyuF9oL4/BFd9LVJobp86M1utvUE=)
5: 3139302e39392e39362e302f32302d3234203d3e203532333636.roa (hash: c7Jd2Hfbf5O72dBsGLHG8rBE6OFkyBn9EV8Lu0DYYmc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl
rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 19:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:48:85:e3:22:b1:c1:d3:f7:e8:fa:54:2e:5a:95:8d:06:f0:23:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
Validity
Not Before: Nov 3 13:57:06 2025 GMT
Not After : Nov 8 19:03:06 2025 GMT
Subject: CN=E2CF666D59F4249A132FAF1FC70C858C3850BEA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2e:4b:0e:f5:e0:c7:9e:a7:45:98:67:7c:5b:
c3:db:7a:22:ec:92:12:3c:29:69:bc:d2:5d:db:38:
21:9e:7f:87:87:56:7c:4c:03:60:a2:e5:46:70:5c:
96:03:8e:4f:ef:ff:8c:78:bc:ff:97:4b:c0:69:08:
a9:2a:64:13:e5:99:65:3b:76:2c:ae:33:71:e4:a5:
34:11:c5:0b:46:a3:76:83:12:ef:c2:3d:bb:2e:7c:
1b:a5:1c:a7:88:99:e1:11:47:de:25:60:69:4f:a7:
c5:06:cb:dc:bf:bc:e3:8d:55:30:9d:74:11:8b:55:
11:c0:e5:d6:fe:12:50:f6:7b:db:ee:98:29:d4:94:
82:4c:36:3e:c5:88:5b:f2:51:32:ea:52:80:7e:ee:
f5:ce:66:58:bd:09:40:6b:eb:d2:05:80:9e:a8:37:
17:b8:6b:49:1d:de:32:01:52:4b:b4:0d:80:64:68:
41:69:5b:0c:d6:f6:f0:3a:c6:67:49:ca:ee:09:a4:
c8:35:be:0c:07:bc:f3:59:45:51:b7:12:f0:ed:3b:
5b:af:8d:b4:bb:1f:ff:84:c1:9c:84:8c:51:e5:1e:
fd:c2:c2:29:b4:50:8b:53:79:84:7d:6a:2b:2f:32:
5c:4c:54:b9:88:51:92:fd:3d:f3:a7:44:c7:4e:8f:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CF:66:6D:59:F4:24:9A:13:2F:AF:1F:C7:0C:85:8C:38:50:BE:A8
X509v3 Authority Key Identifier:
keyid:D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2b:2e:bd:6e:93:41:f4:90:8d:e5:b4:36:e8:f2:97:7a:ab:
ba:75:7e:85:19:d4:ac:99:ad:96:5a:f1:bd:0d:a6:11:b2:fa:
86:4b:60:9e:b5:f8:b6:49:0d:2b:3e:1b:60:a1:ee:69:8d:0a:
92:dc:7c:5c:01:ba:7a:c9:73:99:ab:47:9a:e0:4d:8f:02:91:
79:89:48:27:81:bd:c3:5d:24:95:6a:31:0c:3a:61:cc:35:b4:
0c:00:e0:4c:4d:72:25:dc:24:37:07:f9:d7:91:f1:71:88:da:
3e:13:bf:a2:9a:83:ac:57:56:ea:40:7c:3d:b6:66:f5:08:e1:
7a:f5:e9:96:f0:c6:8b:3d:39:c4:e2:82:9c:f2:64:a0:8d:59:
f3:c4:70:18:10:db:06:ad:4a:2e:43:1a:4b:06:97:09:04:e8:
b7:f1:70:95:50:8c:e2:fd:d7:7b:29:f0:d0:cf:b2:a2:bb:07:
07:ce:7a:8f:93:11:42:33:a9:60:1f:db:3b:c4:01:7d:98:61:
a7:b4:8b:42:7f:f9:2b:f6:c3:e2:d2:71:9a:e2:e0:c7:8a:97:
d3:e9:81:52:04:2c:fe:08:72:79:f2:e5:51:f8:19:1d:ec:98:
c0:14:11:20:d4:3c:19:06:80:4f:79:83:77:c3:fe:83:37:33:
09:64:4d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:24:45 2025 by rpki-client