
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
File: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft (raw, json)
Hash identifier: egxiACeOs9qUjR/WtIdEXZH69Pz7ylzedAqISuHSVAQ=
Subject key identifier: A2:4B:70:70:F8:6B:74:75:2A:7B:ED:50:4E:30:7B:DC:2F:C2:B0:66
Authority key identifier: 9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF
Certificate issuer: /CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
Certificate serial: 56981B753B45E4E4B2F65B9AA5DEDF55A7036FFE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
Manifest number: 012B
Signing time: Wed 05 Nov 2025 05:54:12 +0000
Manifest this update: Wed 05 Nov 2025 05:49:12 +0000
Manifest next update: Sun 09 Nov 2025 19:18:12 +0000
Files and hashes: 1: 34352e3233322e3132302e302f32322d3234203d3e203237373335.roa (hash: qFQcyt6mjuuWxr31xcmCwMXo3qzlGX+FFhSurKpopCQ=)
2: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl (hash: 422wElp6OivIrYuyZnfr7SvGhWOP3I66qap7QQorSOY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl
rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:98:1b:75:3b:45:e4:e4:b2:f6:5b:9a:a5:de:df:55:a7:03:6f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
Validity
Not Before: Nov 5 05:49:12 2025 GMT
Not After : Nov 9 19:18:12 2025 GMT
Subject: CN=A24B7070F86B74752A7BED504E307BDC2FC2B066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:c9:b4:cd:9d:d9:6d:44:2d:1c:05:60:86:
f9:79:d0:c1:b4:0b:80:e3:5a:60:da:7d:02:5b:af:
18:80:bc:41:d2:46:a5:56:97:00:c4:1e:09:8e:53:
25:db:d2:48:84:21:e7:31:22:ec:b1:0b:b1:ef:af:
67:a8:c0:bb:e2:a9:30:45:5f:00:57:8d:d8:56:2c:
2f:62:ab:9a:64:cc:8a:f5:86:fa:ae:23:60:c1:1b:
c3:19:2e:95:91:a6:3f:28:c9:9c:89:8d:66:51:0c:
8a:6a:18:4d:da:fe:3a:27:84:32:3b:c4:9f:5b:ee:
e4:1f:5c:03:51:21:c9:aa:a7:1e:b0:67:ef:4f:93:
c3:b9:ab:9c:b1:6f:59:3b:f9:da:06:9a:b2:47:b9:
33:fb:97:79:af:80:c3:ab:3b:2d:37:79:c0:d7:98:
fc:df:a3:a2:f1:7d:79:6c:9a:bd:0d:fe:38:d2:69:
0b:30:5d:d7:01:f1:7e:d6:43:58:3e:6f:a8:7f:be:
fa:30:a4:05:73:a1:14:de:fb:8d:2d:4f:e4:0a:55:
df:2c:67:6b:9b:dc:48:1e:12:8f:b8:a2:98:46:33:
c6:99:99:bd:63:f1:cd:a1:76:35:ba:4f:b2:80:f7:
ca:74:2a:72:37:09:65:94:96:99:7c:34:c8:42:70:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4B:70:70:F8:6B:74:75:2A:7B:ED:50:4E:30:7B:DC:2F:C2:B0:66
X509v3 Authority Key Identifier:
keyid:9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:42:f1:89:4c:94:f3:6c:c9:42:9b:49:e8:f4:ed:f9:c9:0c:
e0:f5:63:94:d1:f3:0f:37:2a:2e:5d:36:75:68:d7:e9:67:a9:
09:7d:ed:31:76:2a:a8:f5:3e:f5:cf:34:35:39:bc:c9:71:63:
6e:03:2c:00:04:52:af:b7:b2:44:b1:54:7a:69:0e:a6:ca:88:
2c:29:fd:ce:3b:e1:2a:89:9c:60:38:2d:8e:8f:38:7d:50:20:
48:f0:16:10:3f:71:6f:e1:c5:02:c6:a2:b3:66:35:8f:f5:3d:
54:7e:2b:fe:f9:15:10:2a:81:18:4a:60:59:87:bb:3f:3c:e8:
e8:86:b9:d9:20:a9:df:23:3d:ca:a9:15:a1:9c:67:e6:84:b0:
bc:5d:88:86:11:47:c0:7d:3f:e7:d3:e1:a6:05:fc:10:02:a9:
c0:8a:da:34:f0:94:28:50:4c:d5:a6:d0:ac:ea:fc:3e:73:36:
ae:b9:23:3b:82:0a:e1:3b:59:8a:d4:ba:57:88:fc:66:98:d9:
1d:fd:4a:5f:57:74:73:32:0e:82:d1:9b:87:23:2d:68:f8:82:
e3:ed:c0:f9:4e:68:9b:58:13:ee:51:d8:96:4a:15:00:cd:d9:
21:d4:40:b1:81:2d:7f:1f:26:3a:50:ae:82:48:30:bb:42:2c:
49:d3:0a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:25:15 2025 by rpki-client