
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
File: C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft (raw, json)
Hash identifier: Z9FlRVXO/rV+Damp1UmK40L+4UutOOThbxfu9I7TDS0=
Subject key identifier: 4C:1D:B4:89:F6:3A:05:38:6C:35:11:DA:C0:B0:CF:32:9D:F3:87:3D
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Certificate issuer: /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial: 0BAC3630A02D8CD5342D349DA3168CD16B9E4A11
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
Manifest number: 0131
Signing time: Tue 04 Nov 2025 16:36:56 +0000
Manifest this update: Tue 04 Nov 2025 16:31:56 +0000
Manifest next update: Sat 08 Nov 2025 18:24:56 +0000
Files and hashes: 1: 34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa (hash: lEURVICemMAmm2uVPiaZ8QRu10QhkFKhSIbDc9IXzyk=)
2: C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl (hash: jLKJQRjrz8SGvLNNy2/vyUPnH/VXgaXSdmK0qikXguI=)
3: 323830333a396632303a3a2f33322d3332203d3e20323636373830.roa (hash: lGf/40HehSbEHBpChK1MHo9fvFYVZWszKBTsZ5CAIRI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 18:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ac:36:30:a0:2d:8c:d5:34:2d:34:9d:a3:16:8c:d1:6b:9e:4a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Validity
Not Before: Nov 4 16:31:56 2025 GMT
Not After : Nov 8 18:24:56 2025 GMT
Subject: CN=4C1DB489F63A05386C3511DAC0B0CF329DF3873D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:e6:9e:87:e4:82:76:0e:7b:ef:7a:5d:40:
0f:b3:a4:59:5b:96:10:d3:b9:19:de:01:51:26:12:
ea:84:5e:ee:24:a3:85:a7:34:82:cb:9c:c6:ea:53:
2d:53:67:e3:e0:15:2b:7b:aa:50:26:ac:f9:f0:c1:
48:ee:32:c6:84:4e:7f:bf:f5:7e:b4:07:4f:b6:ff:
d7:a3:87:23:29:30:7a:0a:d1:77:d0:b1:9c:d2:e8:
ee:32:f3:69:aa:b7:d9:3e:5f:8f:a9:25:f5:a1:04:
1f:09:f0:1d:94:15:50:ed:81:2a:63:f5:59:3d:ab:
1d:6d:4c:1d:c7:e0:15:df:94:80:53:df:11:00:b1:
81:00:9d:26:45:36:8f:23:d7:8e:b9:06:63:bf:18:
5e:cb:ca:ca:44:93:b8:c9:23:04:b3:43:11:2e:03:
eb:7c:a2:a1:5e:d7:be:e5:c9:12:19:40:7e:79:fd:
63:e3:75:86:3b:c9:11:4f:2d:19:ba:fd:f6:75:01:
78:22:8a:03:80:a3:e2:8f:7d:08:21:1d:d4:79:d9:
7f:ee:dc:4f:25:fd:ca:02:b4:f0:c9:fa:07:00:df:
bf:d9:98:32:f9:58:04:df:f6:d9:c8:ca:a0:77:8f:
dc:33:e2:08:c6:5a:07:16:33:16:18:1a:c2:e2:35:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1D:B4:89:F6:3A:05:38:6C:35:11:DA:C0:B0:CF:32:9D:F3:87:3D
X509v3 Authority Key Identifier:
keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:36:ec:bb:65:94:dc:81:c7:33:26:f2:ff:71:86:fd:57:00:
5c:ba:64:08:4a:b6:f0:fe:73:18:51:3c:dd:e8:33:89:92:59:
c0:d5:ff:8a:28:37:ba:b9:39:af:49:5b:c0:b0:c2:cc:6c:9f:
99:7f:fa:58:06:4b:7b:cd:86:84:5d:8b:d8:da:dc:7c:e9:e3:
f4:6b:f8:6c:e0:5f:73:5b:02:20:ce:83:97:5c:78:c9:63:b9:
aa:e8:d6:7f:8b:b5:02:89:c3:1e:0b:6f:95:b6:9a:ec:73:4d:
9d:06:bb:7c:dd:4a:61:44:75:f2:4f:b5:b1:29:db:5f:92:fc:
a1:49:aa:82:e7:19:04:f1:7f:e2:ac:a9:0d:b3:0a:ce:6e:6a:
c9:2c:e9:cf:6b:c8:e9:2b:ce:8b:46:1a:82:de:21:e9:88:13:
9d:de:fc:38:33:f1:1c:7b:c4:66:60:8d:60:bb:8c:2d:c8:77:
a8:99:c4:45:49:72:78:ac:d9:95:f4:21:35:b3:e4:72:f0:27:
c9:4f:f0:24:34:10:dd:7e:96:7f:d0:8f:27:48:15:0e:f7:79:
2b:0b:8b:c5:2f:d8:2a:d1:e5:2d:64:71:c6:6a:14:61:2c:16:
e7:b5:b6:b3:a6:bf:0a:9d:07:12:02:9b:98:42:45:e5:45:01:
5d:de:e5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:30:37 2025 by rpki-client