
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft
File: 816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft (raw, json)
Hash identifier: MHUk4ixOaCcK9fKu4jRAUrmI7Nz8HlGivBm6D3Zd73Y=
Subject key identifier: 8A:47:E7:16:5F:63:F9:50:94:16:71:EC:C1:F0:C9:A9:A3:F5:75:A0
Authority key identifier: 81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA
Certificate issuer: /CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
Certificate serial: 1F3FD0841F9B2DF803AC734E6A21E65AE580AFED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft
Manifest number: 0132
Signing time: Wed 05 Nov 2025 12:22:36 +0000
Manifest this update: Wed 05 Nov 2025 12:17:36 +0000
Manifest next update: Mon 10 Nov 2025 13:04:36 +0000
Files and hashes: 1: 3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa (hash: 0IZvmdVw1OnqNWzgkmmc0W2z4t0K0Ft/1pKE/P+0/ck=)
2: 323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa (hash: 76qNoueXLScFsrylYdbv1295U/m6qza3H7oqYzVNYUM=)
3: 816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl (hash: FaqI2KqRyYUlxmAWYltGSrcZrzg0yNYAGRVC+JNyG/0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl
rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:3f:d0:84:1f:9b:2d:f8:03:ac:73:4e:6a:21:e6:5a:e5:80:af:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
Validity
Not Before: Nov 5 12:17:36 2025 GMT
Not After : Nov 10 13:04:36 2025 GMT
Subject: CN=8A47E7165F63F950941671ECC1F0C9A9A3F575A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ef:4d:77:ac:d1:18:b2:04:74:38:47:e7:f0:
4f:64:85:3c:0c:00:70:75:4c:c5:31:22:3f:1e:ee:
ad:b6:55:fb:52:69:4f:7b:94:67:14:9e:75:e4:35:
e3:42:63:32:85:ad:30:01:c9:9f:92:ca:de:c4:03:
35:1a:bf:ff:58:8e:d0:e9:16:e4:b4:bc:9b:04:d5:
ad:cd:fc:19:ab:9e:70:3f:d2:3d:2f:d8:35:93:0f:
56:fe:1f:e5:f7:86:34:1e:13:87:56:ae:b1:dd:77:
fc:05:91:37:30:90:0e:4d:32:5e:61:97:c5:e2:9c:
c2:f4:8b:af:43:4f:8c:36:6e:7b:8f:b6:bb:72:f9:
a5:37:fb:a0:43:a4:8f:06:65:05:ae:98:b5:99:7e:
2a:be:f0:57:27:1d:9e:61:6b:18:91:18:0d:07:e1:
8a:19:de:ff:88:90:4d:15:ff:a0:bb:6a:5d:b5:88:
18:29:e4:35:6c:67:f4:9d:bc:bc:31:13:60:07:e4:
06:8a:ce:52:78:25:69:25:a3:4a:b2:71:20:29:8f:
00:10:9e:72:0d:28:55:38:37:05:0a:11:e7:fd:84:
f1:cb:dd:17:22:92:ec:65:93:98:fb:2e:0d:66:58:
4e:43:6f:11:ad:35:75:e7:60:9f:a0:aa:5d:d0:83:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:47:E7:16:5F:63:F9:50:94:16:71:EC:C1:F0:C9:A9:A3:F5:75:A0
X509v3 Authority Key Identifier:
keyid:81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:15:8d:5a:6d:79:41:11:f7:fd:50:9f:1a:b5:5a:7c:7a:fe:
00:75:44:b4:3c:35:6b:6d:14:4f:50:cb:22:9d:a4:30:98:39:
41:13:a7:2d:7c:cb:a3:54:c1:20:21:6b:e8:ad:10:97:41:c2:
79:13:43:d2:a2:f0:3e:c4:c4:97:ec:61:55:77:3c:1c:9d:07:
84:b6:5d:19:59:c4:5e:ee:da:f3:d5:6f:0f:a2:6e:15:ee:ba:
c1:a7:85:27:cc:51:a8:5a:42:db:a1:b2:ef:76:cc:a8:15:8d:
2f:2a:8a:02:37:f1:7c:d6:72:6e:90:67:40:f7:25:af:c8:3a:
a9:ef:64:a6:17:78:78:fc:0e:db:36:ef:58:fd:b1:80:f4:0b:
d0:94:36:74:85:26:3e:79:89:23:b1:65:64:bc:57:6d:5b:5e:
a6:a1:da:eb:55:84:66:41:ff:6c:88:54:a7:34:27:7e:ca:6d:
37:a7:7b:b8:2e:0a:4a:19:31:28:eb:be:5f:a0:f0:bf:ac:14:
09:f8:4c:88:19:73:a1:b7:83:7e:11:a3:ae:84:bf:48:ec:1c:
fb:49:1d:72:6e:84:55:e9:a4:45:d7:f9:9e:43:51:56:3d:93:
39:c2:4b:27:a0:1b:86:01:2e:a5:81:76:dc:9b:57:8a:00:e3:
1c:9e:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:52:13 2025 by rpki-client