
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
File: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft (raw, json)
Hash identifier: yCcDWUMLPbGCOZ+FOdZOaTyNZRe2+u5jAfeYe19cgag=
Subject key identifier: 81:4C:72:86:3C:D3:AD:FF:51:C9:0D:A8:B0:5E:0C:15:55:CC:EB:92
Authority key identifier: 2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
Certificate issuer: /CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Certificate serial: 2FD44BAD3869BA46F44D7D59AE65377287443860
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
Manifest number: 0136
Signing time: Tue 04 Nov 2025 13:20:09 +0000
Manifest this update: Tue 04 Nov 2025 13:15:09 +0000
Manifest next update: Sun 09 Nov 2025 23:50:09 +0000
Files and hashes: 1: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl (hash: Pl13687BH7FgtPyYgxNYrvS6gBWuYj2gmGap9u/zw/g=)
2: 34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa (hash: kOKzUPnxKUHR9eP3xpr7gimXHToWS9fXVFHPwQ+5XHY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d4:4b:ad:38:69:ba:46:f4:4d:7d:59:ae:65:37:72:87:44:38:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Validity
Not Before: Nov 4 13:15:09 2025 GMT
Not After : Nov 9 23:50:09 2025 GMT
Subject: CN=814C72863CD3ADFF51C90DA8B05E0C1555CCEB92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:41:8c:37:81:29:89:80:4c:1f:13:de:37:
2d:70:05:85:90:48:26:f4:28:a5:52:5e:46:ec:0b:
08:a8:ae:01:06:c8:e9:d9:a5:ee:25:dc:4a:91:b3:
f8:85:a4:2b:88:2f:78:31:a0:75:c5:ef:69:78:b5:
fe:5d:3e:7e:21:7f:9a:3a:df:d7:e7:3f:c3:6c:b5:
56:42:46:4d:01:3a:ce:76:d2:f2:2e:e7:d0:b6:03:
98:ee:ce:32:1b:36:95:07:3a:e2:f5:20:6a:98:33:
8d:16:96:f4:1f:90:be:02:b1:d5:35:14:d6:02:0e:
9c:cb:cc:24:be:a5:b3:94:58:59:0f:c9:b3:81:30:
c9:6b:79:87:59:54:3a:b8:7c:2b:5a:28:76:bd:f2:
ae:a2:c9:69:db:66:08:50:d3:14:90:7c:46:87:bb:
1d:73:e6:1b:8a:9c:7c:a8:93:53:8f:85:94:b2:23:
ea:88:16:73:96:f2:7c:cd:02:dc:03:61:15:23:7f:
44:37:cb:d5:e0:c3:c6:77:41:4a:17:2f:ce:a1:63:
e3:c6:08:54:a9:20:f9:25:30:a3:bc:60:80:a3:aa:
36:db:bb:53:9a:45:0d:da:78:e4:da:85:84:7f:40:
6b:75:42:05:cd:60:c3:ad:95:8c:3a:38:4b:aa:7c:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4C:72:86:3C:D3:AD:FF:51:C9:0D:A8:B0:5E:0C:15:55:CC:EB:92
X509v3 Authority Key Identifier:
keyid:2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c1:92:6b:5d:62:07:11:17:a7:db:cb:90:ba:e5:db:24:b7:
7a:ea:bb:17:be:db:56:7f:1a:c2:dd:fa:b4:18:64:5c:04:f2:
fb:84:d5:b4:64:d8:7b:cd:f7:c4:7a:1a:70:ee:33:9d:4f:0e:
b5:5b:1f:8b:6f:dc:84:6c:b5:48:11:f6:97:9b:ad:f4:16:8f:
8a:40:56:5f:f2:5b:1f:b0:b1:3b:a5:19:5c:ba:3c:67:bc:3f:
6e:c2:af:8e:69:f5:7d:76:33:5f:1f:e0:27:cc:63:af:a3:6d:
16:8e:97:83:21:63:0d:53:75:97:c4:e4:5d:51:12:c9:17:18:
b6:91:41:16:20:2a:15:17:53:3d:58:4a:79:a6:b3:8a:89:1f:
f6:bd:b2:8e:99:0a:b5:a7:3d:7a:89:e6:5c:f9:24:55:43:c4:
c2:83:e5:d0:4a:95:60:a8:0e:19:60:21:7b:b2:fd:df:22:98:
22:dd:56:a8:0a:4d:67:55:5d:8b:86:50:fa:8a:31:6f:16:41:
67:24:a0:e1:1e:05:3f:9f:21:37:f6:df:04:0f:83:b6:33:1a:
db:3e:ab:90:de:dd:1e:ed:cd:1d:55:08:89:40:a4:73:da:03:
f6:62:e3:9c:0e:99:94:7f:10:a4:1e:c4:cd:9b:a1:29:c2:98:
80:90:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:49:25 2025 by rpki-client