
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.mft
File: 6654725F1F6F3373337E7798BC2F48B6CFEC81F5.mft (raw, json)
Hash identifier: rUzI3+YLPBIRQ5l6yR865KmuypeOH0OrDEDC9ySza20=
Subject key identifier: 86:18:8A:44:1C:A8:1E:8C:5F:08:96:67:EA:42:E5:95:9E:DD:74:EC
Authority key identifier: 66:54:72:5F:1F:6F:33:73:33:7E:77:98:BC:2F:48:B6:CF:EC:81:F5
Certificate issuer: /CN=6654725F1F6F3373337E7798BC2F48B6CFEC81F5
Certificate serial: 5921E0E7D630BAAD10F55652691D5B4D3B1DB01E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.mft
Manifest number: 0131
Signing time: Mon 03 Nov 2025 23:27:11 +0000
Manifest this update: Mon 03 Nov 2025 23:22:11 +0000
Manifest next update: Sun 09 Nov 2025 10:32:11 +0000
Files and hashes: 1: 323830333a393531303a3a2f33322d3438203d3e20323639383537.roa (hash: OT/AzeAIQJ+1hRsjfQ/9QfYwpcDMT3J+r68R/nxG5k4=)
2: 6654725F1F6F3373337E7798BC2F48B6CFEC81F5.crl (hash: Q8I0w5oI9Y/icd3PF22lcJV2xHd1kVEaPrYhrc97uJM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.crl
rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:21:e0:e7:d6:30:ba:ad:10:f5:56:52:69:1d:5b:4d:3b:1d:b0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6654725F1F6F3373337E7798BC2F48B6CFEC81F5
Validity
Not Before: Nov 3 23:22:11 2025 GMT
Not After : Nov 9 10:32:11 2025 GMT
Subject: CN=86188A441CA81E8C5F089667EA42E5959EDD74EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:90:e3:db:a2:3e:72:30:11:cb:98:47:c8:45:
2f:20:c1:df:4a:c6:06:34:6e:cb:2f:7a:80:63:d5:
f0:21:24:e0:ce:b6:e0:da:d3:15:3a:05:2e:50:8e:
86:b6:7e:4a:22:4f:0f:fe:09:2e:c5:c1:52:df:9d:
46:80:f7:9e:99:68:53:eb:60:4e:3e:44:d3:d6:e1:
dd:9d:6c:c1:ac:fa:79:2f:c8:5b:eb:70:f8:a5:11:
31:bb:6f:90:e8:d3:8f:3f:a8:95:d5:77:09:5c:34:
29:ad:30:5b:7d:a3:dc:25:b8:60:e3:d1:45:e7:5d:
1e:d4:3b:f6:3f:de:28:2e:c1:21:e6:aa:c6:ce:85:
b1:ab:5d:45:19:3f:da:40:41:e2:3a:d4:b0:f9:63:
3b:3f:16:9e:f5:fd:06:5b:48:cf:da:9a:3f:63:6b:
5a:10:0f:13:48:9c:26:3a:5b:25:2e:bf:19:8c:0e:
da:a6:39:90:de:01:f0:35:f7:0b:c1:1c:c2:c2:a5:
88:f1:a5:2f:e4:45:f5:3d:25:e0:d9:ec:d4:6f:ce:
62:a9:39:10:d8:48:09:17:d6:2f:3c:c4:63:0f:e8:
d8:15:fe:0a:8d:98:96:7d:8e:6b:35:a3:5c:aa:e6:
93:60:3f:f1:01:86:eb:e8:ad:11:b5:99:11:ad:65:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:18:8A:44:1C:A8:1E:8C:5F:08:96:67:EA:42:E5:95:9E:DD:74:EC
X509v3 Authority Key Identifier:
keyid:66:54:72:5F:1F:6F:33:73:33:7E:77:98:BC:2F:48:B6:CF:EC:81:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:32:04:4e:f0:0e:c9:79:a5:f4:8d:d9:cf:52:00:10:d3:56:
b2:50:f5:93:20:7e:cf:22:15:4b:3b:c3:85:70:35:57:98:8c:
27:94:76:1a:75:be:cf:b8:42:ce:54:ad:8a:82:ad:c2:70:2f:
dd:b4:df:d6:27:ba:9c:75:fb:5d:b6:da:e1:a1:68:a4:f8:ac:
21:35:a6:d8:48:46:03:cc:a7:b2:ad:e8:46:b5:6f:9a:7d:f8:
6d:97:f0:85:54:10:89:f3:dc:80:ab:5c:ab:76:7f:79:34:9f:
a3:1e:b7:cc:2c:89:b1:3c:a6:69:c5:83:b7:6f:8c:4d:8d:f4:
3b:42:a9:bb:d9:11:79:18:56:ad:9e:08:08:27:d0:a8:ae:f3:
52:50:57:90:ac:d1:ec:30:9d:b1:36:22:08:8d:4c:34:eb:a7:
ac:be:ef:95:41:93:b0:9b:97:ad:8a:39:27:9f:2c:01:db:09:
0a:47:6b:7c:f4:76:1e:fd:53:45:1e:77:54:58:ef:8f:09:0e:
0a:a8:f4:6f:b4:b8:4d:86:d6:4d:7e:7d:b2:af:d5:e2:4d:51:
0c:e4:7a:f3:f8:82:6e:c5:0f:e7:5e:c5:ef:b0:3a:e0:70:7b:
56:f4:fb:a3:61:f8:bc:6c:90:f2:4a:23:34:ce:34:fe:59:7c:
24:4b:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:15:18 2025 by rpki-client