
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/7868C8505B52C8303D8289F2104AC607113D9295.mft
File: 7868C8505B52C8303D8289F2104AC607113D9295.mft (raw, json)
Hash identifier: KpMohEeYnpkfFbyGtUDSrcL1mXWxJjo2RTc83EcuuFA=
Subject key identifier: A2:F3:DF:35:56:C7:F9:CA:C9:A3:CE:FF:B9:1A:14:9E:87:E5:80:B2
Authority key identifier: 78:68:C8:50:5B:52:C8:30:3D:82:89:F2:10:4A:C6:07:11:3D:92:95
Certificate issuer: /CN=7868C8505B52C8303D8289F2104AC607113D9295
Certificate serial: 52D9B1D743DA223E0E374DD716D1A13EF34F00C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7868C8505B52C8303D8289F2104AC607113D9295.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/7868C8505B52C8303D8289F2104AC607113D9295.mft
Manifest number: 0139
Signing time: Tue 04 Nov 2025 20:44:12 +0000
Manifest this update: Tue 04 Nov 2025 20:39:12 +0000
Manifest next update: Sun 09 Nov 2025 17:24:12 +0000
Files and hashes: 1: 7868C8505B52C8303D8289F2104AC607113D9295.crl (hash: rCR9uBD5TmyHAa611hp8h/jmYv+tSxz10FZGdzFqjxM=)
2: 34352e3232362e3232342e302f32322d3234203d3e20323635383636.roa (hash: mnr43Kw+WsEuKzhHQwr/G4FmJr6mceb1uF0mTF7KVIE=)
3: 323830333a643632303a3a2f33322d3332203d3e20323635383636.roa (hash: AKsy6IGETXRAR+8N0Sf6xXs3JG8FkxSrF9ce+QO9cM8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/7868C8505B52C8303D8289F2104AC607113D9295.crl
rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/7868C8505B52C8303D8289F2104AC607113D9295.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7868C8505B52C8303D8289F2104AC607113D9295.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:d9:b1:d7:43:da:22:3e:0e:37:4d:d7:16:d1:a1:3e:f3:4f:00:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7868C8505B52C8303D8289F2104AC607113D9295
Validity
Not Before: Nov 4 20:39:12 2025 GMT
Not After : Nov 9 17:24:12 2025 GMT
Subject: CN=A2F3DF3556C7F9CAC9A3CEFFB91A149E87E580B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:ba:69:15:21:4b:ef:35:82:72:31:d1:35:
d5:25:58:12:66:db:23:67:5f:74:6c:c3:fc:43:77:
2a:51:6c:a3:ce:f9:e4:78:5e:26:f0:45:01:ff:3e:
2b:68:97:e5:87:94:aa:be:a4:4b:c0:57:46:e8:80:
08:36:1c:d2:b9:e8:ca:77:d1:ad:24:a1:a1:02:dc:
33:3d:80:ec:bf:b9:8e:bc:28:f1:33:0b:1b:b6:2b:
55:6b:26:e5:73:f3:e8:d4:88:e4:98:74:36:67:76:
05:f1:92:5d:9a:65:9a:ab:6f:0e:0d:89:bb:f1:8e:
34:25:6f:8d:8f:bd:d2:41:f0:8e:13:43:43:8f:60:
5f:f5:72:3a:a6:f8:ca:59:f7:4d:f4:21:64:6d:72:
56:a0:3e:7c:3d:41:01:e7:55:bb:18:7c:1c:21:f7:
86:d8:12:1f:26:1c:f1:6c:b6:4f:61:79:39:e2:f4:
ce:be:80:17:c4:20:42:b6:b9:d2:29:cf:dd:cf:76:
7a:7c:ff:1a:ef:9e:62:e8:a9:3a:88:f1:45:7a:7b:
7b:99:05:32:11:95:69:11:d9:8f:bb:0b:ad:04:ca:
ba:6e:2e:20:ba:45:bb:c2:39:ac:08:35:61:75:83:
33:75:86:0c:d3:a3:71:6b:77:b2:c8:72:35:ab:5a:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F3:DF:35:56:C7:F9:CA:C9:A3:CE:FF:B9:1A:14:9E:87:E5:80:B2
X509v3 Authority Key Identifier:
keyid:78:68:C8:50:5B:52:C8:30:3D:82:89:F2:10:4A:C6:07:11:3D:92:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/7868C8505B52C8303D8289F2104AC607113D9295.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7868C8505B52C8303D8289F2104AC607113D9295.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/7868C8505B52C8303D8289F2104AC607113D9295.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e8:e8:9f:b3:be:a2:59:69:0d:9e:a2:cb:cc:6d:2d:56:ab:
d7:8a:c4:9c:6c:01:af:44:e4:72:35:e7:e3:27:1b:27:5f:c4:
3b:5b:59:a1:8d:d9:67:35:ba:cf:61:2c:a4:2b:7e:73:2f:21:
99:9e:c4:5e:0e:e5:4d:7e:6c:e5:7f:cb:72:81:80:3e:82:ed:
3f:76:ec:6f:26:45:89:f7:48:7b:99:ba:07:f8:ed:91:fc:9c:
71:69:4d:28:96:20:23:58:5a:d1:a1:42:ed:cc:2e:0b:f3:15:
0a:30:06:38:99:40:56:3e:a8:68:29:23:02:e3:5d:ea:a9:d1:
a8:48:92:7a:02:ad:71:43:2e:11:63:18:8d:c0:37:1d:0b:bf:
54:f2:4c:51:88:73:02:0f:eb:0d:0c:31:0e:c6:93:45:f1:69:
b5:ee:0c:dc:b4:4a:f6:ec:bc:fb:ed:25:bf:c5:46:9e:f0:a9:
eb:f3:80:11:46:87:e7:0b:fa:29:8b:bd:d8:89:aa:ab:54:ef:
af:51:9f:da:8d:e0:4d:bd:21:81:0a:63:5c:dd:49:5e:18:54:
f2:49:3f:00:c8:fb:39:14:f7:7a:37:1a:c8:5a:3f:2e:82:66:
04:b7:4c:49:40:a8:99:b8:cf:9f:af:71:81:f0:e0:ad:3f:fc:
3c:f1:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:43:24 2025 by rpki-client