
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.mft
File: 32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.mft (raw, json)
Hash identifier: 6lCVwvJmnGFK2qIQmShPntv3KS7uMnRDKQ+b9QvMCPU=
Subject key identifier: D9:11:C5:FE:C9:FA:FC:D6:19:4D:91:D6:A6:DB:69:A7:6B:1B:11:7C
Authority key identifier: 32:12:39:28:A9:60:2F:65:F7:BB:4E:2F:B1:1B:F6:F3:BB:3B:F4:B5
Certificate issuer: /CN=32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5
Certificate serial: 7DBFEBE6A53BF59F1830CC2574C7BA81B07953EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.mft
Manifest number: 0132
Signing time: Mon 03 Nov 2025 17:54:22 +0000
Manifest this update: Mon 03 Nov 2025 17:49:22 +0000
Manifest next update: Sat 08 Nov 2025 22:00:22 +0000
Files and hashes: 1: 3139312e39382e3231362e302f32312d3234203d3e20323633323139.roa (hash: O3MQcFZPgYmpPZyK5l3h3G7OCuAOcNPwRChYojOBKK0=)
2: 323830333a386138303a3a2f33322d3438203d3e20323633323139.roa (hash: ZVUlOq0ieLuG3lvyYVnujrmf2gDXgdlGcn5rZvPkztg=)
3: 32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.crl (hash: 6pxwwlIM0b+xBg9EPJb5PKPgDDPmY6ERkGhmnMkIic4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.crl
rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:bf:eb:e6:a5:3b:f5:9f:18:30:cc:25:74:c7:ba:81:b0:79:53:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5
Validity
Not Before: Nov 3 17:49:22 2025 GMT
Not After : Nov 8 22:00:22 2025 GMT
Subject: CN=D911C5FEC9FAFCD6194D91D6A6DB69A76B1B117C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:9f:84:fb:dd:f2:db:e6:33:74:50:0c:dc:
db:e6:fd:28:18:f6:ca:a6:3b:0c:7d:73:49:d7:81:
4e:0c:4d:97:41:4e:ca:5d:fd:2f:0a:4b:a7:84:7a:
ee:58:eb:d3:39:76:fa:49:f5:05:75:76:cb:73:33:
95:2b:e2:6c:c8:f3:91:99:03:92:a7:15:99:ec:1f:
77:72:91:c8:b9:d4:42:36:5b:49:10:28:9f:0a:10:
99:1d:47:c8:a6:35:a6:ea:c5:14:af:c6:31:35:ef:
47:36:9d:d6:86:25:52:dd:4b:e8:72:4f:86:ad:1a:
12:c3:3a:1b:42:66:a6:8a:d5:d3:b3:9a:86:b4:62:
6c:10:f1:da:de:1a:32:31:b3:9a:c9:a1:dd:7e:5c:
24:5b:9e:56:a8:6f:fd:90:f4:3c:ff:6b:49:49:6c:
24:2e:95:c5:88:91:4f:82:92:17:85:aa:a9:84:cb:
7f:5f:e5:97:d4:f3:1c:0a:55:53:fd:2e:72:77:02:
4d:61:67:22:35:96:3f:71:c0:0a:7b:92:97:da:7f:
c8:c7:9a:58:cb:97:f4:3d:7b:ef:98:9f:0a:55:a9:
da:92:79:f8:36:9f:e4:19:23:cd:cd:dd:18:ef:2f:
ff:43:43:1f:57:55:1c:69:50:46:78:bb:72:18:b2:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:11:C5:FE:C9:FA:FC:D6:19:4D:91:D6:A6:DB:69:A7:6B:1B:11:7C
X509v3 Authority Key Identifier:
keyid:32:12:39:28:A9:60:2F:65:F7:BB:4E:2F:B1:1B:F6:F3:BB:3B:F4:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cd:61:c5:15:71:3a:56:34:09:aa:14:51:72:47:35:4e:41:
33:4f:10:ad:1e:27:35:21:a5:f5:af:31:c0:57:23:96:2f:c6:
8a:2d:ac:98:da:bb:56:31:82:4f:4f:49:b3:5a:49:90:1d:06:
67:c3:03:27:a0:b4:c3:0d:5f:6c:e7:e8:6d:07:f7:08:1d:c3:
fa:f4:a5:b2:fd:a9:3c:f1:df:24:47:7c:0a:0e:a8:68:50:c6:
72:98:81:6f:73:8e:87:12:85:ae:fa:b4:df:fd:e8:c7:f0:a8:
a7:b8:9e:b7:14:e9:76:43:33:5f:e9:44:cb:b5:10:18:6e:28:
7f:a2:66:de:ad:f2:a3:0e:54:3e:21:c9:44:70:9e:f7:a0:ec:
f7:f0:06:5c:82:0b:95:36:29:a7:cd:36:30:8d:ed:bb:50:ea:
b0:71:38:44:31:ba:25:2c:26:60:7b:7f:99:6f:be:4e:fc:f9:
29:dd:98:58:8c:a7:93:c0:e3:3f:bb:c9:34:49:04:69:10:aa:
eb:2b:91:84:9c:43:af:dc:4d:d6:c3:d5:9b:8a:b9:95:80:33:
9b:88:ee:e9:e7:6d:79:a0:88:28:a8:f7:ca:5e:56:0e:1a:6f:
03:8a:3f:9e:14:94:f8:1b:fa:f1:ab:ae:6f:8e:cf:a6:00:40:
6e:fd:55:5e
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUfb/r5qU79Z8YMMwldMe6gbB5U+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIxMjM5MjhBOTYwMkY2NUY3QkI0RTJGQjExQkY2RjNC
QjNCRjRCNTAeFw0yNTExMDMxNzQ5MjJaFw0yNTExMDgyMjAwMjJaMDMxMTAvBgNV
BAMTKEQ5MTFDNUZFQzlGQUZDRDYxOTREOTFENkE2REI2OUE3NkIxQjExN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP0J+E+93y2+YzdFAM3Nvm/SgY
9sqmOwx9c0nXgU4MTZdBTspd/S8KS6eEeu5Y69M5dvpJ9QV1dstzM5Ur4mzI85GZ
A5KnFZnsH3dykci51EI2W0kQKJ8KEJkdR8imNabqxRSvxjE170c2ndaGJVLdS+hy
T4atGhLDOhtCZqaK1dOzmoa0YmwQ8dreGjIxs5rJod1+XCRbnlaob/2Q9Dz/a0lJ
bCQulcWIkU+CkheFqqmEy39f5ZfU8xwKVVP9LnJ3Ak1hZyI1lj9xwAp7kpfaf8jH
mljLl/Q9e++YnwpVqdqSefg2n+QZI83N3RjvL/9DQx9XVRxpUEZ4u3IYshfZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU2RHF/sn6/NYZTZHWpttpp2sbEXwwHwYDVR0j
BBgwFoAUMhI5KKlgL2X3u04vsRv287s79LUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Rjk5NkU3NzdCNEI0MzNEMEQxNkJDMzQyQTIzMTlDODRG
MTFBOTY5Q0E3OUJFRDNFQjUxNDJFNTI1QUU0N0M1LzAvMzIxMjM5MjhBOTYwMkY2
NUY3QkI0RTJGQjExQkY2RjNCQjNCRjRCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjEyMzkyOEE5NjAyRjY1RjdC
QjRFMkZCMTFCRjZGM0JCM0JGNEI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEY5OTZFNzc3QjRCNDMzRDBEMTZCQzM0MkEyMzE5Qzg0RjExQTk2OUNB
NzlCRUQzRUI1MTQyRTUyNUFFNDdDNS8wLzMyMTIzOTI4QTk2MDJGNjVGN0JCNEUy
RkIxMUJGNkYzQkIzQkY0QjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmzWHFFXE6VjQJqhRRckc1TkEz
TxCtHic1IaX1rzHAVyOWL8aKLayY2rtWMYJPT0mzWkmQHQZnwwMnoLTDDV9s5+ht
B/cIHcP69KWy/ak88d8kR3wKDqhoUMZymIFvc46HEoWu+rTf/ejH8KinuJ63FOl2
QzNf6UTLtRAYbih/omberfKjDlQ+IclEcJ73oOz38AZcgguVNimnzTYwje27UOqw
cThEMbolLCZge3+Zb75O/Pkp3ZhYjKeTwOM/u8k0SQRpEKrrK5GEnEOv3E3Ww9Wb
irmVgDObiO7p5215oIgoqPfKXlYOGm8Dij+eFJT4G/rxq65vjs+mAEBu/VVe
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:00:55 2025 by rpki-client