
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.mft
File: 4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.mft (raw, json)
Hash identifier: qRVEKwmv0yuYBUJNkVf2lvMApvkQAfPzT4j8AbDK1JA=
Subject key identifier: B6:8D:BE:7D:6A:64:65:8A:75:97:46:B9:39:B3:5B:93:D9:CA:9B:F4
Authority key identifier: 4C:35:78:9B:FF:FE:0B:4B:4D:1B:26:24:77:AD:44:AA:47:23:EE:20
Certificate issuer: /CN=4C35789BFFFE0B4B4D1B262477AD44AA4723EE20
Certificate serial: 1BD6F635829946EA3F524A699E2BA5EC76C67089
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.mft
Manifest number: 012F
Signing time: Wed 05 Nov 2025 11:11:58 +0000
Manifest this update: Wed 05 Nov 2025 11:06:58 +0000
Manifest next update: Mon 10 Nov 2025 23:42:58 +0000
Files and hashes: 1: 323830303a6163303a3a2f33322d3438203d3e203237383337.roa (hash: MWvdG5rQJ7qvjCEmJlvb7BTn+MZZ4SLnKCKs/oXWc44=)
2: 3138362e312e3136302e302f31392d3234203d3e203237383337.roa (hash: cRsas2z5ueMwSvDi3EZQoEF1y+82k+bb8Zku7YzFlT4=)
3: 4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.crl (hash: cBA4DzgUpWaeSIvPlFd2zWR1CEBBfqFdJTm7aYnP7wo=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.crl
rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d6:f6:35:82:99:46:ea:3f:52:4a:69:9e:2b:a5:ec:76:c6:70:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C35789BFFFE0B4B4D1B262477AD44AA4723EE20
Validity
Not Before: Nov 5 11:06:58 2025 GMT
Not After : Nov 10 23:42:58 2025 GMT
Subject: CN=B68DBE7D6A64658A759746B939B35B93D9CA9BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:a3:7c:b0:85:30:58:75:30:1e:60:02:82:
7f:2f:9a:f0:4b:eb:39:87:0d:fe:1c:57:77:83:51:
b0:71:49:b8:69:35:8d:cc:9f:00:a5:00:4c:e0:0e:
87:57:7c:76:fb:a0:6a:9c:ee:1b:ee:d1:d4:14:e1:
c5:eb:c1:e4:38:0c:5c:d3:d7:46:82:3c:87:8c:f2:
4a:bb:a6:d1:ea:d6:60:37:72:79:7d:c1:ea:32:81:
45:31:29:2e:f7:d9:82:10:66:79:1e:77:c6:c9:25:
25:93:16:b1:a9:13:c5:68:bb:a9:b1:1c:de:4c:60:
e0:44:c6:78:e8:1e:3a:cf:26:cb:e3:0c:86:97:81:
93:2f:05:79:8b:de:93:4b:99:77:4a:f5:f9:d5:08:
3e:73:55:52:d1:80:c4:86:95:2b:bc:0c:48:8e:a3:
41:47:20:c6:5d:29:9e:76:17:ae:9d:5a:95:5c:ca:
23:37:a5:e3:6c:ee:64:51:0c:33:84:bd:13:99:38:
7b:7f:d7:66:28:e7:36:92:0a:9e:fa:59:23:df:62:
86:7d:dc:4a:59:92:69:05:7e:bd:89:7c:b0:b1:b1:
4a:00:2b:29:f3:d0:18:0c:ca:d3:70:6c:46:54:88:
4e:9d:dd:a9:c1:e0:93:fd:29:6f:cd:01:36:cd:75:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8D:BE:7D:6A:64:65:8A:75:97:46:B9:39:B3:5B:93:D9:CA:9B:F4
X509v3 Authority Key Identifier:
keyid:4C:35:78:9B:FF:FE:0B:4B:4D:1B:26:24:77:AD:44:AA:47:23:EE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:57:cc:10:7a:e0:41:56:64:d5:d6:af:fd:1d:f0:43:0b:46:
aa:b1:53:fc:ce:b8:05:b9:91:f4:67:33:9a:59:81:b8:f5:8a:
0f:55:c1:14:52:b4:af:af:3b:81:8e:3b:22:5a:dc:18:f1:e1:
1e:ff:2f:59:6c:dd:35:74:a1:94:1b:cf:0f:98:61:41:ef:9c:
13:38:92:bb:93:3e:96:bb:d5:8f:1a:b1:04:76:5a:6c:6c:42:
73:17:fa:95:83:76:48:03:51:29:fb:06:4a:e8:47:01:90:3f:
a8:d1:5b:92:a8:64:30:ee:0b:8b:22:6d:2b:27:e9:fb:6a:0c:
03:01:b1:71:cd:31:3f:32:16:fe:d2:28:dd:d1:e4:dc:2e:2d:
22:9b:57:de:3c:af:9e:b4:bf:8e:80:f8:1f:ec:75:1a:57:c0:
99:ba:11:52:58:bf:1a:66:09:f0:66:a4:67:42:3a:31:e5:8c:
97:b3:9d:a1:65:0f:02:68:7a:be:92:dd:1f:4e:85:3a:76:61:
cd:01:2f:ea:6c:ce:ee:c6:1f:cb:f1:c4:8a:40:ee:73:a7:a9:
a0:5f:8e:39:6b:cc:e1:a3:84:ac:20:63:8a:46:13:3a:37:94:
6e:09:e7:bf:6c:c2:aa:c1:4f:ee:c2:29:34:a6:6c:3e:bf:15:
cb:c3:59:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:24:51 2025 by rpki-client