
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
File: 5021716DB872AFEA302E881734C3D03B1DCE1384.mft (raw, json)
Hash identifier: RldD72wiiGhVCsBd3PrKnIilaF2y86I6KWHyoondVYA=
Subject key identifier: E2:0B:7C:53:14:42:76:83:41:65:CB:99:E9:4A:6B:12:63:D7:7F:56
Authority key identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84
Certificate issuer: /CN=5021716DB872AFEA302E881734C3D03B1DCE1384
Certificate serial: 53E23EE7B55705A6F59EC106AFD8641513871419
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
Manifest number: 0130
Signing time: Wed 05 Nov 2025 06:14:21 +0000
Manifest this update: Wed 05 Nov 2025 06:09:21 +0000
Manifest next update: Sun 09 Nov 2025 21:47:21 +0000
Files and hashes: 1: 5021716DB872AFEA302E881734C3D03B1DCE1384.crl (hash: Et0NzEQJeEvoZh/EOKm6rjnu8lfRPM0esBd3RJscxQU=)
2: 323830333a613339303a3a2f33322d3438203d3e20323733303135.roa (hash: 2oSwKrz6vwox7aQCuIM+FoLcJChYMj4MeA8HE/N/tRY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl
rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e2:3e:e7:b5:57:05:a6:f5:9e:c1:06:af:d8:64:15:13:87:14:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5021716DB872AFEA302E881734C3D03B1DCE1384
Validity
Not Before: Nov 5 06:09:21 2025 GMT
Not After : Nov 9 21:47:21 2025 GMT
Subject: CN=E20B7C53144276834165CB99E94A6B1263D77F56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:93:ce:79:e5:d8:d9:3e:90:5f:bd:be:15:2c:
16:75:71:a3:35:ff:1d:ee:c1:ec:e7:6a:d1:13:b6:
0f:1d:0c:9b:f1:1d:29:50:22:76:e7:c4:18:3b:09:
0f:89:d1:8a:68:13:26:ad:59:f4:77:08:9f:65:e4:
05:66:8e:0d:d2:84:92:f6:f1:bb:41:bb:43:4e:f0:
f3:32:fa:6d:fb:87:52:41:bd:a6:6b:53:bd:c0:da:
f3:45:c5:7a:46:87:4b:ef:d7:5a:30:58:d6:0f:98:
cc:3e:bb:3f:55:93:e4:f8:e5:ac:15:ef:0c:5e:9c:
6a:92:25:3f:c0:97:bb:64:75:45:76:f4:01:63:70:
70:23:e7:29:ae:24:bb:2d:37:a0:80:07:fd:da:7b:
f8:73:2a:da:a7:b7:94:5e:29:fc:c1:a7:21:de:77:
98:3a:e9:12:2e:04:25:99:e9:9b:86:62:98:7c:2d:
c7:76:9b:7d:45:5c:dc:9a:b8:4c:19:67:5f:e8:83:
15:30:0d:0f:e6:75:73:5e:3f:17:ef:fe:88:b1:75:
d4:05:80:e4:93:22:65:76:5c:a0:7a:4d:1f:99:4d:
1c:b9:15:aa:7a:8f:8e:40:52:a5:ef:33:2a:df:15:
b7:72:25:b7:d9:53:bb:e3:80:c2:df:83:77:b2:bf:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0B:7C:53:14:42:76:83:41:65:CB:99:E9:4A:6B:12:63:D7:7F:56
X509v3 Authority Key Identifier:
keyid:50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b9:be:f2:3f:ce:dd:33:eb:25:5b:af:2c:21:6e:db:da:4e:
73:e4:00:9c:01:49:26:ea:f6:cb:5e:51:94:8b:74:19:ce:fb:
30:f4:e5:bd:fa:aa:9c:b8:d4:4c:c4:8c:b4:ea:d3:bc:9b:a5:
a1:1e:22:9d:1e:66:bb:fe:71:03:fe:48:97:81:1f:b7:ad:86:
d8:b7:fd:b3:09:62:4b:07:06:0f:6c:5c:27:c9:12:78:ff:26:
91:20:df:c9:f2:5b:5a:46:bc:9f:25:76:5b:70:bc:ef:31:61:
ef:8f:e4:4b:ec:56:b1:40:ca:96:a0:9d:11:e7:b5:8e:3d:b0:
fe:a6:c7:02:66:35:66:7a:11:83:d6:4a:d5:41:66:54:ab:2d:
c2:18:a7:7e:13:de:72:36:b6:8d:99:a8:00:7c:44:8c:87:d5:
c5:9d:c5:0d:b8:c8:8b:6a:a1:46:54:d5:d9:b1:22:ea:3a:38:
cd:19:63:17:90:13:27:a2:86:04:1b:ac:39:c6:08:2c:c5:da:
8b:ee:cd:6e:1f:34:9f:b5:83:41:cd:fd:a7:0c:c3:d1:d0:df:
53:91:4d:05:97:64:33:b2:0c:cb:80:0d:2a:81:5f:bd:d0:f2:
fd:9c:50:a6:36:bd:1a:ef:31:b8:0d:e8:35:c4:8a:5c:e7:67:
c9:04:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:08:20 2025 by rpki-client