
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.mft
File: 32ACF58772BC97B9F0D9462619DA1F27850FDDB1.mft (raw, json)
Hash identifier: sCWIhOfvhnInt1+A5vkwHA1ilRw4vQK/OFbt+Vu6KBk=
Subject key identifier: FB:93:80:95:41:78:74:D4:E4:2B:C7:95:B5:99:E6:B8:D5:D4:66:CC
Authority key identifier: 32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1
Certificate issuer: /CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
Certificate serial: 70CE7F6FC7A9BC2601696740A0E77A7B8ABD77DA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.mft
Manifest number: 012A
Signing time: Tue 04 Nov 2025 15:11:07 +0000
Manifest this update: Tue 04 Nov 2025 15:06:07 +0000
Manifest next update: Mon 10 Nov 2025 12:39:07 +0000
Files and hashes: 1: 3230302e38312e3132302e302f32312d3234203d3e203237383133.roa (hash: kUcy35JkGiycoObrHB0bFmTE4j+r5kjZ+YQN/9R4doU=)
2: 3139302e322e39362e302f31392d3234203d3e203237383133.roa (hash: guBf5ZMJy/WmcF51NFynbgGMGUzsU3fGHpkxEZJ+5Sg=)
3: 323830333a396630303a313a3a2f34382d3438203d3e203237383133.roa (hash: qsFqfsA0CgHFgVwScWEzeus2y9aJ95xl6PEREkSjqL4=)
4: 3230302e332e3231362e302f32312d3234203d3e203237383133.roa (hash: lpk9PxRBlykGor1P5tWv+yazJVsfzL6wj9SSK/bKeko=)
5: 3137302e3233382e3132342e302f32322d3234203d3e203237383133.roa (hash: qnXnXuYPXvwJTp2qYnWikgW5Oc+xdclw/p2UsDGU6KU=)
6: 3139302e3135312e3136302e302f32302d3234203d3e203237383133.roa (hash: Rb8Xyh2sGJadGGAsyeMkefNdKDW+z/JKNmMKS4lKUyw=)
7: 3138312e3139392e3134342e302f32302d3234203d3e203237383133.roa (hash: CsA8MB3jlSJs/Cn7zDHSN9deoDZLBqtNwRyeS1l2oaY=)
8: 32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl (hash: kQlDHRif9p1XV/yBrFQ5hvcDbY3NWssk5nW3fq416C4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl
rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ce:7f:6f:c7:a9:bc:26:01:69:67:40:a0:e7:7a:7b:8a:bd:77:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
Validity
Not Before: Nov 4 15:06:07 2025 GMT
Not After : Nov 10 12:39:07 2025 GMT
Subject: CN=FB938095417874D4E42BC795B599E6B8D5D466CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e7:5e:6c:cb:30:7c:dc:50:f7:f5:d9:31:8e:
7f:b5:ba:28:ce:ea:7a:d4:dd:a9:8b:8f:60:13:2b:
d3:46:c4:96:c1:55:70:2b:de:89:73:39:b6:0a:72:
05:33:ad:65:78:70:43:59:7e:ed:cf:0b:4e:d0:70:
aa:a2:88:68:9d:f5:87:0d:ac:a3:72:e4:6f:80:c0:
72:73:49:56:97:0f:60:63:0c:80:7e:71:a3:c3:8e:
42:a7:c8:3d:5e:40:96:a9:d7:1b:41:3c:66:03:32:
22:65:67:5a:30:b3:4c:6b:92:b4:3f:cc:ea:00:ab:
b0:de:18:ea:11:e4:e8:36:8d:e3:04:db:b2:af:fa:
c4:5a:b5:1c:76:e3:10:34:88:ee:97:26:3f:35:7d:
db:a9:93:a0:ff:c3:fc:10:a4:e7:c2:17:db:71:03:
5d:8e:d7:50:4f:59:e2:64:97:81:de:c2:93:b3:61:
57:d5:62:ad:09:7b:87:d3:e3:1f:0c:57:7b:49:34:
dc:4e:e9:8e:73:21:6f:2c:a3:a1:60:c6:e8:6a:e4:
ad:af:95:69:76:5a:8f:ed:25:f4:31:9b:ff:a0:37:
f9:15:b2:ef:18:40:ca:bb:ca:84:5f:7b:34:22:b2:
a6:ef:e1:63:75:24:53:b3:01:aa:ff:07:29:ba:7d:
77:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:93:80:95:41:78:74:D4:E4:2B:C7:95:B5:99:E6:B8:D5:D4:66:CC
X509v3 Authority Key Identifier:
keyid:32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d9:5b:2c:b3:6c:f2:d5:36:43:36:6f:66:00:35:47:fe:b8:
aa:c7:09:34:2c:08:95:97:1c:59:00:07:01:e6:fc:b9:0b:7c:
c2:b4:a6:ca:77:1c:35:6a:51:0a:03:f2:2b:62:95:89:d5:a7:
e0:d1:74:cf:a2:36:51:37:cf:40:7a:37:3e:13:55:5c:d9:ab:
78:de:b8:bd:51:26:56:c0:69:ac:92:61:40:fe:59:24:04:15:
61:ec:61:bb:ec:29:40:27:3b:3c:5b:a7:66:01:26:26:75:ba:
88:29:6a:ec:68:61:d2:3a:23:01:1e:14:9b:54:ae:99:35:f5:
7a:30:6f:25:22:ac:a7:34:e7:c1:36:55:f9:9c:9b:21:b1:6c:
9d:82:2e:05:b1:b8:2b:0b:72:c8:aa:9f:a2:44:93:c4:a4:2a:
bf:e2:b0:96:18:34:ab:07:9b:1c:4d:32:72:86:ff:c4:2d:84:
45:ef:5b:05:7d:a1:ee:0b:a1:55:f1:b5:19:8b:66:83:92:e0:
69:c9:3f:c0:4f:f9:03:ea:4d:d1:25:12:16:aa:92:82:07:71:
db:d8:67:63:eb:ad:e9:18:6f:4f:81:f5:5d:9d:65:e0:32:72:
63:e3:44:ef:0f:cb:c2:d8:fa:3d:55:a3:fe:bd:08:e9:72:0a:
ce:6e:5c:63
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUcM5/b8epvCYBaWdAoOd6e4q9d9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBQ0Y1ODc3MkJDOTdCOUYwRDk0NjI2MTlEQTFGMjc4
NTBGRERCMTAeFw0yNTExMDQxNTA2MDdaFw0yNTExMTAxMjM5MDdaMDMxMTAvBgNV
BAMTKEZCOTM4MDk1NDE3ODc0RDRFNDJCQzc5NUI1OTlFNkI4RDVENDY2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe515syzB83FD39dkxjn+1uijO
6nrU3amLj2ATK9NGxJbBVXAr3olzObYKcgUzrWV4cENZfu3PC07QcKqiiGid9YcN
rKNy5G+AwHJzSVaXD2BjDIB+caPDjkKnyD1eQJap1xtBPGYDMiJlZ1ows0xrkrQ/
zOoAq7DeGOoR5Og2jeME27Kv+sRatRx24xA0iO6XJj81fdupk6D/w/wQpOfCF9tx
A12O11BPWeJkl4HewpOzYVfVYq0Je4fT4x8MV3tJNNxO6Y5zIW8so6Fgxuhq5K2v
lWl2Wo/tJfQxm/+gN/kVsu8YQMq7yoRfezQisqbv4WN1JFOzAar/Bym6fXdfAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU+5OAlUF4dNTkK8eVtZnmuNXUZswwHwYDVR0j
BBgwFoAUMqz1h3K8l7nw2UYmGdofJ4UP3bEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MzdGMDJGNjAwMjMxREM2MzEwRDk0NzI3RTNFMkI1QjNE
MzFENjY2RTI5RjhBODQxN0Y3N0U2NEJBMjI5MzE0LzAvMzJBQ0Y1ODc3MkJDOTdC
OUYwRDk0NjI2MTlEQTFGMjc4NTBGRERCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMkFDRjU4NzcyQkM5N0I5RjBE
OTQ2MjYxOURBMUYyNzg1MEZEREIxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTM3RjAyRjYwMDIzMURDNjMxMEQ5NDcyN0UzRTJCNUIzRDMxRDY2NkUy
OUY4QTg0MTdGNzdFNjRCQTIyOTMxNC8wLzMyQUNGNTg3NzJCQzk3QjlGMEQ5NDYy
NjE5REExRjI3ODUwRkREQjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ2Vsss2zy1TZDNm9mADVH/riq
xwk0LAiVlxxZAAcB5vy5C3zCtKbKdxw1alEKA/IrYpWJ1afg0XTPojZRN89Aejc+
E1Vc2at43ri9USZWwGmskmFA/lkkBBVh7GG77ClAJzs8W6dmASYmdbqIKWrsaGHS
OiMBHhSbVK6ZNfV6MG8lIqynNOfBNlX5nJshsWydgi4FsbgrC3LIqp+iRJPEpCq/
4rCWGDSrB5scTTJyhv/ELYRF71sFfaHuC6FV8bUZi2aDkuBpyT/AT/kD6k3RJRIW
qpKCB3Hb2Gdj663pGG9PgfVdnWXgMnJj40TvD8vC2Po9VaP+vQjpcgrOblxj
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:03:12 2025 by rpki-client