
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.mft
File: DD2D25C642478D5D4DCAB0135DBBD87109D394CC.mft (raw, json)
Hash identifier: Dktc4Ld9KUi0LHNGOodjuTt85iyKW35bWKDOL8262uE=
Subject key identifier: 90:ED:74:C5:FA:80:AA:37:E0:62:4F:A1:30:4A:7E:9C:31:B6:98:5E
Authority key identifier: DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
Certificate issuer: /CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Certificate serial: 061FCA9582ADA5201445A9B0CD4F72063397AAAC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.mft
Manifest number: 013B
Signing time: Tue 04 Nov 2025 12:49:50 +0000
Manifest this update: Tue 04 Nov 2025 12:44:50 +0000
Manifest next update: Mon 10 Nov 2025 10:34:50 +0000
Files and hashes: 1: 34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa (hash: Cv/PP2Djw7+Q+zMiAM4kvV9DGLhHfY3kkRBsAbR8izE=)
2: 323830333a646461303a3a2f33322d3438203d3e20323731373935.roa (hash: /lpkc1SEFYG/hqiBQeVwyMMXVVaSU26c07bDKvEFbRo=)
3: DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl (hash: DvLDJX3vf7Qa+bIvw6BrtLWbT6mmbo2tJOnsuP6HR9U=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl
rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1f:ca:95:82:ad:a5:20:14:45:a9:b0:cd:4f:72:06:33:97:aa:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Validity
Not Before: Nov 4 12:44:50 2025 GMT
Not After : Nov 10 10:34:50 2025 GMT
Subject: CN=90ED74C5FA80AA37E0624FA1304A7E9C31B6985E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:97:7a:b9:fa:63:da:f7:0d:60:e4:19:ba:
d3:f3:e3:c0:00:0f:75:9b:f4:12:62:7c:d9:bb:08:
31:24:21:14:68:eb:fd:7c:ae:e8:52:57:7a:45:b9:
5b:20:0e:80:57:13:97:a9:61:61:23:f5:0d:8f:64:
27:67:66:a0:33:93:10:84:fd:29:73:cf:13:0e:04:
f1:2c:44:2c:1f:ef:8f:1d:c0:45:73:00:2f:ea:7e:
0d:55:9c:4a:0a:cb:1d:ef:d2:85:d8:1b:6d:42:01:
cc:27:50:e5:6c:6e:92:82:b6:9d:59:63:47:fc:98:
27:62:42:51:ea:29:ca:22:76:e3:e0:0c:d9:a8:c7:
55:ae:dc:3d:fa:43:0b:de:4c:49:3f:41:f5:5e:83:
ea:e6:b4:b5:2d:3f:63:f5:4d:e2:ce:f8:37:a3:ca:
9e:f5:d6:81:12:7c:31:04:77:ea:8d:ff:e9:d8:ee:
b6:10:ec:c9:a9:1d:f6:22:36:fa:49:bd:e2:37:67:
9c:79:ae:a1:59:e4:3c:b3:44:2f:be:3b:3c:09:25:
09:16:e1:1f:a7:20:be:68:a4:a1:7f:57:a9:84:42:
fb:1c:8b:67:0d:26:df:87:7a:9f:26:05:74:8f:a7:
cd:d3:d5:08:55:18:f7:bd:8f:1e:fd:8e:98:09:d2:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:ED:74:C5:FA:80:AA:37:E0:62:4F:A1:30:4A:7E:9C:31:B6:98:5E
X509v3 Authority Key Identifier:
keyid:DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f9:d4:e4:1c:e2:b4:af:a9:74:f7:87:4a:b5:40:21:e4:7d:
73:f7:94:3d:69:cd:17:09:5a:b4:55:38:f0:30:52:2d:8c:9d:
79:33:a7:ad:ce:b7:d6:3f:79:dc:41:8d:f2:b1:59:97:ef:df:
22:bf:8c:6d:01:b3:8f:d6:45:86:d2:02:d8:e7:c7:e2:e7:2d:
3d:5f:a2:c7:93:aa:78:c0:ec:61:b2:37:89:fb:89:74:07:01:
fc:12:98:79:5e:bf:50:5d:84:ec:57:ef:7c:c1:f4:a3:20:fa:
47:1d:47:6a:69:40:98:be:48:73:b2:77:ff:e8:76:31:b1:59:
92:c5:26:aa:79:07:16:ab:ae:35:ce:9f:f3:81:f9:52:a6:d5:
dc:6f:49:aa:b7:17:40:24:5d:b5:ba:99:f8:5e:a7:cf:d8:a2:
56:62:98:a4:34:ba:99:17:72:ff:06:0a:fb:9f:cd:43:56:8a:
7b:e9:ee:9b:9e:e9:c2:10:8b:41:4a:45:7d:f1:a8:d7:f4:83:
6d:1e:b5:f3:3f:67:a2:f2:b0:f0:2e:81:db:ee:e7:84:1a:12:
5d:0f:46:c1:5f:4a:99:29:47:d9:a1:b0:71:bb:36:20:33:81:
de:1d:f7:b8:2a:9f:23:78:48:50:33:19:3f:f6:32:bd:34:db:
c3:b0:70:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:46:47 2025 by rpki-client