
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.mft
File: BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.mft (raw, json)
Hash identifier: 19HGLZ8cn1yhQ7epQlGdbexRpkb2trqD1btJaADKfwQ=
Subject key identifier: 85:64:DB:32:9D:53:0C:94:E3:1C:C6:47:A1:C7:44:F2:8B:B9:C1:DD
Authority key identifier: BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33
Certificate issuer: /CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
Certificate serial: 2FEB03D0F922EDA342EF131CD7B7D44CFB94499C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.mft
Manifest number: 0137
Signing time: Tue 04 Nov 2025 00:27:48 +0000
Manifest this update: Tue 04 Nov 2025 00:22:48 +0000
Manifest next update: Sun 09 Nov 2025 02:51:48 +0000
Files and hashes: 1: 323830313a3135393a323a3a2f34372d3438203d3e20323632313836.roa (hash: 1hePGGPgoiV8lx4DP38r/VYPRaYHUuXiSbJvY9EJwQo=)
2: 323830313a3135393a313a3a2f34382d3438203d3e20323632313836.roa (hash: 8zm4xNcFL7SlxagvzHdX07nd5el59mMkm0NdIqkw/9g=)
3: 323830313a3135393a3a2f34342d3434203d3e203237383137.roa (hash: Bo+hCMqLauaXpHqjqZTr/VJww8CgYmtLlLQqOeiZwnc=)
4: 323830313a3135393a3a2f34382d3438203d3e20323733383239.roa (hash: 6DmjwIl+bKEaqGRRPKbhLlhI8B1p9thqeoTkl+pdlSk=)
5: BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl (hash: tM8rmsZYQZ1nerIACeqZQHsXpu0F+SzP2L+eQZIpks4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl
rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:eb:03:d0:f9:22:ed:a3:42:ef:13:1c:d7:b7:d4:4c:fb:94:49:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
Validity
Not Before: Nov 4 00:22:48 2025 GMT
Not After : Nov 9 02:51:48 2025 GMT
Subject: CN=8564DB329D530C94E31CC647A1C744F28BB9C1DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:ee:29:ae:df:e2:7a:21:98:79:3f:10:32:
cb:60:74:f3:e8:4c:67:fb:63:12:7f:9b:4c:da:ab:
fb:d0:9e:b2:3f:36:80:28:87:5e:31:58:15:bd:b5:
94:ea:d1:8f:8b:71:de:ac:d0:be:18:3a:0d:fc:2e:
64:f2:61:b9:d4:4f:54:d2:e4:e6:f4:72:1a:07:c1:
7c:5f:0f:a8:f4:36:58:ea:c2:16:23:91:17:d3:15:
6e:49:60:e1:ca:b4:4b:85:3f:fa:c0:ae:f0:ec:2c:
d3:d6:07:8b:f0:1f:c5:fa:21:8b:73:28:1b:fb:5d:
24:1c:e8:0c:92:01:ec:43:9c:91:b4:3e:23:17:88:
fa:f1:f8:18:24:07:e2:e1:68:a1:88:a2:c1:ab:bd:
37:db:4d:6e:b0:23:f1:c0:f7:12:10:91:7e:54:36:
cf:9d:3e:49:2e:be:10:3a:17:2a:9f:d7:66:38:fc:
e6:58:e6:8a:4f:79:dd:cf:db:35:75:cb:e0:ba:cb:
b4:5a:ae:e6:79:67:bb:b1:8d:45:14:7a:9b:2e:b9:
84:2e:27:4c:a5:2c:0f:e1:5c:bb:7d:1d:34:61:9b:
8c:45:1f:ff:8b:ea:76:de:36:f9:92:87:81:d2:19:
e4:f1:1f:6d:d4:6a:5a:4a:49:ec:50:7e:ed:3f:64:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:DB:32:9D:53:0C:94:E3:1C:C6:47:A1:C7:44:F2:8B:B9:C1:DD
X509v3 Authority Key Identifier:
keyid:BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:cb:14:73:a9:b1:f0:37:c4:21:4c:34:ed:c7:bc:94:a6:c3:
80:b7:56:67:42:1c:67:20:26:3a:06:5a:bd:f0:5f:93:60:73:
93:15:b1:4b:21:de:95:6d:d6:bd:6c:29:2c:20:a7:f2:2d:74:
82:1c:31:75:71:93:f1:3f:b8:ed:d4:3f:4f:95:97:14:06:67:
18:2c:f1:11:72:6f:c4:99:46:4a:c8:b8:c3:cb:bb:12:42:96:
14:ee:48:2c:6d:95:4e:cf:e9:e7:2f:df:57:c0:6d:1f:f1:de:
00:31:38:f0:9d:28:ed:ee:fd:8e:30:19:a0:f2:87:73:72:2e:
ea:5a:87:85:89:15:64:34:b2:01:74:db:5d:35:d6:d3:27:f0:
23:d0:e5:d3:cb:7d:c3:96:0e:98:c2:3c:14:03:03:31:fe:58:
51:23:77:62:b8:59:0b:a9:5f:a3:80:a8:29:7b:5d:03:52:24:
a7:2d:30:57:61:27:4d:86:65:de:a6:0c:33:38:2c:90:5f:cc:
47:68:9c:f8:35:0f:e7:6d:4a:cc:5d:21:df:83:26:08:c4:b0:
21:7e:fe:e0:27:b8:b2:20:4d:d9:c7:d2:af:f9:ec:00:2e:cb:
4e:d6:65:31:71:b1:69:73:c1:b0:16:a1:95:98:67:83:e5:68:
ca:c6:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:31:49 2025 by rpki-client