
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
File: AA2338B66632D823F77072125112B5BF1F721769.mft (raw, json)
Hash identifier: gv3VTH1LZeCuF6EtBeVDSi8tQg2AAYXrlSNqp6hJDOQ=
Subject key identifier: 2E:C2:EB:8A:1A:58:80:A3:14:87:78:F0:0C:62:1F:EE:4B:EC:41:CF
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Certificate issuer: /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial: 5A02BA04943FFBAFD2AE2CD5B76A2D3154148447
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
Manifest number: 0130
Signing time: Tue 04 Nov 2025 16:36:53 +0000
Manifest this update: Tue 04 Nov 2025 16:31:53 +0000
Manifest next update: Sun 09 Nov 2025 09:51:53 +0000
Files and hashes: 1: AA2338B66632D823F77072125112B5BF1F721769.crl (hash: N6f9pswsWEuxZLq0MPGscXGBy5qieP9Nv/UXm7jkVHo=)
2: 34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa (hash: PMUAqmCu4jLgGE4W1UfcbQhDKwanax0we0RQX2/iKas=)
3: 34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa (hash: eoL7Y795RnrMWZUw7U8PkLtY0w5+OUPQ52ffjZRRUqE=)
4: 34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa (hash: S7FRt48mlJQdhRUBKeeOjWo5otOru6pXI07NZVe+lsM=)
5: 34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (hash: /elfOjbQfF2fPsMe6mNPua2FvaMW9MN/Vs+BX6OZ9K4=)
6: 34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa (hash: 5GwF/yG9sdY75vW2Fj///TOVFJ4fRdCrLcvD0MbMXqY=)
7: 34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa (hash: nOCJFysz8C8bWJVMRkvOCViuUCqzB1SjNWhFC7y70bc=)
8: 34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (hash: H8ah+1UhN/eq5WKFT0vmFxrRSA6J3Cu5+ERJLv9mNDM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:02:ba:04:94:3f:fb:af:d2:ae:2c:d5:b7:6a:2d:31:54:14:84:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
Validity
Not Before: Nov 4 16:31:53 2025 GMT
Not After : Nov 9 09:51:53 2025 GMT
Subject: CN=2EC2EB8A1A5880A3148778F00C621FEE4BEC41CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:11:4c:e3:b6:74:a2:b5:fd:69:4c:4e:cf:
11:f6:f7:6f:73:65:8c:76:52:72:59:5d:1c:c8:32:
58:18:a2:99:29:ee:7c:ef:40:6b:f8:c6:fe:69:8d:
f4:d3:0d:6b:f2:21:36:5f:6f:cb:4a:3f:32:bc:1f:
c5:e7:de:06:24:f8:06:9c:06:c0:cf:bd:56:fd:ca:
69:9b:88:c4:c8:82:3e:4a:78:2c:ca:f0:08:15:b1:
1a:48:a2:c3:c9:4d:2a:81:56:59:2d:f0:a6:91:c0:
82:0b:12:24:82:80:f0:a8:e2:9d:ab:38:45:df:9d:
ab:ad:d8:34:50:aa:32:81:14:c7:08:8a:c1:82:d8:
ca:04:ed:c0:9e:1a:0a:73:34:79:96:f6:e8:cb:c3:
74:d9:53:df:42:85:2c:07:7b:39:29:f1:15:69:42:
2c:82:bc:49:35:4d:40:1b:29:50:b6:03:07:4c:50:
41:8e:bf:83:52:f1:0f:d5:61:32:e5:02:e0:ba:a4:
d6:2a:bc:63:03:cb:16:ef:26:18:41:cb:9e:72:9e:
01:22:f3:b1:18:c3:e0:3b:ec:f1:d2:b6:54:ec:ba:
4c:59:f4:61:6c:06:32:d9:84:39:8e:99:ee:f0:6b:
ec:35:03:19:96:f8:5e:c1:bc:b4:ba:4e:a1:c8:7a:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C2:EB:8A:1A:58:80:A3:14:87:78:F0:0C:62:1F:EE:4B:EC:41:CF
X509v3 Authority Key Identifier:
keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:10:c7:a4:0c:0f:ef:b3:cf:ed:ce:83:a6:51:d7:d2:eb:0f:
99:2d:21:65:6c:4d:36:41:3e:b9:69:62:97:19:d0:be:3a:49:
d0:ef:15:54:5e:d0:99:2d:04:11:2f:c4:3e:ea:2c:05:13:61:
28:7d:41:38:ac:59:4c:15:e9:bd:36:47:54:f1:6e:72:55:0d:
31:15:05:53:6f:cd:02:51:4f:dc:a6:05:b5:a2:42:42:f2:4d:
e8:c7:05:97:3d:b1:63:75:93:74:bb:e3:98:05:52:4f:59:09:
d6:08:f6:82:34:04:9e:06:8c:c9:0f:de:04:4b:ee:81:45:92:
9a:d9:84:7f:e6:d7:17:9e:f5:bb:d4:ad:0c:2b:cb:06:6c:31:
b5:52:c8:ed:4c:1f:f5:12:7c:89:bd:88:c0:1a:04:ab:14:82:
eb:0a:39:4a:24:53:5c:66:7e:72:9a:62:88:4d:73:25:f8:06:
62:e8:ba:d7:c1:5d:fd:12:8b:cf:9b:e7:ce:e7:52:91:98:0d:
b3:f2:4a:13:8c:7b:1c:a5:f2:e0:f3:ad:42:69:6b:2d:35:c8:
00:c2:86:4a:79:f5:79:7c:17:a5:19:b7:a5:58:90:7c:b4:e0:
5b:32:3a:ce:70:22:ab:f5:b9:48:48:b1:07:93:db:94:e1:e7:
f5:cd:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:19:27 2025 by rpki-client