
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.mft
File: D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.mft (raw, json)
Hash identifier: Ahi8XodqwBb8zjq/nRhBIYN0VPcwNRC4hDM5zanox2s=
Subject key identifier: A0:3C:CC:96:47:AF:D7:F6:E5:91:E3:82:C4:19:6B:41:09:47:0B:84
Authority key identifier: D4:C9:8C:FE:5B:CA:DD:08:10:4C:88:B8:6C:13:25:9A:2A:3D:3E:67
Certificate issuer: /CN=D4C98CFE5BCADD08104C88B86C13259A2A3D3E67
Certificate serial: 19C8C6D15F3AFE6C26C1A70DA890654F159BE64C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.mft
Manifest number: 0131
Signing time: Wed 05 Nov 2025 18:00:40 +0000
Manifest this update: Wed 05 Nov 2025 17:55:40 +0000
Manifest next update: Tue 11 Nov 2025 11:40:40 +0000
Files and hashes: 1: 323830333a373438303a3a2f33322d3438203d3e203532343936.roa (hash: DDYSw9V8L6vN0XvUKz9+y9awRC7Y4++1UJvQT0wFCrI=)
2: 3137392e34322e3136302e302f32312d3234203d3e203532343936.roa (hash: 4NY0usy0joMjvval6fTk+fk6Nz0zsoW5PoxObFbcnDg=)
3: D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.crl (hash: /MK4cl5tdqGCihe3OCYW4B1Vk1SiTxldQri5ABr86ks=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.crl
rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c8:c6:d1:5f:3a:fe:6c:26:c1:a7:0d:a8:90:65:4f:15:9b:e6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4C98CFE5BCADD08104C88B86C13259A2A3D3E67
Validity
Not Before: Nov 5 17:55:40 2025 GMT
Not After : Nov 11 11:40:40 2025 GMT
Subject: CN=A03CCC9647AFD7F6E591E382C4196B4109470B84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:f9:ae:0e:38:8b:50:4e:ca:d2:df:5f:0c:
86:58:09:6a:e1:0e:85:6a:8e:d1:4b:26:86:3a:05:
d8:43:bd:5b:80:c1:59:91:6f:27:4b:77:df:09:0b:
69:5b:e4:0f:ef:ba:82:62:3f:70:bf:a2:f5:9f:dd:
b2:a9:b8:89:77:1c:80:2a:e5:1d:62:45:cf:ec:41:
cb:6d:91:43:55:83:a1:12:58:d5:62:14:12:90:67:
6c:05:3f:2b:29:ad:30:b3:53:76:b6:49:08:fb:92:
59:f9:b7:c5:5d:a7:c7:a7:64:46:34:50:a6:be:77:
15:d1:37:db:fb:3c:cf:09:43:7a:5b:cd:2e:d1:36:
97:08:76:cf:52:33:3a:03:11:0e:69:67:9e:fa:e4:
6f:88:01:2b:e6:c5:5d:02:61:f5:2a:93:3c:12:93:
31:67:33:63:4c:cb:56:6a:a0:ef:9b:bd:fd:22:d9:
11:8f:b0:69:d5:e0:4c:9e:3e:12:b3:81:1c:6b:1c:
2c:36:12:d4:d5:22:e8:20:a2:4a:a7:82:c4:f2:5b:
38:f3:9b:bc:5c:74:b0:95:6a:48:a8:62:db:ab:6d:
e7:96:36:fe:c2:3d:31:c8:dd:17:d5:1f:ea:8d:76:
43:e4:be:7a:07:e2:c7:07:f3:a2:a2:87:a0:04:79:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3C:CC:96:47:AF:D7:F6:E5:91:E3:82:C4:19:6B:41:09:47:0B:84
X509v3 Authority Key Identifier:
keyid:D4:C9:8C:FE:5B:CA:DD:08:10:4C:88:B8:6C:13:25:9A:2A:3D:3E:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e0:63:dc:a1:64:82:f2:71:fe:c0:78:e2:cb:33:cd:c6:bc:
1a:be:9d:89:e8:61:0e:b4:66:e2:2c:f0:2d:38:0c:98:8a:d6:
8d:45:74:65:66:58:3a:7f:27:48:83:15:37:be:59:ba:25:c5:
30:92:f9:4c:d3:1a:e9:c4:59:0b:49:55:ea:7f:5b:b3:e0:95:
ac:40:eb:26:d7:72:22:3e:7a:3c:fa:8e:69:a0:58:af:85:92:
b6:e6:92:2e:3f:cd:8b:e6:47:34:fd:e4:a8:ec:00:7c:84:38:
ab:f6:9a:d4:96:ee:c7:ff:50:4a:c7:9c:c9:f5:b1:ec:44:2f:
d4:1a:2b:89:d8:6b:2d:bf:cc:1d:64:85:b1:c6:3b:de:66:c7:
aa:c1:b2:50:ca:c5:65:a2:17:42:e7:4d:4f:65:d6:74:c2:d4:
cc:32:07:97:d8:10:81:0e:25:d3:32:a3:f0:09:4c:fa:94:5c:
c9:7c:7b:af:fc:ba:64:41:26:76:09:f4:43:e1:2e:64:87:fa:
17:88:4f:d4:21:46:5a:6f:ce:3f:30:2c:3c:df:30:f5:bd:11:
09:63:f6:7a:96:3d:ff:a3:ec:e0:a5:9d:d2:8e:a7:cb:37:5e:
fe:31:b0:ee:a4:50:ae:80:bd:00:8f:b0:05:fc:75:d2:12:07:
75:ec:81:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:09:30 2025 by rpki-client