
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
File: D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft (raw, json)
Hash identifier: YjbuOgaBY0s5/coiiRShomoQMlrwCdYEsgbadGfP+CI=
Subject key identifier: 18:35:4A:7B:CB:51:3F:FA:8B:E5:F6:54:B7:A4:F2:57:6D:77:09:15
Authority key identifier: D2:5A:64:5B:A2:C0:88:2C:C1:32:2B:68:10:B6:0C:BB:EF:E3:79:3E
Certificate issuer: /CN=D25A645BA2C0882CC1322B6810B60CBBEFE3793E
Certificate serial: 7CDB20D28D8E46C8506E75ECA04ACA84A4840CB7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
Manifest number: 0137
Signing time: Tue 04 Nov 2025 19:38:34 +0000
Manifest this update: Tue 04 Nov 2025 19:33:34 +0000
Manifest next update: Mon 10 Nov 2025 04:22:34 +0000
Files and hashes: 1: 3138372e3130322e3230302e302f32322d3234203d3e20323730303435.roa (hash: HCRuBCBbvTsUWvUKHcyYpI0YXia8zGI3h6e+x+4AbeE=)
2: D25A645BA2C0882CC1322B6810B60CBBEFE3793E.crl (hash: 9IadmQJ34V/jX3+ToUqq4GRvbRLq8SVrgzbRae8e9n4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.crl
rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:db:20:d2:8d:8e:46:c8:50:6e:75:ec:a0:4a:ca:84:a4:84:0c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D25A645BA2C0882CC1322B6810B60CBBEFE3793E
Validity
Not Before: Nov 4 19:33:34 2025 GMT
Not After : Nov 10 04:22:34 2025 GMT
Subject: CN=18354A7BCB513FFA8BE5F654B7A4F2576D770915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:62:82:0f:95:90:74:4d:24:ee:95:a5:48:
24:8f:62:d7:34:cf:69:8c:5d:09:6e:19:52:98:a7:
cc:6c:e9:43:9d:d5:11:9a:bb:4b:f8:69:a7:a7:dc:
20:a9:19:21:5a:6d:0f:36:b7:f3:bf:51:f3:12:57:
ff:64:df:06:e9:bd:97:b1:01:65:53:d1:23:7e:77:
13:75:8c:84:19:18:b2:67:88:6d:f2:5d:78:b8:dc:
da:4a:16:a7:5a:d6:a0:3f:f1:b5:fd:56:fe:4b:39:
cc:1f:fa:ee:60:da:51:de:83:08:9a:d5:d8:81:41:
32:19:1a:ca:59:93:d9:a1:77:70:59:fc:38:a5:5e:
63:1e:a9:e7:4e:9e:64:b7:d6:ba:38:00:9e:67:32:
fa:55:6a:30:a4:be:96:42:29:07:fe:d1:2e:f2:0c:
1d:5d:5e:a2:ed:90:72:33:02:50:db:c7:42:36:35:
a8:2b:f2:25:17:bf:5d:2b:03:d9:e2:94:65:f6:7b:
fd:e6:92:22:c4:ec:68:57:db:fc:aa:88:bd:b3:cd:
0a:5b:f4:16:2d:d6:5d:62:c1:f5:53:31:43:ac:e9:
e7:c9:b9:c9:6b:b5:d4:90:3b:43:11:5d:f7:8c:d7:
a1:a4:cd:5b:a9:a2:aa:ba:61:21:ef:22:7d:5c:d3:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:35:4A:7B:CB:51:3F:FA:8B:E5:F6:54:B7:A4:F2:57:6D:77:09:15
X509v3 Authority Key Identifier:
keyid:D2:5A:64:5B:A2:C0:88:2C:C1:32:2B:68:10:B6:0C:BB:EF:E3:79:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d4:39:e5:0c:fd:0f:fc:f3:10:ed:98:56:d0:bd:54:b9:da:
9f:29:10:42:b0:c4:d8:29:31:d5:d4:fe:80:98:8f:3f:6a:81:
e9:78:a2:4e:a2:11:34:91:09:54:e9:89:75:53:64:09:65:cd:
7e:dd:8f:4a:6e:0d:67:87:a2:59:19:57:70:a8:ac:64:65:42:
fc:d4:b1:d3:cc:e8:65:32:9f:de:eb:af:08:2c:76:2a:18:2b:
ea:d0:98:fe:0e:79:95:ee:7d:41:6c:5e:32:59:98:ed:b7:4d:
67:41:63:74:72:ae:cd:81:ec:f3:eb:da:28:37:a7:9b:fc:3b:
f1:6b:75:68:8f:a8:2d:8c:8a:af:79:fe:5d:fa:72:a9:a4:49:
56:fb:de:28:84:b4:f9:0e:d6:7a:f7:80:83:a8:4d:45:80:ba:
70:8d:86:66:b4:39:eb:c4:5b:41:a9:4f:28:93:96:74:bd:d1:
d1:0a:41:8d:fb:8d:6a:65:62:94:c3:75:fd:14:34:58:ff:1c:
41:7d:66:d9:4b:9e:3a:a8:71:97:3d:83:98:34:58:51:ac:21:
4a:5c:1c:88:6f:1e:21:d7:57:67:fe:d0:70:f8:87:f1:e7:42:
d4:65:37:d3:5b:d2:e8:64:c1:88:b1:bf:11:7d:23:71:fd:ea:
c4:72:64:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:49:10 2025 by rpki-client