
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
File: 35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft (raw, json)
Hash identifier: k9k29D7BiOdt1F4IfqsLw0qNHFBD5ooYEclcxVwVa94=
Subject key identifier: 33:07:F2:A0:D9:23:36:E4:32:FF:54:7B:6A:8F:3F:6A:22:A3:EA:EA
Authority key identifier: 35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2
Certificate issuer: /CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2
Certificate serial: 3E054361332A434475DEF334423824BC12E5FE8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
Manifest number: 0135
Signing time: Tue 04 Nov 2025 17:12:18 +0000
Manifest this update: Tue 04 Nov 2025 17:07:18 +0000
Manifest next update: Sun 09 Nov 2025 19:05:18 +0000
Files and hashes: 1: 35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl (hash: XNEC/MXoHZ/RnpCvIJwanBtvJV+bbzZkW51TsHo7Z38=)
2: 3230302e31322e3139322e302f32342d3234203d3e203532323933.roa (hash: 4rJ90juFtA7jBoYxbipzbuTMwSm9yL5jjp6/EEhtrn0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl
rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:05:43:61:33:2a:43:44:75:de:f3:34:42:38:24:bc:12:e5:fe:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2
Validity
Not Before: Nov 4 17:07:18 2025 GMT
Not After : Nov 9 19:05:18 2025 GMT
Subject: CN=3307F2A0D92336E432FF547B6A8F3F6A22A3EAEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:ca:f9:b8:1a:98:10:24:24:c0:cb:d6:bd:
3f:24:8e:f8:50:10:24:9b:31:f1:06:4f:3a:c1:c9:
fe:7f:c8:c2:8f:46:06:ec:b2:1f:ac:fb:b8:46:16:
15:ea:f9:35:60:f7:8f:55:b4:6d:bc:5a:84:2f:7d:
2b:56:90:6a:a7:5b:37:8d:af:8b:c2:9a:fa:5d:ec:
72:cc:96:fa:f1:d0:74:e7:43:73:69:84:7d:66:5f:
f9:12:9d:9c:1b:1e:b9:36:cb:ea:e5:83:6d:e4:63:
f8:58:27:f2:3b:74:54:09:a8:05:13:a5:fa:20:8a:
29:ce:10:25:65:df:4b:9e:a5:61:55:cc:34:0a:7e:
eb:17:ab:b9:d3:6b:57:22:41:25:9d:4b:30:70:66:
00:2a:51:26:76:c7:e6:ee:42:c4:35:d6:40:2e:c6:
e5:64:a5:12:88:87:d1:2f:21:56:b0:3b:4b:67:35:
a6:b5:e4:7e:b2:96:d4:5d:1e:85:25:68:f8:4a:77:
f0:5d:d3:7a:57:e5:a1:84:f2:5d:ee:26:f4:39:e5:
0c:42:3f:8b:b9:26:26:5f:58:12:00:30:6e:9a:3f:
90:0e:f9:76:86:89:45:8c:ce:4c:dc:ae:92:a7:44:
58:fc:23:64:27:52:6a:cd:33:74:9d:50:bf:6a:95:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:07:F2:A0:D9:23:36:E4:32:FF:54:7B:6A:8F:3F:6A:22:A3:EA:EA
X509v3 Authority Key Identifier:
keyid:35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:64:59:f7:73:ee:39:b8:5a:5f:f4:f4:52:b8:ca:30:59:f2:
61:05:a7:f1:56:47:54:ca:d6:34:07:81:6d:a9:8a:a7:22:1e:
19:5b:4e:23:95:ef:ce:f8:3b:bf:3a:86:e1:5d:e1:41:cd:56:
af:c8:8a:79:00:46:9c:b2:d4:76:8b:a6:18:8c:31:97:18:0a:
b4:d9:a1:86:e4:8a:63:d1:c4:72:5d:75:cc:49:21:80:16:d7:
1b:5a:c9:5f:4e:3b:8b:f5:6b:1d:e5:b1:81:b7:77:bd:da:f1:
78:55:82:3f:f2:d0:cc:98:03:69:31:f6:8b:02:18:7c:3d:20:
11:3f:8b:1a:a5:ef:da:ee:e6:9a:50:62:38:9c:da:19:aa:11:
7e:fd:e5:e9:55:76:89:36:aa:d2:5e:c0:ac:c7:b4:47:2c:76:
fe:37:b4:7b:5e:25:20:dd:d7:35:90:86:97:a2:a3:b6:6c:92:
2f:ef:1c:4f:7f:46:bd:44:b6:67:c1:8d:7b:1e:a8:c1:31:d5:
0b:00:d3:d8:62:60:8f:8c:13:cf:8f:19:5e:a7:ca:04:43:91:
4b:18:0c:bf:57:ec:b6:c2:20:76:d9:1b:09:8c:9d:2a:da:c4:
a0:06:31:1d:2f:41:53:75:41:65:37:43:2d:cf:ad:20:c7:f1:
e0:a2:74:37
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPgVDYTMqQ0R13vM0QjgkvBLl/o4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVFNUJCNjBGNDVEQTdBNUVCODM5OEUxMTlCRjNFOUMy
RUE1OTRCMjAeFw0yNTExMDQxNzA3MThaFw0yNTExMDkxOTA1MThaMDMxMTAvBgNV
BAMTKDMzMDdGMkEwRDkyMzM2RTQzMkZGNTQ3QjZBOEYzRjZBMjJBM0VBRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzf8r5uBqYECQkwMvWvT8kjvhQ
ECSbMfEGTzrByf5/yMKPRgbssh+s+7hGFhXq+TVg949VtG28WoQvfStWkGqnWzeN
r4vCmvpd7HLMlvrx0HTnQ3NphH1mX/kSnZwbHrk2y+rlg23kY/hYJ/I7dFQJqAUT
pfogiinOECVl30uepWFVzDQKfusXq7nTa1ciQSWdSzBwZgAqUSZ2x+buQsQ11kAu
xuVkpRKIh9EvIVawO0tnNaa15H6yltRdHoUlaPhKd/Bd03pX5aGE8l3uJvQ55QxC
P4u5JiZfWBIAMG6aP5AO+XaGiUWMzkzcrpKnRFj8I2QnUmrNM3SdUL9qlfZ9AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUMwfyoNkjNuQy/1R7ao8/aiKj6uowHwYDVR0j
BBgwFoAUNeW7YPRdp6Xrg5jhGb8+nC6llLIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTg3Nzg5NjIwQUVGMTE3MUM4NUFFQkE0MUZFRkRCMkEz
QjY4QTY1QkUyOTAyQ0U5MzNCNEE4MzkxMUM4QTIxLzAvMzVFNUJCNjBGNDVEQTdB
NUVCODM5OEUxMTlCRjNFOUMyRUE1OTRCMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNUU1QkI2MEY0NURBN0E1RUI4
Mzk4RTExOUJGM0U5QzJFQTU5NEIyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E4Nzc4OTYyMEFFRjExNzFDODVBRUJBNDFGRUZEQjJBM0I2OEE2NUJF
MjkwMkNFOTMzQjRBODM5MTFDOEEyMS8wLzM1RTVCQjYwRjQ1REE3QTVFQjgzOThF
MTE5QkYzRTlDMkVBNTk0QjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANZFn3c+45uFpf9PRSuMowWfJh
BafxVkdUytY0B4FtqYqnIh4ZW04jle/O+Du/OobhXeFBzVavyIp5AEacstR2i6YY
jDGXGAq02aGG5Ipj0cRyXXXMSSGAFtcbWslfTjuL9Wsd5bGBt3e92vF4VYI/8tDM
mANpMfaLAhh8PSARP4sape/a7uaaUGI4nNoZqhF+/eXpVXaJNqrSXsCsx7RHLHb+
N7R7XiUg3dc1kIaXoqO2bJIv7xxPf0a9RLZnwY17HqjBMdULANPYYmCPjBPPjxle
p8oEQ5FLGAy/V+y2wiB22RsJjJ0q2sSgBjEdL0FTdUFlN0Mtz60gx/HgonQ3
-----END CERTIFICATE-----
Generated at Thu Nov 6 01:14:27 2025 by rpki-client