
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.mft
File: BDCCFDE2FE1388F24130105293A56A9F271FF8D9.mft (raw, json)
Hash identifier: QLEdMk6b7GWYod6rcvDM8UBTMd6Orf1mrxwImIrjppo=
Subject key identifier: EC:DD:FE:D1:0E:32:8A:93:69:89:6E:6D:E8:13:B2:A4:5E:F3:E7:69
Authority key identifier: BD:CC:FD:E2:FE:13:88:F2:41:30:10:52:93:A5:6A:9F:27:1F:F8:D9
Certificate issuer: /CN=BDCCFDE2FE1388F24130105293A56A9F271FF8D9
Certificate serial: 7B283F364D28488857671896DDAE471D076C3A96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.mft
Manifest number: 0131
Signing time: Wed 05 Nov 2025 11:11:56 +0000
Manifest this update: Wed 05 Nov 2025 11:06:56 +0000
Manifest next update: Sun 09 Nov 2025 16:18:56 +0000
Files and hashes: 1: 323830333a623532303a3a2f33322d3438203d3e20323636363933.roa (hash: 7ccb26o7POpOgjjKHGnxpIH1yWfDYOaQKuwAmgFACms=)
2: 34352e3232392e36302e302f32322d3234203d3e20323636363933.roa (hash: NCpr7otB6cldLvtrFt4wUo43tLet8pKKkU2uzgUfzZ4=)
3: BDCCFDE2FE1388F24130105293A56A9F271FF8D9.crl (hash: AAcoKu1f+nK+Zmcci/DsTLC6EAOsAybcJPABCDLr0zc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.crl
rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:28:3f:36:4d:28:48:88:57:67:18:96:dd:ae:47:1d:07:6c:3a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDCCFDE2FE1388F24130105293A56A9F271FF8D9
Validity
Not Before: Nov 5 11:06:56 2025 GMT
Not After : Nov 9 16:18:56 2025 GMT
Subject: CN=ECDDFED10E328A9369896E6DE813B2A45EF3E769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:c8:ab:e0:ee:75:fd:1d:39:bc:64:f7:ca:
fe:b5:f7:59:af:14:ee:87:89:a2:ec:be:24:da:ef:
ed:42:56:a7:d7:fd:60:d4:95:0c:31:ce:4e:03:86:
82:a0:eb:18:c8:e3:fd:56:6c:aa:75:11:b2:25:69:
61:db:bc:25:5f:74:fc:e7:ad:fb:ad:89:00:d6:24:
9f:c0:49:6e:bd:ee:45:5d:e6:45:ff:e8:d6:ba:d4:
83:5e:1d:b1:2f:9d:a7:05:c6:20:bc:f8:2b:dc:f6:
2f:72:42:bc:9c:bc:5d:25:fd:c4:5f:54:da:db:5d:
d8:a4:05:2b:03:bc:a2:8e:b1:30:e2:44:78:46:35:
aa:c0:11:ba:34:68:2d:50:5f:5d:98:27:37:4a:b7:
70:53:73:8a:eb:59:45:03:50:5d:9e:9d:e2:81:cd:
a2:f6:45:f7:2a:8e:00:cb:1c:a9:60:0f:dd:d6:8d:
b0:a2:84:e5:08:30:24:c1:57:a3:36:33:be:97:17:
3a:c2:08:a8:6f:32:fc:16:03:f6:14:ba:fe:eb:c5:
f0:ce:6c:95:67:fd:d4:2a:cb:83:5f:74:78:81:78:
26:3e:ba:44:ad:36:69:a8:13:e2:f3:44:37:37:09:
3a:20:be:f0:d3:dd:14:38:9d:02:5e:bc:9a:11:ad:
e8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DD:FE:D1:0E:32:8A:93:69:89:6E:6D:E8:13:B2:A4:5E:F3:E7:69
X509v3 Authority Key Identifier:
keyid:BD:CC:FD:E2:FE:13:88:F2:41:30:10:52:93:A5:6A:9F:27:1F:F8:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:20:a8:42:ee:86:08:36:d1:93:c0:9e:95:57:2e:4d:b5:50:
35:38:27:73:d3:21:f0:95:2b:82:62:a9:f5:3e:bf:f2:21:9d:
7b:07:fb:50:64:59:0f:bb:0d:3b:84:a9:80:88:41:72:e3:f6:
69:96:25:82:5b:fc:8d:f4:70:1f:d2:ad:a4:93:ed:63:f9:89:
7f:63:23:f5:29:9e:77:04:72:c3:a9:44:38:7b:e7:6d:e1:13:
b9:53:d7:de:bc:e7:0a:9c:6d:68:7d:d7:c0:8b:f1:b4:8c:36:
1c:63:5d:d2:c8:1e:48:b6:26:e5:2e:79:a1:a5:3a:33:0b:31:
69:59:4c:f2:40:08:d2:8e:13:5b:cc:db:18:77:43:60:a4:41:
c5:da:a1:f1:de:69:b6:4f:75:d4:bf:84:46:44:ea:1d:77:de:
2c:1d:ba:60:c0:d4:65:24:6c:e1:0c:08:8c:37:99:21:17:fd:
86:54:bc:5b:ab:56:59:b0:a8:ae:4b:c6:3b:f4:78:3d:18:07:
94:e6:fd:58:bb:66:8a:bd:5c:87:e4:92:42:47:69:ed:51:28:
01:6e:32:66:b7:29:b3:ed:8e:67:46:37:17:24:cf:90:6d:2f:
3f:89:61:98:83:73:a3:2c:63:4d:84:e5:b4:2b:bd:3b:cd:7b:
bb:db:4e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:49:22 2025 by rpki-client