
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
File: 87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft (raw, json)
Hash identifier: EZteXl5P3GO/S4HubCB3UEWGQYVnyOD4F+vyUX/CgEY=
Subject key identifier: 8F:6C:A2:9E:A0:49:2E:66:9A:57:FA:E3:AC:38:F6:A1:E3:0F:B6:5D
Authority key identifier: 87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
Certificate issuer: /CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Certificate serial: 3C3C82F933FA6C4B8D6A217EDA995E50E7DFB49C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
Manifest number: 0138
Signing time: Tue 04 Nov 2025 18:48:09 +0000
Manifest this update: Tue 04 Nov 2025 18:43:09 +0000
Manifest next update: Sun 09 Nov 2025 05:58:09 +0000
Files and hashes: 1: 34352e3136302e3230302e302f32322d3232203d3e20323636383834.roa (hash: NHYLG/rtj3qB+Nv69TAJCsyV+ij9AF+9Ne706ZWzaZk=)
2: 34352e3136302e3230332e302f32342d3234203d3e20323636383834.roa (hash: bujUp7BJREwfFYcwzVYofSIcOCNVaUMdrVM2qo2m7Eg=)
3: 87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl (hash: ht5ct4KGM0i8Qiln0xoeTWQ8Nw8WPnTruWBHeJ/Yxbg=)
4: 34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa (hash: VzKudr+ieFKJgOjwccj2C2am6TlsyHznqYbeTqVEoTI=)
5: 34352e3136302e3230312e302f32342d3234203d3e20323636383834.roa (hash: r9qoTXS4P/UF5C7L4DilGTBMU1vqPmN4JkObMwByVSY=)
6: 34352e3136302e3230322e302f32342d3234203d3e20323636383834.roa (hash: fcQQVwgjwAK65rUiK+6ZAey9cVNaHcmhq1VrdQz9ANQ=)
7: 323830333a3661303a3a2f33322d3332203d3e20323636383834.roa (hash: qYhb8x8oqlQ6pvcLzqdt0ZcUfZUCw9q7dAj5kJxa0+I=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl
rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:3c:82:f9:33:fa:6c:4b:8d:6a:21:7e:da:99:5e:50:e7:df:b4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Validity
Not Before: Nov 4 18:43:09 2025 GMT
Not After : Nov 9 05:58:09 2025 GMT
Subject: CN=8F6CA29EA0492E669A57FAE3AC38F6A1E30FB65D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:82:e9:4a:e9:2a:a5:4d:80:e5:6b:9e:f8:
44:8f:58:34:b3:47:dd:9c:7f:b2:62:6a:f3:01:3f:
91:fa:f3:e4:fb:4a:52:d9:e8:d5:1b:53:82:26:03:
3c:bb:eb:bc:cd:56:a4:9b:00:c1:46:a7:99:ee:88:
21:f0:b5:62:67:99:15:5b:4e:33:ea:c3:c3:a9:d3:
95:60:3a:96:60:0c:1e:e8:4f:8f:91:03:ed:7c:01:
9f:be:f5:c7:91:77:8b:0e:d2:f2:8f:af:b6:d4:a7:
72:d1:e8:4c:0d:87:06:7d:e0:1c:61:be:0a:c4:c3:
13:b1:27:25:48:05:b6:ab:3e:60:72:5d:f2:e7:b6:
cb:67:50:df:ab:d6:e7:1f:8f:e2:a9:56:b2:77:c7:
35:72:f6:0b:7c:35:e3:66:3a:26:90:90:be:00:b6:
d9:ef:7e:9c:1b:80:75:6c:65:d2:44:f8:9a:30:51:
fa:11:76:8d:a8:67:4d:2a:21:d8:b7:f0:33:ae:d6:
01:5e:36:6c:a0:ee:39:e5:3d:1b:7a:f2:33:00:34:
7f:14:18:fc:f6:e0:c0:4e:da:ab:ee:86:1d:59:4d:
03:c1:22:35:09:c8:af:57:b4:bc:b1:a6:72:e6:a5:
5e:e8:4d:6d:38:03:ca:a3:8a:0a:5d:8a:24:c7:14:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6C:A2:9E:A0:49:2E:66:9A:57:FA:E3:AC:38:F6:A1:E3:0F:B6:5D
X509v3 Authority Key Identifier:
keyid:87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a2:b5:af:7f:57:eb:59:b8:71:d0:fd:8a:6b:a8:d8:d7:15:
0c:16:30:a3:b5:39:4d:47:a0:be:e6:36:f7:18:2d:e1:ee:08:
a6:e8:f8:78:ef:3f:15:df:96:b7:ec:e6:40:e0:1b:5b:d6:82:
29:9b:0b:37:cd:e9:12:6d:35:26:c0:02:4b:be:5b:f0:80:22:
55:25:a2:dd:ea:1f:e1:5a:95:98:b2:fe:5d:54:4e:5a:ce:4d:
51:1c:3a:39:44:c8:a3:55:aa:6b:43:6e:de:09:3d:11:6d:f3:
15:cd:57:c3:70:be:88:cc:1e:5c:fb:a9:79:b5:21:e7:be:e1:
03:bf:de:29:4e:7e:30:1a:c1:92:2f:1c:3a:fa:71:32:5e:f8:
73:e4:1a:1b:3f:ec:8c:ce:55:69:71:ad:d8:c6:47:cc:38:8f:
7a:5c:94:a5:f1:8e:5e:b1:6b:7d:73:c3:bd:98:5c:59:c0:a3:
a1:8a:9a:8f:7f:4a:f2:c4:b2:49:ff:b8:02:a5:1c:a5:0f:55:
ce:10:09:6e:19:bf:97:f1:ee:86:9d:da:00:28:a8:d8:f6:f1:
72:6d:84:bb:bc:dd:e5:09:c9:dd:f7:26:d3:b9:bd:ce:a0:76:
cd:7f:56:f0:aa:53:c0:61:19:0a:e9:92:be:af:94:59:4b:98:
21:e1:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:51:25 2025 by rpki-client