
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft
File: 294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft (raw, json)
Hash identifier: MOrLj380Lnp3/9WJBm86HeRD1UJKTlzanPUWpnnl6Is=
Subject key identifier: F4:BC:86:79:99:23:88:DB:98:F4:F2:34:D7:87:02:CF:F0:0A:F9:23
Authority key identifier: 29:44:04:D5:D1:36:5B:2F:80:5F:2E:B4:08:D0:F8:D2:0B:0A:F0:E8
Certificate issuer: /CN=294404D5D1365B2F805F2EB408D0F8D20B0AF0E8
Certificate serial: 2D0B1F4C927388B8EF0992810F35D4DEF198102C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft
Manifest number: 013C
Signing time: Wed 05 Nov 2025 10:06:25 +0000
Manifest this update: Wed 05 Nov 2025 10:01:25 +0000
Manifest next update: Sun 09 Nov 2025 23:34:25 +0000
Files and hashes: 1: 294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl (hash: jab67rysxI9XxdxAShUErJPKylkjJo3KdNqcmk3la0Q=)
2: 34352e3232352e3231362e302f32322d3234203d3e20323635383533.roa (hash: PvMESmwiCQe0CSmjaFWzwEXbm8J+XmotXUIdVUzkUg0=)
3: 34352e3232352e3231362e302f32322d3234203d3e20323635383632.roa (hash: p6gfH6+O9X3JUzrS3seDyt/LssJaHopCsnopCzc/P1A=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl
rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:0b:1f:4c:92:73:88:b8:ef:09:92:81:0f:35:d4:de:f1:98:10:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294404D5D1365B2F805F2EB408D0F8D20B0AF0E8
Validity
Not Before: Nov 5 10:01:25 2025 GMT
Not After : Nov 9 23:34:25 2025 GMT
Subject: CN=F4BC8679992388DB98F4F234D78702CFF00AF923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:fd:8c:87:d9:11:91:69:23:ad:19:80:56:
d6:68:1a:4f:38:cb:e5:1e:07:c6:30:6d:2f:de:8a:
99:dd:d2:b1:64:df:2d:5f:1a:a5:c8:87:e2:68:12:
29:a4:60:8c:ef:0a:4d:7a:d3:ab:19:8b:18:2c:06:
3a:f1:9d:ba:0b:00:f1:b3:90:98:f0:be:90:46:3a:
ae:c5:09:c0:5c:b0:cd:43:47:c6:d2:83:da:b9:6d:
a5:56:8f:67:f6:c1:f5:9c:17:fe:ea:8a:39:44:fb:
04:b6:b6:61:3c:03:4d:85:6b:86:8e:c6:1b:a8:1d:
65:7b:f7:c2:43:ce:ff:3d:fb:72:bc:9e:4a:d0:b3:
db:09:9a:17:1d:43:38:2d:59:b7:20:de:11:6a:42:
cf:f8:89:d0:0c:04:59:24:82:6e:fe:73:73:8c:94:
27:64:43:29:eb:95:14:2b:70:ee:bd:2b:5a:31:e4:
da:37:eb:76:2d:3f:f0:b0:2d:cd:68:e9:7d:66:50:
1a:e9:78:b9:7c:f9:af:f4:d3:60:9b:99:05:52:43:
c5:ad:ab:06:53:1e:3f:0d:42:04:29:6a:eb:d4:2d:
b3:80:51:05:8e:c0:74:16:70:b9:f4:c9:58:07:b3:
76:96:cf:f2:35:fa:5b:c4:0c:c6:56:e2:dc:cd:fb:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BC:86:79:99:23:88:DB:98:F4:F2:34:D7:87:02:CF:F0:0A:F9:23
X509v3 Authority Key Identifier:
keyid:29:44:04:D5:D1:36:5B:2F:80:5F:2E:B4:08:D0:F8:D2:0B:0A:F0:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:33:44:d6:d4:ac:c0:6d:8f:44:e9:c5:66:9a:83:d9:c4:65:
9b:f4:4a:1a:f5:aa:2b:6f:35:8c:b7:a5:3c:57:5b:c6:0c:e2:
7a:f1:cd:13:50:cd:38:3a:70:03:df:9d:69:13:f3:17:bb:8d:
cb:1e:e8:14:6b:5d:e6:05:40:78:10:bf:59:7c:ee:15:ec:d6:
06:4a:bb:20:34:9d:4d:e8:df:7a:02:43:82:f5:ab:05:b2:91:
49:21:95:9f:6c:c5:72:8a:a3:c0:e5:af:d7:fd:2b:8f:39:2f:
c4:73:d7:33:a3:35:34:21:1e:e9:4b:c3:0e:40:ab:b8:aa:a0:
5b:d7:5e:0d:ac:3e:ac:cd:b1:05:d7:de:65:ac:46:02:c3:2b:
ce:9c:36:4a:b1:bc:3d:22:a1:25:9f:8e:33:c7:1b:c6:ec:40:
93:6b:84:96:f1:d2:1e:61:f1:fb:69:53:96:23:08:60:79:cb:
9e:e3:60:5f:aa:48:1d:ea:3e:9f:12:72:e7:06:8b:ab:a8:2c:
0b:21:6b:16:d8:d7:b0:ce:63:51:39:06:ed:09:42:2f:46:39:
d2:89:70:62:f9:df:ec:80:5f:79:a1:db:26:46:7a:bc:08:31:
93:4c:f0:e1:d6:be:46:f7:b7:20:e7:f2:71:cd:d5:8b:6d:95:
02:56:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:49:45 2025 by rpki-client