
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81F05B3B01566FCD01DC949A8D3E7C6A74C323648C51E3F4E68E5A6119F7162B/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.mft
File: A3F24A104113DA66AF5689F21A09320D283B2DE0.mft (raw, json)
Hash identifier: 7RSfK2Y1SSWGJ5JCjL7WjytNySXmhGzdqPQ+366qh+k=
Subject key identifier: EA:4B:79:69:17:CE:24:B5:03:C4:EF:59:8D:68:F2:98:69:D0:3A:13
Authority key identifier: A3:F2:4A:10:41:13:DA:66:AF:56:89:F2:1A:09:32:0D:28:3B:2D:E0
Certificate issuer: /CN=A3F24A104113DA66AF5689F21A09320D283B2DE0
Certificate serial: 0808818370FD0747B5E7929904C712A727C7DFD3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/81F05B3B01566FCD01DC949A8D3E7C6A74C323648C51E3F4E68E5A6119F7162B/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.mft
Manifest number: 0136
Signing time: Tue 04 Nov 2025 04:10:01 +0000
Manifest this update: Tue 04 Nov 2025 04:05:01 +0000
Manifest next update: Sat 08 Nov 2025 18:51:01 +0000
Files and hashes: 1: A3F24A104113DA66AF5689F21A09320D283B2DE0.crl (hash: lKlf5urMLpgAIHCpKRsGN7Q4bkc31/BEA17LWVTLCzY=)
2: 323830333a343963303a3a2f33322d3438203d3e20323635363937.roa (hash: Cf2vn5LM5k8rSmN8mZp1Xz9I/sfQ/A1csdn2gLzfyFo=)
3: 34352e362e3133322e302f32322d3234203d3e20323635363937.roa (hash: seBdbtvaLzCAtO0ijWsinKsAJHHr/4nJNWDuzEDOBIY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/81F05B3B01566FCD01DC949A8D3E7C6A74C323648C51E3F4E68E5A6119F7162B/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.crl
rsync://repository.lacnic.net/rpki/lacnic/81F05B3B01566FCD01DC949A8D3E7C6A74C323648C51E3F4E68E5A6119F7162B/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 18:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:08:81:83:70:fd:07:47:b5:e7:92:99:04:c7:12:a7:27:c7:df:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3F24A104113DA66AF5689F21A09320D283B2DE0
Validity
Not Before: Nov 4 04:05:01 2025 GMT
Not After : Nov 8 18:51:01 2025 GMT
Subject: CN=EA4B796917CE24B503C4EF598D68F29869D03A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:a7:61:69:0f:ed:9a:2f:4f:87:f3:c2:b8:
ea:28:6e:3c:c6:56:ba:60:31:c1:0a:f4:2d:dd:dd:
0a:fc:21:f5:31:4a:ad:ec:71:52:7c:fe:9b:5b:9f:
87:1c:df:1c:6a:52:19:0d:41:94:68:e2:79:96:09:
85:51:82:8d:eb:ae:4f:6f:61:99:38:78:3e:8f:3e:
b9:16:d3:b2:24:84:84:94:5b:70:2f:79:32:fb:31:
16:8b:72:8e:bc:12:c2:fe:2e:0f:5c:93:c8:42:62:
54:2c:88:65:c5:fa:84:c1:a4:d1:f2:64:3d:32:88:
60:79:aa:78:49:cf:a9:3c:a9:9f:3e:5e:52:cc:f8:
ec:b4:2c:e0:21:94:89:40:c3:93:63:81:b6:fc:a9:
08:2f:99:cb:eb:eb:77:54:f9:9a:e0:0b:4c:40:93:
5c:f0:8c:9b:01:be:d4:49:48:b1:90:ba:30:e3:a4:
78:34:35:ae:e2:1a:63:0a:9b:f8:06:a6:23:b6:23:
50:70:40:1e:1e:4c:c1:1b:ca:94:97:53:22:33:2a:
03:91:7b:2e:0d:52:17:41:a8:c9:03:0d:05:e0:22:
69:f5:d2:7e:de:b1:6b:c0:19:11:33:f1:98:16:10:
c6:92:53:c7:75:8a:32:d6:43:ca:bf:83:e2:7e:17:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4B:79:69:17:CE:24:B5:03:C4:EF:59:8D:68:F2:98:69:D0:3A:13
X509v3 Authority Key Identifier:
keyid:A3:F2:4A:10:41:13:DA:66:AF:56:89:F2:1A:09:32:0D:28:3B:2D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/81F05B3B01566FCD01DC949A8D3E7C6A74C323648C51E3F4E68E5A6119F7162B/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81F05B3B01566FCD01DC949A8D3E7C6A74C323648C51E3F4E68E5A6119F7162B/0/A3F24A104113DA66AF5689F21A09320D283B2DE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0b:61:ac:08:fe:e7:11:03:a5:cd:ba:03:96:fd:2d:62:45:
3a:cf:70:f3:cd:47:3c:6d:95:31:a5:13:22:b4:f4:2e:02:98:
86:0a:38:74:58:0c:37:e6:f8:b4:65:0d:32:a9:fb:8d:66:18:
a3:db:c5:aa:81:f6:12:e8:e0:00:d5:06:6e:1d:75:0f:8b:0a:
14:68:fd:3e:dc:e3:5e:94:f8:ce:10:c7:41:e0:74:6c:73:4c:
9f:27:fb:8d:34:ea:bf:33:f8:d6:12:77:b2:10:59:25:4a:ea:
cd:a0:0b:b4:68:72:d5:f9:f4:9e:ba:cc:ac:24:2f:7b:01:fb:
d5:2c:48:96:17:45:00:02:5c:fb:f1:94:ec:b1:0c:24:0e:32:
88:d0:b3:db:7a:66:48:66:b7:85:02:f7:09:3f:96:10:6f:04:
d1:71:c0:43:b8:d6:e2:a0:32:c2:bf:a3:b0:7c:60:65:0d:04:
68:98:aa:18:79:a9:3d:08:59:a7:36:ab:45:9b:e3:76:24:fd:
c8:c6:fd:81:5a:21:4c:1d:14:3f:70:03:1c:3d:fa:bf:69:4f:
5b:51:7a:cd:3e:0f:d9:c8:4b:d3:57:fa:69:54:03:65:76:60:
c6:a5:55:52:08:72:7f:f8:b3:97:02:c7:48:ea:25:20:71:6f:
3a:12:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:20:46 2025 by rpki-client