
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
File: CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft (raw, json)
Hash identifier: U09+OQW+W29NvuUFqEv/7vpebj/hYh5LncB9WZiSG4k=
Subject key identifier: C3:FE:E0:1D:A2:77:2D:AB:82:28:BD:CB:FE:8D:8D:E8:A9:24:79:B5
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Certificate issuer: /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial: 0ABB19DF5A1CF886B7051F187F35E685CC77ABC0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
Manifest number: 010D
Signing time: Mon 03 Nov 2025 19:25:16 +0000
Manifest this update: Mon 03 Nov 2025 19:20:16 +0000
Manifest next update: Sun 09 Nov 2025 06:12:16 +0000
Files and hashes: 1: CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl (hash: MJmTpKzSuf4XKDFd9sVFu0WhUJ/0MENQMva8BFXrozo=)
2: 3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa (hash: wv9bzhvqRZDHf+P78l6TYaz5VREYKd9TaLC7U4S9rPE=)
3: 323830333a6231303a3430303a3a2f33382d3338203d3e203532343638.roa (hash: 46l4d5yDbrgcXTlM1NtPYFcO+4GZfu084BTGP/Vvwuo=)
4: 323830333a6231303a3a2f33382d3338203d3e203237393531.roa (hash: 8jH2YPWVSph+aeAWtR2v9cZBYAvALwyoLByn9gZ8qtE=)
5: 3138312e3233332e3136382e302f32342d3234203d3e203237393531.roa (hash: oKxAOL2yVw8WT/7Yu3EhiJSoZXhnTX43Rx7XofxkwmA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl
rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:bb:19:df:5a:1c:f8:86:b7:05:1f:18:7f:35:e6:85:cc:77:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Validity
Not Before: Nov 3 19:20:16 2025 GMT
Not After : Nov 9 06:12:16 2025 GMT
Subject: CN=C3FEE01DA2772DAB8228BDCBFE8D8DE8A92479B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:ad:a4:42:38:8e:1e:aa:23:6f:5a:a8:48:
09:1f:d2:be:07:82:d9:70:c0:7e:a7:74:2d:45:c1:
06:5a:5d:85:fd:95:ac:45:24:4d:1a:a3:19:72:29:
57:5c:19:da:3a:fb:00:f6:48:d6:38:d4:74:ac:36:
b2:11:d7:19:6c:d4:9f:2c:ea:17:f4:cf:07:27:30:
12:23:63:89:3f:05:ef:b9:b4:89:39:e0:a3:5a:e6:
f7:6f:bd:96:a5:29:b1:0c:82:da:8d:d9:55:a4:61:
72:cd:1b:4a:17:fc:5d:58:9b:b4:df:3b:db:ad:7d:
63:3c:f9:7f:db:bb:70:96:7f:0f:ec:1a:ab:87:96:
38:9d:74:e1:b2:57:97:c9:6e:ef:ba:00:fd:34:79:
8b:12:b9:4a:66:58:64:7c:50:59:cb:6c:e4:2e:50:
93:6f:c5:86:f4:40:0f:2d:1d:45:f8:c8:22:61:14:
32:fd:2b:d6:2c:63:51:7a:8e:fd:49:89:8c:cd:80:
36:32:ee:18:be:3f:e0:48:89:90:b7:59:c5:89:2c:
2a:d9:06:93:c7:6f:76:09:b0:b5:f0:5a:ad:dd:6b:
f5:2f:d3:d9:64:9b:51:46:79:47:d9:bf:86:f6:eb:
93:01:aa:a6:23:aa:8d:43:0e:ed:52:49:39:f9:46:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FE:E0:1D:A2:77:2D:AB:82:28:BD:CB:FE:8D:8D:E8:A9:24:79:B5
X509v3 Authority Key Identifier:
keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4f:05:cd:b2:ee:5c:77:98:a6:71:fe:e7:9f:bd:e7:67:3c:
9c:15:62:60:ae:21:6e:d0:cc:c4:d6:f9:c0:60:75:62:59:45:
15:e3:0f:c6:a8:90:3d:d4:a7:2b:5d:66:8b:f5:d0:1b:b4:74:
6b:40:4f:08:dd:44:93:5d:8e:a6:6b:0b:15:6c:80:e8:ab:1f:
ae:47:c8:30:85:ae:84:f6:13:55:22:31:28:d9:b1:4f:7c:1f:
07:2b:51:f0:a9:f0:16:e7:95:d0:c6:42:a4:0b:77:93:33:49:
c7:18:ea:f8:da:bb:94:9f:ed:f4:f9:d3:16:fe:76:24:fa:8c:
66:15:58:c9:a3:1b:b5:69:81:cc:c5:bc:6d:23:68:7b:c8:50:
6a:26:72:be:2b:44:09:29:75:81:66:25:33:ab:4d:27:ed:6c:
11:a5:85:cd:b5:48:20:f5:9e:f9:98:35:67:a7:15:d4:dd:68:
6b:68:b6:88:ac:1e:ec:7e:b1:8d:f9:a3:ed:e9:24:43:fe:91:
31:0d:cf:d9:f1:13:f4:1f:87:02:2d:fe:13:d4:7d:c5:cd:c4:
cc:8f:1e:ab:c5:7d:dc:6c:d0:60:2b:d9:8d:f3:1c:eb:38:dc:
85:82:5e:d6:d3:1b:b9:ce:19:91:9b:10:e5:20:96:a9:19:17:
87:a7:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:33:31 2025 by rpki-client