
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft
File: 949854C65FB68A162199F9EB159DEF051D92FBE6.mft (raw, json)
Hash identifier: 6LL8Co3KPtZf6ZbGdB0FOt7fKXfqE7A3jneTVjKIV6c=
Subject key identifier: 7D:6E:5C:D4:16:26:70:63:C0:61:38:A2:6F:8F:C8:AE:E2:CA:B3:0C
Authority key identifier: 94:98:54:C6:5F:B6:8A:16:21:99:F9:EB:15:9D:EF:05:1D:92:FB:E6
Certificate issuer: /CN=949854C65FB68A162199F9EB159DEF051D92FBE6
Certificate serial: 3D814C9566CDED42E3070C8724C48D647C2FEC75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft
Manifest number: 0137
Signing time: Sun 02 Nov 2025 22:17:36 +0000
Manifest this update: Sun 02 Nov 2025 22:12:36 +0000
Manifest next update: Sat 08 Nov 2025 21:43:36 +0000
Files and hashes: 1: 34352e3137322e3232342e302f32322d3234203d3e20323637383330.roa (hash: eV6eWRioUKo3ZWllkR16xg8vvmQbBbZ5GLvhx6gD8gY=)
2: 949854C65FB68A162199F9EB159DEF051D92FBE6.crl (hash: mVSVtcuUaAwj5HhWP9Byijq6LjDEy6jUrSurVp9VGeI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.crl
rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 21:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:81:4c:95:66:cd:ed:42:e3:07:0c:87:24:c4:8d:64:7c:2f:ec:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949854C65FB68A162199F9EB159DEF051D92FBE6
Validity
Not Before: Nov 2 22:12:36 2025 GMT
Not After : Nov 8 21:43:36 2025 GMT
Subject: CN=7D6E5CD416267063C06138A26F8FC8AEE2CAB30C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:2a:81:20:3f:a9:ce:3f:52:1f:21:c8:cd:
bb:9c:46:16:58:8e:1b:c5:da:34:52:0b:05:15:4a:
99:ba:73:f5:61:fb:23:b0:c8:ba:20:d3:f1:4f:f3:
2c:0b:f7:5b:d7:a6:01:90:78:69:15:e0:51:cb:e9:
7c:9c:45:3e:51:ff:71:1a:05:a4:7b:0f:84:1e:eb:
53:54:a6:9c:46:e0:f8:6f:d7:d6:a0:73:41:7c:c8:
27:4d:ef:24:4a:c9:1b:1f:8f:a1:77:40:19:18:ee:
89:96:3c:c3:dd:50:45:d7:90:15:b0:6e:f3:21:2f:
09:f7:53:88:f7:08:84:42:e3:2c:1a:f0:23:aa:88:
38:d2:76:7c:a5:62:30:13:1c:4b:77:e9:9c:ed:7c:
4a:ed:ca:21:b9:cb:9a:af:b5:9d:3b:47:f5:f0:5f:
a3:73:b7:27:61:1e:a5:74:18:eb:15:59:dd:98:b6:
6d:0a:e3:80:1a:91:b4:8d:2a:62:44:2d:e8:33:13:
5a:66:2a:86:4f:3f:f7:1a:e8:26:ee:52:3c:5a:c8:
b3:51:4f:8d:98:37:7f:84:0d:29:e7:4e:7c:54:a6:
7f:7c:ba:07:b5:da:ab:8f:0a:b0:9d:07:10:2a:a5:
45:9f:b8:67:51:db:bd:10:80:69:09:1f:f1:4d:f3:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6E:5C:D4:16:26:70:63:C0:61:38:A2:6F:8F:C8:AE:E2:CA:B3:0C
X509v3 Authority Key Identifier:
keyid:94:98:54:C6:5F:B6:8A:16:21:99:F9:EB:15:9D:EF:05:1D:92:FB:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ea:65:32:40:6e:62:fb:10:bd:75:87:ea:60:6b:44:c2:be:
25:c9:c3:b6:16:36:f2:b3:25:77:d1:ce:e7:c1:f9:4f:b3:4e:
64:63:77:05:74:45:23:6b:8f:9d:a3:76:c1:17:bd:74:77:73:
be:9f:17:76:49:b4:80:7b:70:28:b9:fc:91:ea:ff:5f:33:62:
49:25:69:fa:64:15:b4:4a:e8:68:55:f8:61:d3:88:5a:5a:f4:
00:95:83:4e:ce:da:8a:05:06:3c:7f:c3:56:d1:ca:19:b6:11:
9d:63:83:fb:99:86:f5:c1:0b:79:cf:5f:4b:43:13:45:81:27:
1f:57:09:18:6b:d4:2e:ba:5e:f3:79:42:25:26:9f:8e:53:68:
94:a0:ca:bf:fe:bc:fc:8d:ba:a8:bb:82:e4:08:22:9c:54:f9:
64:d9:8a:7f:21:3f:be:b5:c2:bf:6b:bc:71:79:cd:a2:48:5d:
65:f9:1f:5f:08:b2:52:61:73:7e:ce:25:c2:56:f0:95:5e:ff:
64:3a:22:66:fa:85:a4:20:80:d9:fe:1e:db:dc:55:0d:8f:be:
62:9f:24:9c:ce:ae:a8:9d:cb:12:e1:a7:40:f6:0a:f7:96:7c:
f1:3a:c3:92:5b:1e:d4:73:ec:db:bf:1b:50:f6:5c:e6:c9:5f:
7b:27:10:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:15:40 2025 by rpki-client