
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
File: 25AA12EC2868B90A693EEAD25632B15E24525ED3.mft (raw, json)
Hash identifier: oi2WT3c6gLqJxmezMtboF6jrtJe3ymVKlfqywilKv1s=
Subject key identifier: 4B:D7:B4:AD:B4:74:CD:8D:9E:B9:EE:24:15:65:96:67:43:7F:69:65
Authority key identifier: 25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
Certificate issuer: /CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Certificate serial: 0EA8C90196800009622F6FAAB996134F9254B55C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
Manifest number: 0133
Signing time: Sun 02 Nov 2025 20:06:28 +0000
Manifest this update: Sun 02 Nov 2025 20:01:28 +0000
Manifest next update: Sat 08 Nov 2025 18:34:28 +0000
Files and hashes: 1: 25AA12EC2868B90A693EEAD25632B15E24525ED3.crl (hash: GcUE2NdNk9sa82+FI4arcK5xz5gL6TRyHlPKdh0kGEU=)
2: 3132382e3230312e32312e302f32342d3234203d3e20323635373430.roa (hash: qTvdfSriRxHc7wkHNo0IAN/Qx1468+njGOKpm1whrOc=)
3: 3132382e3230312e32302e302f32322d3232203d3e20323635373430.roa (hash: bz11AZFfJ0r+HEGUYsgx+d3pCKTnexmFq2lHu4m96A0=)
4: 3132382e3230312e32302e302f32342d3234203d3e2037303439.roa (hash: RAgkM/z/+RK+WKswD249qEq93ktU1YUh8I7JSw5E9MU=)
5: 3132382e3230312e32332e302f32342d3234203d3e2037303439.roa (hash: VoQydPU5DEPjzB+MLhREvk1La0IFYEloHY8Kn0t5FAQ=)
6: 3132382e3230312e32322e302f32342d3234203d3e20323635373430.roa (hash: fBb/Sws8vjsc2ypyW8NRLt5+r/8zb+cgyjDIBeclCRI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl
rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 18:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a8:c9:01:96:80:00:09:62:2f:6f:aa:b9:96:13:4f:92:54:b5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Validity
Not Before: Nov 2 20:01:28 2025 GMT
Not After : Nov 8 18:34:28 2025 GMT
Subject: CN=4BD7B4ADB474CD8D9EB9EE2415659667437F6965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5d:4a:9e:2f:7e:4b:a7:dd:9f:ed:c1:29:43:
70:dd:bb:a2:97:05:17:6a:90:65:b5:45:a5:71:21:
e4:2f:b0:52:37:0d:0c:e6:2a:8d:2b:ae:2a:d7:fd:
3e:80:e4:b6:8a:99:22:ef:f4:2d:14:cd:23:65:d0:
03:bb:ef:87:da:80:fd:87:bf:6b:29:9c:69:22:09:
2f:36:17:92:11:05:bc:62:b8:f9:83:69:cd:e2:62:
d9:ea:86:36:44:61:56:ff:ee:68:bb:89:3b:4d:85:
d7:dc:8b:58:46:33:ff:c3:08:e4:d1:91:7c:b8:e0:
12:c3:98:df:44:f0:fd:e9:3d:83:7b:c7:d2:ca:81:
35:4b:ac:ed:1d:45:64:92:5b:b8:da:c6:76:b4:dd:
17:98:b5:91:07:0b:ea:76:72:cb:4d:37:21:0a:20:
25:85:08:75:9a:02:39:a7:a7:73:82:5a:d3:43:b7:
f1:7c:00:05:d8:3a:54:ea:47:26:ee:93:c7:2c:48:
20:a3:9d:dd:7f:91:07:ad:9f:16:ce:cc:47:1e:6b:
6b:43:b0:a2:0b:47:f8:28:8c:2a:a6:19:0f:74:3f:
15:ee:1d:0f:37:2e:a9:54:37:95:b1:7b:db:12:6e:
05:f7:f2:42:fb:52:a8:38:d6:a6:db:79:5e:6f:2d:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D7:B4:AD:B4:74:CD:8D:9E:B9:EE:24:15:65:96:67:43:7F:69:65
X509v3 Authority Key Identifier:
keyid:25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:73:4c:cc:60:36:4a:4e:f6:1c:25:1c:3c:25:41:bc:d4:1a:
f1:ce:1d:51:0a:e6:de:ab:7f:53:dd:1d:91:46:74:22:69:f4:
ea:51:54:c4:30:d8:63:50:17:fe:b9:07:8f:00:6c:05:87:2e:
42:40:10:85:35:70:eb:b5:22:e8:56:8f:f9:e4:bf:3a:14:95:
fd:ab:aa:78:5e:c3:34:ec:60:21:c8:33:d3:3a:5e:aa:e8:df:
5b:89:78:05:90:8c:7e:78:6c:82:d6:4e:5a:ca:01:9a:b8:94:
f8:5e:52:d7:35:cf:d0:0a:eb:e2:be:19:5e:14:0b:de:47:3a:
e3:26:48:32:98:1c:77:63:ec:21:90:a2:65:2a:01:70:e7:3b:
69:48:e6:ea:08:62:ab:7a:42:d1:1c:e9:74:49:6e:4a:58:cc:
66:5f:31:07:46:7e:3e:c7:82:f4:68:10:06:3c:75:b9:db:8a:
02:a6:ce:e4:8b:b1:a6:e7:b6:f3:c8:1a:51:87:6e:4d:06:68:
a0:9b:59:95:87:24:d3:b5:35:68:5d:8b:d5:f3:00:11:df:6f:
c8:be:87:f1:46:b8:c6:8b:05:fa:4c:f6:f0:f2:28:f1:e5:47:
bf:58:b0:03:dc:a4:46:5b:16:c9:6b:d0:94:1d:4f:0a:2d:9d:
77:7d:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:50:42 2025 by rpki-client