
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft
File: 1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft (raw, json)
Hash identifier: 99WqOeTaD942XiAncp/Lr45kgV1MqXpYg5jhmYJP2kE=
Subject key identifier: 54:8B:57:D1:D4:61:0C:D3:97:0C:85:BE:73:FB:72:5A:38:42:48:C2
Authority key identifier: 18:21:D3:EA:A1:F9:6B:68:44:A8:8C:CD:90:D1:BC:32:7F:45:4A:72
Certificate issuer: /CN=1821D3EAA1F96B6844A88CCD90D1BC327F454A72
Certificate serial: 51D0436254ACE6933D2FB54EB822A4492BD5F95C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft
Manifest number: 0130
Signing time: Wed 05 Nov 2025 11:57:24 +0000
Manifest this update: Wed 05 Nov 2025 11:52:24 +0000
Manifest next update: Mon 10 Nov 2025 06:30:24 +0000
Files and hashes: 1: 1821D3EAA1F96B6844A88CCD90D1BC327F454A72.crl (hash: 64DAhsL5bVS4wsJOeC4MQ4B+Z6yy6fS7OpIYRfNgB0A=)
2: 323830333a613539303a3a2f33322d3332203d3e20323732393730.roa (hash: fqcDOAzN9oPUe6clYREs4m38QHefSGzVCZBZ779ZczY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.crl
rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d0:43:62:54:ac:e6:93:3d:2f:b5:4e:b8:22:a4:49:2b:d5:f9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821D3EAA1F96B6844A88CCD90D1BC327F454A72
Validity
Not Before: Nov 5 11:52:24 2025 GMT
Not After : Nov 10 06:30:24 2025 GMT
Subject: CN=548B57D1D4610CD3970C85BE73FB725A384248C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:02:12:6b:97:56:04:22:bd:59:fb:0b:77:
ee:47:45:a5:7f:7f:1e:6b:f4:40:47:1d:62:3b:c1:
69:11:39:6b:6f:58:2e:d1:cf:c6:6c:3c:a3:62:96:
35:b0:be:ca:f4:a6:8f:bb:48:0a:a5:5d:c2:2f:b6:
74:e9:33:5d:85:72:90:2f:0f:86:81:04:ea:89:16:
3a:ef:8f:63:74:c0:25:f6:66:8a:59:9c:07:91:53:
82:c4:f7:7f:f4:cc:ea:47:6a:59:eb:52:46:18:63:
0b:36:26:e1:eb:7b:8a:bf:e4:b2:6e:d7:d2:75:02:
4b:0b:e8:3f:49:51:f7:b5:f3:19:63:bc:a9:b9:af:
ef:84:51:b7:f8:c7:23:f0:d7:6d:8c:ad:82:89:05:
e6:f0:7a:44:93:46:52:d2:f2:b6:cb:59:5e:f1:8f:
44:54:76:83:2b:5d:77:5c:78:6a:e4:81:a3:21:1d:
ac:7c:0c:20:87:e3:7d:77:96:e0:b4:d7:9d:f5:6d:
1f:63:ea:21:21:c4:57:2c:f7:04:6a:8a:73:cc:57:
e6:eb:73:32:61:db:e9:b4:f6:ff:e4:b9:6f:b6:a2:
be:fe:fe:8b:67:13:45:20:2c:61:a6:12:73:97:7c:
f5:08:f5:f0:c0:de:89:1d:3b:86:7b:7b:e8:87:ac:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8B:57:D1:D4:61:0C:D3:97:0C:85:BE:73:FB:72:5A:38:42:48:C2
X509v3 Authority Key Identifier:
keyid:18:21:D3:EA:A1:F9:6B:68:44:A8:8C:CD:90:D1:BC:32:7F:45:4A:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:90:8b:ec:81:16:d7:0f:17:21:8e:c3:85:08:67:d0:80:06:
a4:52:12:8e:8b:3d:68:38:e5:89:a7:79:7a:a5:35:0f:d4:49:
64:75:1c:ea:2e:d9:37:07:80:c9:d1:d1:51:9c:bb:b0:fd:52:
75:b2:94:ad:aa:1b:3a:81:a5:b3:e0:39:b0:26:81:d6:f6:30:
f9:0a:05:6d:7c:01:49:b3:41:3a:cf:d6:68:ca:c6:4c:f5:b0:
e3:90:25:33:b3:50:6e:c7:f6:26:9d:83:13:24:fa:6a:c8:f8:
0e:23:38:a7:26:78:10:ea:7d:8f:1f:ed:1f:7f:39:2c:e3:9a:
7f:ba:05:c9:1f:ad:83:de:5a:ad:93:50:87:dc:2c:d7:04:dd:
e2:df:54:79:b4:a6:2b:94:45:f2:81:fb:16:78:50:19:5d:85:
23:9d:1f:8e:a7:97:81:43:52:c2:ac:66:d4:e6:84:2f:5d:cb:
71:e7:e6:84:00:1f:a1:f9:d1:f8:f5:28:aa:16:d6:18:04:d0:
38:55:f0:d5:02:45:7e:8b:6e:3a:6f:19:55:4b:f0:1a:a3:1c:
75:2b:f4:a6:f1:42:7e:01:0c:a9:31:6a:cf:e0:84:0f:6f:46:
8c:46:23:b5:fe:4e:a1:0e:58:23:a6:f1:af:a2:bc:72:5d:5d:
57:1a:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:42:43 2025 by rpki-client