
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.mft
File: 16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.mft (raw, json)
Hash identifier: fxX/rywbyknfdP8Utudjv9JOpkaGZhyMNAKmgOndciU=
Subject key identifier: C4:7D:4C:5D:51:9B:1F:1F:CF:16:AC:D8:61:E4:DE:23:55:85:FD:3F
Authority key identifier: 16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81
Certificate issuer: /CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
Certificate serial: 4473C832DC83159122619AD4FD494CD38779C29A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.mft
Manifest number: 0128
Signing time: Tue 04 Nov 2025 09:07:47 +0000
Manifest this update: Tue 04 Nov 2025 09:02:47 +0000
Manifest next update: Sun 09 Nov 2025 01:39:47 +0000
Files and hashes: 1: 3139302e3138312e3132382e302f32332d3234203d3e203532323432.roa (hash: GJcDGRI7PsRKtvk3QWYYrk9TTjyvoSYnNQU1tGg7bYY=)
2: 3139302e3138312e3132382e302f31382d3234203d3e203532323432.roa (hash: JoPDhzfzQRO3qQliXs0RdEYbY1MJJ4u/JUAbFbqocO8=)
3: 3139302e3138312e3136322e302f32342d3234203d3e203532323432.roa (hash: Vx6PWduUspay0QaSMNgKYN0TT9tXSL6Hu/wDNoIl/ZY=)
4: 3139302e3138312e3134312e302f32342d3234203d3e203532323432.roa (hash: oOyo0jI3zekJXVeAbF1T8LXYZXjnUolzWBT2oq499MQ=)
5: 3134332e3133372e32342e302f32322d3232203d3e203532323432.roa (hash: ZQYUSit1uLj0DWWAPSD9Dm2utD1eyjBrsKGBBHzzL9g=)
6: 16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl (hash: WTpnbkwI5EEo9HtXKNBgtmYPe0hWhx9cuRy2CMLejJo=)
7: 3139302e3138312e3133352e302f32342d3234203d3e203532323432.roa (hash: zcEHJwLyTYkTh/qiRabf5U8+TGonOpXGxsJl54h01ec=)
8: 3139302e3138312e3135332e302f32342d3234203d3e203532323432.roa (hash: 01hPtJ6lE9pfH5MQ9rrHsdINYp6COhsrfQMMrFhdQvs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl
rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:73:c8:32:dc:83:15:91:22:61:9a:d4:fd:49:4c:d3:87:79:c2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
Validity
Not Before: Nov 4 09:02:47 2025 GMT
Not After : Nov 9 01:39:47 2025 GMT
Subject: CN=C47D4C5D519B1F1FCF16ACD861E4DE235585FD3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:b6:ec:f6:52:e6:28:94:de:14:46:13:3b:
0d:49:3e:db:9f:27:d6:d0:fa:8b:f4:ab:bf:31:ef:
1d:14:8d:4b:af:a8:ca:37:dd:ce:0e:2d:9b:9e:2c:
8e:7b:6e:f8:4f:55:83:68:2f:51:b1:2a:49:b2:ac:
7f:82:58:2f:24:49:55:57:b0:0a:9c:99:ae:0b:0e:
f2:b3:d1:74:2a:df:ab:17:ff:09:18:06:f2:78:64:
87:af:0a:26:27:46:e5:2e:d0:88:d8:80:50:93:9a:
17:24:90:71:2d:57:2e:dc:50:27:2c:12:c0:67:06:
68:34:63:a3:79:38:02:68:a0:b0:eb:71:09:e5:cb:
02:fb:50:7e:5e:07:69:b4:6c:de:ab:30:ef:a0:12:
b3:06:42:fa:c1:72:67:3e:0c:f3:b1:52:12:f3:3a:
56:48:3a:ee:13:aa:99:61:76:50:c4:6f:21:42:7c:
32:7c:e2:6a:ad:52:ec:d3:6b:e1:54:22:a0:fc:42:
a5:21:5f:73:f1:05:14:a4:8c:2b:65:77:b9:24:b5:
21:a7:d7:9d:3a:89:a5:b2:bc:e7:92:d7:f1:44:5c:
55:91:76:70:6f:54:a0:14:80:8f:12:b0:27:6e:b1:
82:39:d0:eb:95:1a:3d:4b:55:94:bf:1f:0d:c8:62:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7D:4C:5D:51:9B:1F:1F:CF:16:AC:D8:61:E4:DE:23:55:85:FD:3F
X509v3 Authority Key Identifier:
keyid:16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fd:71:c4:d3:6b:b6:2c:aa:12:07:18:eb:05:2b:ee:16:74:
0f:bf:d1:69:b7:b8:a9:1e:ea:a1:2b:4a:be:58:96:d9:ed:58:
11:f4:9c:01:90:27:84:f6:89:20:a6:49:9d:0e:f4:bd:a8:90:
e2:c0:d1:a3:f6:31:c8:07:61:62:67:3f:00:f4:e4:6d:8a:af:
50:ba:89:4e:bb:81:90:28:09:ea:ad:25:70:c8:f1:20:30:8a:
70:dd:50:a5:dd:20:73:c8:2f:79:1e:30:2f:a2:6d:77:4d:32:
74:ca:ba:c7:f4:de:0c:fc:ab:2b:fc:d0:2d:86:96:1a:c8:f5:
43:b5:27:17:aa:a9:7c:7b:f7:21:10:a0:4e:ed:a8:c1:2d:2b:
62:03:8f:c7:40:0f:2d:16:9f:65:31:65:e8:5d:74:0f:cb:82:
97:2a:28:55:7c:cc:f2:81:be:3e:29:c7:2a:1b:2e:f0:f8:72:
ee:1a:50:b7:a0:d4:b0:3f:59:27:4f:8e:69:63:cc:05:97:6d:
8e:4a:18:69:a8:9e:53:5d:67:be:a4:60:9b:a5:f0:cf:22:db:
cf:4a:12:64:b8:73:bf:16:15:f2:22:0e:7f:36:3b:be:ac:ae:
df:23:ec:7f:ee:cc:9c:fe:29:71:c5:1d:f5:6a:60:b3:f5:c4:
44:35:d8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:59:08 2025 by rpki-client