
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.mft
File: B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.mft (raw, json)
Hash identifier: OJbdPuxgLZL4cFw8J+XO6AADC89zMO5qmQdWur1pWP0=
Subject key identifier: D9:6A:1B:3C:01:91:42:00:E9:24:59:FA:63:A0:58:90:86:14:A3:8C
Authority key identifier: B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C
Certificate issuer: /CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
Certificate serial: 6BA5D859C0CE2E7193E9C0D08445C18C6F58A169
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.mft
Manifest number: 0138
Signing time: Tue 04 Nov 2025 17:32:28 +0000
Manifest this update: Tue 04 Nov 2025 17:27:28 +0000
Manifest next update: Sun 09 Nov 2025 13:44:28 +0000
Files and hashes: 1: 323830333a346663303a3a2f33322d3634203d3e20323635373737.roa (hash: +SkeLWEjdYd16bkP0kR4PBXDQ+V9sCbpnW23hbQNeUo=)
2: 3138312e3139312e36342e302f32322d3234203d3e20323635373737.roa (hash: g80eaoDv098QT0l95pIDXT+764p7pWrRtE/4ry4Duxs=)
3: B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl (hash: mWdfwxp6LtAP0dmAPKWCd2kqNlu8gskMlGR6cPgxpMY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl
rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a5:d8:59:c0:ce:2e:71:93:e9:c0:d0:84:45:c1:8c:6f:58:a1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
Validity
Not Before: Nov 4 17:27:28 2025 GMT
Not After : Nov 9 13:44:28 2025 GMT
Subject: CN=D96A1B3C01914200E92459FA63A058908614A38C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:20:2d:2a:bd:82:5b:f6:68:37:ba:c9:fb:
54:dc:11:d0:d1:c8:1e:01:86:97:47:01:93:42:a1:
93:57:1f:a9:cf:df:07:64:45:15:a4:1a:f7:65:71:
4c:8f:ec:a5:10:9a:d8:e4:8e:37:bc:a6:ef:03:5d:
46:a7:20:06:b9:2a:dc:b3:51:a0:af:e6:e2:3e:d9:
d2:d9:f5:77:5c:a7:15:3a:fc:81:6d:57:b5:8f:c6:
1b:8e:53:fc:6a:fa:6b:d5:1c:e1:b2:08:52:9d:36:
2e:5f:e8:07:c3:2d:56:99:b5:4f:c1:7b:20:98:5f:
ba:a3:cb:e0:3e:4d:80:dd:8d:e8:e8:55:05:93:17:
ad:c4:05:fd:1c:3b:5b:ac:88:41:94:76:21:43:13:
05:7b:6c:47:cc:03:31:15:51:23:b4:e3:ed:37:d1:
7d:8e:8f:09:f8:f2:96:27:2c:0e:c6:86:4e:0d:12:
e1:10:1d:30:54:55:26:a8:69:11:cb:ee:3b:c4:87:
7d:2f:a7:7a:4a:c1:27:fd:30:2c:37:6b:8f:11:8f:
e2:2f:f9:d4:74:20:f2:b7:19:fe:52:45:15:84:28:
ca:1f:11:98:11:50:60:75:ac:8b:fd:c0:66:94:d1:
40:21:b2:9b:98:ed:ed:f8:60:c6:5d:6b:5e:6b:74:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6A:1B:3C:01:91:42:00:E9:24:59:FA:63:A0:58:90:86:14:A3:8C
X509v3 Authority Key Identifier:
keyid:B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5c:d4:c0:7f:d4:f3:7b:ae:ba:94:f1:6a:4e:90:4b:d4:e8:
b0:5d:62:17:24:35:48:af:fd:ff:31:df:c7:29:32:92:df:39:
fe:8d:e7:c3:2f:74:b5:8c:15:c1:e9:97:82:2c:93:bf:0c:12:
e1:53:a8:d5:47:05:be:9a:0d:0a:5c:90:06:91:12:f0:20:db:
74:96:32:ba:5c:5e:e6:ca:7c:0b:cb:11:b5:ab:e3:ef:cc:18:
88:cc:d0:bd:af:51:ab:46:96:02:85:df:8a:3d:60:3d:35:21:
cd:1d:d4:ee:89:05:a5:c3:e1:e1:b0:7a:14:0b:a0:b4:18:bf:
5f:56:3c:b9:88:f6:ff:58:3a:89:5a:21:cc:26:ff:68:90:3c:
95:02:6a:40:8e:b4:6a:f9:3d:07:79:5f:89:ca:10:36:fe:e4:
d9:54:e3:76:25:24:64:68:91:dd:fb:a6:39:2f:c5:5d:d4:e2:
f6:b7:b4:e2:fd:15:25:f5:cf:96:b1:0d:27:04:7e:9b:0d:da:
79:fc:2c:cd:bf:63:3a:8f:2a:4f:91:81:2a:10:41:db:a6:21:
90:c5:04:75:62:db:74:d4:42:0d:38:c7:2d:82:ea:21:87:4a:
21:32:60:c6:a6:fe:97:63:77:4b:5d:8a:e9:fe:ed:db:98:d0:
f3:73:e2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:05:12 2025 by rpki-client