
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
File: DECCD2773167F746E0E146E321731A3F7D19EEEC.mft (raw, json)
Hash identifier: 8lCDu9pR4xqZ5Df9bkbKeF7AGyfeQRl8oVA5/fGKl30=
Subject key identifier: 3D:CC:8E:4A:DA:3A:5F:21:5C:32:ED:03:73:DB:BA:5A:AE:D3:EE:11
Authority key identifier: DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC
Certificate issuer: /CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
Certificate serial: 40A04520350A92947CCA3F24D889B6A6F568275B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
Manifest number: BA
Signing time: Tue 04 Nov 2025 18:43:08 +0000
Manifest this update: Tue 04 Nov 2025 18:38:08 +0000
Manifest next update: Mon 10 Nov 2025 16:09:08 +0000
Files and hashes: 1: 3139302e31352e3232342e302f31392d3234203d3e203237383831.roa (hash: AEdu41V/wmwVJ+Molo6DNtR12FoHpLpgGxMTbapgHMc=)
2: DECCD2773167F746E0E146E321731A3F7D19EEEC.crl (hash: n449+DQdCRFHvRwJbGZ67AxKboNcE587YDmVN+Tjc/I=)
3: 323830333a653031303a3a2f33322d3332203d3e203237383831.roa (hash: g4UPMBlCzMxnEgxHuVsVtp3jjQNKzK3POMvXxIYZ9O4=)
4: 3139302e372e3232342e302f31392d3234203d3e203237383831.roa (hash: IV1FMiyz55bmI2rrartzNFoxAfITX+gDH1uBgiC3Cfg=)
5: 3230302e3131302e3137362e302f32312d3234203d3e203237383831.roa (hash: c1MXdJf6Z7ygP+RN8WtiipiX46h5ieBLcXx2hl0Rldw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl
rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a0:45:20:35:0a:92:94:7c:ca:3f:24:d8:89:b6:a6:f5:68:27:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
Validity
Not Before: Nov 4 18:38:08 2025 GMT
Not After : Nov 10 16:09:08 2025 GMT
Subject: CN=3DCC8E4ADA3A5F215C32ED0373DBBA5AAED3EE11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:0c:67:c0:9e:b3:92:3e:98:75:8d:5c:7c:
2f:d8:65:de:6e:f9:f3:e1:55:ab:d9:b5:d9:d6:81:
29:7a:92:f2:8b:6c:12:62:66:d3:85:8e:a0:01:0b:
92:c3:76:82:68:04:d4:ce:d9:cd:77:25:bd:fe:8f:
bc:c1:3d:3d:8d:8c:b7:2f:25:92:47:0e:28:bf:78:
45:19:6e:16:19:78:ee:04:65:de:a8:15:12:5c:3b:
77:2f:31:7c:cc:55:9f:b0:2a:1d:bb:c3:7b:57:38:
3b:6e:a3:60:02:d8:b4:aa:07:ea:56:1a:b0:7f:35:
27:4b:e3:9a:78:18:87:d4:ce:a8:b8:7c:b2:21:89:
a7:28:24:9c:c0:86:d8:b9:42:47:75:32:d0:66:c6:
71:29:60:b4:ef:87:71:af:e3:74:10:da:b3:94:62:
f7:1c:0d:04:86:92:25:52:0d:20:5f:8e:dc:8b:d7:
62:11:9e:ac:26:ba:25:c5:17:54:a7:82:c8:36:6f:
93:bf:61:e0:20:0e:fb:3f:3e:78:da:5c:53:ca:cf:
4d:7a:b6:90:bb:9d:2a:26:bd:28:1f:96:ff:4e:fc:
ef:ac:00:5c:87:c6:b4:89:24:0a:d7:bf:f5:6e:0a:
e9:f1:aa:77:c5:87:da:61:43:08:83:7b:33:2b:3d:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CC:8E:4A:DA:3A:5F:21:5C:32:ED:03:73:DB:BA:5A:AE:D3:EE:11
X509v3 Authority Key Identifier:
keyid:DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3a:e7:6f:6e:8c:b0:61:47:1c:16:54:0b:8c:a8:c2:b5:d6:
28:37:35:af:84:ed:ca:4c:87:ef:bb:c3:67:46:01:51:b2:71:
d9:d4:c6:1c:50:9a:eb:74:7d:2f:10:14:57:16:c8:1a:a5:6f:
1a:e3:dc:28:44:79:a4:60:29:9a:6a:5d:48:3b:25:b3:f1:df:
4f:1f:4a:52:5d:6a:f7:0c:83:bf:3f:1f:98:4f:83:ff:5a:c9:
15:3b:7b:90:e5:e0:71:aa:84:6c:a4:df:ca:2b:2e:16:56:bc:
81:f1:90:6c:05:45:cf:e4:3a:2d:a9:9f:17:7f:14:c9:c0:73:
1a:0e:1d:41:28:97:49:af:5e:47:83:0a:5a:8a:f9:41:6f:5a:
be:17:c8:76:be:d9:f9:a9:60:f3:56:6c:69:31:99:a1:92:d4:
2b:54:d2:1d:d1:8b:44:6b:be:ff:fb:f0:e7:b1:40:06:cc:c9:
9e:75:e3:7d:01:6d:8f:4d:d4:be:f3:91:91:0b:0d:2a:4f:31:
18:47:27:04:dd:3a:c4:83:9b:dd:93:5f:22:85:14:1a:b7:c1:
e2:1e:6f:44:c5:b3:dd:00:6a:b3:f2:76:e9:a8:ee:4d:29:1f:
cb:82:85:de:3c:59:10:3e:6e:1d:c5:d7:ee:84:e6:f8:19:a0:
a0:7b:18:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:32:47 2025 by rpki-client