
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
File: D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft (raw, json)
Hash identifier: ld36gYUKjQhpfbMEkBq8iOtE8iwsO5LJvDpCkydzDU8=
Subject key identifier: 64:40:3F:A4:CC:C7:05:DA:58:28:A1:CB:55:F7:AB:0C:C6:F2:F5:43
Authority key identifier: D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52
Certificate issuer: /CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
Certificate serial: 5A366047D7F3639E065B6FCC70FBCCB83F15DBED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
Manifest number: 012D
Signing time: Tue 04 Nov 2025 05:40:55 +0000
Manifest this update: Tue 04 Nov 2025 05:35:55 +0000
Manifest next update: Mon 10 Nov 2025 03:03:55 +0000
Files and hashes: 1: 34352e3137332e3138322e302f32332d3234203d3e20323637383237.roa (hash: 4HtorrOW/I6X+pr+gKEt8+V/VmCquASYi32d7tPOPWI=)
2: 34352e3137332e3138312e302f32342d3234203d3e20323637383237.roa (hash: L2Kv2nnD4bwQDif7mUHc5gi3vX3pJy1DVnf5dX5lxhc=)
3: D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl (hash: N+0gTATKRho8oHWS6xN+0TtPeUb94mREHNQIiHxZJN8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl
rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:36:60:47:d7:f3:63:9e:06:5b:6f:cc:70:fb:cc:b8:3f:15:db:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
Validity
Not Before: Nov 4 05:35:55 2025 GMT
Not After : Nov 10 03:03:55 2025 GMT
Subject: CN=64403FA4CCC705DA5828A1CB55F7AB0CC6F2F543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:62:1f:df:5b:23:83:ae:5e:0c:72:63:b2:3f:
4e:bf:1b:f3:1f:fe:84:0b:05:03:d0:f4:70:0b:13:
f7:3f:ba:7c:73:a6:0d:eb:64:f4:c4:68:cb:1e:d9:
0f:2a:1c:29:a1:1d:19:c5:0e:da:b2:b3:d7:db:44:
6f:6f:ea:29:32:8e:bd:99:5a:33:5a:d9:d8:2f:90:
22:84:09:50:9b:12:67:ab:36:ba:1d:a1:e6:79:3e:
21:ec:47:e4:80:e7:6c:3c:1a:f6:c0:71:29:79:69:
dc:61:cf:97:1b:8b:e3:8b:25:33:e7:bb:75:0c:95:
51:49:2a:95:7e:f3:90:8d:bc:55:25:a9:34:fa:2e:
0d:1c:79:c0:f0:e5:5c:5e:b4:dd:1b:89:d4:c7:ce:
c3:ae:d1:a7:66:20:8c:54:c4:a5:fc:e9:20:51:b3:
84:f5:65:37:44:d6:98:c7:0f:d4:dc:0d:71:a6:53:
36:07:7d:bc:c6:48:f8:55:23:f5:5f:0f:e4:2c:64:
42:cb:1c:94:7f:19:84:16:6d:37:de:6a:b2:79:45:
7c:1f:36:c5:a5:86:94:eb:f5:cb:23:18:9a:b4:31:
4a:8d:83:75:56:be:b7:a8:08:dc:d3:f3:9f:62:2f:
13:42:f1:d2:18:a5:30:11:3c:91:93:1a:3e:40:9c:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:40:3F:A4:CC:C7:05:DA:58:28:A1:CB:55:F7:AB:0C:C6:F2:F5:43
X509v3 Authority Key Identifier:
keyid:D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e4:64:33:fc:b7:cc:6d:fe:8c:d8:1a:0c:4c:b1:46:e5:26:
57:a9:94:81:d7:b6:1c:41:22:cb:d9:4b:32:52:18:91:83:0f:
91:39:7e:71:91:f7:27:b3:fd:ce:8a:b7:ef:b8:26:d0:3a:72:
7f:8c:64:d0:77:45:09:e9:a9:5a:c6:ee:3c:fb:8e:27:98:fd:
f3:e5:1e:14:c7:58:05:64:a6:b8:54:f7:29:21:a5:35:90:d0:
c3:45:d7:5f:44:d3:f4:14:2b:0b:0f:6c:7c:db:84:5e:cc:94:
b0:59:77:c0:a7:0f:aa:66:32:50:6b:2e:62:cf:fb:97:74:b1:
0d:7e:4c:31:34:fb:4e:bf:79:90:84:78:9c:d2:1f:68:af:ac:
d3:dd:f2:82:30:b9:0c:f5:25:02:b4:ab:c7:9c:7c:1d:c2:c7:
b9:73:d5:6a:45:a1:d1:98:30:c0:e6:e9:39:8d:65:6e:46:f7:
3d:4b:75:aa:ae:57:3c:ab:c3:77:65:25:b8:ea:b6:9b:00:f7:
a9:a7:7d:8a:21:33:35:67:56:dd:71:39:2d:d4:25:ed:14:a4:
10:cd:95:96:84:2f:d1:32:95:dc:c2:35:19:a9:df:ee:97:93:
fb:27:cf:01:9a:d7:fe:1d:c6:a5:b9:bd:a9:ef:66:5e:e5:c8:
ba:92:c5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:38:43 2025 by rpki-client