
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft
File: 64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft (raw, json)
Hash identifier: 2U7TBQM9BpQp+cAPKyx5qIOQ9PHNQhgJjPviDYwnOi4=
Subject key identifier: B3:92:E3:03:95:C0:8D:0D:91:01:C7:DC:3A:EA:12:84:3D:02:CA:CB
Authority key identifier: 64:98:9D:03:F1:41:E6:B4:84:0F:29:9A:D2:E2:29:F9:A3:F6:DD:77
Certificate issuer: /CN=64989D03F141E6B4840F299AD2E229F9A3F6DD77
Certificate serial: 2CAFB241ABED658A15707BEB57157E852570DF69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft
Manifest number: 0130
Signing time: Tue 04 Nov 2025 07:06:41 +0000
Manifest this update: Tue 04 Nov 2025 07:01:41 +0000
Manifest next update: Sat 08 Nov 2025 18:23:41 +0000
Files and hashes: 1: 64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl (hash: 4g994Ijy4LK4m+MLPly5mkaEkqIygzBZZTGbXW86sdI=)
2: 3137372e3138342e39322e302f32322d3234203d3e20323731373835.roa (hash: 8kzPGzuHgACU2430k7sG4sqkQUWsLQ34hWQZ/4wdu1U=)
3: 3137372e3138342e39322e302f32322d3234203d3e20323733383737.roa (hash: 9w/YKrXMISSY9LnSdaCOGxHNYSZ7x+6LRwPazmTHFVE=)
4: 323830333a356665303a3a2f33322d3438203d3e20323731373835.roa (hash: 7FlHdQ8SB4+8R2dU/+S2doIPYPdDG55EVBY2lMNM4/o=)
5: 323830333a356665303a3a2f33322d3438203d3e20323733383737.roa (hash: BNkU0YTLg6+rmZpX+15XbNnsw2mzwx76vWlG2DkjojE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl
rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 18:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:af:b2:41:ab:ed:65:8a:15:70:7b:eb:57:15:7e:85:25:70:df:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64989D03F141E6B4840F299AD2E229F9A3F6DD77
Validity
Not Before: Nov 4 07:01:41 2025 GMT
Not After : Nov 8 18:23:41 2025 GMT
Subject: CN=B392E30395C08D0D9101C7DC3AEA12843D02CACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:09:f3:5d:25:0f:a5:e3:73:cf:00:41:55:
66:3c:41:1d:15:d6:bb:77:14:68:60:28:7a:20:d6:
55:fe:5a:cc:76:16:ae:a2:e0:85:8a:ff:3f:73:14:
5e:de:e4:ee:fb:5a:65:80:b1:cd:25:5a:8e:71:06:
55:8c:26:01:10:0e:d7:a4:8f:95:3a:d4:e5:0c:dd:
4e:82:67:31:5e:81:97:df:8d:7f:b9:05:cb:6a:00:
38:d2:e8:f4:a3:a4:66:b0:e1:a4:ab:c6:f5:5c:42:
1a:e5:fa:6c:12:67:b6:f2:eb:48:00:1a:da:59:7f:
f5:97:8c:fd:72:43:67:2d:71:2e:b0:9c:aa:74:0f:
5d:28:8d:30:7e:9e:9f:03:e3:70:5b:31:76:cf:19:
37:21:e5:93:5a:ca:50:fb:de:f7:83:6e:39:48:4f:
c1:b5:02:ab:f0:50:cc:3c:9f:e2:6a:fa:d6:7f:53:
41:ea:6c:1b:c0:c8:43:d0:7f:fb:61:49:71:16:f6:
b3:bd:18:56:c3:26:44:f7:99:cd:62:c7:46:42:ea:
47:b1:66:dc:4f:67:27:da:eb:76:6a:18:3e:6c:66:
91:91:d5:b9:1f:6c:08:87:ad:7d:80:bf:8e:ec:c9:
ad:2b:7f:66:db:eb:5a:c7:10:4d:cc:9d:c9:71:13:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:92:E3:03:95:C0:8D:0D:91:01:C7:DC:3A:EA:12:84:3D:02:CA:CB
X509v3 Authority Key Identifier:
keyid:64:98:9D:03:F1:41:E6:B4:84:0F:29:9A:D2:E2:29:F9:A3:F6:DD:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:44:59:ac:03:2d:2a:3a:8b:2b:36:f0:4c:f4:1b:be:b6:ef:
20:36:b1:5f:52:79:dd:c7:cd:80:d2:ac:19:c3:7e:0a:fe:a8:
53:31:20:d0:c5:e6:38:58:e1:de:91:fc:c7:f6:e0:d3:18:f5:
b4:eb:8e:b8:c1:a9:52:d7:2f:ec:39:11:d7:25:b0:2e:3c:1f:
82:87:24:9b:98:dd:9e:dd:8a:3b:9b:29:5f:ca:cf:70:f2:c1:
20:39:57:70:bf:60:8e:1a:6c:e2:87:4f:f4:63:18:04:66:de:
a4:18:da:c3:a7:55:e8:d2:2d:2d:bf:1a:1a:1a:66:ce:77:3b:
05:0a:ab:a3:43:37:9a:78:fd:f2:b3:e0:76:c1:e5:7a:65:ec:
e7:c6:7d:a8:54:fc:c6:7b:b3:09:47:bf:1f:6f:f9:1b:54:8c:
7e:ce:2e:18:5c:fd:db:19:e9:f9:30:e1:34:83:3f:df:54:61:
87:50:ca:22:38:15:f5:43:15:9e:53:2e:9e:0a:f7:94:97:10:
ed:93:45:2b:fa:ea:41:10:f2:01:f5:db:ab:e6:86:a0:e5:ce:
73:72:29:34:3d:73:cb:a9:ae:9b:3e:a0:50:4f:a3:8a:36:cb:
5a:31:10:d9:92:60:77:a5:a4:fc:2e:df:65:9c:81:a6:64:a4:
95:f3:44:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:04:04 2025 by rpki-client