
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft
File: 73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft (raw, json)
Hash identifier: rosBEzT+06CtGDAAlnWw4Vk3dFjaQkI0EaD4rH5xxiI=
Subject key identifier: 42:A2:57:3E:53:78:CA:F0:F4:F4:18:4D:F1:24:7D:25:08:CD:54:10
Authority key identifier: 73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0
Certificate issuer: /CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
Certificate serial: 68DF3E838A66D261174ACD34643361EF011943F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft
Manifest number: 011F
Signing time: Tue 04 Nov 2025 11:19:07 +0000
Manifest this update: Tue 04 Nov 2025 11:14:07 +0000
Manifest next update: Mon 10 Nov 2025 08:52:07 +0000
Files and hashes: 1: 3134382e3232342e35382e302f32332d3234203d3e20323730313732.roa (hash: +nDNQuXsqBAQNGc1hOLoyG3ji+qXfz50Qq3OdtMIWpU=)
2: 323030313a313230333a3a2f33322d3438203d3e20323730313732.roa (hash: UUnY9T7pnTA56LjpA/SIoBja3UNkuEMxwxomJNqdbUs=)
3: 73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl (hash: si7XCkKKFICPFmHmbwjv2rsIqRmTuKvUwHuq7a1azrE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl
rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:df:3e:83:8a:66:d2:61:17:4a:cd:34:64:33:61:ef:01:19:43:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
Validity
Not Before: Nov 4 11:14:07 2025 GMT
Not After : Nov 10 08:52:07 2025 GMT
Subject: CN=42A2573E5378CAF0F4F4184DF1247D2508CD5410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:c7:95:22:58:10:24:cb:63:3c:4f:d6:b6:
45:24:bb:ed:1a:a9:d3:9b:ab:8a:6f:64:f7:00:37:
56:df:ef:49:9c:3e:c9:2b:2d:8e:d3:94:cc:12:70:
2a:99:16:df:e2:b3:f8:7a:49:fc:70:b6:12:01:d8:
9e:8a:54:00:91:5b:a9:cf:4a:76:02:f5:d4:bf:4d:
85:a2:82:bb:55:5a:b2:65:52:00:5e:74:e5:fe:c6:
11:65:1c:82:19:ee:66:29:8f:c5:1b:cc:c7:7c:71:
da:d1:42:3e:4c:b7:d2:09:57:2e:6d:34:6f:cb:6c:
b9:ed:4b:fd:fb:51:fc:ae:c6:57:b3:b2:69:f9:ef:
69:05:53:56:20:ec:82:05:7b:6c:0c:73:4d:c2:01:
7b:1e:52:cb:f8:f9:10:71:83:85:0b:a6:ae:eb:12:
d8:38:86:62:23:7e:3f:cd:d1:5a:a2:2f:df:57:b6:
c2:e1:21:f0:bf:20:74:14:d2:32:63:ee:25:e6:d9:
5d:c2:66:fe:47:e6:9c:92:78:76:1d:76:1f:cd:84:
f2:24:a6:b0:96:86:44:ba:8e:b5:e2:82:83:aa:e1:
9c:40:a1:bd:7f:4f:9e:10:13:46:ce:99:7c:d2:74:
6c:7d:6e:7a:84:a8:83:8e:7c:fe:cc:e6:d7:eb:68:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A2:57:3E:53:78:CA:F0:F4:F4:18:4D:F1:24:7D:25:08:CD:54:10
X509v3 Authority Key Identifier:
keyid:73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b7:b7:b8:af:a9:47:4b:59:5d:d2:bf:26:d5:29:48:ff:fa:
c7:5e:8f:af:70:50:63:7d:3f:c0:0b:d9:38:fc:50:a9:1d:dd:
9c:fa:73:ad:43:73:e3:b5:96:68:23:98:d0:c0:71:f3:06:18:
c3:f2:20:14:48:a4:0d:27:3d:19:38:d9:00:cc:0a:4d:f4:ef:
56:c8:5b:e2:87:61:fe:77:2d:28:1c:82:de:e3:b4:f3:59:96:
cc:c7:34:cb:16:fe:84:f6:7a:f5:11:5e:93:c6:23:73:15:53:
d1:5c:e9:66:83:cf:aa:14:bf:89:a9:e6:05:96:43:04:61:75:
75:96:dc:9c:69:a5:59:90:4e:c7:8c:30:90:2f:db:6d:33:88:
a7:23:58:db:42:22:b7:36:65:51:16:83:59:2c:e8:02:87:9b:
35:44:94:a5:cc:dc:63:47:68:6c:d4:57:8c:43:8c:a3:97:fc:
19:8d:30:6c:fe:de:42:c6:43:a6:39:57:51:38:b1:82:81:b4:
9a:ed:cc:2a:8d:aa:d8:8c:00:2e:ac:8a:fe:d6:13:f8:c0:52:
48:08:2f:b2:e9:ef:5f:c1:21:bb:c8:63:5c:61:29:2b:19:fa:
ae:21:01:56:46:0e:cd:0b:7e:58:11:69:fa:11:86:5f:88:81:
79:75:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:21:18 2025 by rpki-client