
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft
File: C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft (raw, json)
Hash identifier: hvy14LCGmg8COJRXrYPFtW4GIesNYSffPrchJNO6lbU=
Subject key identifier: 81:03:C7:D9:17:CF:EC:36:95:70:E0:27:A9:FC:C4:68:04:CD:D2:A7
Authority key identifier: C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34
Certificate issuer: /CN=C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134
Certificate serial: 2B749B957F173BE2E7C992D5E66C65918408E04E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft
Manifest number: 012A
Signing time: Sun 02 Nov 2025 17:24:59 +0000
Manifest this update: Sun 02 Nov 2025 17:19:59 +0000
Manifest next update: Fri 07 Nov 2025 23:03:59 +0000
Files and hashes: 1: 3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa (hash: iPZkMidbV6j7qs4Tb72Amx6IwnPxc0DSpDdNVkH9fFw=)
2: 323830313a31353a323830303a3a2f34382d3438203d3e20323730303333.roa (hash: tMILc0tohyw7gwHf6b6U5pH4Ve8I1lOt1edGi60IOJs=)
3: C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.crl (hash: K8uZbBp/wwbNVDAaU1AZrbNRtwkOazrk1cMsRncLy+4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.crl
rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 07 Nov 2025 23:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:74:9b:95:7f:17:3b:e2:e7:c9:92:d5:e6:6c:65:91:84:08:e0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134
Validity
Not Before: Nov 2 17:19:59 2025 GMT
Not After : Nov 7 23:03:59 2025 GMT
Subject: CN=8103C7D917CFEC369570E027A9FCC46804CDD2A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:68:ce:52:e0:01:9d:40:f0:c2:fc:b1:08:
06:92:70:c2:ce:07:99:9e:f4:e6:ee:20:19:85:5e:
51:b9:c9:34:70:49:84:bd:3d:43:b5:e5:10:62:49:
28:b9:03:28:44:7e:36:93:8b:1c:c7:87:06:3f:51:
b4:39:e8:89:92:a2:b3:4f:23:41:bf:50:e8:8d:94:
2a:0e:17:2b:fc:84:2c:59:e5:af:c0:0a:ff:aa:f3:
6d:2a:26:ba:f5:1b:38:78:df:1d:8e:02:68:39:41:
ec:69:22:fd:22:0c:c9:bc:e0:c6:e0:93:41:b8:7a:
16:bd:38:da:9a:8a:35:8b:bd:2a:03:ea:68:f0:12:
a5:dd:7d:55:3d:46:5c:68:86:97:e1:c2:86:9f:9e:
9e:85:e3:d3:de:28:94:0a:ee:48:9f:fd:0c:78:8d:
ae:7a:d1:75:79:77:8d:80:11:aa:a3:a9:3c:06:8d:
d5:9d:51:3b:a7:25:2c:ec:97:c0:1b:c5:ea:77:c2:
84:8c:5e:a9:6f:68:2c:dd:c5:c1:85:80:02:43:65:
ac:f2:b8:32:f3:9f:6c:e0:26:18:e4:4d:2b:75:ae:
52:33:60:51:50:fa:11:e8:ce:16:1e:f6:cb:6a:86:
37:a5:f4:8a:02:62:aa:a5:ca:1e:1a:39:60:44:53:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:C7:D9:17:CF:EC:36:95:70:E0:27:A9:FC:C4:68:04:CD:D2:A7
X509v3 Authority Key Identifier:
keyid:C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:18:48:5e:80:17:42:79:8e:53:2a:8b:62:3a:04:c6:65:f4:
11:44:fd:d0:ff:87:7e:d5:fa:cb:71:97:e1:7a:1d:ff:b9:91:
89:07:42:7d:7f:75:92:2e:bf:a3:de:13:46:0f:c8:d5:4c:33:
81:ac:64:6e:fc:ed:b6:68:b1:92:31:cb:62:ce:b4:72:9b:f8:
dd:ee:9a:cf:bf:6d:80:b8:48:45:66:ed:a4:78:21:2e:aa:56:
aa:19:63:a6:f9:e1:b7:08:0f:d9:9e:f5:17:a9:ec:43:59:0a:
33:c0:a5:7f:77:ff:3f:9e:9d:c3:94:35:cb:d3:6a:48:14:66:
0f:24:02:ee:d7:2e:2e:9a:75:b1:bd:a4:fb:b7:03:d9:06:6c:
6b:3f:e7:01:89:0d:67:ba:a3:e9:a9:1b:09:31:3b:6e:78:12:
d9:d5:cf:fa:6c:b6:16:fd:69:27:92:71:41:df:b8:ec:00:fd:
f2:b8:e1:0d:ed:97:7c:74:84:a4:6a:5f:1a:36:97:b2:3f:ed:
48:33:8f:04:aa:66:83:d1:25:30:82:14:7b:80:07:8f:21:b9:
72:7f:74:8d:33:5b:d4:26:46:26:1a:b3:bc:0b:52:f4:d6:f3:
64:1b:f8:36:01:55:3d:62:f7:8d:23:48:c9:63:5a:16:df:c8:
21:c3:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:38:33 2025 by rpki-client