
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A82DA04B9F4F85C6C14F75917B0DBE894596C4E3434433F70AD31E8FCF262FED/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.mft
File: 890FD2EB8D28500CDEB8826AF284541F8E136F16.mft (raw, json)
Hash identifier: b11G4sZ0v9X5GnHqO0p8vjHVo68UOE3kYIEMq+PDX60=
Subject key identifier: 8C:AC:B2:CF:4D:1A:EE:89:1F:24:3B:94:4A:88:C6:BD:C6:F5:2A:3A
Authority key identifier: 89:0F:D2:EB:8D:28:50:0C:DE:B8:82:6A:F2:84:54:1F:8E:13:6F:16
Certificate issuer: /CN=890FD2EB8D28500CDEB8826AF284541F8E136F16
Certificate serial: 1022107C27AB4693BBA8ADBAEF7491EA4EEE77F9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A82DA04B9F4F85C6C14F75917B0DBE894596C4E3434433F70AD31E8FCF262FED/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.mft
Manifest number: 39
Signing time: Tue 04 Nov 2025 20:49:15 +0000
Manifest this update: Tue 04 Nov 2025 20:44:15 +0000
Manifest next update: Sun 09 Nov 2025 22:12:15 +0000
Files and hashes: 1: 323830363a3431323a3a2f33322d3438203d3e20323732333538.roa (hash: oKjSEU4AwDZxCPFLxLZdzOU8iAancVqUs6VxrTWC2i8=)
2: 890FD2EB8D28500CDEB8826AF284541F8E136F16.crl (hash: tQAHImkBOAlqHIkyNc9dvXocCjXfxkp8oz2gYNH03ZU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A82DA04B9F4F85C6C14F75917B0DBE894596C4E3434433F70AD31E8FCF262FED/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.crl
rsync://repository.lacnic.net/rpki/lacnic/A82DA04B9F4F85C6C14F75917B0DBE894596C4E3434433F70AD31E8FCF262FED/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:22:10:7c:27:ab:46:93:bb:a8:ad:ba:ef:74:91:ea:4e:ee:77:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890FD2EB8D28500CDEB8826AF284541F8E136F16
Validity
Not Before: Nov 4 20:44:15 2025 GMT
Not After : Nov 9 22:12:15 2025 GMT
Subject: CN=8CACB2CF4D1AEE891F243B944A88C6BDC6F52A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:33:52:13:39:cc:fe:b1:26:e1:f0:e6:0d:66:
fb:06:e2:a2:9c:7d:1f:93:41:2f:cf:7c:54:71:e2:
5c:f7:3b:6a:0d:e5:0e:e4:36:3f:9c:22:72:02:e9:
df:10:15:db:00:65:23:9a:c1:df:3d:23:42:94:80:
a0:d6:0a:4d:e4:1b:7f:fd:26:eb:50:b0:60:0d:7f:
7e:b7:78:93:97:21:33:d0:a5:3e:ee:cc:0c:76:c2:
48:c3:39:92:bd:9c:d8:72:c5:56:1c:2c:84:ca:aa:
11:58:21:eb:17:62:a2:16:fc:fb:bb:af:87:1e:9a:
8a:38:4a:ba:0e:5f:21:3d:ea:4c:01:f8:db:83:a3:
d3:3c:4a:7f:47:03:31:5f:17:98:6c:3d:e8:48:1c:
ea:07:1c:8e:18:d6:f6:37:ba:2d:e3:32:78:81:ba:
03:d3:9c:ee:d2:c4:75:11:a7:f5:9a:f5:27:47:53:
a4:cc:28:ae:72:88:a8:59:4f:9e:07:f9:bc:fc:16:
93:1d:65:d7:a0:24:03:9c:0a:31:a5:30:81:b9:f3:
18:35:07:31:6e:a4:73:ef:4e:ac:91:99:9e:ab:8d:
2c:3e:23:37:5b:d1:6a:4b:1c:c3:18:ff:86:68:74:
e3:63:5e:b9:55:20:ab:d3:3a:0b:49:96:21:cf:32:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AC:B2:CF:4D:1A:EE:89:1F:24:3B:94:4A:88:C6:BD:C6:F5:2A:3A
X509v3 Authority Key Identifier:
keyid:89:0F:D2:EB:8D:28:50:0C:DE:B8:82:6A:F2:84:54:1F:8E:13:6F:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A82DA04B9F4F85C6C14F75917B0DBE894596C4E3434433F70AD31E8FCF262FED/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A82DA04B9F4F85C6C14F75917B0DBE894596C4E3434433F70AD31E8FCF262FED/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:20:1e:30:a3:12:69:59:81:7f:2d:f5:33:d8:a8:2e:c9:6f:
26:30:48:ba:34:bb:ca:10:33:3d:80:82:11:42:87:f8:3e:bf:
00:05:fa:da:8e:1b:58:ce:23:1a:38:0b:16:f6:a3:1f:16:b7:
79:07:78:c9:c8:6a:40:85:d1:b1:89:7d:7e:e3:c1:9d:9d:2d:
37:f3:a5:67:d3:99:c9:69:a2:21:ad:6e:5e:cf:9d:20:93:04:
5d:cc:92:cf:59:d5:15:8a:11:ed:7a:00:5e:4f:44:71:57:4e:
70:5c:19:6b:90:ee:7f:78:a6:43:64:0d:02:75:05:66:a0:11:
d6:e9:b8:5f:70:8f:4c:1b:25:06:45:ee:f2:55:02:05:d6:bd:
8c:68:89:fd:08:ca:2a:6e:bc:81:4b:de:f6:06:74:5b:d3:ec:
4d:fa:2b:69:eb:9e:78:7a:e4:5f:6c:b3:32:8e:22:9e:b1:f1:
c5:fc:0d:76:c7:ee:d5:bd:f7:81:0e:ef:5c:26:e9:c8:90:72:
b7:2a:88:56:d0:41:e1:8d:0c:de:0a:0e:c3:b0:30:9c:8d:89:
8a:61:f5:90:10:aa:e9:73:4c:f4:58:9e:a0:b9:4c:5b:ef:3f:
2c:60:29:07:13:0a:90:f8:05:bf:29:72:75:67:37:2f:0f:e2:
ed:cd:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:55:23 2025 by rpki-client