
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft
File: CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft (raw, json)
Hash identifier: TnamnSep1Sz2FZu0aslVmVpKUVQgdBzlk2V8kQMsKDg=
Subject key identifier: 9D:38:97:F4:24:6F:FA:B5:E4:8D:5B:CF:BA:50:08:6F:DD:C5:EC:99
Authority key identifier: CF:EC:95:C0:42:F7:18:CF:DE:FD:38:BC:85:C4:AF:BA:3E:7A:9A:F8
Certificate issuer: /CN=CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8
Certificate serial: 4E4D26B1A454B41A537A7ACC56A45FBE4E4F23EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft
Manifest number: 0138
Signing time: Tue 04 Nov 2025 14:00:33 +0000
Manifest this update: Tue 04 Nov 2025 13:55:33 +0000
Manifest next update: Mon 10 Nov 2025 02:43:33 +0000
Files and hashes: 1: CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.crl (hash: GIAwT7Mkml+71RwK8UbDqMbY85PUaZiV9bmyWUF9p3A=)
2: 323830313a3164383a3a2f33362d3336203d3e203134303830.roa (hash: kTsqiTci25ScwNDqEcNIcuEq8KwkM/5PXZ6KQoWzavM=)
3: 3136382e3232382e3130382e302f32322d3234203d3e203134303830.roa (hash: bqd121Wxroa7r8lLYM2nZjqFUhGeowChkpmVzBwnZz4=)
4: 3136382e3232382e3131312e302f32342d3234203d3e2033383136.roa (hash: Oxf9MXdLHeoqweloHQWm248U/pLu1wfclNKJTgiZhoI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.crl
rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:4d:26:b1:a4:54:b4:1a:53:7a:7a:cc:56:a4:5f:be:4e:4f:23:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8
Validity
Not Before: Nov 4 13:55:33 2025 GMT
Not After : Nov 10 02:43:33 2025 GMT
Subject: CN=9D3897F4246FFAB5E48D5BCFBA50086FDDC5EC99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:fe:bd:a7:7e:75:db:e8:e8:76:b3:7a:1e:
f8:ba:05:e1:07:98:f1:77:69:26:ca:a9:b1:e4:d1:
b2:29:64:0f:3a:b9:17:38:2e:3e:9b:c4:3a:a3:02:
ff:e5:b7:65:ea:66:19:e0:15:75:ad:a8:cb:b5:6a:
3d:3c:23:5f:f6:26:7e:59:fc:cd:7d:41:26:24:b9:
00:1e:e8:94:d8:ff:88:e4:b0:f6:6a:ad:0f:6d:4d:
85:74:59:bc:84:21:73:03:dc:1b:39:96:cc:0b:38:
91:f4:1c:d4:99:ec:09:1a:67:11:73:0c:e7:40:51:
7b:80:ef:f6:3a:e6:7d:c8:2c:ef:eb:fe:be:c0:34:
7c:a5:72:8a:71:0a:12:0b:71:ce:07:b6:96:ef:6b:
d1:da:71:d8:51:0a:6d:23:8f:ca:65:78:96:e6:0c:
95:d3:82:32:f7:0b:3e:2d:48:3f:d7:97:34:36:d1:
83:0b:1c:50:e2:5b:a8:97:e8:22:15:89:fe:05:a4:
a5:f0:02:55:b9:a8:06:d0:d4:56:6f:86:e9:ba:6b:
1f:d9:bf:c1:c7:6d:74:7f:8c:8f:2c:d0:07:bf:b7:
1f:b1:ab:aa:6c:fe:a0:49:33:0c:12:06:c8:7e:19:
fd:3d:b4:dc:41:b9:00:b1:b0:e2:d1:c8:18:ac:22:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:38:97:F4:24:6F:FA:B5:E4:8D:5B:CF:BA:50:08:6F:DD:C5:EC:99
X509v3 Authority Key Identifier:
keyid:CF:EC:95:C0:42:F7:18:CF:DE:FD:38:BC:85:C4:AF:BA:3E:7A:9A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d0:ce:8c:96:23:6a:cd:84:8e:bf:76:de:61:06:56:ce:cb:
16:5a:ee:ae:19:98:09:c6:9b:c9:08:e8:9c:25:37:6a:97:82:
14:43:8e:c5:34:40:4c:56:50:8b:f8:ab:55:50:7a:73:8b:3f:
2d:93:0a:ac:ab:15:2a:d4:5d:c0:82:37:9a:2a:af:e7:95:ee:
76:d5:70:0b:40:cf:96:1b:ee:4b:9f:e6:8f:8f:90:71:bb:ce:
18:d7:92:37:56:8c:bf:d9:4f:48:e5:28:84:a8:aa:75:92:c7:
d9:08:28:ac:b4:9f:1b:e6:a9:03:d4:b1:24:be:62:94:d4:8a:
5b:69:d6:f3:c2:d4:e9:ce:56:96:ea:a8:d6:01:f4:7d:24:ab:
2e:85:71:3f:2c:63:aa:0b:d2:f3:ab:a1:85:8c:1d:fa:c9:5b:
65:e7:df:2b:1a:26:8d:03:d6:71:2d:02:a2:37:89:58:8d:50:
6a:69:3d:6b:15:00:a6:44:80:9f:df:e3:08:1a:eb:bd:ea:21:
d5:14:86:1c:0a:98:86:99:66:99:1d:5c:39:03:c7:ab:47:f1:
25:9d:31:00:c6:af:f3:fb:68:85:cd:20:72:85:97:35:e7:40:
df:48:93:58:3c:4f:97:85:9f:f2:ad:39:f8:23:16:66:38:2f:
2b:47:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:37:00 2025 by rpki-client