
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
File: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft (raw, json)
Hash identifier: mFtZ+3I094O7E/fcqqVHKd7IDdAWeG2qrmqo/fHqmVc=
Subject key identifier: 45:88:3C:F8:E0:7E:63:D4:55:98:1E:75:B8:B8:4F:AD:87:16:87:9D
Authority key identifier: 0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98
Certificate issuer: /CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
Certificate serial: 1293A7007D7547050F123AA7160BFA3140333DA0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
Manifest number: 0137
Signing time: Wed 05 Nov 2025 11:57:24 +0000
Manifest this update: Wed 05 Nov 2025 11:52:24 +0000
Manifest next update: Mon 10 Nov 2025 00:44:24 +0000
Files and hashes: 1: 3133322e3235352e372e302f32342d3234203d3e20323633373236.roa (hash: 4enywTReuztkAZA8QfDVVO/DSjhDY+9zSMoXxSl8TDU=)
2: 3133322e3235352e362e302f32342d3234203d3e20323633363937.roa (hash: wXk1gBsCKAVBhA0HEaOwZW0Hk29YTL096/qFnG/gfRM=)
3: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl (hash: lAqXC9v7E20Xo/PXUkl2bQ80/awYcHxnRSLDS3qcBbk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl
rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:93:a7:00:7d:75:47:05:0f:12:3a:a7:16:0b:fa:31:40:33:3d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
Validity
Not Before: Nov 5 11:52:24 2025 GMT
Not After : Nov 10 00:44:24 2025 GMT
Subject: CN=45883CF8E07E63D455981E75B8B84FAD8716879D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:d6:75:01:b9:f9:08:f3:a2:ab:ee:96:91:
6b:0a:1e:3b:51:0f:df:66:64:18:0f:79:34:d0:2a:
23:bd:67:b0:19:6a:c4:d7:b8:04:0a:74:15:3e:d8:
45:9a:9b:07:e8:35:9a:1e:99:4d:7f:dc:3b:19:ea:
95:01:d4:8a:f3:a3:ba:33:9d:41:1a:6d:99:b8:de:
3c:97:f6:25:0e:8e:69:90:92:56:5d:ec:e5:3f:7e:
9f:d6:ad:e4:51:20:81:2a:95:a9:c4:79:f9:4e:a0:
6b:75:ab:6c:e5:93:d2:52:89:9d:97:91:31:ab:b7:
ab:73:49:06:39:59:15:a6:4e:c5:8d:b4:b7:2d:f0:
3a:37:d1:b2:87:f4:78:03:19:38:62:4d:f5:82:7d:
65:0a:5e:5d:64:34:07:10:37:7e:1f:d4:25:c8:3f:
44:34:60:fe:8e:87:e0:d6:ef:ca:92:3e:80:31:95:
82:0a:25:19:32:26:e2:5e:97:8f:ff:53:ce:b3:17:
37:20:b6:88:81:84:40:0b:e7:5a:3e:68:6b:46:e6:
5d:c9:9a:39:f7:e4:e1:64:3f:c4:af:f6:ec:25:dc:
d9:d6:d9:e5:55:60:f6:9e:f4:4a:e3:e1:50:b9:84:
78:35:8e:51:bb:77:a4:2d:40:88:17:7d:8b:52:81:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:88:3C:F8:E0:7E:63:D4:55:98:1E:75:B8:B8:4F:AD:87:16:87:9D
X509v3 Authority Key Identifier:
keyid:0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:52:41:4d:37:af:79:2b:7a:2f:52:11:e8:a0:dc:a1:dc:41:
0d:36:80:03:82:ec:cc:b9:01:08:e5:64:fd:7f:ac:fb:13:34:
a5:f1:27:e6:31:d4:5c:6f:88:b3:db:4d:3d:30:a4:ab:46:cc:
7e:7a:b7:92:14:64:18:f9:6a:54:cc:11:ad:45:7c:59:73:64:
0f:76:e2:2d:d1:92:54:e8:c1:a1:6e:c9:d0:25:0a:25:ed:ee:
38:e7:6c:6f:0e:f3:ee:11:7c:06:8a:e9:5c:bc:da:10:7e:f7:
91:28:92:c9:a8:16:d2:b0:7c:aa:f8:be:95:41:cb:60:a4:73:
ec:56:1f:d5:97:8d:d8:19:00:da:51:16:9e:ed:c1:67:35:58:
e2:89:25:5e:c6:a5:b0:3b:19:74:9e:db:b0:62:44:b2:ff:18:
64:b4:ec:b9:25:84:46:e5:ee:f9:58:c0:7e:c5:e6:a2:51:bd:
04:71:fa:af:f4:bd:3d:25:54:e4:d1:f9:65:50:d6:b1:e3:61:
3c:4b:17:c4:6c:08:3c:e6:74:f4:03:19:8c:a8:f8:dd:cd:2a:
06:09:28:1c:5c:9d:13:83:4c:96:97:11:73:f5:89:6d:c6:27:
9b:1d:99:53:d2:11:f5:3e:d9:6a:f7:9a:5b:88:04:24:68:9b:
b0:5b:f2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:24:32 2025 by rpki-client