
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
File: BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft (raw, json)
Hash identifier: TrueRQiuux5VXCd5aV7FuobM3y/RzkfLr6sDlQOEMQ8=
Subject key identifier: 23:2B:BB:93:7F:FE:5A:29:9B:FD:75:91:97:72:D3:01:BA:4F:EC:2F
Authority key identifier: BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6
Certificate issuer: /CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6
Certificate serial: 74039E63C1CCAD2C0E5E4F8FB20A72B87EFEDC9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
Manifest number: C8
Signing time: Tue 04 Nov 2025 01:33:22 +0000
Manifest this update: Tue 04 Nov 2025 01:28:22 +0000
Manifest next update: Sun 09 Nov 2025 11:42:22 +0000
Files and hashes: 1: BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl (hash: FM58hq46kzqZxCaScnRZnqR9WNGdyAtsRswqRAK7ZGg=)
2: 323830333a633335303a3a2f33322d3332203d3e20323733383834.roa (hash: QyUtb/5gl6krDSKK04fIDtKnAQYQqWsdxxEP9vtOfXU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl
rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:03:9e:63:c1:cc:ad:2c:0e:5e:4f:8f:b2:0a:72:b8:7e:fe:dc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6
Validity
Not Before: Nov 4 01:28:22 2025 GMT
Not After : Nov 9 11:42:22 2025 GMT
Subject: CN=232BBB937FFE5A299BFD75919772D301BA4FEC2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:57:0e:6f:6b:9f:39:a4:91:fe:4d:94:7f:
72:11:b3:00:02:39:2b:08:f3:aa:42:d4:db:a8:0e:
31:78:b7:69:61:f8:8b:75:4e:9f:71:eb:e6:62:9e:
35:d8:7f:a8:cf:66:7c:39:58:d9:b1:9b:5d:bf:2d:
f6:55:10:e4:6d:6a:91:a8:9e:89:0d:06:3e:68:49:
91:7e:59:6f:17:9f:3f:15:5e:8d:fd:ea:4e:4d:a5:
e0:d4:62:da:d2:40:bf:5f:a8:82:2f:2a:21:1e:16:
49:05:ea:dc:fe:da:d5:aa:92:db:cf:b7:bb:66:22:
8f:1c:80:01:0d:50:e8:26:e2:ef:e8:17:b9:d1:35:
c8:51:3d:12:da:9b:24:e5:c5:b6:43:5b:1a:d7:0b:
2a:70:09:12:6c:07:00:39:68:30:66:56:f9:f8:0e:
5a:8d:29:f5:10:12:9c:48:3d:f7:ff:3f:4d:4d:7d:
0d:6a:bb:6d:22:c5:aa:6d:60:01:2a:4c:22:d6:35:
3e:33:98:57:17:f7:b1:24:5a:2f:2d:c8:c4:a1:c1:
07:5b:cd:98:22:3b:f9:ea:13:a4:4d:f6:a5:8c:06:
e0:58:57:08:66:61:ba:2f:3e:eb:36:d8:13:b2:52:
eb:23:f5:22:5b:20:89:d1:32:39:9c:3f:c8:8b:f6:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2B:BB:93:7F:FE:5A:29:9B:FD:75:91:97:72:D3:01:BA:4F:EC:2F
X509v3 Authority Key Identifier:
keyid:BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7b:11:66:ed:10:7b:f9:65:d0:a9:7c:41:c9:02:0c:75:3d:
78:d3:b6:54:bf:9d:c5:57:3e:53:13:a4:40:ed:30:5d:e4:b3:
99:35:64:00:bf:96:6a:3c:13:c9:39:c2:4e:20:74:b1:27:f2:
41:25:42:d6:96:8e:4a:16:16:b2:57:b9:28:39:de:63:26:ea:
4e:b6:d3:e2:bb:8f:3c:c6:88:5a:8f:f5:f4:7a:4d:a8:cd:96:
90:8e:e5:89:83:f6:68:8f:36:1c:c0:1e:35:02:b5:ed:a2:a7:
d7:e2:7b:35:5f:c2:fc:27:fc:40:3a:93:6d:e0:12:99:63:c7:
30:e3:b8:78:8f:ab:13:5e:db:b4:c3:d8:57:6a:b5:3c:6a:d6:
3b:94:b8:f7:d7:bf:aa:8d:90:fb:74:47:0b:05:4c:06:08:5d:
9a:d9:57:ae:ff:bf:99:de:32:4b:f3:34:cd:ed:d1:1b:26:c2:
25:95:f4:9e:05:63:af:c3:56:41:64:b7:97:47:cf:0c:83:bd:
90:5e:3b:22:59:b2:a4:fe:bc:94:eb:dd:c3:f9:29:5e:a7:dc:
29:03:60:c6:2f:b4:2b:c7:2e:a6:0f:79:53:ed:f7:5d:6b:b2:
5b:66:92:a5:ba:4a:66:b7:39:a7:57:f3:c7:8b:b6:00:8f:51:
aa:56:45:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:44:15 2025 by rpki-client