
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.mft
File: 399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.mft (raw, json)
Hash identifier: DzI9eyQzQ7YbQO5/QYByGd6urfd1Oy8VPRXfD8mpbgw=
Subject key identifier: 38:CB:69:21:A5:B8:79:B2:AB:4D:DB:26:D0:56:05:A5:B0:FB:5B:6A
Authority key identifier: 39:99:74:13:8A:F0:FC:E4:BC:93:28:F7:0E:E6:C0:D3:EF:EA:46:C5
Certificate issuer: /CN=399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5
Certificate serial: 0783EB1900216DC1C82E0BE7EA96F5B13E324FF3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.mft
Manifest number: 0131
Signing time: Wed 05 Nov 2025 10:26:35 +0000
Manifest this update: Wed 05 Nov 2025 10:21:35 +0000
Manifest next update: Mon 10 Nov 2025 18:28:35 +0000
Files and hashes: 1: 399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.crl (hash: 5u38Ep+XZEb7l4Tz3CUT5rHm6xcn0t4FJymHtHdGdOg=)
2: 323830333a623435303a3a2f33322d3438203d3e20323733313337.roa (hash: UfNtSpYp4tNAhUPUqhv+Y7/jySzcV6H3F8/k4eIBeUM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.crl
rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:83:eb:19:00:21:6d:c1:c8:2e:0b:e7:ea:96:f5:b1:3e:32:4f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5
Validity
Not Before: Nov 5 10:21:35 2025 GMT
Not After : Nov 10 18:28:35 2025 GMT
Subject: CN=38CB6921A5B879B2AB4DDB26D05605A5B0FB5B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:13:94:45:e3:f3:7c:35:bc:71:cf:c0:1f:
89:a0:82:2e:34:39:ea:70:e3:d7:9b:60:ae:16:dd:
d3:13:f8:6f:ab:fa:1c:71:b8:bd:04:78:44:25:7b:
a3:09:c6:5a:ce:20:7d:f1:50:54:20:26:a5:b4:2c:
4f:35:b1:0b:f5:21:99:57:25:52:a2:9e:02:bb:9e:
94:35:e1:14:7b:d1:f2:fe:61:60:4c:9b:d5:b5:78:
4d:d5:ce:86:4e:90:d0:88:3f:ca:16:d0:2e:a1:d4:
df:d2:70:11:1d:1b:a6:16:a1:77:68:76:14:c2:9e:
29:1b:df:ba:36:f9:e0:38:f8:e3:94:b7:7e:25:69:
07:8a:a6:70:39:4d:c7:98:fb:bd:a7:04:d5:8e:95:
32:40:16:bf:c7:ed:ed:e2:ad:cd:c1:f0:89:21:79:
93:28:63:df:72:fa:cb:20:81:a7:c4:2e:c2:b2:bb:
20:92:99:b9:17:16:40:b5:ca:1a:48:2f:48:e2:62:
0a:fb:a2:02:13:d1:2c:b7:f3:5f:a4:ee:cb:dc:e5:
15:6e:cb:96:94:47:03:8b:04:5e:04:fa:07:87:08:
ac:d4:58:03:4f:4c:1e:2d:4a:04:5c:05:db:f2:cc:
ba:91:7c:00:1e:c0:c3:be:59:a9:9d:e7:02:e7:7b:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CB:69:21:A5:B8:79:B2:AB:4D:DB:26:D0:56:05:A5:B0:FB:5B:6A
X509v3 Authority Key Identifier:
keyid:39:99:74:13:8A:F0:FC:E4:BC:93:28:F7:0E:E6:C0:D3:EF:EA:46:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8d:0a:3d:32:6a:0e:c5:5f:61:51:61:5a:73:d8:66:24:3f:
12:08:a0:3a:da:90:a1:43:20:fb:c6:3d:64:89:94:92:36:81:
fa:f4:e0:9b:bf:4c:8e:26:6a:39:ba:05:53:7c:07:10:64:e6:
da:44:37:64:c8:ab:dc:7c:3a:2a:01:7d:43:14:cb:69:de:8a:
0d:96:41:f3:fd:da:a9:ec:3a:ab:12:6a:7d:c4:ce:82:e9:8a:
2d:c3:c5:d1:08:8a:b1:4a:55:a8:29:e1:60:26:9b:81:89:5a:
59:bb:1a:5d:1a:34:5a:32:aa:25:3d:8c:70:b5:04:1c:b3:b3:
c9:91:dc:e2:d6:46:c7:45:7b:f9:21:9e:b9:dc:61:e8:a8:eb:
df:d0:d2:0f:8f:f5:52:d3:71:20:b3:bc:ad:05:2a:35:2e:9a:
1e:18:54:66:1e:88:01:c9:fb:67:5e:74:9b:85:87:40:f4:fa:
98:63:6a:0f:22:97:26:f6:d1:4c:0b:43:ad:6e:9b:90:8a:ab:
68:b9:b8:17:a6:3f:6d:93:a4:64:6d:4a:a6:ce:54:80:06:89:
9a:d7:87:b3:30:b8:18:f0:d4:32:e2:f9:bd:f4:5c:30:f0:35:
55:9c:e9:ac:96:fd:2a:a8:4c:6a:dd:82:53:a9:3b:98:85:1d:
d1:fe:95:52
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUB4PrGQAhbcHILgvn6pb1sT4yT/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5OTc0MTM4QUYwRkNFNEJDOTMyOEY3MEVFNkMwRDNF
RkVBNDZDNTAeFw0yNTExMDUxMDIxMzVaFw0yNTExMTAxODI4MzVaMDMxMTAvBgNV
BAMTKDM4Q0I2OTIxQTVCODc5QjJBQjREREIyNkQwNTYwNUE1QjBGQjVCNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5hOURePzfDW8cc/AH4mggi40
Oepw49ebYK4W3dMT+G+r+hxxuL0EeEQle6MJxlrOIH3xUFQgJqW0LE81sQv1IZlX
JVKingK7npQ14RR70fL+YWBMm9W1eE3VzoZOkNCIP8oW0C6h1N/ScBEdG6YWoXdo
dhTCnikb37o2+eA4+OOUt34laQeKpnA5TceY+72nBNWOlTJAFr/H7e3irc3B8Ikh
eZMoY99y+ssggafELsKyuyCSmbkXFkC1yhpIL0jiYgr7ogIT0Sy381+k7svc5RVu
y5aURwOLBF4E+geHCKzUWANPTB4tSgRcBdvyzLqRfAAewMO+Wamd5wLne9IRAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUOMtpIaW4ebKrTdsm0FYFpbD7W2owHwYDVR0j
BBgwFoAUOZl0E4rw/OS8kyj3DubA0+/qRsUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMDNBMjE5OTczMUE1RDU4ODFCNUY4ODUyMzI1Mjc4QUND
OEFGNTJGQzcxN0YxNUQ0MDY2MjM3RjcyRDc2QkNBLzAvMzk5OTc0MTM4QUYwRkNF
NEJDOTMyOEY3MEVFNkMwRDNFRkVBNDZDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOTk5NzQxMzhBRjBGQ0U0QkM5
MzI4RjcwRUU2QzBEM0VGRUE0NkM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzAzQTIxOTk3MzFBNUQ1ODgxQjVGODg1MjMyNTI3OEFDQzhBRjUyRkM3
MTdGMTVENDA2NjIzN0Y3MkQ3NkJDQS8wLzM5OTk3NDEzOEFGMEZDRTRCQzkzMjhG
NzBFRTZDMEQzRUZFQTQ2QzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUjQo9MmoOxV9hUWFac9hmJD8S
CKA62pChQyD7xj1kiZSSNoH69OCbv0yOJmo5ugVTfAcQZObaRDdkyKvcfDoqAX1D
FMtp3ooNlkHz/dqp7DqrEmp9xM6C6Yotw8XRCIqxSlWoKeFgJpuBiVpZuxpdGjRa
MqolPYxwtQQcs7PJkdzi1kbHRXv5IZ653GHoqOvf0NIPj/VS03Egs7ytBSo1Lpoe
GFRmHogByftnXnSbhYdA9PqYY2oPIpcm9tFMC0OtbpuQiqtoubgXpj9tk6RkbUqm
zlSABoma14ezMLgY8NQy4vm99Fww8DVVnOmslv0qqExq3YJTqTuYhR3R/pVS
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:18:24 2025 by rpki-client