
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
File: 21B4A6594D293307A54FC67EA972CF9E807930DF.mft (raw, json)
Hash identifier: 3zGQm22eLBVO1adED9uLaA+zSl4uNtmBcQu5nNLXGM8=
Subject key identifier: DA:5F:98:D4:73:80:71:A4:37:B0:96:C9:5B:87:47:59:6D:94:8C:10
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Certificate issuer: /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial: 01BCB67A09FA9B6EDF4858FE548BF4DB6A433FAC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
Manifest number: 0134
Signing time: Wed 05 Nov 2025 20:32:02 +0000
Manifest this update: Wed 05 Nov 2025 20:27:02 +0000
Manifest next update: Mon 10 Nov 2025 22:00:02 +0000
Files and hashes: 1: 3230312e3135302e3136302e302f31392d3234203d3e203237383339.roa (hash: dECGKGEMe4fsL58Z6fgHY9Fs1yFrmz3X59egXrUOjAA=)
2: 3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa (hash: eIkbCaCPHqA2aBmNNJzfBk5Sbqe6RZK/+95ZWTLl5sA=)
3: 3133322e3235312e3232342e302f31392d3234203d3e203237383339.roa (hash: MoqnHwGgCYJp9jh32L59Q+jNXFm2w5MKOh+RWT9k4ZE=)
4: 323830333a393430303a3a2f33322d3439203d3e203237383339.roa (hash: A29ATOWGjGhQj7v77AX470EZdFoQTQuw6LsAxiyx/2s=)
5: 3138312e3131342e36342e302f31392d3234203d3e203237383339.roa (hash: qDpU8XBaEbcRRE0Dh2E/EuLVyq1AyGhromujxba8fNE=)
6: 3139302e3130372e33322e302f31392d3234203d3e203237383339.roa (hash: YdkIp31gRlK47KbfA9pYJ/GX9I/AQt6G45MdmWUFAhs=)
7: 3230302e35382e36342e302f31392d3234203d3e203237383339.roa (hash: /azlzrfLwX7iYF9S/2/9bgQOjnUMSDw5X7xHaYvXE08=)
8: 3139302e31312e36342e302f31392d3234203d3e203237383339.roa (hash: oRzyUJlCpMARsgfXtug3ieo0i6o+G7AvZIisrUnaBos=)
9: 3139302e3130362e3234302e302f32302d3234203d3e203237383339.roa (hash: DGnmTtxw6+vTN/FRnmus3B4gzPh2/oDStj8la9G9E4Q=)
10: 21B4A6594D293307A54FC67EA972CF9E807930DF.crl (hash: 61mNBFjHEmZfQyDWzuGNNCa+mxYY8pIAiYwqJH96h6M=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:bc:b6:7a:09:fa:9b:6e:df:48:58:fe:54:8b:f4:db:6a:43:3f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Validity
Not Before: Nov 5 20:27:02 2025 GMT
Not After : Nov 10 22:00:02 2025 GMT
Subject: CN=DA5F98D4738071A437B096C95B8747596D948C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:80:ee:a9:53:4a:13:30:12:ca:35:11:18:
61:26:fb:f0:d9:d1:23:db:2a:5e:46:2b:f7:c2:75:
0c:b9:46:15:10:29:97:cd:20:08:e9:69:3a:95:cc:
a5:2c:52:f8:69:33:40:4c:0c:01:07:27:e5:d1:d9:
7e:3a:79:26:6a:8e:e8:0a:91:c2:5e:fa:51:36:d0:
64:56:2c:14:4c:fb:26:69:23:65:3c:ab:24:a9:e8:
3b:20:ec:95:31:f9:01:d0:05:b6:2e:47:dd:37:ec:
0b:ec:96:9b:da:08:43:b2:91:0e:71:98:9b:1a:1d:
ff:da:5d:d2:49:62:e3:0c:e7:2b:69:2d:10:3a:ca:
f3:f0:49:06:91:ed:46:57:0d:92:fa:b0:5f:bc:f5:
82:7d:21:d5:5f:99:5b:f6:e1:85:34:bb:cb:d3:63:
08:ed:94:f7:6b:e1:95:7c:45:c9:0d:24:3c:04:32:
03:05:35:f8:75:82:3a:d3:f6:56:78:4f:f2:50:aa:
ce:d7:3f:a8:c0:f5:a5:64:7a:18:6f:eb:d8:54:cb:
99:5f:09:25:42:0a:50:7d:8f:9b:82:91:f9:ee:43:
85:bd:f3:99:76:cf:b7:cc:f0:55:78:bc:b1:0f:b0:
79:16:5e:66:f1:c4:f7:23:7d:fa:75:ad:c3:dd:6b:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5F:98:D4:73:80:71:A4:37:B0:96:C9:5B:87:47:59:6D:94:8C:10
X509v3 Authority Key Identifier:
keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f0:36:b4:97:43:29:d2:98:1b:2e:6c:98:56:3c:a2:12:40:
98:df:8f:ee:3e:b5:73:68:7b:bf:3f:8f:e0:5f:72:24:06:46:
24:ae:7d:c8:50:91:a8:44:16:3e:51:4c:63:98:bb:55:c0:5b:
6f:cb:de:d7:db:6d:a0:bd:49:36:52:c4:aa:52:09:39:b8:9f:
99:88:93:61:8d:f8:fe:b3:5a:6c:86:b2:00:b6:e1:65:31:9c:
3e:4f:82:82:74:d6:6f:d3:ef:37:2e:99:cb:5d:c0:6c:78:b6:
68:ff:d4:a3:a7:96:7b:a3:28:24:f6:e3:05:c6:6e:6f:3c:39:
68:97:af:b7:56:7c:c8:a5:16:b6:e7:ab:20:53:ea:c6:d3:71:
b0:32:a2:e8:8e:50:ee:76:49:59:62:4a:47:9e:4c:a1:97:5e:
a8:61:f4:e1:3e:3a:65:82:25:12:ac:c1:1a:d1:b1:80:fa:8e:
5c:55:62:7e:ed:2f:90:fc:65:bc:0c:3d:b6:78:ef:94:ca:0e:
7f:40:a7:89:96:fc:7a:3c:0e:6f:cc:ac:53:d6:34:9c:84:81:
cf:aa:f5:58:86:b7:22:08:4d:1c:58:a1:54:d7:3a:54:0e:99:
6a:f2:33:68:f3:f0:e2:a8:74:0c:af:1c:5a:95:5e:31:85:4f:
fb:5a:1b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:05:19 2025 by rpki-client