
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.mft
File: BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.mft (raw, json)
Hash identifier: tkuJVWH8FV7ylzo4jxTQeLE1/SzNOzvZrdIjkBeO5Pg=
Subject key identifier: 09:35:D2:CE:79:E5:7E:E3:0E:1D:4F:16:7C:F0:7B:0F:FE:BB:44:E8
Authority key identifier: BC:C9:44:9C:E0:FB:26:78:5C:BE:4A:60:D9:D5:51:4E:9E:17:7A:F8
Certificate issuer: /CN=BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8
Certificate serial: 31E5070C27FCA5C6DDCF5AB4851A48DA006E131A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.mft
Manifest number: 0135
Signing time: Tue 04 Nov 2025 01:18:18 +0000
Manifest this update: Tue 04 Nov 2025 01:13:18 +0000
Manifest next update: Sat 08 Nov 2025 16:43:18 +0000
Files and hashes: 1: BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.crl (hash: qn224h1HmynHfDZQU+L0bzfDeQx31OJHemzi8ErahOY=)
2: 3230302e392e39342e302f32342d3234203d3e20323633383034.roa (hash: rwjUfrhP1uZz/YkfIlJlbjq6LqLENxCIZtQ2RaxZBDI=)
3: 323830313a31333a653030303a3a2f34382d3438203d3e20323633383034.roa (hash: LSZ8wwIjJqg8Y8+PKi4enCdi9iva3Zy1NFRn+ojHAyw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.crl
rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 16:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e5:07:0c:27:fc:a5:c6:dd:cf:5a:b4:85:1a:48:da:00:6e:13:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8
Validity
Not Before: Nov 4 01:13:18 2025 GMT
Not After : Nov 8 16:43:18 2025 GMT
Subject: CN=0935D2CE79E57EE30E1D4F167CF07B0FFEBB44E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:91:34:8b:6e:53:81:19:3d:6c:b5:98:65:
36:52:e0:a4:cb:3a:bc:74:f6:60:d9:8c:8e:97:e4:
b9:cf:b8:83:80:bf:8a:68:b9:86:63:c4:e9:a5:7d:
33:76:63:2c:ab:1e:c2:7c:09:46:ee:f8:bd:93:ae:
98:0a:54:eb:95:65:1a:b7:da:ff:36:03:91:d2:8b:
e1:36:d9:d8:e3:7b:07:b9:48:49:e7:ec:a4:01:23:
0c:8f:1d:63:57:0c:05:bb:e0:41:a7:19:e3:3d:31:
a2:2d:d7:35:c2:51:a3:d8:6a:a2:2c:81:cd:2f:5d:
0d:ae:12:32:59:24:c1:d8:d2:03:20:8d:81:33:0c:
65:4e:2f:56:7c:1d:9e:50:be:28:e9:40:56:48:5e:
db:9b:22:58:63:b1:54:81:85:f0:87:00:c0:94:c2:
77:25:f4:a3:ff:f5:06:f8:ec:4b:54:1a:99:5e:07:
2e:49:49:e4:68:59:ab:d9:3a:7b:75:f7:0f:d0:55:
4b:db:58:53:34:34:5f:26:1c:f1:a0:1d:b7:97:a6:
e9:ce:08:11:a6:72:07:dc:32:4c:ed:60:17:ab:da:
36:50:73:21:33:10:9f:12:55:27:ce:86:2c:f5:d3:
fc:ad:ec:40:20:cf:ab:25:2b:dc:90:9f:f8:cd:6e:
01:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:35:D2:CE:79:E5:7E:E3:0E:1D:4F:16:7C:F0:7B:0F:FE:BB:44:E8
X509v3 Authority Key Identifier:
keyid:BC:C9:44:9C:E0:FB:26:78:5C:BE:4A:60:D9:D5:51:4E:9E:17:7A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ca:a0:ce:6f:61:91:00:e1:50:6f:08:d9:7f:f2:50:20:a8:
37:af:e2:2f:d0:7e:50:9f:df:37:7c:f8:fa:1b:bd:48:9b:0b:
8e:84:29:11:6e:e7:3c:0a:c6:36:5d:be:0b:eb:66:8b:9c:fb:
ea:31:fd:18:45:90:49:53:30:f7:58:31:53:2b:59:28:23:44:
fb:10:69:67:48:1f:98:fe:ac:5f:0d:68:28:1a:96:d5:19:5e:
05:7a:26:1e:a6:f7:c1:ea:18:b8:02:6c:f8:5b:07:99:a8:1e:
fa:ef:77:d3:a8:ef:a4:d9:84:87:dc:1b:3d:a2:32:2a:8f:d8:
3c:0f:66:a5:05:57:3f:b2:20:56:12:b4:c6:b2:84:a8:f6:44:
f2:6e:a9:9d:f4:4b:92:31:e6:19:3e:4e:f6:cc:0a:a7:01:bc:
a2:c8:4b:ab:0b:fe:dc:c1:3d:1f:80:46:0f:1b:3f:dd:4e:a9:
e7:37:7e:55:e8:30:fe:b2:38:b8:cc:8e:8d:71:79:b6:59:23:
73:a1:bb:a0:be:3d:56:c9:87:5c:f9:87:8b:70:6e:98:32:f6:
6f:7d:14:9d:e7:0f:2c:75:28:0c:b9:ec:62:02:dc:10:a0:70:
35:9a:6d:aa:54:c6:76:e7:bd:4f:0d:ca:d8:c8:ac:f6:5d:b3:
c2:69:67:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:43:36 2025 by rpki-client