
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft
File: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft (raw, json)
Hash identifier: EntszHtC5HYCxoA8wGD1kuWnjDCyuCTQjbKWREdiqqE=
Subject key identifier: 3B:50:F4:35:41:6B:94:D0:6E:E2:68:67:BE:19:CD:F9:D9:25:06:19
Authority key identifier: 21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6
Certificate issuer: /CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6
Certificate serial: 5969DE8CA691B063AC9F369D01986C3A98ACBFE4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft
Manifest number: 0119
Signing time: Wed 05 Nov 2025 05:13:49 +0000
Manifest this update: Wed 05 Nov 2025 05:08:49 +0000
Manifest next update: Tue 11 Nov 2025 04:08:49 +0000
Files and hashes: 1: 21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl (hash: 7ydFfP4P6qedi2ncUAxBKMurqaCYnx+E6IeP41O5Pjo=)
2: 323830333a386135303a3a2f33322d3332203d3e20323733313735.roa (hash: 52CkrWIeh3/WtMUuKWKH8nsK+HsC8V+k1+vyMgSvhdE=)
3: 3139302e3131302e3232352e302f32342d3234203d3e20323733313735.roa (hash: uWEhrGLqJXMAoZTZyyMFW1p7Iz6/t6HLsdeX2wpttRM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl
rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:69:de:8c:a6:91:b0:63:ac:9f:36:9d:01:98:6c:3a:98:ac:bf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6
Validity
Not Before: Nov 5 05:08:49 2025 GMT
Not After : Nov 11 04:08:49 2025 GMT
Subject: CN=3B50F435416B94D06EE26867BE19CDF9D9250619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:6a:04:c7:a9:92:1f:86:cc:77:b0:c5:66:
07:67:ac:15:26:8d:54:0b:4b:f6:10:91:e7:f3:63:
c9:e8:bc:d7:c0:e2:57:73:9e:e1:af:e5:77:b7:5f:
0e:da:e2:6b:75:1d:b7:15:87:c7:f9:38:4d:31:f1:
fd:89:05:54:4c:fc:f1:47:b9:c6:e7:46:70:21:f3:
e9:c2:75:55:fc:ba:97:89:cb:b2:f3:12:0d:8e:94:
4e:d7:97:f7:a9:ed:95:d9:3a:5d:d3:e3:35:7f:37:
77:6c:62:fd:c8:3a:ae:54:3b:e3:3d:90:2e:de:02:
7b:ee:3e:b8:6f:43:39:4c:81:01:c3:7d:ab:55:ff:
69:5b:52:df:6b:21:cf:58:8c:39:dc:27:76:b7:c2:
89:82:a5:99:fc:d2:ec:b8:db:f1:11:29:86:9a:42:
e8:41:4c:c2:18:6f:d8:c2:25:5a:14:9d:eb:02:03:
30:1d:ae:0f:08:87:93:bf:4a:a6:71:7d:45:b9:b2:
03:20:3d:f7:d9:b6:91:b0:9e:f5:74:22:1f:87:a1:
20:17:45:eb:a5:65:74:ce:90:a8:a2:9c:67:c3:5c:
78:67:0f:72:9c:0c:b7:40:d3:42:ba:3b:41:a5:19:
b2:60:5e:c6:ad:c6:4a:2f:9e:ca:c6:c3:26:a8:1e:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:50:F4:35:41:6B:94:D0:6E:E2:68:67:BE:19:CD:F9:D9:25:06:19
X509v3 Authority Key Identifier:
keyid:21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:02:80:9d:a9:f1:2f:20:73:08:5b:80:1b:ef:cd:57:0f:36:
e0:c2:12:b9:6e:19:cf:dc:21:db:4b:d4:62:99:c7:a6:d9:a4:
6d:4e:aa:bd:a2:ec:8a:bf:b6:44:b2:5f:f1:dd:a5:b0:eb:63:
39:f8:1b:2d:ea:dd:86:46:98:bf:dc:50:df:8f:ae:16:76:7f:
30:fd:41:e2:23:8e:0e:b8:9d:fc:79:6c:37:99:ca:a4:1b:67:
19:6c:a3:9c:10:65:58:eb:a3:eb:1c:94:05:95:30:af:a9:91:
d3:cb:b4:b4:48:bd:0b:c8:b6:c5:f5:11:7e:5a:e5:5e:e6:f3:
20:06:db:56:bb:18:01:f2:71:4d:39:80:64:86:39:86:0d:d4:
3b:4a:6b:7c:a4:4a:f8:13:1d:f4:4b:9d:ef:fb:eb:f7:d6:b1:
3d:e2:ef:34:ff:fc:31:f9:cd:93:40:b5:5f:e0:58:82:7c:c3:
63:1b:38:cc:d5:bf:fd:fb:5c:18:c9:ca:63:19:d3:be:27:e8:
c4:0e:e3:97:ff:db:a2:3b:40:f3:87:c2:0b:ac:f6:81:62:62:
fe:6c:33:fb:53:43:f7:f6:12:31:63:d6:c6:de:9b:9e:eb:af:
93:f2:5e:50:d7:6e:0f:32:f3:78:54:73:3c:4f:df:36:e8:17:
2f:d7:c5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:51:52 2025 by rpki-client