
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
File: 24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft (raw, json)
Hash identifier: vIYppYdWXdYcjeOupFCS0ZCGWP34XmOAkb5KBfn6oqc=
Subject key identifier: C8:5D:48:2A:ED:1E:A6:5F:68:C4:AC:DC:C5:50:B3:62:3A:5D:47:11
Authority key identifier: 24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8
Certificate issuer: /CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
Certificate serial: 5BDC641C1F77D94EE6100CCE91EB11B983E58786
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
Manifest number: 0134
Signing time: Tue 04 Nov 2025 05:10:33 +0000
Manifest this update: Tue 04 Nov 2025 05:05:33 +0000
Manifest next update: Sun 09 Nov 2025 06:38:33 +0000
Files and hashes: 1: 34352e3137352e3133382e302f32342d3234203d3e20323733393635.roa (hash: WjVlKSmlKMfYyLfSYBFcHYHLAWBav6vyWpdUW5Fo7i0=)
2: 34352e3137352e3133362e302f32332d3234203d3e20323733323233.roa (hash: /rnlSRXEZ1Y2PeMdRZnHWVGJQB2sQ66cAjmXxKKPnnk=)
3: 323830333a656336303a3a2f33322d3332203d3e20323637383530.roa (hash: oSkk9LfipEODCq9QkidizqJROnN6tJYJaAmhpqlJRGw=)
4: 24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl (hash: tAKSTsTcnJsaj69Jv8fOdkptpmYDaeReNFjhKyXuYOM=)
5: 34352e3137352e3133372e302f32342d3234203d3e20323733323233.roa (hash: h5WEt+KzQ0qhBHiZohlsS+ahIt5BxvEZmRkY6GUsKD4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl
rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:dc:64:1c:1f:77:d9:4e:e6:10:0c:ce:91:eb:11:b9:83:e5:87:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
Validity
Not Before: Nov 4 05:05:33 2025 GMT
Not After : Nov 9 06:38:33 2025 GMT
Subject: CN=C85D482AED1EA65F68C4ACDCC550B3623A5D4711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:e4:4c:22:dd:d2:42:b6:9b:e1:f2:6e:84:
9a:63:a0:6b:ec:4c:bd:9f:3c:ce:ca:06:a6:e1:c5:
dd:2f:3d:79:b1:7a:2e:f2:38:ad:e8:14:c9:7f:28:
81:92:e6:0e:c7:15:af:a8:90:f7:a0:e1:76:63:a9:
c6:a3:e2:7e:a6:e0:e9:cf:cf:da:34:4c:27:26:bd:
9c:b2:3b:e4:1c:8f:c1:c2:a0:0f:2c:89:9d:b8:86:
a5:08:e8:72:af:24:8b:3a:d5:ad:78:b0:8e:17:be:
b2:4d:d4:49:ed:46:6e:52:7f:d5:b5:a4:24:1f:f3:
2f:7c:c5:dd:52:6f:ca:21:2c:96:13:46:08:82:fb:
f3:de:c4:04:ee:83:85:2e:f3:53:9c:f4:04:74:2c:
79:fe:e1:8b:06:fc:05:14:c1:01:49:0e:b6:dd:fa:
da:4d:c7:d9:40:ab:c4:b5:4c:a8:3c:45:b9:eb:30:
bb:95:41:40:e3:55:8d:d1:16:e9:84:7d:8e:1a:1c:
40:94:f0:f5:fa:9e:63:cb:1d:92:7d:1d:1a:b9:9d:
1c:47:6d:9f:b2:3c:d9:ea:a1:19:87:4c:84:7c:07:
59:da:50:f6:91:07:b6:2a:1a:eb:57:b9:da:69:fb:
4d:3c:25:0a:a0:97:a2:df:28:98:0b:4a:18:09:f1:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:48:2A:ED:1E:A6:5F:68:C4:AC:DC:C5:50:B3:62:3A:5D:47:11
X509v3 Authority Key Identifier:
keyid:24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:11:39:96:85:11:63:51:f7:77:72:ef:8f:fd:9d:5c:d4:4c:
07:33:f2:2e:96:6e:a6:13:86:39:ca:9b:3d:83:de:30:e0:c0:
75:f9:3d:18:5f:40:3d:d9:49:0f:aa:fa:69:b1:2c:15:30:54:
75:f8:15:39:a1:06:75:c1:92:49:fa:c1:c4:b8:73:81:df:59:
92:7f:fd:e8:e0:43:60:8b:f6:f2:01:23:96:81:95:71:79:32:
31:da:48:be:b4:5b:3f:48:ed:26:27:12:b6:7c:77:1c:47:45:
72:58:20:88:b8:44:e3:2b:6e:c7:76:b7:a5:3d:14:b1:b6:4e:
e6:5c:da:58:99:8b:75:e8:be:49:12:5f:e0:9c:77:e0:23:b2:
3b:4c:e5:71:4b:e7:a6:b3:b9:3f:6a:ff:57:44:e8:71:7e:55:
1e:c7:a2:3f:4f:78:4c:17:30:f7:78:fb:28:d1:fd:60:2c:45:
a0:9d:9d:5e:68:f7:f5:d9:81:65:64:fd:d1:cc:d2:90:6b:5c:
2a:5d:82:3f:85:7f:53:bb:19:b6:cd:18:aa:47:02:db:06:72:
26:4a:ad:30:ff:ad:ae:ad:35:9a:86:ef:0e:fb:6b:0c:4f:ff:
e4:bd:0f:cd:91:5b:c6:04:fb:44:7a:56:07:8c:73:c8:33:0c:
76:d0:8d:53
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUW9xkHB932U7mEAzOkesRuYPlh4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDRDAyRjU4NjFBMjkwQ0I4NzIyRjQ5NUQwODdDNUZD
MzRFQjNBODAeFw0yNTExMDQwNTA1MzNaFw0yNTExMDkwNjM4MzNaMDMxMTAvBgNV
BAMTKEM4NUQ0ODJBRUQxRUE2NUY2OEM0QUNEQ0M1NTBCMzYyM0E1RDQ3MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWuRMIt3SQrab4fJuhJpjoGvs
TL2fPM7KBqbhxd0vPXmxei7yOK3oFMl/KIGS5g7HFa+okPeg4XZjqcaj4n6m4OnP
z9o0TCcmvZyyO+Qcj8HCoA8siZ24hqUI6HKvJIs61a14sI4XvrJN1EntRm5Sf9W1
pCQf8y98xd1Sb8ohLJYTRgiC+/PexATug4Uu81Oc9AR0LHn+4YsG/AUUwQFJDrbd
+tpNx9lAq8S1TKg8RbnrMLuVQUDjVY3RFumEfY4aHECU8PX6nmPLHZJ9HRq5nRxH
bZ+yPNnqoRmHTIR8B1naUPaRB7YqGutXudpp+008JQqgl6LfKJgLShgJ8R/jAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUyF1IKu0epl9oxKzcxVCzYjpdRxEwHwYDVR0j
BBgwFoAUJM0C9YYaKQy4ci9JXQh8X8NOs6gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0UwMjhGM0ZEMkUyQTY4RkU0QTk4RjRFQkM3QzE4MDYw
MDlFNkYwOTY0Qjk0QkExQUYwQjU2NjU1RjVGMjJCLzAvMjRDRDAyRjU4NjFBMjkw
Q0I4NzIyRjQ5NUQwODdDNUZDMzRFQjNBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNENEMDJGNTg2MUEyOTBDQjg3
MjJGNDk1RDA4N0M1RkMzNEVCM0E4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENFMDI4RjNGRDJFMkE2OEZFNEE5OEY0RUJDN0MxODA2MDA5RTZGMDk2
NEI5NEJBMUFGMEI1NjY1NUY1RjIyQi8wLzI0Q0QwMkY1ODYxQTI5MENCODcyMkY0
OTVEMDg3QzVGQzM0RUIzQTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYETmWhRFjUfd3cu+P/Z1c1EwH
M/Iulm6mE4Y5yps9g94w4MB1+T0YX0A92UkPqvppsSwVMFR1+BU5oQZ1wZJJ+sHE
uHOB31mSf/3o4ENgi/byASOWgZVxeTIx2ki+tFs/SO0mJxK2fHccR0VyWCCIuETj
K27HdrelPRSxtk7mXNpYmYt16L5JEl/gnHfgI7I7TOVxS+ems7k/av9XROhxflUe
x6I/T3hMFzD3ePso0f1gLEWgnZ1eaPf12YFlZP3RzNKQa1wqXYI/hX9Tuxm2zRiq
RwLbBnImSq0w/62urTWahu8O+2sMT//kvQ/NkVvGBPtEelYHjHPIMwx20I1T
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:18:27 2025 by rpki-client