
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
File: 4521828D1C18DA1589E0C8194C700625665277B2.mft (raw, json)
Hash identifier: sdiyTRuSCjfWeO1IQuH1Mmttp4wALqYgUxWHQF1Wk1c=
Subject key identifier: DA:F5:A0:6F:E5:1B:F0:6A:C6:CE:8E:D6:44:3E:23:A0:22:62:6F:2C
Authority key identifier: 45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2
Certificate issuer: /CN=4521828D1C18DA1589E0C8194C700625665277B2
Certificate serial: 7F56811F4CFE09FF507976B87531507CED506902
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
Manifest number: 0132
Signing time: Sun 02 Nov 2025 20:46:49 +0000
Manifest this update: Sun 02 Nov 2025 20:41:49 +0000
Manifest next update: Sat 08 Nov 2025 11:26:49 +0000
Files and hashes: 1: 4521828D1C18DA1589E0C8194C700625665277B2.crl (hash: tvsaKWxxT2Xu3H4+shDZDDiP8sJli2Ae5v8Cr9MoCeI=)
2: 3137372e37312e39382e302f32342d3234203d3e20323732393031.roa (hash: xeUmh6WslfOkRJtQc7VH+84ml4szOjDIGDFcUx3mOBU=)
3: 3137372e37312e39372e302f32342d3234203d3e20323732393031.roa (hash: 2FW+FvThq3VXj1rShkEh0kWXfgMvFDE9GO+nksYJL0Y=)
4: 3137372e37312e39362e302f32322d3232203d3e20323732393031.roa (hash: KiCzGNTYigzBXkt1zVchpN9aDn0QUzTH2GHS9YpSd3A=)
5: 3137372e37312e39392e302f32342d3234203d3e20323732393031.roa (hash: 30GRvT3gLhRwRnWk3P37qWJKeDHxfeOdwWxrRmmsPmU=)
6: 3137372e37312e39382e302f32332d3233203d3e20323732393031.roa (hash: 7BCH4fDO5pr6kU3QWX4nrVDptqF4y4LiIlj0gnKyQ8k=)
7: 3137372e37312e39362e302f32332d3233203d3e20323732393031.roa (hash: Kr/k5BQoR5kKM2ewwBZ6ned5v6tooLzofcd+6Z5SIQg=)
8: 323830333a353639303a3a2f33322d3334203d3e20323732393031.roa (hash: qotZg9Xbj3Dq1KqhLk7FHy3iFQqlCKyiKVhrFHGd1MY=)
9: 3137372e37312e39362e302f32342d3234203d3e20323732393031.roa (hash: kSNLgi+68n08vNLtnsDwJwtxY5oYw2lns+CguCCa4OM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl
rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 11:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:56:81:1f:4c:fe:09:ff:50:79:76:b8:75:31:50:7c:ed:50:69:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4521828D1C18DA1589E0C8194C700625665277B2
Validity
Not Before: Nov 2 20:41:49 2025 GMT
Not After : Nov 8 11:26:49 2025 GMT
Subject: CN=DAF5A06FE51BF06AC6CE8ED6443E23A022626F2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:b4:58:bc:b5:96:ab:06:fa:b1:80:ee:33:
22:98:08:15:15:1f:87:7a:dc:73:8a:73:a0:24:11:
85:10:79:e0:1e:42:65:78:4c:c0:7a:e1:61:64:f2:
fc:14:fb:c2:db:36:f3:e3:d2:c6:d1:df:2e:b2:a0:
73:2f:be:0b:32:95:39:ae:d6:ea:e7:91:34:25:d8:
7d:a7:27:79:25:25:04:fa:85:ef:2f:d8:fc:ef:5e:
65:a2:a7:e3:2c:c7:47:ab:74:5a:1a:ef:4b:8a:b3:
d9:c2:65:0b:e7:48:18:b8:85:f4:2b:59:2a:ef:ed:
2f:9f:8e:30:69:0c:19:de:e4:aa:32:ff:33:08:0e:
42:16:94:6b:25:e7:1d:f8:69:24:f3:43:a7:51:d9:
98:7d:35:72:0c:2d:6f:be:32:85:b5:af:99:94:b8:
16:9b:7b:0d:bd:dd:bd:cd:04:9c:fe:50:ab:8e:d1:
ec:25:75:b3:7a:2a:b9:70:95:2e:ac:f4:e4:2d:49:
2f:3f:d1:d7:a6:00:77:7b:48:d5:c2:dd:b1:d8:36:
10:69:c5:57:9a:7d:8d:b4:1e:48:07:da:56:a9:f0:
8b:59:e5:00:d5:96:41:63:d3:28:96:bc:71:80:3a:
59:e8:00:fa:6c:e5:80:87:b4:2f:26:ab:4d:a0:e9:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F5:A0:6F:E5:1B:F0:6A:C6:CE:8E:D6:44:3E:23:A0:22:62:6F:2C
X509v3 Authority Key Identifier:
keyid:45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:46:06:fc:d2:02:f0:de:a0:d7:60:2c:6e:a2:1d:93:d8:
4c:07:61:7a:24:73:d3:7c:72:36:89:99:ef:6e:d2:77:a4:1d:
59:b9:28:82:0b:34:16:e4:2c:b6:0c:93:04:20:b7:bb:1c:6a:
f8:df:1c:8d:0b:a3:41:ec:b4:a9:58:dd:55:69:03:19:47:4e:
b7:e4:11:d7:04:0b:47:5d:15:81:db:c8:7a:b4:3d:43:78:d8:
7a:8d:68:ea:83:99:fd:2c:0f:68:a5:70:c5:bd:9f:96:4e:0e:
42:e9:17:a1:d8:d5:ba:b5:fb:8e:38:65:4f:c2:13:2f:3b:66:
79:aa:56:5f:f8:76:ac:88:db:0f:c6:67:80:7a:48:a9:b1:2a:
ee:33:f6:31:ca:70:ae:cc:16:0e:d4:09:85:5e:2b:84:86:e6:
d0:28:52:06:7f:62:6b:c6:66:e8:30:ed:56:17:db:32:e4:77:
6a:95:06:b9:61:2e:4d:75:e7:60:dc:69:5d:59:d2:d5:49:d4:
29:b2:ad:42:4e:8b:58:f5:35:63:12:fb:58:6d:e3:0c:f0:f1:
32:eb:03:5e:7e:d4:b5:c5:e3:3d:44:57:34:b8:35:e3:cd:94:
00:9f:1a:5c:79:c1:c4:19:ba:25:88:ff:be:c3:14:f7:55:36:
f5:f6:d3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:31:30 2025 by rpki-client