
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft
File: 3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft (raw, json)
Hash identifier: g354QjsfG1bdNlC529WLi3ENMeCInVfC2/2snYedXO4=
Subject key identifier: 74:68:BD:BD:4F:A7:22:7E:EE:A2:3A:4B:7F:07:96:D5:CC:73:45:44
Authority key identifier: 38:45:89:4F:A6:8B:5B:FF:C7:57:05:74:C0:15:E8:DB:A3:97:7E:B3
Certificate issuer: /CN=3845894FA68B5BFFC7570574C015E8DBA3977EB3
Certificate serial: 4927FA5648CADEE14F89FA6159B3760D0CBEB274
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft
Manifest number: 32
Signing time: Tue 04 Nov 2025 06:21:19 +0000
Manifest this update: Tue 04 Nov 2025 06:16:19 +0000
Manifest next update: Sun 09 Nov 2025 11:32:19 +0000
Files and hashes: 1: 323830333a383564303a3a2f33322d3332203d3e20323734313636.roa (hash: XuVm7aqw6XDQRV3O9JTv277yLCTvjgZ9A8P8OclEvEw=)
2: 323830333a383564303a383030303a3a2f33332d3333203d3e20323734313636.roa (hash: AGq16ochLwYcwnQ5z4PXvB8M3jPhzKd+VUntYPGzBcI=)
3: 323830333a383564303a3a2f33332d3333203d3e20323734313636.roa (hash: 3WKUs360iJpPsWYIDuAJlBKVJpyd2CoEQ7JdzuILhjU=)
4: 3845894FA68B5BFFC7570574C015E8DBA3977EB3.crl (hash: yCw6+nTZ/AHMytEzq7Lk71PGaxWOw3tHqEJySgwMPCU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.crl
rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:27:fa:56:48:ca:de:e1:4f:89:fa:61:59:b3:76:0d:0c:be:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3845894FA68B5BFFC7570574C015E8DBA3977EB3
Validity
Not Before: Nov 4 06:16:19 2025 GMT
Not After : Nov 9 11:32:19 2025 GMT
Subject: CN=7468BDBD4FA7227EEEA23A4B7F0796D5CC734544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:93:0f:ff:f3:59:93:76:01:82:73:a7:41:
67:5b:b7:a0:78:ca:ee:0a:0f:49:2b:56:62:92:e7:
2b:9a:01:41:d4:73:f9:3a:ce:bf:6a:a9:0c:e3:8f:
d6:eb:34:30:16:f0:1f:80:81:1a:85:22:ef:05:6e:
47:c3:10:37:dc:5c:87:60:dd:59:b7:37:cd:3d:77:
47:8e:a7:67:0e:0a:44:7f:82:53:84:aa:f1:db:28:
cb:73:b0:15:eb:03:bd:ec:be:00:4d:77:ee:01:57:
04:cc:07:ec:e9:e3:d5:fa:b4:85:69:6f:39:65:23:
72:39:71:d3:f9:e6:98:70:30:3a:87:86:4e:68:c8:
ee:50:38:14:11:77:06:fe:a4:8c:8f:27:f3:61:8b:
e2:43:5e:79:cf:9d:93:8a:f1:16:59:1a:79:b0:4f:
02:99:70:50:46:80:69:24:0b:7b:e6:f7:cc:48:97:
43:7d:66:37:30:0a:bb:39:70:cf:ea:14:7c:56:a1:
43:5d:83:d0:7d:12:42:2c:1f:e8:ec:03:e8:5d:ff:
2a:2f:65:b8:38:6a:94:8f:71:6d:ed:95:27:38:15:
ba:1a:74:79:c0:88:24:bd:13:61:7c:1a:3b:63:ac:
9a:a3:36:d6:b7:b9:5d:36:23:9f:f6:6f:1a:65:6f:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:BD:BD:4F:A7:22:7E:EE:A2:3A:4B:7F:07:96:D5:CC:73:45:44
X509v3 Authority Key Identifier:
keyid:38:45:89:4F:A6:8B:5B:FF:C7:57:05:74:C0:15:E8:DB:A3:97:7E:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:86:21:8d:5b:05:47:d4:d3:25:0b:61:23:23:5b:1e:2b:f1:
ef:64:a3:11:f5:30:e3:dd:53:03:7e:43:81:e3:32:f7:d4:cd:
43:eb:11:5c:4b:73:3f:bc:3b:c9:23:82:b5:fb:e5:1e:76:25:
25:92:a2:50:f7:36:ce:15:ef:fb:af:2f:f5:ef:6f:2e:ac:c6:
32:bc:60:58:03:14:55:81:06:e5:89:77:61:7e:1c:cd:9a:e1:
a8:bb:10:c1:be:fb:a9:47:5c:34:00:bf:22:97:33:92:4b:a1:
32:21:33:57:44:ac:df:36:60:3e:8f:e0:ea:5f:47:db:22:4a:
1d:21:0e:00:a9:ee:c4:55:51:e9:09:ff:be:8d:b9:be:d4:79:
91:5e:6b:56:1b:c9:df:3b:1e:90:b5:be:ae:08:46:cf:09:2b:
cc:23:65:3d:88:d4:c5:e8:d3:12:7f:e7:ba:9d:75:72:ee:6a:
18:92:98:09:2b:57:4f:26:f6:db:74:bd:3c:b0:cb:b5:c4:ab:
25:e7:a2:20:00:7c:06:c5:ae:d2:50:7d:82:27:92:32:e3:e3:
23:f9:a5:89:46:54:c0:39:8d:2f:54:f3:81:95:03:6b:c4:6a:
f2:ba:c4:33:3a:13:3c:62:c4:e2:bd:2b:36:1b:fa:34:0a:1f:
a3:e0:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:23:30 2025 by rpki-client