
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.mft
File: 8422A5C9039083170A21D8F8523768E40CD48430.mft (raw, json)
Hash identifier: gb5mclOyxL7BHpFerN576U8fRE4+p4CPx9DeSuegb0g=
Subject key identifier: 0A:A8:3A:01:EA:59:8D:85:1F:09:B6:23:FF:06:44:B6:9B:D5:99:3A
Authority key identifier: 84:22:A5:C9:03:90:83:17:0A:21:D8:F8:52:37:68:E4:0C:D4:84:30
Certificate issuer: /CN=8422A5C9039083170A21D8F8523768E40CD48430
Certificate serial: 0618B561B60E6765826C1BADB52CAF98763858AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.mft
Manifest number: 0130
Signing time: Sun 02 Nov 2025 14:43:38 +0000
Manifest this update: Sun 02 Nov 2025 14:38:38 +0000
Manifest next update: Sat 08 Nov 2025 14:18:38 +0000
Files and hashes: 1: 323830333a383536303a3a2f33322d3332203d3e20323639373632.roa (hash: xgdu2VKXGWT3zuazQQ3ZGRAu8EfpPw4CmBmO186ZJdA=)
2: 8422A5C9039083170A21D8F8523768E40CD48430.crl (hash: Z40VXxjh/8GZ93LJbSo7hSUIsb9zHBW5OK11Tm3RpN4=)
3: 34352e3138312e3136342e302f32322d3234203d3e20323639373632.roa (hash: mzNYCOmBkzDShpzfFRcJU8Z+CuEOVXuCuW1wyaoqRq4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.crl
rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 14:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:18:b5:61:b6:0e:67:65:82:6c:1b:ad:b5:2c:af:98:76:38:58:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8422A5C9039083170A21D8F8523768E40CD48430
Validity
Not Before: Nov 2 14:38:38 2025 GMT
Not After : Nov 8 14:18:38 2025 GMT
Subject: CN=0AA83A01EA598D851F09B623FF0644B69BD5993A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:28:10:6a:6f:51:8e:9c:fd:17:62:46:1e:
cc:0c:af:47:c8:7a:04:e7:3e:24:24:71:30:86:6d:
2a:2a:a7:60:d9:8d:be:fa:0a:dc:ae:7b:f2:fc:fd:
84:d5:52:be:d2:f1:e5:9f:35:f6:70:49:de:29:c4:
45:81:60:c5:6f:08:b0:64:41:59:9f:58:4d:7d:c3:
be:c6:77:a5:aa:d6:a5:a4:c9:d9:dc:60:07:36:d6:
d5:3f:15:50:35:c8:7a:b5:68:1e:df:64:48:4e:18:
56:55:5f:cf:aa:37:1d:c9:c6:29:4c:5c:d5:68:22:
e8:6f:47:4c:7f:8c:e5:e4:80:2f:dc:bf:24:da:92:
ff:e6:68:51:4c:38:47:39:ee:96:bb:4e:e6:3b:61:
d0:6e:77:fa:18:3c:cd:94:a3:1e:57:a8:2e:ad:38:
6d:9e:dd:46:75:79:b2:51:11:67:ed:00:31:fa:88:
a8:38:4a:dd:45:99:b9:4e:76:bd:47:eb:7b:ce:7c:
a2:09:58:ab:78:21:f5:45:01:ca:4b:5b:f0:0e:de:
f0:9c:c2:aa:a3:a3:78:a1:1b:ae:41:a7:a8:36:37:
4d:e0:96:01:79:de:22:28:4a:e7:cc:56:6c:bc:c4:
b6:a2:ff:8d:73:6c:19:20:e0:ff:d4:da:f3:8d:e6:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A8:3A:01:EA:59:8D:85:1F:09:B6:23:FF:06:44:B6:9B:D5:99:3A
X509v3 Authority Key Identifier:
keyid:84:22:A5:C9:03:90:83:17:0A:21:D8:F8:52:37:68:E4:0C:D4:84:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9c:1d:1d:45:73:06:03:28:68:8e:72:b0:61:4e:a5:ed:5f:
af:33:cc:6e:74:6d:e8:26:a6:d3:d7:f5:f5:05:14:1c:b7:ca:
e6:7e:e9:40:e7:4f:1d:cf:0a:98:06:d5:21:2e:1c:f9:8a:8d:
ae:cb:a9:bd:2a:0b:e3:ba:3f:a6:b4:41:79:b1:a8:64:7f:cc:
3b:97:1d:16:27:9e:ad:c2:1f:f1:e5:39:15:15:a6:24:43:6c:
1b:ec:85:cb:ad:57:b6:8d:96:49:48:36:e1:b5:c8:95:04:ce:
8b:fa:1f:db:81:7b:b1:44:f2:54:0b:7e:1c:7c:3a:d0:84:4e:
f5:14:84:aa:de:f3:3b:72:68:4b:d4:93:16:46:c8:a6:af:5d:
e0:28:0b:aa:81:d1:17:cc:f7:cb:10:34:8b:64:9b:8a:68:ff:
6d:cf:31:41:af:0c:83:4e:e1:2a:ae:71:84:48:59:31:7e:32:
d5:05:ec:0f:62:18:55:d5:d1:ac:25:d2:c1:ba:28:c9:12:3c:
6a:33:8f:db:41:45:63:94:c4:48:8d:75:67:5f:d6:cf:ef:00:
d6:f0:3d:14:f7:b5:eb:6e:9a:3c:c2:96:24:4e:f5:cc:d9:54:
92:1a:58:bf:61:53:33:12:c7:45:ca:dc:4a:cf:9c:09:e3:dc:
2e:b3:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:07:44 2025 by rpki-client