
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
File: 33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft (raw, json)
Hash identifier: B1duQG/WE83C1mywuaibXyaaPMF6BMgGBbPXJXdhnUs=
Subject key identifier: 04:01:25:6F:09:C8:77:2D:D7:10:92:B2:C4:58:DA:27:5A:6A:1E:71
Authority key identifier: 33:88:7D:46:6E:F0:24:3F:A7:B3:C3:58:00:D7:0E:2D:B5:6A:26:A7
Certificate issuer: /CN=33887D466EF0243FA7B3C35800D70E2DB56A26A7
Certificate serial: 33D87C5E366D5B52F59C94E4925DE6007D807893
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
Manifest number: 17
Signing time: Tue 04 Nov 2025 17:57:43 +0000
Manifest this update: Tue 04 Nov 2025 17:52:43 +0000
Manifest next update: Mon 10 Nov 2025 06:48:43 +0000
Files and hashes: 1: 3133312e3139362e37322e302f32322d3234203d3e20323635373534.roa (hash: A3xXzpOaKCo1SvZ7OY8UcWolLdK5MkkAJljb47PcBNM=)
2: 33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl (hash: CWBs/WIUpp0b+G5XD77TgOucNGpWGhu2NBGiyAFOzCU=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl
rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d8:7c:5e:36:6d:5b:52:f5:9c:94:e4:92:5d:e6:00:7d:80:78:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33887D466EF0243FA7B3C35800D70E2DB56A26A7
Validity
Not Before: Nov 4 17:52:43 2025 GMT
Not After : Nov 10 06:48:43 2025 GMT
Subject: CN=0401256F09C8772DD71092B2C458DA275A6A1E71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:cd:4d:7a:83:27:4c:1f:b0:bc:52:0b:2d:
db:1e:8f:06:15:4e:4a:af:d7:67:6d:1f:8d:f9:0f:
4c:9d:92:da:b8:f4:ce:45:df:87:65:a4:f6:1f:6a:
47:29:70:7e:b0:65:53:eb:4e:d9:e6:32:9a:41:43:
07:b8:15:8a:57:2d:8d:81:bc:30:23:a8:8f:26:2d:
6d:f9:7e:24:ef:e0:84:21:b7:be:89:59:6a:12:0e:
f8:70:76:06:36:67:be:a1:1d:1f:f7:16:35:ce:1c:
58:23:bd:a3:28:ad:37:d5:1e:4d:01:ba:d3:e1:0a:
1f:89:3e:09:c3:2a:72:14:dc:94:ef:1e:bf:c2:78:
93:63:ee:55:19:24:d1:93:a5:38:0e:9a:6a:45:95:
e7:76:99:31:9e:c3:09:51:9e:11:a5:01:19:11:fb:
3b:32:eb:54:50:0f:5f:a9:1b:09:59:74:68:ac:e2:
d6:a2:13:c5:88:14:a7:b2:54:45:fe:d3:a3:5f:d4:
ff:61:59:ce:a4:39:95:13:7a:01:a1:68:bf:20:a2:
2a:11:24:33:5a:ff:7e:21:85:fa:f4:bc:f8:4b:11:
c3:89:1d:f1:d7:f2:16:59:76:61:e5:96:fc:3f:d3:
0b:9d:76:f7:e6:6f:db:c7:32:1b:a7:29:6d:33:79:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:01:25:6F:09:C8:77:2D:D7:10:92:B2:C4:58:DA:27:5A:6A:1E:71
X509v3 Authority Key Identifier:
keyid:33:88:7D:46:6E:F0:24:3F:A7:B3:C3:58:00:D7:0E:2D:B5:6A:26:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5e:aa:cb:65:f5:5a:c6:0e:5e:34:75:11:de:ea:fd:d6:35:
85:64:b6:58:b6:50:9d:0b:69:7a:f2:6c:2b:74:ba:3d:cd:39:
ac:9f:2e:6b:90:0f:0c:15:04:ca:da:60:9a:23:1a:61:39:89:
7b:89:cc:e3:ab:9a:fa:da:bd:bd:f3:ec:ab:46:ed:ff:8d:4b:
1e:09:04:22:4b:a3:66:c0:ed:11:82:1a:1d:eb:d8:9a:c6:97:
0d:a9:64:9d:fc:93:a4:55:07:ad:8d:d0:4f:10:f3:2f:48:0c:
11:2a:2e:99:38:80:fc:46:e1:45:e4:83:7e:1c:6e:6e:bf:a9:
e2:19:47:cc:de:71:0c:a4:a3:79:9f:b0:21:57:00:4f:89:58:
5a:30:23:9b:4c:cc:e0:4b:85:1c:5e:ac:69:41:5d:af:4b:9b:
86:3d:3c:d0:11:70:53:46:0d:01:66:6f:97:dd:b2:1b:ae:03:
d4:e4:3b:9b:aa:cc:6a:5a:2a:f1:ca:91:27:c0:75:b5:6f:c4:
58:d3:a9:16:5b:f4:ea:7d:29:0b:5a:c8:91:b9:94:28:8a:88:
e0:54:31:bb:66:ce:e6:9b:64:95:fe:31:8b:85:db:a7:cc:1c:
c2:4a:92:7e:a8:9d:d4:ce:29:05:ff:0e:5f:e4:36:8f:9d:85:
1f:42:83:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:21:37 2025 by rpki-client