
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F84BF1192E1AE6D6FBF6D32F5902B00642687D0E3E60B591E38106CBEEF636D3/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.mft
File: D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.mft (raw, json)
Hash identifier: sXG3W+c/egrTKHzz7hGu3bqMUUNajUvvkFFHmKEhSOE=
Subject key identifier: B3:A6:41:DE:AF:CE:D0:C1:A5:14:93:F8:14:14:96:E9:2B:B2:70:44
Authority key identifier: D8:E5:37:75:DE:66:64:A5:36:DB:2F:4E:9A:D2:8C:C6:2A:BD:E9:B9
Certificate issuer: /CN=D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9
Certificate serial: 0A27B52AAE23CD7F1D0DF049D08C63D2262E06B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F84BF1192E1AE6D6FBF6D32F5902B00642687D0E3E60B591E38106CBEEF636D3/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.mft
Manifest number: 5C
Signing time: Mon 03 Nov 2025 08:39:11 +0000
Manifest this update: Mon 03 Nov 2025 08:34:11 +0000
Manifest next update: Sun 09 Nov 2025 07:02:11 +0000
Files and hashes: 1: 323830333a383264303a3a2f33322d3438203d3e20323632313739.roa (hash: vS7SMv8+cL5mUJWmNF/UDq+qDLqo8j9TnIvg9H6T+sw=)
2: D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.crl (hash: akxessnX7IZYlG6Z4kO+tfyJGTNxGZs5/DHqiKA6Vkc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F84BF1192E1AE6D6FBF6D32F5902B00642687D0E3E60B591E38106CBEEF636D3/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.crl
rsync://repository.lacnic.net/rpki/lacnic/F84BF1192E1AE6D6FBF6D32F5902B00642687D0E3E60B591E38106CBEEF636D3/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:27:b5:2a:ae:23:cd:7f:1d:0d:f0:49:d0:8c:63:d2:26:2e:06:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9
Validity
Not Before: Nov 3 08:34:11 2025 GMT
Not After : Nov 9 07:02:11 2025 GMT
Subject: CN=B3A641DEAFCED0C1A51493F8141496E92BB27044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:65:f3:81:1f:e3:d6:43:70:e5:a3:49:9d:
44:81:22:3c:93:0b:84:12:43:16:90:22:46:02:66:
5a:69:4c:f9:0b:2c:23:46:bb:01:92:76:e2:09:b1:
7c:9f:e3:84:cc:c3:d7:e5:a8:b7:0b:0e:6c:30:62:
14:b5:99:62:b0:eb:b8:ed:68:5c:f1:df:a1:34:0d:
ee:6d:f1:03:3a:a4:ba:e2:94:e6:a5:cb:51:7a:ca:
d3:e8:a5:ec:3a:a0:93:89:3d:4d:82:83:ac:9f:65:
ae:39:96:96:1e:90:f0:63:fc:67:3d:3d:69:60:e4:
98:9c:65:9b:ea:9e:c5:a5:03:5e:a7:b3:a9:ba:d9:
52:10:a4:42:1c:a7:44:63:9b:1c:ec:fd:62:88:a9:
05:c3:e1:f8:f1:56:08:63:a6:0d:81:90:f1:56:fc:
07:5f:ae:b3:54:88:8d:0a:25:f4:ea:6d:56:13:0c:
0b:22:e5:9f:63:af:82:7c:bf:a8:97:1a:1d:e9:83:
c5:72:e4:e1:2c:dd:aa:2b:a0:25:32:31:de:17:84:
60:7e:86:7f:f9:d0:cd:c8:6e:cb:b7:83:39:08:95:
b2:e0:3a:a5:79:35:2f:ed:b3:82:f3:84:0e:e4:99:
3b:50:e9:cc:59:02:76:bb:c0:59:8c:8e:00:9d:a6:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:41:DE:AF:CE:D0:C1:A5:14:93:F8:14:14:96:E9:2B:B2:70:44
X509v3 Authority Key Identifier:
keyid:D8:E5:37:75:DE:66:64:A5:36:DB:2F:4E:9A:D2:8C:C6:2A:BD:E9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F84BF1192E1AE6D6FBF6D32F5902B00642687D0E3E60B591E38106CBEEF636D3/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F84BF1192E1AE6D6FBF6D32F5902B00642687D0E3E60B591E38106CBEEF636D3/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:76:e7:84:1d:54:5b:5c:d2:04:d7:cf:10:d0:7e:3a:ca:cb:
3a:05:15:fe:0e:7c:73:45:6c:b8:70:e7:43:45:5b:98:2a:15:
3b:75:31:cc:29:65:dd:dd:a6:db:73:22:9e:ae:d5:05:e3:5c:
a7:16:bf:07:0a:d7:d5:36:e6:b5:d8:53:4c:83:bd:7f:8e:e0:
ad:b2:f7:ab:a5:cf:4a:19:1f:82:ff:3d:98:6e:6a:12:b2:49:
5a:15:2f:23:43:dd:ae:d8:64:c3:fb:75:ae:3d:be:6d:90:2b:
29:31:f8:fd:af:a4:5b:6e:24:98:d7:ea:b8:b1:4a:ee:70:18:
e9:9f:4c:ef:86:46:e2:43:86:12:fa:a3:17:f7:cd:f7:69:79:
75:10:c4:07:bb:f8:57:f7:69:05:2f:b0:ff:4e:91:2c:c2:ad:
b2:ee:b7:98:1e:66:4c:09:26:ac:0d:fd:d2:a2:1d:38:ef:9e:
0b:96:53:ca:40:2b:d0:8a:c4:96:7b:97:49:56:4d:8e:95:62:
b3:37:24:0f:d0:69:54:a9:d7:15:dc:0d:9c:ff:5d:71:72:f6:
09:97:7d:cc:ce:fd:1f:75:2f:8f:3e:c1:34:4a:a3:87:24:e8:
4a:2b:4e:94:32:00:2c:a8:3a:99:a1:e1:ac:89:73:b3:d8:7e:
46:da:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:19:15 2025 by rpki-client