
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft
File: C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft (raw, json)
Hash identifier: KxWaoB1zQbFRExndh8X1x3cZNe/ZEVJICjElanWEfCY=
Subject key identifier: 49:91:41:28:E7:BF:84:39:9D:33:95:B2:26:BF:90:69:AB:D5:61:8A
Authority key identifier: C9:8C:BA:FA:1B:63:46:1F:71:81:D2:0C:05:CB:6C:83:B4:A7:52:B4
Certificate issuer: /CN=C98CBAFA1B63461F7181D20C05CB6C83B4A752B4
Certificate serial: 1E77031EE6DC9229F8950A1966061D9FB0420E62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft
Manifest number: 0138
Signing time: Tue 04 Nov 2025 14:35:49 +0000
Manifest this update: Tue 04 Nov 2025 14:30:49 +0000
Manifest next update: Sun 09 Nov 2025 17:45:49 +0000
Files and hashes: 1: C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.crl (hash: YaI8mKCxSXdMmEm3Kzt7B4xdh3yz3YZCL2ZXj9NamV0=)
2: 323830333a626131303a3a2f33322d3438203d3e20323731393334.roa (hash: vIfF3iTxTSbhVx9YDQ4eXWKrW+BBp/lMt1dJqYBIxos=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.crl
rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:77:03:1e:e6:dc:92:29:f8:95:0a:19:66:06:1d:9f:b0:42:0e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C98CBAFA1B63461F7181D20C05CB6C83B4A752B4
Validity
Not Before: Nov 4 14:30:49 2025 GMT
Not After : Nov 9 17:45:49 2025 GMT
Subject: CN=49914128E7BF84399D3395B226BF9069ABD5618A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:bb:35:45:e1:01:d3:57:5e:8a:26:ee:bd:
3d:88:2d:d6:dc:68:fe:e8:43:fa:99:aa:71:e5:39:
74:ad:48:f8:85:e3:49:cd:0c:a4:43:6b:48:e1:87:
d2:ad:92:14:18:02:95:ca:b6:6f:57:6b:3b:17:b2:
45:ff:13:96:84:f7:90:3c:ed:c5:f3:fb:76:19:90:
a8:f8:89:69:01:5c:76:46:1c:b2:68:b8:e8:d9:f8:
35:6d:9c:46:7f:ae:f3:d1:41:68:8d:89:44:c4:9b:
76:6b:48:82:9d:b1:2e:84:65:7f:5a:11:ee:e5:1a:
8d:5d:7e:2a:d8:11:a3:b4:00:70:44:42:b6:89:60:
7b:d9:e5:a7:16:dc:53:17:07:55:a9:9f:f6:dd:29:
3b:a9:c0:ee:d2:ca:4c:ed:db:9c:7a:30:e7:9d:4b:
ed:34:00:b0:63:29:f8:fd:6f:d6:47:53:e8:69:b3:
98:04:91:14:7c:ee:dd:d3:2d:32:36:31:cb:fb:45:
c1:3f:43:64:ca:0f:19:b1:81:0d:23:14:12:9e:f5:
ae:38:8d:de:27:0f:67:b9:b5:59:dc:64:37:88:cd:
c2:ca:73:36:77:48:df:e9:7d:c2:42:80:c1:86:65:
5d:16:52:5b:64:19:7c:55:14:2c:97:05:90:23:78:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:41:28:E7:BF:84:39:9D:33:95:B2:26:BF:90:69:AB:D5:61:8A
X509v3 Authority Key Identifier:
keyid:C9:8C:BA:FA:1B:63:46:1F:71:81:D2:0C:05:CB:6C:83:B4:A7:52:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:91:77:f7:b7:0b:d6:8e:72:66:5a:b5:52:5d:66:82:fb:65:
7f:94:22:79:84:21:2c:d9:35:5b:c9:2d:b6:24:26:21:d8:de:
07:ca:6b:7b:be:cf:3f:d2:69:71:02:db:d2:2c:93:d3:51:a0:
c6:34:1b:4c:e3:f4:e8:68:60:83:19:32:5f:c4:12:32:5e:66:
23:f5:37:a6:f8:5e:62:29:0b:35:03:2b:73:91:3d:35:7e:ff:
3a:bf:cc:45:b4:a8:aa:41:08:21:f7:ac:bf:ba:c8:65:84:1d:
8d:b5:e6:03:53:05:fb:32:0a:dd:a8:6e:8d:35:32:87:27:88:
54:24:cf:d7:b0:cc:43:cc:fe:2e:31:f5:0d:a7:1b:eb:35:43:
9b:60:d6:2a:83:64:54:63:74:27:7d:f5:2d:22:c0:61:a1:91:
90:1d:fe:09:d6:07:d5:d7:42:5c:cb:5e:3e:61:55:1c:88:27:
f9:1f:60:ac:ed:7c:b1:ea:3b:e1:0e:85:d1:2d:64:58:ca:47:
68:53:f6:22:29:e1:0b:e3:7d:78:e2:7d:35:e6:ac:28:1f:78:
48:66:de:d3:86:b4:3e:37:10:f8:39:4b:96:b2:10:e2:9a:cc:
a4:aa:01:2e:62:0d:96:e5:6e:28:40:32:14:4f:49:de:ee:ec:
a2:6a:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:09:23 2025 by rpki-client