
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.mft
File: DF440E65C2E63992C250A9905BFC8D428DB61F12.mft (raw, json)
Hash identifier: ckvdmYAQ3KMw6raYCQuiEacAAYpn3B3qmeD9Df8skpg=
Subject key identifier: E5:7A:48:46:86:72:EB:6F:E2:39:FF:1E:4F:F4:BD:78:EA:5C:7C:CF
Authority key identifier: DF:44:0E:65:C2:E6:39:92:C2:50:A9:90:5B:FC:8D:42:8D:B6:1F:12
Certificate issuer: /CN=DF440E65C2E63992C250A9905BFC8D428DB61F12
Certificate serial: 043006405E091842FA084479E71634C246606C39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.mft
Manifest number: 0129
Signing time: Mon 20 Oct 2025 05:10:00 +0000
Manifest this update: Mon 20 Oct 2025 05:05:00 +0000
Manifest next update: Sat 25 Oct 2025 05:13:00 +0000
Files and hashes: 1: 3230302e33332e38352e302f32342d3234203d3e20323633383331.roa (hash: N5hqEUHb/6LYVVtfpmZiZgL2Tn+GrbwUCZFd5hvcmbA=)
2: 323830313a31663a323030303a3a2f34382d3438203d3e20323633383331.roa (hash: YGj+woCOOtwe2TTe7ZdKdy6KHoumLwLA+PK233PPsMs=)
3: DF440E65C2E63992C250A9905BFC8D428DB61F12.crl (hash: jKKWcKXac/teDrHedkBCdNYj/5eNnXthQPCaSF/xjOE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.crl
rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Oct 2025 00:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:30:06:40:5e:09:18:42:fa:08:44:79:e7:16:34:c2:46:60:6c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF440E65C2E63992C250A9905BFC8D428DB61F12
Validity
Not Before: Oct 20 05:05:00 2025 GMT
Not After : Oct 25 05:13:00 2025 GMT
Subject: CN=E57A48468672EB6FE239FF1E4FF4BD78EA5C7CCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:dc:24:f6:1b:96:58:16:c5:fc:17:35:7b:
b9:f0:da:82:e9:65:5a:6a:ca:92:9d:89:70:00:e9:
e7:09:fb:ae:c2:47:a2:8d:dd:74:b3:cd:ac:e7:df:
ac:d5:e9:22:ed:fc:56:7c:78:7e:df:c5:c2:4a:d1:
3b:24:f1:52:e7:13:53:e7:cd:8f:b9:28:cd:b6:4e:
24:7b:74:44:ac:17:ef:1f:07:44:23:da:86:45:4c:
26:0f:96:a3:a9:ac:2a:2b:b8:be:f6:34:bf:98:72:
15:b3:a9:dc:4c:72:f4:a8:6b:ee:de:f4:a5:34:be:
3b:83:cf:3f:bb:e6:03:36:44:18:af:26:c9:a9:6f:
77:1f:57:8d:20:fc:29:3e:78:c3:21:1d:1a:a6:8b:
34:b2:83:2c:c1:2f:ab:63:a2:0f:b3:34:ac:7f:cf:
f8:ec:4b:62:60:96:67:68:d9:a9:90:11:f3:06:3c:
c1:cf:97:29:38:05:d7:33:63:55:19:f5:32:3d:63:
56:94:2c:1f:00:a2:7b:c9:f2:41:64:87:79:3d:48:
44:aa:f6:40:72:3b:9a:6f:d8:5f:32:7f:1b:6b:78:
02:23:63:b4:48:61:38:47:95:b2:83:d1:b9:76:09:
0b:2f:66:7a:85:b1:7c:bb:f1:14:e2:e0:23:2b:b0:
9c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7A:48:46:86:72:EB:6F:E2:39:FF:1E:4F:F4:BD:78:EA:5C:7C:CF
X509v3 Authority Key Identifier:
keyid:DF:44:0E:65:C2:E6:39:92:C2:50:A9:90:5B:FC:8D:42:8D:B6:1F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f2:ab:a7:87:bb:7d:5a:f1:e1:1f:0c:3f:62:c6:4f:a8:cf:
11:db:a2:a2:58:40:65:01:4e:3d:bd:eb:78:b7:45:8f:a7:34:
b4:cd:97:4a:0b:63:2a:ed:af:7d:55:3b:e6:34:7a:ff:a1:da:
52:e9:b4:bf:87:39:dc:aa:9e:33:84:69:e0:01:da:20:c3:b4:
ec:d5:45:eb:7a:82:1b:6d:26:d9:b0:28:c7:3f:0d:6b:cc:c8:
eb:1f:8c:29:da:55:a4:29:22:33:6c:cd:26:13:48:b3:fd:28:
1c:03:c0:28:cf:f3:10:2d:c4:11:8b:2c:56:65:74:20:0d:c2:
48:bb:cc:a5:37:41:16:80:f3:71:9f:10:21:db:b0:e4:44:3c:
78:b2:b0:c7:73:0f:29:27:d6:6b:7e:4a:13:d5:44:84:75:ec:
07:93:96:2f:71:5b:f8:d3:b6:65:dd:30:04:8b:0d:51:13:16:
2a:2a:63:cc:c1:59:2a:88:0b:1b:db:ef:01:ca:a4:00:0b:9a:
ce:e8:94:72:0f:2b:8f:c3:62:e6:27:bd:6d:4e:e3:88:60:ff:
8b:cb:03:8b:ce:9a:f1:03:a4:49:44:cd:4d:5c:7e:36:52:bf:
ce:24:31:49:f5:b0:3f:8d:9c:95:6e:ae:9a:a4:57:d1:99:cc:
e7:ea:aa:06
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUBDAGQF4JGEL6CER55xY0wkZgbDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY0NDBFNjVDMkU2Mzk5MkMyNTBBOTkwNUJGQzhENDI4
REI2MUYxMjAeFw0yNTEwMjAwNTA1MDBaFw0yNTEwMjUwNTEzMDBaMDMxMTAvBgNV
BAMTKEU1N0E0ODQ2ODY3MkVCNkZFMjM5RkYxRTRGRjRCRDc4RUE1QzdDQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSD9wk9huWWBbF/Bc1e7nw2oLp
ZVpqypKdiXAA6ecJ+67CR6KN3XSzzazn36zV6SLt/FZ8eH7fxcJK0Tsk8VLnE1Pn
zY+5KM22TiR7dESsF+8fB0Qj2oZFTCYPlqOprCoruL72NL+YchWzqdxMcvSoa+7e
9KU0vjuDzz+75gM2RBivJsmpb3cfV40g/Ck+eMMhHRqmizSygyzBL6tjog+zNKx/
z/jsS2Jglmdo2amQEfMGPMHPlyk4BdczY1UZ9TI9Y1aULB8AonvJ8kFkh3k9SESq
9kByO5pv2F8yfxtreAIjY7RIYThHlbKD0bl2CQsvZnqFsXy78RTi4CMrsJx9AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU5XpIRoZy62/iOf8eT/S9eOpcfM8wHwYDVR0j
BBgwFoAU30QOZcLmOZLCUKmQW/yNQo22HxIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OEU4MkY3QkEwRkE1OTFCRUM3RTAzNUNGRkQ4NzI0NTg0
OTY5M0YyMzY1RTUyRUNCRTQ2NzUyOTk2NjM3QTNFLzAvREY0NDBFNjVDMkU2Mzk5
MkMyNTBBOTkwNUJGQzhENDI4REI2MUYxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERjQ0MEU2NUMyRTYzOTkyQzI1
MEE5OTA1QkZDOEQ0MjhEQjYxRjEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhFODJGN0JBMEZBNTkxQkVDN0UwMzVDRkZEODcyNDU4NDk2OTNGMjM2
NUU1MkVDQkU0Njc1Mjk5NjYzN0EzRS8wL0RGNDQwRTY1QzJFNjM5OTJDMjUwQTk5
MDVCRkM4RDQyOERCNjFGMTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCY8qunh7t9WvHhHww/YsZPqM8R
26KiWEBlAU49vet4t0WPpzS0zZdKC2Mq7a99VTvmNHr/odpS6bS/hzncqp4zhGng
Adogw7Ts1UXreoIbbSbZsCjHPw1rzMjrH4wp2lWkKSIzbM0mE0iz/SgcA8Aoz/MQ
LcQRiyxWZXQgDcJIu8ylN0EWgPNxnxAh27DkRDx4srDHcw8pJ9ZrfkoT1USEdewH
k5YvcVv407Zl3TAEiw1RExYqKmPMwVkqiAsb2+8ByqQAC5rO6JRyDyuPw2LmJ71t
TuOIYP+LywOLzprxA6RJRM1NXH42Ur/OJDFJ9bA/jZyVbq6apFfRmczn6qoG
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:43 2025 by rpki-client