
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft
File: CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft (raw, json)
Hash identifier: 1N2Cl7aEpAIrluoJSDdGPsycF2rUS8caw6FwY5nLHb8=
Subject key identifier: 4F:2F:23:8F:DD:17:25:55:AC:3C:A5:F4:E5:B0:A4:89:2A:27:04:BC
Authority key identifier: CA:AB:BE:9E:DC:44:F4:B5:B4:11:2B:E0:09:7E:3B:5A:92:0C:68:B5
Certificate issuer: /CN=CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5
Certificate serial: 327644D86D3413A2FFD24A5B0D4552CF84A40F14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft
Manifest number: 0132
Signing time: Mon 20 Oct 2025 09:17:41 +0000
Manifest this update: Mon 20 Oct 2025 09:12:41 +0000
Manifest next update: Sat 25 Oct 2025 23:45:41 +0000
Files and hashes: 1: CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl (hash: wL7G23ueSIrpHtxRy10oupQMy6RRhWsKm/myMvvgdOY=)
2: 323830333a3161303a3a2f33322d3438203d3e20323637363839.roa (hash: DRHCzcpv5c6QsE11Z1eGXr6S+kUvnqyW1+55Onqm738=)
3: 34352e3136332e32302e302f32322d3234203d3e20323637363839.roa (hash: UVmTjFLy2cWO3HRxLeqe2gRQzzd3npLxFwmizWy8voQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl
rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Oct 2025 00:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:76:44:d8:6d:34:13:a2:ff:d2:4a:5b:0d:45:52:cf:84:a4:0f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5
Validity
Not Before: Oct 20 09:12:41 2025 GMT
Not After : Oct 25 23:45:41 2025 GMT
Subject: CN=4F2F238FDD172555AC3CA5F4E5B0A4892A2704BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:f2:64:bc:87:50:21:cb:ff:26:6f:5a:18:
bd:2b:7e:8c:03:fd:da:fc:04:f1:0a:a9:5f:1a:96:
8e:2c:8d:e1:ea:05:a1:b6:99:29:43:ba:4f:e7:43:
a0:a4:4e:b5:74:f0:f5:7c:ef:98:43:9e:ec:a9:66:
4c:6e:b9:f9:fe:2c:6e:7b:32:6d:3f:f4:98:67:e9:
0d:61:de:fa:dc:91:95:9c:fa:dd:56:bf:13:34:ea:
b0:39:a0:eb:0a:8d:87:6a:78:a1:db:62:c0:07:0d:
e5:19:47:ec:fc:f1:75:38:b0:44:b6:77:bd:61:21:
0e:9a:ce:cc:36:e4:a1:05:3f:f5:da:0c:77:5a:e1:
70:06:25:96:ed:23:df:52:79:70:7c:d8:44:c6:72:
d9:5e:45:1d:6e:91:1c:b5:d6:c2:6f:15:23:b3:0c:
75:ce:eb:0e:92:5c:a8:99:8b:30:9e:04:8f:5b:eb:
7b:f7:9d:bd:16:e2:5e:2e:2d:21:15:fc:85:79:65:
ca:df:5f:83:8a:1a:65:3c:49:ad:96:8e:9f:5b:40:
ea:9e:22:33:53:5a:b2:e1:e4:de:bc:1b:e5:29:8e:
f4:93:eb:50:8f:d5:66:1c:46:4c:d1:11:d7:3e:63:
5a:67:b9:63:64:02:08:aa:2d:3c:98:d7:95:4a:a1:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2F:23:8F:DD:17:25:55:AC:3C:A5:F4:E5:B0:A4:89:2A:27:04:BC
X509v3 Authority Key Identifier:
keyid:CA:AB:BE:9E:DC:44:F4:B5:B4:11:2B:E0:09:7E:3B:5A:92:0C:68:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5b:0c:ef:4f:46:68:d5:ad:51:a7:c6:68:bd:33:ec:ae:eb:
ff:65:01:52:13:c3:86:21:db:f5:c3:7d:d7:f4:2d:86:49:e3:
f4:bd:2c:7e:ce:c6:95:25:17:1f:37:72:90:7c:9e:23:a8:7b:
0d:1b:ad:06:7f:ca:92:7e:9b:38:53:cf:69:29:57:6c:51:50:
a7:3b:54:85:02:84:ef:10:f8:f8:8a:89:01:36:29:16:1a:1f:
9d:f6:9d:76:27:79:8d:0a:26:ec:58:9e:26:33:1a:39:32:26:
ea:01:db:10:4b:8b:65:1a:48:f2:38:c4:ea:68:33:58:75:cb:
d8:29:33:c0:ef:30:21:62:77:76:80:b0:a8:4b:75:91:90:10:
72:b8:dd:93:47:98:ea:70:45:0c:d9:19:6b:e0:f8:47:3a:94:
75:63:8a:3b:10:fe:32:8d:00:e1:10:06:dd:73:55:9c:b6:b9:
59:05:cf:14:ac:71:ab:58:c5:8d:72:9f:db:16:6c:9f:76:d6:
7a:47:f4:d7:6c:ef:b5:ac:d1:20:6c:86:b0:f7:20:5f:ad:15:
9e:1c:c2:6e:30:d5:33:c6:41:90:6c:02:d5:ba:b1:95:66:b9:
9b:03:e3:fd:c0:f7:cb:f1:3a:8e:04:4c:0f:7c:04:fe:d7:ab:
d0:1b:26:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:42:22 2025 by rpki-client