
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.mft
File: 25B35CCB197A59589C3EC69A6379A2D5D692BFE4.mft (raw, json)
Hash identifier: OWsx4iqXnsXWqf8g/2VOCHMIH59aL24ITglhxxW41B0=
Subject key identifier: 2A:C2:9C:72:6D:15:4F:27:E9:82:52:EC:78:07:C9:38:91:36:31:6B
Authority key identifier: 25:B3:5C:CB:19:7A:59:58:9C:3E:C6:9A:63:79:A2:D5:D6:92:BF:E4
Certificate issuer: /CN=25B35CCB197A59589C3EC69A6379A2D5D692BFE4
Certificate serial: 32F0C2C35C5915EF83CC0E811588798D4A98EEC8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.mft
Manifest number: 0144
Signing time: Wed 25 Mar 2026 20:34:31 +0000
Manifest this update: Wed 25 Mar 2026 20:29:31 +0000
Manifest next update: Mon 30 Mar 2026 17:27:31 +0000
Files and hashes: 1: 3136302e32302e39322e302f32322d3234203d3e20323635373134.roa (hash: YsjWIWWoxK83sqOjkiMKgl9CxwXJc7q+QgpHrosYrP8=)
2: 323830333a363563303a3a2f33322d3332203d3e20323635373134.roa (hash: 5FCF9UicutpBbVVfBdYi8Nssr9TK70WWwcXUgVJ7i2M=)
3: 25B35CCB197A59589C3EC69A6379A2D5D692BFE4.crl (hash: xeapUobohkZMuSF9gZpRezC/jUqmCceWSsw60LDFT8U=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.crl
rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 17:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f0:c2:c3:5c:59:15:ef:83:cc:0e:81:15:88:79:8d:4a:98:ee:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25B35CCB197A59589C3EC69A6379A2D5D692BFE4
Validity
Not Before: Mar 25 20:29:31 2026 GMT
Not After : Mar 30 17:27:31 2026 GMT
Subject: CN=2AC29C726D154F27E98252EC7807C9389136316B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:9b:ec:be:0e:25:5f:12:5e:f1:1a:fb:51:
77:ab:b5:be:52:55:94:f0:93:ab:df:d2:1a:a5:08:
86:07:ce:c7:24:08:77:44:de:25:7c:61:5d:0c:a1:
2c:1d:d1:1e:77:fd:56:35:cf:b5:54:2d:a3:e5:47:
6c:fc:24:b5:72:7b:a9:3e:ee:f0:6d:a2:3e:23:ee:
ab:fc:dd:d3:3b:e5:b7:a4:62:18:0d:9a:e8:07:25:
29:8b:0e:e9:55:f1:78:db:d1:8d:07:e5:56:ba:61:
74:1f:5e:e1:77:09:60:2d:c9:f9:4d:21:86:e5:c3:
db:97:a5:6b:62:c0:76:6a:1a:a7:8c:33:93:3f:37:
c7:04:6a:85:de:45:54:c4:08:a3:23:be:6d:45:68:
54:07:5b:89:c4:6a:f4:ca:62:af:aa:7c:94:85:e5:
d5:10:a3:a9:dc:ba:0c:50:48:00:f6:cc:d7:de:47:
f2:d6:78:46:7e:5d:2f:e8:15:c0:8a:55:33:5a:21:
77:ed:75:92:eb:51:0d:81:91:64:85:a9:3e:da:21:
77:22:1b:51:c8:75:23:7d:97:ae:ba:6d:27:5b:0b:
14:08:2a:45:3b:d4:ef:c5:0c:1d:7b:2d:7b:51:b4:
38:be:8b:51:55:d1:05:6b:53:5a:aa:f6:7b:cf:8c:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C2:9C:72:6D:15:4F:27:E9:82:52:EC:78:07:C9:38:91:36:31:6B
X509v3 Authority Key Identifier:
keyid:25:B3:5C:CB:19:7A:59:58:9C:3E:C6:9A:63:79:A2:D5:D6:92:BF:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5b:d3:18:98:c4:2a:a4:df:df:93:e1:70:34:9b:ff:bc:2b:
c6:05:10:85:74:c0:84:f0:6d:ac:14:ee:9b:5c:6f:6b:ab:1d:
fc:59:64:cf:b8:2c:71:b9:8b:f3:1d:c4:49:94:4d:ac:11:39:
40:96:91:59:ae:10:d6:2d:2f:2f:7b:18:bf:f9:0f:02:fa:dd:
f0:15:71:15:29:74:8a:d9:aa:fa:f8:8a:8d:57:eb:a4:c5:6e:
f3:7b:bb:1d:de:21:da:cb:51:ea:3e:6b:93:09:af:61:75:7e:
94:22:81:ef:32:bd:43:37:3e:1f:34:87:a4:cc:c1:62:b7:59:
0c:51:6a:58:f3:0b:1a:36:13:3e:5a:38:09:f9:af:9b:18:23:
22:c6:8a:69:05:21:a1:86:00:08:e8:88:99:77:63:ec:19:55:
68:45:7c:a4:83:bb:b0:63:c9:0a:89:3d:9a:a2:c6:ce:33:26:
3c:35:f2:04:76:09:3b:5f:4e:b6:b9:34:9c:5b:7f:26:ac:00:
6c:fd:d6:a7:06:e3:2c:09:15:f1:35:cc:8a:3a:0a:00:02:d4:
bf:b3:ce:36:c5:ea:8c:f3:ed:8d:2a:e2:75:a2:98:a3:6d:0b:
e3:ed:b0:3c:9a:79:1c:b2:db:f1:7e:4d:f0:4e:ac:e3:a7:0c:
54:33:58:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:25:54 2026 by rpki-client