
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft
File: C3E7368D35E3633A3376945DE03867D2B31CDD87.mft (raw, json)
Hash identifier: VHZpZrNylYNmoQvNKj3nekDVaoJiQaAT1fbvKWcHGRg=
Subject key identifier: 03:BD:0B:BF:C3:9C:44:26:50:EF:AA:24:97:A8:1B:C0:10:1C:56:E2
Authority key identifier: C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87
Certificate issuer: /CN=C3E7368D35E3633A3376945DE03867D2B31CDD87
Certificate serial: 22E3FD1C3ED0E12B707DCAC90E8BB9CE1DCC11D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft
Manifest number: 01DC
Signing time: Wed 14 Oct 2026 11:06:08 +0000
Manifest this update: Wed 14 Oct 2026 11:01:08 +0000
Manifest next update: Mon 19 Oct 2026 10:57:08 +0000
Files and hashes: 1: 323030313a313332303a3a2f33322d3438203d3e203237373333.roa (hash: Y/DXVrEFvK6+2gifTnyCzHrYoEE3fUDVc5ouq65Hn68=)
2: 3230302e31302e3232382e302f32322d3234203d3e203237373333.roa (hash: 1bBlwFtopwiUx2I8g8XaOhtTqaChLd/yxuMOIY3StJI=)
3: C3E7368D35E3633A3376945DE03867D2B31CDD87.crl (hash: RLBzM1JX0jgc2K2qgBKWDtEm0wfvZjcoJLs6q5bFcdA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl
rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 19 Oct 2026 01:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e3:fd:1c:3e:d0:e1:2b:70:7d:ca:c9:0e:8b:b9:ce:1d:cc:11:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3E7368D35E3633A3376945DE03867D2B31CDD87
Validity
Not Before: Oct 14 11:01:08 2026 GMT
Not After : Oct 19 10:57:08 2026 GMT
Subject: CN=03BD0BBFC39C442650EFAA2497A81BC0101C56E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:1b:c5:08:32:cb:15:15:9e:6a:9d:42:80:
c4:37:82:59:21:03:5a:d0:2d:20:e7:1a:62:5f:06:
64:2e:3d:7a:13:60:c8:94:62:a9:4f:7f:c8:36:fc:
32:91:df:92:e0:40:4d:ba:89:2c:82:05:f1:10:0a:
2e:37:0f:13:f2:8d:5a:7a:5d:62:cb:ad:46:f6:da:
43:cd:d6:74:e2:f5:14:e1:e3:64:39:f0:4d:42:67:
1f:95:15:61:0d:20:8e:f2:fc:8d:67:e1:c9:7f:0f:
ca:5c:c1:57:ca:d3:ea:5d:3d:8f:8e:6c:fe:dd:4c:
99:db:32:98:fe:a6:e7:03:86:90:eb:ce:9f:85:49:
ce:90:9f:df:98:a7:e7:38:b1:0b:9c:90:40:a7:93:
73:c1:f7:b8:db:5b:7e:1c:e6:a3:37:94:b0:d2:6c:
b9:fb:cc:4f:bb:9e:91:11:b1:65:cf:14:9a:27:f3:
c5:a1:50:7f:76:cd:ab:44:84:09:e2:a6:c6:0f:e4:
7e:6a:97:fd:23:29:4f:42:13:85:9d:94:30:42:61:
a7:62:8a:df:d7:f9:29:1f:36:e5:3c:e2:c4:ce:94:
ca:99:bd:07:39:14:cd:90:25:61:4c:9c:ea:a9:67:
d9:ce:9e:77:f3:e6:fb:16:41:d8:e1:41:08:28:27:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BD:0B:BF:C3:9C:44:26:50:EF:AA:24:97:A8:1B:C0:10:1C:56:E2
X509v3 Authority Key Identifier:
keyid:C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:eb:16:c5:a3:b9:4b:b9:ca:f9:2e:e7:0e:12:e7:6c:25:b7:
c2:6a:06:3f:53:a3:8b:3c:24:62:d9:12:ee:de:88:6e:eb:d8:
21:38:ee:7d:c1:25:dc:4f:8d:de:36:aa:0b:01:b9:8e:57:6c:
6c:69:99:d6:39:4b:46:5d:b6:54:89:1d:7d:c8:f2:61:b4:2f:
01:bb:3a:89:ff:ff:b2:00:f8:c3:6a:4f:c4:60:ed:c9:b8:c3:
68:cd:79:9b:0b:2b:cf:d0:c6:a0:6e:24:4b:ec:54:bd:60:7b:
17:42:1b:4e:91:42:de:11:84:bd:47:fc:ce:53:7d:d4:2e:2a:
7b:d7:95:7e:dd:94:21:f9:91:ca:93:2b:c6:cc:8a:a3:34:07:
81:f3:c1:d4:9f:98:b2:9d:32:23:7a:77:3c:b6:1e:2e:46:01:
1e:11:a0:75:1f:99:e6:cf:77:5c:6e:ff:10:73:03:40:0f:26:
10:29:9c:80:f8:0c:a2:4e:b8:51:2e:d2:41:92:18:5d:28:0e:
e6:fb:73:55:f5:39:9c:23:31:74:c8:cd:7e:28:85:0d:02:7d:
09:b6:47:52:73:54:16:f9:54:c3:92:e7:b1:75:17:e2:b2:c9:
09:9a:f6:27:88:f7:0f:df:36:22:a7:50:35:10:48:d9:47:c7:
38:51:c7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:06:49 2026 by rpki-client