
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft
File: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft (raw, json)
Hash identifier: xvfrZA4tqAMhxhPYnlg3LHhiq2WzzNzisijowVFbCus=
Subject key identifier: 13:16:FA:B5:84:5E:61:B4:AD:B3:A2:78:00:16:FC:2F:73:BC:0E:C9
Authority key identifier: 3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA
Certificate issuer: /CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA
Certificate serial: 4703E060B8AA376D0D09C609858B178673AB74A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft
Manifest number: 0171
Signing time: Mon 02 Mar 2026 05:08:04 +0000
Manifest this update: Mon 02 Mar 2026 05:03:04 +0000
Manifest next update: Sat 07 Mar 2026 02:03:04 +0000
Files and hashes: 1: 323830333a393663303a3a2f33322d3438203d3e20323635363534.roa (hash: +4WvnzVOt/EVUDZN9YCaDCCRLy9YYWSvnAxw1LtprVk=)
2: 3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa (hash: yjzSJUZj4zGt1MHhVmbLi1zvCsq+jdBn4Xm2sgrDts0=)
3: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl (hash: femkHQBswAOcfEG8zyksrwVhia9OQDKUbLqK4t3BYbM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl
rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 02:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:03:e0:60:b8:aa:37:6d:0d:09:c6:09:85:8b:17:86:73:ab:74:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA
Validity
Not Before: Mar 2 05:03:04 2026 GMT
Not After : Mar 7 02:03:04 2026 GMT
Subject: CN=1316FAB5845E61B4ADB3A2780016FC2F73BC0EC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:1b:09:41:a6:cc:f0:dd:21:17:84:0b:ff:
90:31:28:99:16:8e:2c:c2:0f:05:b6:9f:94:a9:49:
7b:c3:5f:60:d3:62:dc:0b:f9:8b:8e:3d:d7:cd:fa:
c8:c5:74:17:d3:45:29:89:15:9d:99:78:9b:8c:31:
d3:af:68:52:f9:9d:19:1d:0d:5d:62:a1:d7:6d:ee:
c1:14:ed:a4:22:37:eb:ad:2d:31:15:cd:5c:0a:42:
36:1d:78:bf:c5:1c:f3:ec:7e:4d:66:bf:2e:4f:1f:
0a:66:82:64:60:56:ba:cf:bc:23:98:9e:3c:17:f4:
8c:87:0b:88:35:a0:d8:d7:30:f8:93:b9:89:05:ac:
88:00:ae:fc:1d:ec:19:98:56:59:0d:bb:67:36:ef:
6f:9d:00:d4:7f:62:80:1f:c5:7f:52:5a:a9:80:76:
e8:56:bc:fc:83:57:4f:3a:11:38:a4:2e:33:9c:8c:
70:05:80:ab:fc:d4:9d:0d:59:5b:c9:38:44:94:18:
1e:71:70:d0:44:b7:94:89:01:6c:af:d6:40:f1:c7:
fb:51:2b:c6:ca:9f:94:ab:e7:b4:be:e3:11:bd:7a:
7d:93:63:fc:b5:21:d8:05:80:58:c9:12:dc:26:12:
02:52:10:83:cf:66:db:9b:a4:2f:4f:0b:da:68:76:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:16:FA:B5:84:5E:61:B4:AD:B3:A2:78:00:16:FC:2F:73:BC:0E:C9
X509v3 Authority Key Identifier:
keyid:3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1e:b7:45:1d:24:1f:52:a5:93:c4:22:96:db:b9:8d:d3:af:
a7:0d:6e:0d:98:ea:5c:89:5e:46:5e:7f:f9:67:1e:2c:78:b0:
8f:fc:d5:bc:74:02:67:f3:56:37:65:1e:f5:a0:00:f9:a7:da:
f8:2a:f0:f1:7e:18:59:72:4b:75:7d:77:79:f6:1c:31:09:08:
88:0f:b6:b6:61:be:11:9c:ae:65:f8:4d:4e:a5:31:ed:9f:8f:
e4:9e:77:54:f0:7d:d5:17:a7:22:32:31:b0:b9:2b:f3:f7:3c:
d9:88:3a:3d:31:b7:a5:c0:df:f8:31:e1:ae:bc:eb:9b:e8:25:
3d:86:89:89:57:94:00:2e:56:3e:2e:d0:cc:d1:bf:c5:a4:b2:
59:33:87:88:00:88:98:92:33:03:42:bb:af:f8:8a:35:f5:0d:
75:2a:37:6a:17:a1:29:11:76:e4:0b:55:35:25:bf:6c:0f:01:
2a:c6:9f:66:cd:eb:cb:2c:24:c3:db:c0:07:5b:99:83:87:1c:
31:cc:30:32:a0:86:c6:7a:2e:72:c5:df:ce:e3:19:dc:14:11:
c9:dd:bf:39:5c:61:24:6a:03:5b:17:ab:d3:40:29:df:38:56:
a6:84:50:2e:32:cf:55:e8:77:51:4f:92:aa:5c:03:fd:e5:31:
d7:67:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:20 2026 by rpki-client