
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.mft
File: C3210E1056A6F03E5EBAE928296A603EC46256F1.mft (raw, json)
Hash identifier: 3kBr1LS6z777iO46iuOCgXTfUgwI9qQ3jaN4ovD2qpI=
Subject key identifier: BB:5D:B7:BD:3D:65:78:6B:3E:2C:63:F0:01:FD:DD:C2:33:8D:B4:33
Authority key identifier: C3:21:0E:10:56:A6:F0:3E:5E:BA:E9:28:29:6A:60:3E:C4:62:56:F1
Certificate issuer: /CN=C3210E1056A6F03E5EBAE928296A603EC46256F1
Certificate serial: 6162C4FC2DFD5886C6B8E7BAE96ECBC4F9F08F69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.mft
Manifest number: 0133
Signing time: Mon 03 Nov 2025 04:21:52 +0000
Manifest this update: Mon 03 Nov 2025 04:16:52 +0000
Manifest next update: Sat 08 Nov 2025 18:28:52 +0000
Files and hashes: 1: C3210E1056A6F03E5EBAE928296A603EC46256F1.crl (hash: N7SrV/tDVTUxokc52Ir7tGGe7CDr6RABprqncCRSovg=)
2: 34352e3138352e3230342e302f32322d3235203d3e20323730303730.roa (hash: ErhQBJyUlBMuhJlb4Bf+Qt+SSONqDViPbMje1gKzDDA=)
3: 323830333a396636303a3a2f33322d3332203d3e20323730303730.roa (hash: 8mVwNlBfQa6sIyuvbEfafzwpC0AbrrRGBvwuKewEQoE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.crl
rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 18:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:62:c4:fc:2d:fd:58:86:c6:b8:e7:ba:e9:6e:cb:c4:f9:f0:8f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3210E1056A6F03E5EBAE928296A603EC46256F1
Validity
Not Before: Nov 3 04:16:52 2025 GMT
Not After : Nov 8 18:28:52 2025 GMT
Subject: CN=BB5DB7BD3D65786B3E2C63F001FDDDC2338DB433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:4b:98:20:9d:4d:b2:28:f1:e3:88:04:13:
70:6f:be:a4:55:e5:01:57:d6:2e:5e:be:e9:30:a8:
3d:ef:71:e0:08:8b:74:6d:3f:1f:ea:c7:d6:2b:3d:
5e:a9:2b:27:7f:52:69:a6:fa:ab:25:3b:08:1a:e5:
9a:5f:a1:60:40:19:fe:38:a9:ad:4b:e7:ea:21:cc:
81:3d:16:2f:2c:fb:05:0d:7e:81:39:8a:3a:ee:1a:
a5:f6:b5:58:67:9f:ce:ea:e7:62:c5:b8:65:57:ec:
aa:a0:40:fc:07:77:af:c8:eb:d3:90:94:04:56:09:
88:1f:57:c4:20:56:4d:75:59:40:97:e3:cb:36:c1:
20:e5:a5:ff:d8:1f:53:1f:0e:37:ac:2d:b6:7a:1a:
02:ca:1f:7a:2b:1b:39:a3:fb:b5:a2:72:a3:3d:f1:
8a:f0:05:21:69:68:7e:37:3d:de:b0:dc:df:68:9e:
cc:db:72:32:b3:d0:43:86:c1:47:17:30:8c:85:d0:
5b:a3:68:fa:b3:33:8c:e5:9b:50:dc:ee:c1:ef:8b:
32:ba:c1:8a:e6:a5:c3:4b:66:32:5f:f0:00:2c:26:
ee:35:f2:23:ca:2b:07:41:d1:fd:27:ad:6a:77:79:
2f:ad:14:b4:eb:82:dc:c4:50:eb:91:04:89:de:6e:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5D:B7:BD:3D:65:78:6B:3E:2C:63:F0:01:FD:DD:C2:33:8D:B4:33
X509v3 Authority Key Identifier:
keyid:C3:21:0E:10:56:A6:F0:3E:5E:BA:E9:28:29:6A:60:3E:C4:62:56:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e7:7c:bc:97:42:04:cd:9b:31:3e:5c:a2:ab:65:38:5b:a2:
1e:a9:0d:64:81:4f:a2:ac:3d:f4:19:c1:8c:c6:02:c1:fb:31:
c1:49:74:a7:f7:06:89:ab:2a:f7:1c:d9:cf:e3:53:36:b8:2d:
b6:d9:9c:ef:42:3c:3f:39:6f:b7:93:00:11:73:e9:ad:aa:53:
35:25:7f:3c:8c:de:6f:e5:24:6f:5c:76:39:69:6d:76:4f:92:
16:ae:44:98:c3:2d:de:7a:70:58:44:94:43:de:15:e2:15:dd:
33:59:0b:e6:40:d0:18:78:51:eb:0f:f9:c2:92:25:31:97:1c:
01:d1:af:df:81:ea:30:7d:8f:88:74:56:bc:1a:d3:99:b3:5e:
10:b9:f8:d9:1a:bf:e4:a1:f9:05:4e:86:68:9a:29:51:de:b8:
c7:cc:e6:c3:26:f5:f7:9b:af:ca:92:ec:e6:4c:3a:db:a4:59:
90:39:82:a7:5f:69:fb:e1:a9:52:67:29:c0:39:30:29:8d:fd:
41:f9:0a:44:ca:39:e8:d3:b6:3d:69:f5:a1:89:07:51:22:12:
d8:d7:80:ac:aa:2a:c2:64:83:d1:19:8e:11:40:f0:f6:c3:d6:
37:3b:fe:f5:d0:0d:ea:e6:ac:95:3d:bd:6d:ac:4f:d9:26:5d:
c6:09:01:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:05:10 2025 by rpki-client