
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft
File: 3A400B3A5D53E4EA3825ED69A583478D86023E84.mft (raw, json)
Hash identifier: nrhq5mPn5dPsFEz7Lew85Nh3WDc16Q/3b5HbzZFq1RE=
Subject key identifier: E2:0B:AE:BD:93:00:19:7A:7F:F2:B4:3E:8F:6C:B4:A7:A9:A5:68:CA
Authority key identifier: 3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84
Certificate issuer: /CN=3A400B3A5D53E4EA3825ED69A583478D86023E84
Certificate serial: 4FEF63FD2F678876DDE227BC0DEE67452F768F26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft
Manifest number: 0122
Signing time: Tue 04 Nov 2025 18:27:59 +0000
Manifest this update: Tue 04 Nov 2025 18:22:59 +0000
Manifest next update: Mon 10 Nov 2025 06:55:59 +0000
Files and hashes: 1: 3A400B3A5D53E4EA3825ED69A583478D86023E84.crl (hash: lRYeLwjd/RCGymbTT5r6bE2KFSYhrlD2Y4qn9uXLgBQ=)
2: 34352e3233302e37322e302f32322d3234203d3e20323634383537.roa (hash: U/jV+QAuwQIfcahuDyFrI+UOB2KZ2C8fgBLwt+9lfTs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.crl
rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ef:63:fd:2f:67:88:76:dd:e2:27:bc:0d:ee:67:45:2f:76:8f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A400B3A5D53E4EA3825ED69A583478D86023E84
Validity
Not Before: Nov 4 18:22:59 2025 GMT
Not After : Nov 10 06:55:59 2025 GMT
Subject: CN=E20BAEBD9300197A7FF2B43E8F6CB4A7A9A568CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:1a:09:da:da:10:cb:e3:c5:c5:a9:03:3b:
ff:26:3c:db:4d:f5:63:38:81:e1:32:40:1b:0a:6a:
e0:0a:cc:bb:05:94:a9:9f:8c:c3:c3:3f:47:cb:15:
42:f3:93:63:57:14:67:94:23:54:32:57:8b:fc:c2:
72:d5:e0:2e:8a:d3:34:a7:dd:88:38:0d:94:bd:25:
25:87:c8:02:6f:3e:a1:3b:7a:12:ad:ed:2a:16:cf:
cd:99:a3:4c:a5:07:c9:a8:00:94:f1:ce:8d:33:5f:
8d:4a:8d:20:aa:ef:fe:1e:d2:dd:9e:63:a7:02:a2:
e4:ec:0a:fc:cc:76:3b:3e:79:47:93:95:a5:a7:07:
56:9c:f2:1d:84:80:97:f7:75:39:7d:06:7f:6d:bd:
d8:20:bd:05:07:a8:f4:db:8a:64:84:84:07:10:ff:
66:c8:5c:dd:60:65:6e:82:5b:81:a8:82:21:ef:08:
51:e4:bb:cc:b1:3a:b9:e3:a6:7c:0f:c3:29:63:af:
19:2e:39:2c:17:70:3e:8b:c0:eb:74:77:7e:35:f5:
88:e3:b5:e3:96:d3:fc:41:76:b2:cf:7e:d8:df:fa:
2d:e7:b1:58:24:84:8b:8f:8c:2d:da:5f:46:ff:5d:
35:51:c0:b7:40:d5:8b:0d:97:be:4e:40:67:f7:0f:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0B:AE:BD:93:00:19:7A:7F:F2:B4:3E:8F:6C:B4:A7:A9:A5:68:CA
X509v3 Authority Key Identifier:
keyid:3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d1:7c:9b:87:9f:bd:49:a8:33:ce:c5:45:dc:a6:4c:b2:cf:
0e:24:59:7b:1c:57:9c:19:d7:94:98:1b:b5:ce:5c:80:de:46:
90:21:47:3a:a8:70:54:2d:72:37:06:a1:9c:9b:6c:80:b7:88:
05:0e:bf:fa:e7:4a:2d:da:2a:d9:04:34:0d:4c:1b:4c:9a:ff:
78:bb:84:e4:b0:41:27:4f:3a:df:d9:c8:d5:14:ca:b0:b3:1d:
a6:ec:15:e9:23:9b:8c:1b:cd:84:3c:f0:a1:af:ef:2f:24:bd:
d9:ac:9e:89:6e:21:0c:13:af:f7:4a:f3:0c:96:ed:86:4c:4d:
96:83:6b:61:14:07:76:8f:67:0f:59:39:e4:19:02:67:a6:2f:
b2:15:9d:98:ba:fa:f7:2b:78:ea:5e:ad:f8:63:3a:23:07:96:
24:65:d9:4f:bb:95:84:c4:27:38:75:2b:b3:c2:b7:a7:ad:25:
64:fe:4a:e0:6c:44:d5:6b:13:8a:e8:3a:6b:3a:f2:a4:64:7f:
50:73:68:32:61:1b:d6:06:5b:78:ac:cf:bb:1f:31:0c:44:89:
dd:18:8b:2a:5c:53:00:6a:b4:7b:9c:33:21:36:0c:46:81:f7:
ea:02:08:71:75:78:20:3f:f8:c4:9b:06:64:8a:e9:df:96:15:
76:74:82:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:08:08 2025 by rpki-client