
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
File: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft (raw, json)
Hash identifier: FGOcyu1K4zXTMplZrTF14ttpogHrHo+dsQtoWNFGQtw=
Subject key identifier: 28:7E:37:C2:44:A9:E2:C7:5F:F5:BB:DE:1D:C4:AB:1D:DD:5D:38:CF
Authority key identifier: 3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D
Certificate issuer: /CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D
Certificate serial: 4A11D86BE52C8A7AF6469F000C15E0C7307250A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
Manifest number: 0131
Signing time: Tue 04 Nov 2025 22:45:11 +0000
Manifest this update: Tue 04 Nov 2025 22:40:11 +0000
Manifest next update: Sun 09 Nov 2025 19:10:11 +0000
Files and hashes: 1: 3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa (hash: AHFicsh51xc7duqTOrlmoLWuP5aU+OV95Mt4Zf+cn9c=)
2: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl (hash: X8AtUEsD3CxVv9zX8flBWa67HnvVQKtJkqp8TrmDuQ8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl
rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:11:d8:6b:e5:2c:8a:7a:f6:46:9f:00:0c:15:e0:c7:30:72:50:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D
Validity
Not Before: Nov 4 22:40:11 2025 GMT
Not After : Nov 9 19:10:11 2025 GMT
Subject: CN=287E37C244A9E2C75FF5BBDE1DC4AB1DDD5D38CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:7e:75:8c:8d:88:bf:26:85:39:18:84:e3:
07:2c:41:e7:39:f6:78:7e:77:cd:30:e6:2c:bb:06:
c1:f1:e1:3e:10:12:d2:a9:ca:ef:b0:60:55:fb:e3:
84:28:35:7b:83:d0:4c:29:27:33:5d:b8:27:47:4c:
ae:27:f4:27:47:1e:f5:9f:08:06:63:61:34:72:c9:
6f:db:fb:c9:b7:31:14:91:62:93:cc:cc:83:c5:c8:
f2:8d:c0:f5:d3:80:fb:2d:17:f4:e1:db:e3:47:bf:
d2:ab:3d:59:3a:df:d1:0d:fd:13:0b:13:98:e6:2c:
de:ad:49:c9:bf:a8:81:46:57:70:3c:9e:ca:a7:73:
cb:28:6d:66:3d:b6:bf:03:97:16:b6:a7:0c:24:69:
fb:6d:38:ca:2f:6c:5c:05:43:85:78:87:38:34:cf:
3d:7a:39:6b:f3:b2:be:82:a4:00:99:e7:a0:b7:95:
d1:cd:f4:a3:40:e6:c8:57:e1:43:27:6f:c1:67:1a:
33:3d:14:3d:ee:9a:05:41:8f:17:43:23:f8:a4:45:
6c:93:71:6b:2b:fd:8a:f8:7d:a0:a4:a5:39:62:9f:
d3:ce:32:fb:fb:3d:10:d2:95:10:e8:a0:74:ee:45:
8c:01:b8:15:62:70:5c:ba:d5:b8:ef:43:13:ae:ca:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7E:37:C2:44:A9:E2:C7:5F:F5:BB:DE:1D:C4:AB:1D:DD:5D:38:CF
X509v3 Authority Key Identifier:
keyid:3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d8:6b:bd:2f:5b:12:9a:29:2a:21:6b:19:ca:6f:5a:0a:4b:
14:d3:cb:9b:f2:ef:66:30:20:2e:32:b4:f8:46:d9:2f:88:6e:
c9:4f:97:75:e7:fa:90:e6:f6:f4:67:a3:5c:76:02:54:b5:bb:
7d:36:77:28:ac:9a:a8:29:9b:96:35:bb:27:23:7d:cb:9c:f1:
37:3f:c6:03:d2:fb:b7:9b:19:71:5a:4e:14:10:b4:21:36:66:
3d:9d:a7:91:e5:6d:8b:87:2d:26:fb:b2:35:43:84:a3:51:9e:
01:d7:aa:d2:ac:1f:ed:ef:15:e2:3d:51:af:3a:48:5b:cd:d4:
86:df:19:9c:26:86:a1:37:1a:ad:af:65:a4:9c:7f:ab:87:94:
be:14:94:55:a3:5a:e2:6d:a3:4e:8e:15:25:f6:5a:37:87:9f:
79:8e:8c:5a:05:fa:cb:3d:6b:bc:88:d6:cc:d7:3e:34:90:1b:
d7:5e:11:d8:95:46:6c:0a:82:ab:0f:40:96:34:1b:ba:9c:87:
23:1d:7b:ca:a9:7c:39:58:ea:84:b7:92:60:3b:7d:65:1f:e3:
65:dc:c9:5f:ba:f1:9b:bc:32:e3:1c:b3:0a:48:00:39:ba:fb:
56:1d:b5:70:8a:e2:76:e5:84:0a:47:ed:af:43:f8:9d:d0:3e:
54:f1:c8:d2
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUShHYa+Usinr2Rp8ADBXgxzByUKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FGRkE2MTU1RUUwQjg2MjdBNTVFRThFRUJDNzg0M0JG
MDg3RDA4RDAeFw0yNTExMDQyMjQwMTFaFw0yNTExMDkxOTEwMTFaMDMxMTAvBgNV
BAMTKDI4N0UzN0MyNDRBOUUyQzc1RkY1QkJERTFEQzRBQjFEREQ1RDM4Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgEX51jI2IvyaFORiE4wcsQec5
9nh+d80w5iy7BsHx4T4QEtKpyu+wYFX744QoNXuD0EwpJzNduCdHTK4n9CdHHvWf
CAZjYTRyyW/b+8m3MRSRYpPMzIPFyPKNwPXTgPstF/Th2+NHv9KrPVk639EN/RML
E5jmLN6tScm/qIFGV3A8nsqnc8sobWY9tr8Dlxa2pwwkafttOMovbFwFQ4V4hzg0
zz16OWvzsr6CpACZ56C3ldHN9KNA5shX4UMnb8FnGjM9FD3umgVBjxdDI/ikRWyT
cWsr/Yr4faCkpTlin9POMvv7PRDSlRDooHTuRYwBuBVicFy61bjvQxOuypG3AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUKH43wkSp4sdf9bveHcSrHd1dOM8wHwYDVR0j
BBgwFoAUOv+mFV7guGJ6Ve6O68eEO/CH0I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQjBGQzRGMUY2MkUyREYwNzA5QTc1NjZEMEJFNUU5QzA4
Mjg0NUM2QTMxMUMwNzgwNzlENDU4MTEzQjgyQzc4LzAvM0FGRkE2MTU1RUUwQjg2
MjdBNTVFRThFRUJDNzg0M0JGMDg3RDA4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQUZGQTYxNTVFRTBCODYyN0E1
NUVFOEVFQkM3ODQzQkYwODdEMDhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0IwRkM0RjFGNjJFMkRGMDcwOUE3NTY2RDBCRTVFOUMwODI4NDVDNkEz
MTFDMDc4MDc5RDQ1ODExM0I4MkM3OC8wLzNBRkZBNjE1NUVFMEI4NjI3QTU1RUU4
RUVCQzc4NDNCRjA4N0QwOEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCj2Gu9L1sSmikqIWsZym9aCksU
08ub8u9mMCAuMrT4RtkviG7JT5d15/qQ5vb0Z6NcdgJUtbt9NncorJqoKZuWNbsn
I33LnPE3P8YD0vu3mxlxWk4UELQhNmY9naeR5W2Lhy0m+7I1Q4SjUZ4B16rSrB/t
7xXiPVGvOkhbzdSG3xmcJoahNxqtr2WknH+rh5S+FJRVo1ribaNOjhUl9lo3h595
joxaBfrLPWu8iNbM1z40kBvXXhHYlUZsCoKrD0CWNBu6nIcjHXvKqXw5WOqEt5Jg
O31lH+Nl3MlfuvGbvDLjHLMKSAA5uvtWHbVwiuJ25YQKR+2vQ/id0D5U8cjS
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:16:45 2025 by rpki-client