
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft
File: 3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft (raw, json)
Hash identifier: dsgD48AIhDhf/Setsdi3hqT+RnmAZlN1gyWIVhwEl+Q=
Subject key identifier: D8:2D:95:05:7D:6F:34:C3:0D:3B:BA:22:29:18:AB:66:EE:4F:C6:99
Authority key identifier: 3A:F4:20:E6:0A:DF:C0:F7:1F:2F:2D:DD:54:FA:7F:41:DF:D2:44:F3
Certificate issuer: /CN=3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3
Certificate serial: 7A1D6C0C4BBCA664A9F7A8705C09A5E4009B96F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft
Manifest number: 76
Signing time: Sun 19 Apr 2026 00:22:17 +0000
Manifest this update: Sun 19 Apr 2026 00:17:17 +0000
Manifest next update: Fri 24 Apr 2026 07:05:17 +0000
Files and hashes: 1: 323830333a366464303a3a2f33322d3438203d3e20323734313930.roa (hash: ngugspegyt4RHmTCpqVQx/FbbfeCWLgUEwqECaAoFsw=)
2: 3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl (hash: MR1MLJfNOo5UXsMl0sthxM3OriedHZY9H+gLsHdon7E=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl
rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Apr 2026 07:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:1d:6c:0c:4b:bc:a6:64:a9:f7:a8:70:5c:09:a5:e4:00:9b:96:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3
Validity
Not Before: Apr 19 00:17:17 2026 GMT
Not After : Apr 24 07:05:17 2026 GMT
Subject: CN=D82D95057D6F34C30D3BBA222918AB66EE4FC699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b0:15:ac:cc:bc:66:09:ea:8e:b4:43:3d:5e:
82:a0:e4:ca:a1:78:c6:c0:58:a8:5d:11:19:5b:b4:
94:e4:55:b0:5d:00:a3:be:26:8e:bf:df:47:4f:65:
db:66:af:18:2e:8f:6b:5e:7f:78:6a:27:e6:2a:bc:
09:15:ec:72:e1:f6:f5:bd:de:f4:8f:4f:4c:52:9e:
0f:93:6c:53:c7:3e:43:2a:bf:a5:e8:20:9a:3d:cf:
96:e7:0b:b2:09:42:31:83:a6:ff:77:e0:bd:5f:0a:
79:ea:43:06:f6:2a:1b:6c:32:3c:88:00:35:12:4f:
3b:2e:92:96:d9:b2:0c:45:78:93:f9:fd:28:80:93:
1f:cb:eb:63:f1:59:5f:51:4a:d9:fb:eb:a5:73:97:
2b:f9:92:07:73:62:ee:02:f1:21:b7:4c:ff:d6:85:
e8:6b:56:ca:66:f9:46:99:31:b3:50:84:c6:d3:0e:
1d:2f:80:3e:0e:b9:fa:03:44:49:a7:cb:cf:6c:2d:
17:47:61:09:66:09:aa:29:71:77:a7:37:a6:08:44:
92:31:7f:18:e8:fb:4e:56:47:00:d8:66:84:5e:2b:
25:59:33:51:6c:6a:5e:a4:5d:31:44:da:23:30:5d:
77:a3:15:5a:d3:ba:be:92:db:08:c1:17:56:81:d5:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2D:95:05:7D:6F:34:C3:0D:3B:BA:22:29:18:AB:66:EE:4F:C6:99
X509v3 Authority Key Identifier:
keyid:3A:F4:20:E6:0A:DF:C0:F7:1F:2F:2D:DD:54:FA:7F:41:DF:D2:44:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:17:03:1a:48:cd:55:fc:2d:a9:22:09:e1:54:a8:ab:60:6a:
e8:6c:9b:7d:34:55:4b:21:57:19:62:17:f9:46:49:f8:46:d2:
16:e0:bb:9b:45:fe:0a:55:a9:c4:80:58:ce:b8:c9:81:b0:22:
5c:b5:d5:8f:83:a2:fc:e4:06:04:60:b7:20:90:82:03:f2:31:
d3:93:d3:e4:30:53:62:aa:13:06:d5:54:55:c1:db:0f:4f:3c:
e1:61:4c:59:69:f7:05:63:07:6f:4b:b8:b3:2c:d7:0b:53:32:
22:0b:46:b9:de:1d:6d:c7:e1:26:78:c6:1d:45:5a:8d:34:52:
3b:a3:a4:da:dc:f4:5a:c4:98:99:d9:a6:d1:ea:fd:1a:59:f0:
0d:14:47:a2:09:66:89:03:39:53:7b:4b:43:e2:c9:b2:63:31:
eb:e6:d7:94:02:ac:33:cc:0a:bc:70:3d:2d:fd:95:f0:2a:83:
b4:9b:96:d9:9f:08:13:86:15:c5:e0:ae:64:d3:77:9a:44:b6:
da:60:73:c2:e7:57:f3:b6:74:d5:18:c1:0e:f4:af:89:40:45:
c4:ab:2a:7a:99:fb:fb:0c:53:71:30:5d:f1:0d:db:45:79:25:
ed:29:ca:0d:f2:c0:ae:d5:06:23:de:26:12:e0:7f:78:73:46:
79:9e:54:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:46:16 2026 by rpki-client