
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft
File: 3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft (raw, json)
Hash identifier: WjUJ1KSDcQ9eWLDw1KFwC6RLk3OjGU+fhmFodwTYSOg=
Subject key identifier: 43:B2:9F:8B:57:C3:0C:8C:DD:F0:52:6B:EC:E8:10:67:20:CE:31:34
Authority key identifier: 3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC
Certificate issuer: /CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC
Certificate serial: 13BB18A3EAD1DFDE6D3CC37F555A116CC913F770
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft
Manifest number: 0126
Signing time: Mon 11 May 2026 19:03:28 +0000
Manifest this update: Mon 11 May 2026 18:58:28 +0000
Manifest next update: Sat 16 May 2026 15:26:28 +0000
Files and hashes: 1: 34352e3233392e36382e302f32322d3234203d3e203238353339.roa (hash: 8kOSy7psnwS+4E07XuLnZTaVph82N+7l1Tj7KFEaARg=)
2: 3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl (hash: Il4XU8J6sqmJq3b4AlcXnVl0tNu/BRcrVVm6dH3BTwk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl
rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 16 May 2026 15:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:bb:18:a3:ea:d1:df:de:6d:3c:c3:7f:55:5a:11:6c:c9:13:f7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC
Validity
Not Before: May 11 18:58:28 2026 GMT
Not After : May 16 15:26:28 2026 GMT
Subject: CN=43B29F8B57C30C8CDDF0526BECE8106720CE3134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:53:24:d5:8a:d5:dd:fb:ca:cc:e8:ef:33:
5c:17:f2:73:1c:4c:99:ce:ff:a3:2b:a6:d8:b9:3b:
37:8b:dc:92:2f:0e:ac:5c:ee:05:37:d4:91:61:8f:
ae:65:b7:d9:87:87:38:b1:22:9d:42:c5:51:e9:33:
ec:7a:74:ec:21:78:8d:5a:39:14:af:90:b1:15:26:
8f:f6:c1:37:0f:1d:b4:a9:f1:b5:90:d7:4d:9e:db:
b8:c7:86:0e:81:b6:86:c4:6f:27:7d:60:83:f6:b0:
64:c9:4e:ce:79:cc:79:28:d0:d2:8e:c2:bf:a9:59:
44:99:be:96:f3:d9:54:de:77:64:03:13:8c:2d:b2:
95:bf:de:1c:f6:06:26:fb:fa:53:e8:ae:34:71:6b:
55:68:f5:bb:3c:5d:ab:66:66:b9:bb:8c:09:a4:6e:
97:03:f3:02:57:0f:f1:28:44:e4:a5:6a:62:ec:3a:
6b:c5:53:40:0a:e5:4f:e9:64:e3:09:c0:9c:a9:ba:
87:2d:ff:53:ce:51:7e:91:2b:5c:32:0a:ec:d9:92:
52:cc:06:40:a9:1c:c9:6d:bf:2e:dd:de:2c:52:8c:
fe:d8:72:f6:6e:b6:09:65:8a:8b:81:51:d4:02:01:
f6:e7:2a:3a:09:ca:7c:7c:6c:b9:31:1f:d7:cc:73:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B2:9F:8B:57:C3:0C:8C:DD:F0:52:6B:EC:E8:10:67:20:CE:31:34
X509v3 Authority Key Identifier:
keyid:3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7b:9d:04:e4:36:dc:b7:c6:eb:da:dc:fb:7c:23:e9:63:5b:
ba:62:bc:7d:35:f2:79:37:55:82:ed:f1:5f:f7:30:3c:6d:a5:
09:ee:cb:77:2f:3f:56:2e:b1:d1:41:11:58:d2:21:28:98:c0:
fb:42:d7:fe:da:78:c4:a9:19:3e:cf:3a:70:5a:e5:c8:63:0b:
9b:58:61:2e:63:ce:07:b6:74:ef:b3:34:4a:e5:0b:2e:98:de:
ea:0c:fd:5a:b0:65:4f:0f:3e:22:91:60:d0:fe:ea:b3:a1:16:
0f:77:60:22:6f:2b:76:ba:50:2b:ee:26:1b:d9:4d:fc:22:59:
e5:a3:29:df:e9:8d:67:8a:d5:b2:c8:f8:cd:c1:4f:11:2c:f0:
cc:7c:66:36:e6:54:4f:b2:92:dc:f0:a5:4b:8a:f4:df:b1:5d:
4c:64:e6:7e:f9:a6:dd:e4:3a:44:6c:d5:8f:49:7a:64:2b:01:
55:71:12:bb:2a:8c:d2:ee:eb:03:e6:b1:ab:49:61:39:be:71:
60:17:36:19:39:a2:0b:d9:0c:b0:d9:f5:16:8e:b4:88:04:85:
00:5b:bd:b7:85:d5:fb:37:44:25:3a:8b:50:ff:5b:67:ab:27:
8d:87:80:ca:c1:ee:0c:74:75:3d:59:fb:57:36:f2:b9:9d:4f:
6e:37:39:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:32:53 2026 by rpki-client