
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft
File: 3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft (raw, json)
Hash identifier: f88v7BJyeqz/KMz3CNDXAIVfOaouP2+t1kT+DUeLHsQ=
Subject key identifier: F8:7D:43:5C:8E:2F:B3:00:C6:9B:E6:39:F7:0F:BE:86:66:2B:57:C4
Authority key identifier: 3C:F3:E4:35:C7:AF:14:89:2C:AA:1C:B3:75:14:E4:D1:5F:6D:85:2E
Certificate issuer: /CN=3CF3E435C7AF14892CAA1CB37514E4D15F6D852E
Certificate serial: 6BCF604BC1E7D30DCDB3F2A57A835CACCA00FD96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft
Manifest number: 012B
Signing time: Sun 19 Oct 2025 05:13:56 +0000
Manifest this update: Sun 19 Oct 2025 05:08:56 +0000
Manifest next update: Thu 23 Oct 2025 18:37:56 +0000
Files and hashes: 1: 3139302e31322e3134342e302f32322d3234203d3e20323730313237.roa (hash: i/aGyey4Qp/zhDcDPEyURyQoAJmparKePo+PPRJ2tqU=)
2: 3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl (hash: KreQKauVPPqupmFz6nsTdtGKMWHkcxJ3/VSvkoi6QXA=)
3: 323830313a63343a32613a3a2f34382d3438203d3e20323730313237.roa (hash: zz+ykG6PTIUfeyVW8QkHjl9sWUdAPa6Jxjy6RpuzCSA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl
rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 23 Oct 2025 18:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:cf:60:4b:c1:e7:d3:0d:cd:b3:f2:a5:7a:83:5c:ac:ca:00:fd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CF3E435C7AF14892CAA1CB37514E4D15F6D852E
Validity
Not Before: Oct 19 05:08:56 2025 GMT
Not After : Oct 23 18:37:56 2025 GMT
Subject: CN=F87D435C8E2FB300C69BE639F70FBE86662B57C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:b7:ea:22:a1:ac:e2:3a:79:3f:66:46:f5:
2b:26:6a:84:0e:84:93:fd:5c:0d:95:e6:05:db:6d:
90:6e:25:f6:2a:45:96:75:8c:de:c3:0e:e3:15:2c:
aa:88:14:bb:a5:62:a8:c3:51:77:61:a4:c1:50:49:
2b:cf:3c:76:6d:28:a5:17:8b:a5:52:41:ce:64:74:
d7:f9:6e:5a:0e:1e:30:e7:d3:f1:09:ca:51:93:f0:
28:90:50:20:d1:1e:06:ba:19:13:34:56:00:f7:99:
26:8c:e4:31:d5:1b:6f:76:b6:f9:03:bb:a1:97:7d:
df:d1:89:a6:0a:68:c4:3b:fb:c2:e9:07:d4:38:62:
a1:d5:9e:07:3a:41:6e:9b:e1:0b:ba:1f:eb:d1:c7:
15:7a:58:1b:cf:6d:93:51:47:f6:2b:44:aa:56:06:
bb:b7:3f:49:8b:26:91:9a:9a:50:38:61:2c:e7:8a:
67:b6:ac:a0:a1:c6:92:6e:f4:eb:c4:80:4b:93:db:
eb:c7:30:8f:3f:fc:63:f7:bd:42:f9:bc:18:3a:7c:
84:ca:a0:10:6f:6b:8e:08:e0:1f:df:bf:65:e2:29:
d6:30:ce:ab:f6:ca:a4:4e:f1:eb:aa:45:c6:c6:27:
a9:e1:70:c5:7f:dd:e4:da:78:72:d1:e5:90:50:2c:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7D:43:5C:8E:2F:B3:00:C6:9B:E6:39:F7:0F:BE:86:66:2B:57:C4
X509v3 Authority Key Identifier:
keyid:3C:F3:E4:35:C7:AF:14:89:2C:AA:1C:B3:75:14:E4:D1:5F:6D:85:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a6:10:d5:8f:1d:49:4a:7f:8b:0c:27:58:9a:4f:66:62:f8:
8e:91:52:98:7c:03:46:72:60:8a:24:d6:f9:8c:2a:92:61:04:
e7:c8:41:aa:18:e6:17:be:2e:cb:30:d2:1c:63:ed:46:2e:a0:
4a:3f:f9:e6:5e:4d:35:3d:4f:de:fb:0d:cf:f9:85:54:ef:f9:
e7:ca:58:bb:50:b1:49:f2:86:bd:dd:46:a9:c2:a0:31:e6:26:
99:9b:41:ff:11:e1:e0:07:b2:66:1e:03:b4:74:15:a8:3e:02:
e2:9f:c9:fe:8d:ad:2f:b8:cb:79:81:fe:20:69:00:50:4e:6d:
f9:a3:a5:be:05:18:ca:ae:13:8f:07:53:2e:ac:1c:84:f8:a0:
b1:02:41:c7:ed:b1:da:f7:d6:0a:fc:86:b5:1c:5f:fe:67:4b:
f8:cf:04:f1:a4:c8:d1:2e:ea:28:ff:0c:60:03:ca:25:87:88:
83:1a:84:77:d9:ba:6d:87:67:4d:2b:4e:e2:ee:3f:f7:f9:cb:
df:5e:7d:f9:7d:cd:81:9b:b1:59:e0:c7:f8:06:82:e7:5f:43:
78:a6:4a:64:9b:de:f5:bb:ff:05:e5:c1:38:ce:f5:4e:80:50:
2a:c2:0d:2d:27:f8:74:e2:ad:26:9d:0c:0a:03:65:95:a7:ea:
63:f0:03:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:25:41 2025 by rpki-client