
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft
File: 3A400B3A5D53E4EA3825ED69A583478D86023E84.mft (raw, json)
Hash identifier: s6bmf1pr6krrjQK2wopIRnlxsRAVSeSrVm14050oAsU=
Subject key identifier: 3D:8F:E9:E6:4D:A5:B3:2D:0F:7E:CB:4D:61:77:BD:AA:8F:5E:CD:51
Authority key identifier: 3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84
Certificate issuer: /CN=3A400B3A5D53E4EA3825ED69A583478D86023E84
Certificate serial: 216E2BE7191A202AAD6531B643259E60D1D08A8A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft
Manifest number: 01D1
Signing time: Tue 27 Oct 2026 23:09:38 +0000
Manifest this update: Tue 27 Oct 2026 23:04:38 +0000
Manifest next update: Mon 02 Nov 2026 02:32:38 +0000
Files and hashes: 1: 34352e3233302e37322e302f32322d3234203d3e20323634383537.roa (hash: wRoqiNN28A8hg+UIuArGvM3/i9EKv93r51C86mo0AaA=)
2: 3A400B3A5D53E4EA3825ED69A583478D86023E84.crl (hash: 5+xQetD0lw/j5zICo2IlvRIhABLKN6C8hNtesR0mefk=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.crl
rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 15:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6e:2b:e7:19:1a:20:2a:ad:65:31:b6:43:25:9e:60:d1:d0:8a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A400B3A5D53E4EA3825ED69A583478D86023E84
Validity
Not Before: Oct 27 23:04:38 2026 GMT
Not After : Nov 2 02:32:38 2026 GMT
Subject: CN=3D8FE9E64DA5B32D0F7ECB4D6177BDAA8F5ECD51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:97:46:45:01:fa:16:1b:b9:9b:cd:df:1d:
fb:85:92:35:9e:cc:72:4b:00:f7:b8:03:17:1d:98:
e9:ed:a0:c0:66:7c:eb:a0:7a:43:0b:49:d3:06:99:
ad:91:8e:09:cf:f0:98:15:52:04:2e:c0:cc:a4:46:
6d:83:d1:cd:7c:2f:db:37:61:78:0f:e6:f5:9a:4b:
ac:10:d0:f6:08:9b:af:12:e7:af:ac:82:a5:15:ce:
df:3d:b8:e8:23:35:4b:c6:c0:04:a1:f9:97:0e:1e:
b7:b3:0c:78:04:a1:07:d1:95:6f:00:8f:15:e6:05:
c4:0a:c5:e2:df:d9:6a:5a:69:52:cc:e9:b6:7e:ed:
4e:ff:e0:3f:03:e8:3d:a7:be:01:9f:81:50:29:42:
d9:f9:81:63:4b:25:7b:98:e6:24:f6:a2:ae:48:dd:
2a:34:d6:cc:06:53:cf:89:7c:58:df:c0:7a:6c:f5:
6f:fd:77:7f:26:ec:d3:3c:b2:5e:2d:e6:1f:55:07:
7f:8a:3b:33:32:3d:4f:b8:1a:c4:58:6d:ea:e5:b0:
0e:d4:84:b9:70:a1:95:b3:e4:83:4e:73:78:90:52:
ea:9d:56:40:b4:0c:89:55:16:46:8d:62:4c:9f:0f:
38:2c:91:9d:23:eb:82:93:b9:af:13:8b:3a:30:3c:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:E9:E6:4D:A5:B3:2D:0F:7E:CB:4D:61:77:BD:AA:8F:5E:CD:51
X509v3 Authority Key Identifier:
keyid:3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:aa:d3:79:a1:38:38:1a:fc:21:9a:5c:b5:41:15:0b:0a:65:
c1:39:95:c3:ad:78:84:f6:40:5f:61:0a:2d:57:c1:1b:4c:48:
17:11:a8:8c:79:e5:5a:30:5f:e1:fc:ae:c4:71:43:5d:11:8e:
07:b1:a9:14:00:bb:38:92:60:ff:0a:eb:76:15:b3:96:b7:59:
ac:b4:5c:ad:35:fa:01:69:01:7e:0b:4f:8c:16:97:0c:81:d9:
a2:a4:a6:1a:6c:dd:46:1c:ee:0b:80:d9:82:3f:b1:77:f3:75:
56:39:51:bc:f0:35:33:9e:07:e5:79:87:f5:ae:71:f3:c3:70:
3f:96:89:bb:6b:b2:ea:c2:6a:e5:28:4c:55:62:bd:72:8e:3e:
7f:1c:66:62:0a:0f:81:45:91:85:24:8d:36:e3:35:cc:ca:96:
7c:ad:4e:93:58:b2:89:c5:fe:ad:66:70:8a:01:4a:0d:4e:b2:
b2:81:04:2a:d6:a8:76:94:f7:ee:f2:3d:ec:bd:0b:da:c8:7d:
ef:62:00:0b:e6:b4:73:f0:7b:f8:37:4b:b0:cb:de:38:b0:0c:
c1:ff:b3:6d:49:42:d0:d1:3c:e6:a5:bb:b2:d2:bb:28:05:2c:
0e:67:3f:bc:63:30:cd:dc:69:17:30:17:f1:88:12:63:ab:59:
49:46:56:aa
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIW4r5xkaICqtZTG2QyWeYNHQioowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E0MDBCM0E1RDUzRTRFQTM4MjVFRDY5QTU4MzQ3OEQ4
NjAyM0U4NDAeFw0yNjEwMjcyMzA0MzhaFw0yNjExMDIwMjMyMzhaMDMxMTAvBgNV
BAMTKDNEOEZFOUU2NERBNUIzMkQwRjdFQ0I0RDYxNzdCREFBOEY1RUNENTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrN5dGRQH6Fhu5m83fHfuFkjWe
zHJLAPe4AxcdmOntoMBmfOugekMLSdMGma2RjgnP8JgVUgQuwMykRm2D0c18L9s3
YXgP5vWaS6wQ0PYIm68S56+sgqUVzt89uOgjNUvGwASh+ZcOHrezDHgEoQfRlW8A
jxXmBcQKxeLf2WpaaVLM6bZ+7U7/4D8D6D2nvgGfgVApQtn5gWNLJXuY5iT2oq5I
3So01swGU8+JfFjfwHps9W/9d38m7NM8sl4t5h9VB3+KOzMyPU+4GsRYberlsA7U
hLlwoZWz5INOc3iQUuqdVkC0DIlVFkaNYkyfDzgskZ0j64KTua8TizowPCb1AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUPY/p5k2lsy0PfstNYXe9qo9ezVEwHwYDVR0j
BBgwFoAUOkALOl1T5Oo4Je1ppYNHjYYCPoQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzQ5RTE0RDNDMDRDMEQ4RDI1MkQwMEY0RUQ3RjNCNEI5
N0RFQzlGRkQwMDgwRjM0QTZBRTJFRjM2MERFRjI5LzAvM0E0MDBCM0E1RDUzRTRF
QTM4MjVFRDY5QTU4MzQ3OEQ4NjAyM0U4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTQwMEIzQTVENTNFNEVBMzgy
NUVENjlBNTgzNDc4RDg2MDIzRTg0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUM0OUUxNEQzQzA0QzBEOEQyNTJEMDBGNEVEN0YzQjRCOTdERUM5RkZE
MDA4MEYzNEE2QUUyRUYzNjBERUYyOS8wLzNBNDAwQjNBNUQ1M0U0RUEzODI1RUQ2
OUE1ODM0NzhEODYwMjNFODQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7qtN5oTg4Gvwhmly1QRULCmXB
OZXDrXiE9kBfYQotV8EbTEgXEaiMeeVaMF/h/K7EcUNdEY4HsakUALs4kmD/Cut2
FbOWt1mstFytNfoBaQF+C0+MFpcMgdmipKYabN1GHO4LgNmCP7F383VWOVG88DUz
ngfleYf1rnHzw3A/lom7a7LqwmrlKExVYr1yjj5/HGZiCg+BRZGFJI024zXMypZ8
rU6TWLKJxf6tZnCKAUoNTrKygQQq1qh2lPfu8j3svQvayH3vYgAL5rRz8Hv4N0uw
y944sAzB/7NtSULQ0Tzmpbuy0rsoBSwOZz+8YzDN3GkXMBfxiBJjq1lJRlaq
-----END CERTIFICATE-----
Generated at Wed Oct 28 21:32:07 2026 by rpki-client