
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
File: 3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft (raw, json)
Hash identifier: qU2i+sycNk3yK5QPBtDlQSo7A/nrsliTf+DIblR4wcE=
Subject key identifier: 41:40:A7:2D:5E:61:60:62:6A:13:F9:BC:B1:99:8C:A4:0C:00:F8:6B
Authority key identifier: 3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB
Certificate issuer: /CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
Certificate serial: 5921D432E2CE50F001590D9674B2ECBCB6D79A08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
Manifest number: 0128
Signing time: Sat 18 Oct 2025 23:35:09 +0000
Manifest this update: Sat 18 Oct 2025 23:30:09 +0000
Manifest next update: Fri 24 Oct 2025 01:31:09 +0000
Files and hashes: 1: 3230302e38392e38302e302f32312d3234203d3e203237393033.roa (hash: 2p9tlY9TQBPixfbryqWYef1hnt2yiFgQ/i1yfF58uAA=)
2: 3133382e3235352e3135322e302f32322d3234203d3e203237393033.roa (hash: tcSyKroDDkFEDnZNkwSUFSepDYo2/AFFy5+Zf8V6ViQ=)
3: 323830333a666134303a3a2f33322d3438203d3e203237393033.roa (hash: qMiiMHDHvBkGztXBjgcNPEdXbyD7Ihf7Jb/EBXOOxoA=)
4: 3137302e302e3137362e302f32322d3234203d3e203237393033.roa (hash: KuS4uocwq7CC1bzagqCum2blivp4+7bOMYfskgg5uno=)
5: 3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl (hash: xyWeI7DYtSwlFQGo7mTbd0Tp9C1M2JvAUgdld/XaV68=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl
rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Oct 2025 00:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:21:d4:32:e2:ce:50:f0:01:59:0d:96:74:b2:ec:bc:b6:d7:9a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
Validity
Not Before: Oct 18 23:30:09 2025 GMT
Not After : Oct 24 01:31:09 2025 GMT
Subject: CN=4140A72D5E6160626A13F9BCB1998CA40C00F86B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:41:33:d0:85:b3:14:b2:59:ec:f2:93:af:
08:f9:df:2b:c6:d0:5a:4a:43:41:f9:af:0d:85:78:
1e:63:38:5d:9e:3c:7b:47:ed:13:3f:b6:6e:0f:53:
d5:c0:65:b1:c0:9f:15:41:15:83:2c:9b:0d:14:5a:
2f:a6:4d:5b:fb:1d:7c:8a:77:a9:45:cd:22:10:68:
1c:4b:65:ec:dc:00:9f:c7:5c:e8:75:72:45:bd:a2:
2c:8d:3e:95:09:84:d0:9e:90:9e:99:b8:47:f2:b0:
19:a4:c5:03:11:bd:7d:95:41:9e:24:6c:fd:2d:2e:
d3:b5:74:ed:ed:a9:6b:1e:a8:91:e4:86:76:42:07:
8e:e0:96:18:d1:30:62:18:60:50:bc:b0:2f:09:9a:
c8:37:8f:00:51:7b:be:8f:be:2c:36:d9:8b:f9:2f:
fb:07:73:a3:cd:5c:aa:86:db:44:7a:23:92:74:91:
ba:e3:d3:46:16:7e:1d:a0:a8:57:97:04:22:aa:a2:
37:10:7a:45:f3:77:e6:99:7d:88:e9:3a:ae:ee:52:
4c:1b:1c:25:7c:87:fa:d5:df:c5:56:d9:f5:bd:a7:
b5:90:37:8e:de:0e:ce:ba:a7:0a:73:57:3d:88:76:
a7:03:91:a1:2b:23:86:3e:28:10:15:58:8a:b7:9f:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:40:A7:2D:5E:61:60:62:6A:13:F9:BC:B1:99:8C:A4:0C:00:F8:6B
X509v3 Authority Key Identifier:
keyid:3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:84:17:0f:67:fc:5d:db:95:7e:0f:94:ea:4f:5b:27:72:43:
d0:83:44:1f:98:59:90:d3:1c:3e:30:ec:94:b4:a0:6a:3a:25:
66:f4:e3:58:db:31:c4:72:4f:34:8d:b4:98:12:7b:61:ce:27:
aa:b6:54:4f:01:95:95:27:9c:41:9f:bf:3a:30:48:61:5f:17:
f7:34:d8:39:ec:1b:d0:52:25:df:6f:75:4b:4c:57:b5:b9:84:
f4:b7:79:b5:ed:1d:17:df:60:40:76:8d:4d:8d:be:83:9d:e8:
cb:03:ea:56:55:94:52:0a:cd:f6:2f:f8:21:c1:f6:0c:d9:33:
1f:38:1a:37:d8:94:96:49:f7:4f:83:b6:44:d5:d6:13:94:d7:
7b:8b:d7:2f:c1:8c:83:12:58:01:82:ed:82:7a:8c:89:51:cf:
1e:fb:5f:f1:30:6d:54:36:74:b6:b4:04:d3:39:d5:a2:2e:67:
6c:fe:10:0a:86:88:44:62:20:cc:05:eb:13:78:ac:81:28:99:
d1:11:c8:a8:80:b6:86:e0:42:48:03:2b:a1:d2:61:5b:23:4b:
70:2a:01:01:39:89:07:a7:5c:eb:aa:44:6d:92:88:0d:27:1d:
50:c6:c9:b7:d6:32:fc:26:8f:22:17:ec:3c:b7:46:8a:d1:d3:
06:2a:9a:7c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUWSHUMuLOUPABWQ2WdLLsvLbXmggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E4MjUwRjhCNDYxN0I3REY5N0Q1RjQyMEQzMkY5REZE
REVFODJFQjAeFw0yNTEwMTgyMzMwMDlaFw0yNTEwMjQwMTMxMDlaMDMxMTAvBgNV
BAMTKDQxNDBBNzJENUU2MTYwNjI2QTEzRjlCQ0IxOTk4Q0E0MEMwMEY4NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5gUEz0IWzFLJZ7PKTrwj53yvG
0FpKQ0H5rw2FeB5jOF2ePHtH7RM/tm4PU9XAZbHAnxVBFYMsmw0UWi+mTVv7HXyK
d6lFzSIQaBxLZezcAJ/HXOh1ckW9oiyNPpUJhNCekJ6ZuEfysBmkxQMRvX2VQZ4k
bP0tLtO1dO3tqWseqJHkhnZCB47glhjRMGIYYFC8sC8Jmsg3jwBRe76Pviw22Yv5
L/sHc6PNXKqG20R6I5J0kbrj00YWfh2gqFeXBCKqojcQekXzd+aZfYjpOq7uUkwb
HCV8h/rV38VW2fW9p7WQN47eDs66pwpzVz2IdqcDkaErI4Y+KBAVWIq3n0DdAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUQUCnLV5hYGJqE/m8sZmMpAwA+GswHwYDVR0j
BBgwFoAUOoJQ+LRhe335fV9CDTL5393uguswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMzA1QjUwQzNDNDVGNTlCRDJCRDYzNUE3QTc3M0JGNzcw
QTFGQTdGM0RCRjVDQzA5MDM4OTIyODVCQzJBRDFDLzAvM0E4MjUwRjhCNDYxN0I3
REY5N0Q1RjQyMEQzMkY5REZEREVFODJFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTgyNTBGOEI0NjE3QjdERjk3
RDVGNDIwRDMyRjlERkRERUU4MkVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjMwNUI1MEMzQzQ1RjU5QkQyQkQ2MzVBN0E3NzNCRjc3MEExRkE3RjNE
QkY1Q0MwOTAzODkyMjg1QkMyQUQxQy8wLzNBODI1MEY4QjQ2MTdCN0RGOTdENUY0
MjBEMzJGOURGRERFRTgyRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEhBcPZ/xd25V+D5TqT1snckPQ
g0QfmFmQ0xw+MOyUtKBqOiVm9ONY2zHEck80jbSYEnthzieqtlRPAZWVJ5xBn786
MEhhXxf3NNg57BvQUiXfb3VLTFe1uYT0t3m17R0X32BAdo1Njb6DnejLA+pWVZRS
Cs32L/ghwfYM2TMfOBo32JSWSfdPg7ZE1dYTlNd7i9cvwYyDElgBgu2CeoyJUc8e
+1/xMG1UNnS2tATTOdWiLmds/hAKhohEYiDMBesTeKyBKJnREciogLaG4EJIAyuh
0mFbI0twKgEBOYkHp1zrqkRtkogNJx1Qxsm31jL8Jo8iF+w8t0aK0dMGKpp8
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:37 2025 by rpki-client