
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft
File: 3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft (raw, json)
Hash identifier: Z+HVEMjFNTkFnAKDh7u5toQeV+cXI/V969oW4u7UwI0=
Subject key identifier: 0F:3A:15:C3:84:8B:F7:4B:B1:C3:F1:25:76:A4:B2:00:07:3E:64:1F
Authority key identifier: 3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92
Certificate issuer: /CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
Certificate serial: 35F59E07742724C04B29EF13D07C2AB827DB981D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft
Manifest number: 0132
Signing time: Fri 31 Oct 2025 07:47:27 +0000
Manifest this update: Fri 31 Oct 2025 07:42:27 +0000
Manifest next update: Thu 06 Nov 2025 03:03:27 +0000
Files and hashes: 1: 323830333a363239303a3a2f33322d3438203d3e20323732383539.roa (hash: klNw1nZqutim71aOsjj3ACTiBo4bV6Nn0Rj4yTdFrV0=)
2: 323830333a363239303a3a2f33322d3438203d3e203532343638.roa (hash: NyQpJ6JuIl0kmA6+iXTMZlYH09vbNzRGL+GZD/knMCs=)
3: 3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl (hash: CtFrowh3RSoyDP2xp4i+p6nTFb8mk0xXincgT5cHKn8=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl
rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 03:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f5:9e:07:74:27:24:c0:4b:29:ef:13:d0:7c:2a:b8:27:db:98:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
Validity
Not Before: Oct 31 07:42:27 2025 GMT
Not After : Nov 6 03:03:27 2025 GMT
Subject: CN=0F3A15C3848BF74BB1C3F12576A4B200073E641F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:40:ed:36:da:be:f6:ab:05:57:df:2d:22:
d3:93:90:99:46:57:8a:e1:83:d6:fd:6f:14:83:cf:
df:2a:1d:58:89:57:a3:03:e5:bf:d9:37:b4:9c:ed:
e3:48:69:dd:c9:63:0b:1b:2e:6f:47:1f:d0:af:e2:
f0:22:4e:db:14:96:e7:64:67:b6:ed:85:38:57:f9:
a9:e0:57:f1:93:c0:e3:01:be:2d:95:83:09:90:7e:
ed:9d:cd:2f:71:69:f3:be:e6:46:c5:92:24:04:42:
30:61:bf:2c:82:c6:27:ec:d6:b1:5d:f4:31:10:9f:
27:2e:20:0b:a9:dd:e2:e8:58:22:dc:66:dd:4d:ef:
87:52:13:c5:ec:78:f9:7a:ff:34:25:09:94:6c:11:
70:48:4e:a6:de:e0:48:8b:f8:15:aa:44:51:e7:f9:
ff:79:b7:27:9e:c8:92:94:2c:3b:5e:3d:13:23:eb:
be:3d:0a:f7:3f:96:b9:93:e9:78:c2:36:3d:45:1a:
06:7e:60:99:9b:e1:df:58:d1:17:2e:9a:e3:cb:26:
a3:f6:19:d0:08:81:4a:2d:ee:80:b8:37:56:9b:d7:
f2:e8:34:5a:35:2e:ea:a9:66:f0:de:d9:60:28:78:
38:a3:bd:67:57:4c:b4:b5:68:75:eb:8f:8f:da:3e:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3A:15:C3:84:8B:F7:4B:B1:C3:F1:25:76:A4:B2:00:07:3E:64:1F
X509v3 Authority Key Identifier:
keyid:3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e9:b6:d2:a7:00:78:aa:31:06:e8:c9:8e:28:c7:8a:e7:71:
3b:e7:97:f6:17:9c:6b:af:d6:29:81:79:06:5b:37:27:1f:40:
25:9a:05:af:b7:fb:a9:89:ee:17:76:a3:ee:c4:80:5c:17:e0:
08:75:34:6d:ab:5a:21:18:f2:fc:c1:96:e2:5f:1c:a1:88:cf:
ae:8a:8a:2d:d5:24:d1:40:2d:42:74:53:ad:96:1a:33:88:73:
8b:5a:1c:ca:44:77:b3:b9:be:90:47:c6:20:1d:ea:db:e0:63:
e6:04:59:6f:bd:93:a1:8f:f3:c1:61:e8:9c:02:b9:2b:a1:15:
aa:30:da:f9:92:c7:55:39:6e:41:3f:1a:60:90:27:9c:bf:f2:
7f:1e:a1:db:af:8c:db:84:bc:03:49:84:dc:16:32:51:98:7a:
58:60:00:08:64:f9:09:8d:49:47:0d:b4:6f:4e:1a:50:89:45:
0d:c1:a3:27:d9:2a:0b:6a:52:14:ac:a7:a5:18:90:51:5d:9d:
84:04:85:18:8a:41:c4:57:9b:72:78:d6:cd:a6:f7:8f:cf:c8:
3d:30:0c:20:36:7d:58:ea:c4:e3:38:cc:e9:21:90:5c:0d:c9:
85:7c:e9:03:94:d5:e8:e1:cb:c3:b1:64:41:7f:b6:dc:d4:17:
0b:0a:d2:56
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUNfWeB3QnJMBLKe8T0HwquCfbmB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y0MEQ5NkE0RkJCQkVGNThCREMxQThBMDJBQjBEODlC
MkIxNjI5MjAeFw0yNTEwMzEwNzQyMjdaFw0yNTExMDYwMzAzMjdaMDMxMTAvBgNV
BAMTKDBGM0ExNUMzODQ4QkY3NEJCMUMzRjEyNTc2QTRCMjAwMDczRTY0MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55EDtNtq+9qsFV98tItOTkJlG
V4rhg9b9bxSDz98qHViJV6MD5b/ZN7Sc7eNIad3JYwsbLm9HH9Cv4vAiTtsUludk
Z7bthThX+angV/GTwOMBvi2VgwmQfu2dzS9xafO+5kbFkiQEQjBhvyyCxifs1rFd
9DEQnycuIAup3eLoWCLcZt1N74dSE8XsePl6/zQlCZRsEXBITqbe4EiL+BWqRFHn
+f95tyeeyJKULDtePRMj6749Cvc/lrmT6XjCNj1FGgZ+YJmb4d9Y0RcumuPLJqP2
GdAIgUot7oC4N1ab1/LoNFo1LuqpZvDe2WAoeDijvWdXTLS1aHXrj4/aPoLVAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUDzoVw4SL90uxw/EldqSyAAc+ZB8wHwYDVR0j
BBgwFoAUP0DZak+7vvWL3BqKAqsNibKxYpIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjFBOTAzNTQ1MjQ4ODU1RkYyMTg1RjI0QTMxRjFGQjlG
RUIyNUFGRUUzQURCMENCODJEQzk3NTg0NkU4Nzg1LzAvM0Y0MEQ5NkE0RkJCQkVG
NThCREMxQThBMDJBQjBEODlCMkIxNjI5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjQwRDk2QTRGQkJCRUY1OEJE
QzFBOEEwMkFCMEQ4OUIyQjE2MjkyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YxQTkwMzU0NTI0ODg1NUZGMjE4NUYyNEEzMUYxRkI5RkVCMjVBRkVF
M0FEQjBDQjgyREM5NzU4NDZFODc4NS8wLzNGNDBEOTZBNEZCQkJFRjU4QkRDMUE4
QTAyQUIwRDg5QjJCMTYyOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAn6bbSpwB4qjEG6MmOKMeK53E7
55f2F5xrr9YpgXkGWzcnH0AlmgWvt/upie4XdqPuxIBcF+AIdTRtq1ohGPL8wZbi
XxyhiM+uioot1STRQC1CdFOtlhoziHOLWhzKRHezub6QR8YgHerb4GPmBFlvvZOh
j/PBYeicArkroRWqMNr5ksdVOW5BPxpgkCecv/J/HqHbr4zbhLwDSYTcFjJRmHpY
YAAIZPkJjUlHDbRvThpQiUUNwaMn2SoLalIUrKelGJBRXZ2EBIUYikHEV5tyeNbN
pvePz8g9MAwgNn1Y6sTjOMzpIZBcDcmFfOkDlNXo4cvDsWRBf7bc1BcLCtJW
-----END CERTIFICATE-----
Generated at Sun Nov 2 10:48:07 2025 by rpki-client