
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0891AD85E9EE4CF89035CC3733673D79EBC3FB7B954D7192030AF1210B407E/0/3CA12456DD018B126748F8C0546FC19DF9446F65.mft
File: 3CA12456DD018B126748F8C0546FC19DF9446F65.mft (raw, json)
Hash identifier: kCg652LoojfU/0zw33BGFAKCO93rDJuKZJem8mM6+rw=
Subject key identifier: 41:BE:87:DF:D4:47:AD:CD:EF:C7:5E:5A:2A:A3:3F:B2:FE:6F:0B:C7
Authority key identifier: 3C:A1:24:56:DD:01:8B:12:67:48:F8:C0:54:6F:C1:9D:F9:44:6F:65
Certificate issuer: /CN=3CA12456DD018B126748F8C0546FC19DF9446F65
Certificate serial: 3F443AD1C45411A8B2BA7EEBB35A7D29EA650E36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CA12456DD018B126748F8C0546FC19DF9446F65.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0A0891AD85E9EE4CF89035CC3733673D79EBC3FB7B954D7192030AF1210B407E/0/3CA12456DD018B126748F8C0546FC19DF9446F65.mft
Manifest number: 0109
Signing time: Mon 27 Apr 2026 19:30:20 +0000
Manifest this update: Mon 27 Apr 2026 19:25:20 +0000
Manifest next update: Sun 03 May 2026 12:00:20 +0000
Files and hashes: 1: 3CA12456DD018B126748F8C0546FC19DF9446F65.crl (hash: hcrSCsVfEn/91sPVzEbe/rhUS528/qnIw+xTaE/Ln5c=)
2: 323830333a343864303a3a2f33322d3332203d3e20323733393834.roa (hash: sUiq0mJj58RLbPqwnH+nG484E7uOvFQYV+VkllEXtdw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0A0891AD85E9EE4CF89035CC3733673D79EBC3FB7B954D7192030AF1210B407E/0/3CA12456DD018B126748F8C0546FC19DF9446F65.crl
rsync://repository.lacnic.net/rpki/lacnic/0A0891AD85E9EE4CF89035CC3733673D79EBC3FB7B954D7192030AF1210B407E/0/3CA12456DD018B126748F8C0546FC19DF9446F65.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CA12456DD018B126748F8C0546FC19DF9446F65.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 03 May 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:44:3a:d1:c4:54:11:a8:b2:ba:7e:eb:b3:5a:7d:29:ea:65:0e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CA12456DD018B126748F8C0546FC19DF9446F65
Validity
Not Before: Apr 27 19:25:20 2026 GMT
Not After : May 3 12:00:20 2026 GMT
Subject: CN=41BE87DFD447ADCDEFC75E5A2AA33FB2FE6F0BC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0a:8d:61:24:32:a2:98:9a:06:95:e8:5f:6b:
6d:3d:fa:a8:33:b5:91:4c:9c:fb:bd:2b:8d:9c:42:
00:10:05:15:1e:4a:5a:56:83:5b:04:6f:71:62:82:
26:ac:69:34:da:dd:c0:86:4e:dc:6a:cf:df:d2:4a:
75:5e:c5:9a:fd:b3:dd:bb:a9:18:d1:a3:c7:fa:9c:
49:95:3a:40:74:80:b9:7e:85:af:4d:6e:ab:cc:a1:
2d:6d:1e:1f:b6:fc:21:b9:9f:81:f9:a3:c9:39:73:
05:91:c4:45:fa:6e:ff:0a:63:cf:dd:64:b0:12:71:
f3:c5:0f:8c:4e:8d:f1:79:52:f9:09:4d:63:9b:57:
d6:58:bc:8d:cd:6a:44:33:06:a6:32:3f:b1:b7:a1:
c5:74:16:de:fa:70:5f:4b:72:ea:da:ef:40:5e:a8:
e4:ac:9d:83:94:72:03:31:49:1f:05:83:9e:1f:17:
30:d5:c7:e3:8a:4e:5e:15:ec:22:3d:83:77:b2:a5:
81:0c:ea:34:82:1b:48:fb:c1:6c:ba:87:fa:03:8f:
45:0d:6b:19:59:43:58:1d:1e:6f:28:56:99:79:d9:
88:12:19:85:12:08:9a:98:0a:78:f1:73:de:a4:f6:
79:ff:0f:0b:5f:c7:37:35:9e:a0:00:3c:22:8b:85:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BE:87:DF:D4:47:AD:CD:EF:C7:5E:5A:2A:A3:3F:B2:FE:6F:0B:C7
X509v3 Authority Key Identifier:
keyid:3C:A1:24:56:DD:01:8B:12:67:48:F8:C0:54:6F:C1:9D:F9:44:6F:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0A0891AD85E9EE4CF89035CC3733673D79EBC3FB7B954D7192030AF1210B407E/0/3CA12456DD018B126748F8C0546FC19DF9446F65.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CA12456DD018B126748F8C0546FC19DF9446F65.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0891AD85E9EE4CF89035CC3733673D79EBC3FB7B954D7192030AF1210B407E/0/3CA12456DD018B126748F8C0546FC19DF9446F65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:11:b5:39:74:cc:01:27:fb:00:c0:df:44:36:67:16:d3:df:
56:87:01:f8:cf:a4:2e:98:b0:71:04:84:e6:94:7a:5e:c4:72:
28:05:ee:c3:75:46:c2:87:4b:e3:6b:ed:21:fc:65:12:ae:dc:
be:34:7e:55:00:f3:30:5e:68:02:4f:94:23:4f:83:2e:9d:b8:
e3:53:29:b6:f0:5f:2a:0c:06:6d:35:a3:57:c0:19:05:df:f4:
bb:6f:f7:ff:4c:a7:39:46:04:ce:a0:5d:c9:6d:ae:d9:50:2b:
6d:d6:28:45:91:38:80:43:09:e9:02:b4:57:b9:66:13:6c:b8:
63:22:ed:ff:c1:91:3a:03:34:12:6e:71:01:d5:30:eb:6b:a4:
db:21:00:94:aa:2f:23:e3:4c:aa:3e:db:32:5e:28:f7:a0:ef:
97:0b:ec:38:21:76:24:bb:7e:25:26:3e:c7:83:bd:87:dc:e7:
9a:b9:fa:ee:e2:0b:89:17:a9:82:92:e1:8b:0d:ad:15:3d:08:
93:60:c3:53:7f:60:0c:74:1e:b6:46:b8:c1:48:a7:8a:94:60:
1a:07:21:e1:05:49:30:dd:28:a0:09:fe:b6:bb:5b:c5:c3:d2:
7b:55:96:73:41:4c:97:15:3b:2c:76:4f:f2:55:b6:1e:e5:3c:
00:5e:f4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 05:50:19 2026 by rpki-client