
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
File:                     3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft (raw, json)
Hash identifier:          pjwvNQCXLJT7QD0BMU/PKIHGQsRgrX10X3iOFIXv464=
Subject key identifier:   86:23:23:A1:BF:B7:0C:17:75:12:34:28:56:CA:E1:AF:5C:42:57:04
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Certificate issuer:       /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial:       56E29F6F86D9359E1F91ACAFD88A75CF48268554
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
Manifest number:          0131
Signing time:             Sat 01 Nov 2025 14:14:20 +0000
Manifest this update:     Sat 01 Nov 2025 14:09:20 +0000
Manifest next update:     Fri 07 Nov 2025 12:38:20 +0000
Files and hashes:         1: 323830363a3364663a3a2f33352d3335203d3e20323730313433.roa (hash: 6+QXkWdPnW7jJcNVae91CmYjD0yqGCxsu41SOa/Oj00=)
                          2: 3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl (hash: aAUtu50R1mzfiRE96wMcjQ8ypucNfzoADRLKvzNCYaM=)
                          3: 323830363a3364663a653030303a3a2f33352d3335203d3e20323730313433.roa (hash: b6Nc7N/v+dveVeaf5KHIDGy9unSrq7XFNcTqJen9lrQ=)
                          4: 34352e372e36352e302f32342d3234203d3e20323730313433.roa (hash: YgyD+51iPdOdBLW56X7FuGuR1CAulv75IROHXnfLLtQ=)
                          5: 323830363a3364663a633030303a3a2f33352d3335203d3e20323730313433.roa (hash: +Aes5COIsGDZcth6BwXOBAfpUzhpU+smQe53lEJin0k=)
                          6: 34352e372e36342e302f32332d3233203d3e20323730313433.roa (hash: gObaagDJFTnjO+OvDFCLU9PkIvAuu9qweR9d4BTWFy4=)
                          7: 34352e372e36342e302f32342d3234203d3e20323730313433.roa (hash: WZQOEsY3i8Wa4efV8lplKlgZv+Xy9dkioLdomBF8pl4=)
                          8: 323830363a3364663a3a2f33322d3334203d3e20323730313433.roa (hash: k2pvi2Kl8chbqrYRdbov9WZeIjKclLveL1nF826mLBw=)
                          9: 34352e372e36372e302f32342d3234203d3e20323730313433.roa (hash: P6vusT39PTRh/tM4P42ZZ/SwyQPO1gCmMiJdQKJ1uOY=)
                          10: 323830363a3364663a323030303a3a2f33352d3335203d3e20323730313433.roa (hash: VlGhYcvnQAKFzCb9awkWyulraYhMTCuu39QxF0Tx13k=)
                          11: 34352e372e36342e302f32322d3234203d3e20323730313433.roa (hash: YY4/mdgzjUgnLmbVDKOy2IEpDvfxlpwOT9Cp4bsjkBA=)
                          12: 323830363a3364663a363030303a3a2f33352d3335203d3e20323730313433.roa (hash: dbfl9rdBI6rziLqvDgz7X83DCSJci5P2d+zQhl0gCS4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 12:38:20 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e2:9f:6f:86:d9:35:9e:1f:91:ac:af:d8:8a:75:cf:48:26:85:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
        Validity
            Not Before: Nov  1 14:09:20 2025 GMT
            Not After : Nov  7 12:38:20 2025 GMT
        Subject: CN=862323A1BFB70C177512342856CAE1AF5C425704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3d:57:cd:8d:53:7d:03:0e:fc:20:cf:ea:eb:
                    a0:49:36:b2:39:f4:24:59:ad:6a:a9:20:92:24:fe:
                    2e:83:42:b4:6e:e5:14:2e:01:17:57:65:30:12:d7:
                    0a:78:57:45:73:10:4c:4b:c1:80:78:d5:c3:a8:ef:
                    26:80:62:20:43:1a:0c:3d:23:4f:8e:e2:d9:9a:da:
                    18:35:c1:8d:65:06:f2:e2:3c:ad:10:48:22:7e:84:
                    c5:e9:6d:52:9b:66:32:a7:e0:08:aa:8d:c0:24:29:
                    52:10:0f:5a:8d:f0:2c:64:de:df:ce:56:d2:5f:34:
                    e1:7e:76:e8:bb:42:80:f3:06:0e:2c:ea:a7:ed:e8:
                    7a:61:b9:59:83:2a:65:15:46:65:1b:41:62:3f:f7:
                    91:f0:91:59:ce:ea:02:e8:ee:8f:57:52:45:9b:42:
                    2f:e6:bd:c0:32:fe:58:dd:36:05:3a:70:30:b3:c1:
                    bf:9a:25:c2:62:30:92:47:61:f2:b4:a4:0d:79:45:
                    5e:4e:83:9b:f4:b7:e0:51:23:fa:78:79:74:53:7b:
                    87:d1:0b:36:e2:4b:3c:4e:43:78:cb:99:30:98:5b:
                    bf:eb:de:e7:1d:6f:ff:0e:40:2a:9a:a5:b4:89:0a:
                    29:79:89:0d:c3:a8:02:40:e0:3d:6e:fb:bd:1e:d1:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:23:23:A1:BF:B7:0C:17:75:12:34:28:56:CA:E1:AF:5C:42:57:04
            X509v3 Authority Key Identifier:
                keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         33:a6:01:d1:ff:da:33:91:84:02:5a:65:dd:7d:ca:28:41:81:
         c4:10:04:72:3a:0b:56:8a:41:a3:2e:19:28:a0:3b:1e:fe:2e:
         b3:fb:25:6e:a8:39:d8:f5:87:30:f3:3b:2c:b9:08:63:57:02:
         ef:bd:3c:29:0b:0e:10:ba:64:e2:16:40:1e:94:b0:27:12:9d:
         17:34:85:4c:a4:99:6f:6a:91:68:3c:8a:ae:ea:98:a6:ac:dd:
         50:ac:b8:4f:90:4a:94:88:8b:42:55:3e:80:be:e5:32:c9:51:
         1e:aa:37:d5:8d:2b:03:2e:e5:a9:3c:3d:87:ad:e8:85:5a:d5:
         23:97:8d:15:a0:12:68:41:cb:8d:20:d9:24:55:47:9b:87:c0:
         7b:dd:78:73:0e:e9:cb:7a:03:ad:30:9a:4d:67:2d:00:e2:5d:
         b8:e6:d3:2b:57:2e:c5:83:48:19:24:25:56:8e:3a:c6:11:5d:
         d2:26:bb:81:e7:05:88:e6:e4:e9:7f:87:ab:37:c7:40:69:cd:
         11:1b:aa:fe:39:fc:e6:61:4a:1a:7b:6d:01:be:99:54:0c:ae:
         4c:7d:99:2f:db:1a:0f:12:95:af:2c:ce:9a:a0:ca:42:96:99:
         0f:61:f5:9f:6b:7f:fd:e8:d7:18:34:ff:3b:79:6a:cb:0e:94:
         f4:41:73:74
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUVuKfb4bZNZ4fkayv2Ip1z0gmhVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3RkJBM0UxREY4QUQ2OTFEQjc1NTM3MkQ3MzFERkFC
NkUwQ0Q4QzAeFw0yNTExMDExNDA5MjBaFw0yNTExMDcxMjM4MjBaMDMxMTAvBgNV
BAMTKDg2MjMyM0ExQkZCNzBDMTc3NTEyMzQyODU2Q0FFMUFGNUM0MjU3MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuPVfNjVN9Aw78IM/q66BJNrI5
9CRZrWqpIJIk/i6DQrRu5RQuARdXZTAS1wp4V0VzEExLwYB41cOo7yaAYiBDGgw9
I0+O4tma2hg1wY1lBvLiPK0QSCJ+hMXpbVKbZjKn4AiqjcAkKVIQD1qN8Cxk3t/O
VtJfNOF+dui7QoDzBg4s6qft6HphuVmDKmUVRmUbQWI/95HwkVnO6gLo7o9XUkWb
Qi/mvcAy/ljdNgU6cDCzwb+aJcJiMJJHYfK0pA15RV5Og5v0t+BRI/p4eXRTe4fR
CzbiSzxOQ3jLmTCYW7/r3ucdb/8OQCqapbSJCil5iQ3DqAJA4D1u+70e0ULDAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUhiMjob+3DBd1EjQoVsrhr1xCVwQwHwYDVR0j
BBgwFoAUO3+6Ph34rWkdt1U3LXMd+rbgzYwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkM5QzE0MjI3NUQ2RTExQTBFRDlCNEZBQUREQkI4QzJB
N0QzRjFDNDZENzUzMjBBNzI1MUM3MTk5NjE4N0YxLzAvM0I3RkJBM0UxREY4QUQ2
OTFEQjc1NTM3MkQ3MzFERkFCNkUwQ0Q4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQjdGQkEzRTFERjhBRDY5MURC
NzU1MzcyRDczMURGQUI2RTBDRDhDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZDOUMxNDIyNzVENkUxMUEwRUQ5QjRGQUFEREJCOEMyQTdEM0YxQzQ2
RDc1MzIwQTcyNTFDNzE5OTYxODdGMS8wLzNCN0ZCQTNFMURGOEFENjkxREI3NTUz
NzJENzMxREZBQjZFMENEOEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzpgHR/9ozkYQCWmXdfcooQYHE
EARyOgtWikGjLhkooDse/i6z+yVuqDnY9Ycw8zssuQhjVwLvvTwpCw4QumTiFkAe
lLAnEp0XNIVMpJlvapFoPIqu6pimrN1QrLhPkEqUiItCVT6AvuUyyVEeqjfVjSsD
LuWpPD2HreiFWtUjl40VoBJoQcuNINkkVUebh8B73XhzDunLegOtMJpNZy0A4l24
5tMrVy7Fg0gZJCVWjjrGEV3SJruB5wWI5uTpf4erN8dAac0RG6r+OfzmYUoae20B
vplUDK5MfZkv2xoPEpWvLM6aoMpClpkPYfWfa3/96NcYNP87eWrLDpT0QXN0
-----END CERTIFICATE-----
Generated at Tue Nov  4 08:48:05 2025 by rpki-client