
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
File: C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft (raw, json)
Hash identifier: xYCzUZOEftkXMP3bOCbaoLMRF+Xc4ijxFUfvac1rc/4=
Subject key identifier: B1:89:AA:1C:D7:71:EB:EE:92:AC:FE:A6:96:95:B1:73:9A:C3:B4:7F
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Certificate issuer: /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial: 7FA59DA3F6B47915E85D2C082BC77FD3042D09A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
Manifest number: 01B7
Signing time: Sat 01 Aug 2026 14:34:28 +0000
Manifest this update: Sat 01 Aug 2026 14:29:28 +0000
Manifest next update: Thu 06 Aug 2026 03:49:28 +0000
Files and hashes: 1: 34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa (hash: nKWKeqjf327+P/Uzx+eYYEsgGMSAUSbQkFW9YlvKWiA=)
2: 323830333a396632303a3a2f33322d3332203d3e20323636373830.roa (hash: CS+P551Yu5V1f1S0N+nkUhlgxfNbyXLy5YTAVtPeesk=)
3: C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl (hash: 0JvBDSO0nfoOsDt+Lcc37NnLVsZAf8YvRvOuSGux3RM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Aug 2026 23:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a5:9d:a3:f6:b4:79:15:e8:5d:2c:08:2b:c7:7f:d3:04:2d:09:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Validity
Not Before: Aug 1 14:29:28 2026 GMT
Not After : Aug 6 03:49:28 2026 GMT
Subject: CN=B189AA1CD771EBEE92ACFEA69695B1739AC3B47F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:23:86:4a:79:86:27:cb:29:c4:44:02:bb:
44:22:06:1a:8c:89:74:c7:e3:31:47:19:c0:82:c4:
88:68:b2:61:83:e3:8d:aa:23:74:17:58:2b:54:b2:
d8:b0:db:02:1e:46:6c:c9:c5:d4:29:e0:3c:f3:46:
0b:d6:0e:f8:c4:e3:a7:be:99:1e:12:9e:d4:82:fe:
58:a7:be:2f:3e:b7:14:26:8c:71:f2:af:a9:2a:8d:
15:8f:6a:49:de:37:f5:a3:8b:2d:57:d6:7e:f1:7a:
9e:23:0b:10:f0:8c:68:fe:e9:99:f9:b6:8e:71:8d:
7d:1f:e1:93:88:6a:eb:3b:0e:b8:82:b6:1b:d8:7d:
bf:b5:2b:76:93:2e:6a:2a:c8:98:e1:cb:00:1a:21:
d3:cb:e7:d9:6e:31:11:e7:eb:1b:88:a2:f9:6c:37:
a9:89:93:c0:de:83:bd:81:0c:c6:62:76:ab:e8:73:
e6:17:a5:46:62:99:ae:1d:be:ef:f0:a8:1c:d9:b3:
76:62:1d:b4:e2:e8:18:3d:8f:4d:ae:09:f2:01:f8:
ed:ca:6b:62:43:21:20:32:69:39:d1:cb:88:5a:c6:
74:56:d4:15:e4:43:33:76:e1:cb:60:4e:54:3a:6e:
18:b5:4c:5a:5b:20:89:47:1b:7b:0a:34:61:1e:bc:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:89:AA:1C:D7:71:EB:EE:92:AC:FE:A6:96:95:B1:73:9A:C3:B4:7F
X509v3 Authority Key Identifier:
keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fc:49:4c:c9:25:27:43:23:c3:62:fd:03:17:3e:5a:0e:31:
4e:46:df:97:9e:5e:93:d2:fe:d7:0e:63:0a:a0:ab:85:87:32:
ac:c2:9d:48:44:08:13:a5:24:54:27:91:f9:f2:96:14:0b:64:
eb:17:5b:d5:27:15:e5:0e:00:3c:93:23:dd:e9:10:f5:7b:6f:
c9:5f:ec:27:1f:b0:4a:d3:6d:1c:7c:55:d3:27:f2:1e:05:27:
3b:8b:54:61:89:e8:dc:f1:50:57:d2:50:cf:e6:6c:ef:54:e2:
c7:2a:1d:b7:de:49:72:49:d8:65:37:db:9a:a6:2f:25:21:90:
f0:d3:58:af:2a:e9:5c:bf:bb:cd:67:2e:fd:e3:c0:dd:06:db:
fc:34:46:34:f9:0a:a3:5a:44:7f:af:c1:16:d3:a2:01:66:e0:
4f:c2:f1:b8:26:a0:b9:49:29:90:6d:27:b7:ed:13:7b:e4:64:
55:db:3e:79:8f:4f:91:e7:23:a6:01:c4:f8:e8:3b:4b:b3:39:
12:05:01:9a:b8:f4:f2:4a:be:88:3d:7c:66:1f:0f:7f:be:50:
9e:fe:bf:ed:05:33:f9:9c:56:62:5e:40:cc:f9:a2:dd:1c:e0:
aa:50:fd:be:ff:ba:1c:76:e4:6c:d4:83:42:34:29:68:5f:69:
52:7a:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 23:35:11 2026 by rpki-client