
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
File: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft (raw, json)
Hash identifier: fNcVRl1F9Jky8lXdC9F+c37sMl8+9r1Ws2jFn6kyDhc=
Subject key identifier: 44:59:D6:C5:F4:F3:4F:A4:42:65:1E:61:1D:4D:D2:2C:5A:7C:D2:E8
Authority key identifier: 9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF
Certificate issuer: /CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
Certificate serial: 28E0D3DBBFF37D096673B5F7C041EDF680F47E5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
Manifest number: 01AA
Signing time: Thu 23 Jul 2026 12:41:44 +0000
Manifest this update: Thu 23 Jul 2026 12:36:44 +0000
Manifest next update: Tue 28 Jul 2026 16:19:44 +0000
Files and hashes: 1: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl (hash: rvytRIwtIzL6dlUoj6Tl9KHDy5NbW37R00fgw8lb2X0=)
2: 34352e3233322e3132302e302f32322d3234203d3e203237373335.roa (hash: ZdahpsYhKxImC1xoOj9copAjk7XNZ3lvcTlbe0B1BwA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl
rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e0:d3:db:bf:f3:7d:09:66:73:b5:f7:c0:41:ed:f6:80:f4:7e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
Validity
Not Before: Jul 23 12:36:44 2026 GMT
Not After : Jul 28 16:19:44 2026 GMT
Subject: CN=4459D6C5F4F34FA442651E611D4DD22C5A7CD2E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:59:89:c3:a3:df:8e:35:4b:60:d4:4f:ca:8b:
8b:06:9c:75:6b:71:68:19:2a:6a:b1:21:99:a8:9c:
1a:6d:1f:39:7f:f7:f6:75:2f:54:42:94:05:f3:40:
18:f4:d1:52:8a:df:78:cb:cc:3b:e7:80:74:de:30:
07:ba:75:28:c9:ce:87:5e:ab:96:36:d4:ff:4a:04:
a7:d7:ec:03:53:c8:ff:12:87:fa:60:8e:5a:df:ff:
b3:40:ac:3d:db:3f:06:68:20:8c:05:ed:16:1b:6a:
54:09:d3:c0:f4:87:b4:ac:3d:bc:3d:82:fc:ea:de:
f4:2f:55:dd:4a:f2:21:f8:31:20:9c:b8:69:e6:cb:
51:31:45:9c:50:5f:8d:57:7e:24:10:f1:84:9c:86:
72:ff:23:62:8e:11:ce:39:ba:5c:53:f4:76:76:0a:
cc:bd:87:f3:37:18:57:cb:ac:d9:46:fe:73:0c:c6:
2f:9e:83:4b:3b:a3:a7:66:13:fd:76:73:8b:1d:8a:
fc:d3:a5:c0:60:22:5c:8f:ec:32:e4:57:6d:93:af:
55:5c:2d:0b:80:de:e1:30:bb:47:23:f6:f1:05:0d:
bf:2c:b7:8a:ef:d9:76:6f:00:d6:09:1d:a0:38:4b:
10:b1:05:bb:3b:d0:f1:1e:60:b1:30:78:d1:55:0a:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:59:D6:C5:F4:F3:4F:A4:42:65:1E:61:1D:4D:D2:2C:5A:7C:D2:E8
X509v3 Authority Key Identifier:
keyid:9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:20:00:3f:01:cd:f1:98:7d:92:97:20:ca:e8:20:df:e3:9a:
9f:36:22:da:7d:38:e2:be:80:b3:e4:21:55:76:73:5b:cc:fe:
9c:db:be:b6:b7:8f:d9:12:a9:d0:b2:b5:9f:98:66:41:fc:04:
c7:a0:99:c9:49:40:0b:e7:eb:16:a4:54:11:39:6f:d8:ce:ce:
e5:2e:1d:73:be:02:7c:b3:75:46:d9:ea:c5:b5:2f:23:6c:77:
0c:0b:a1:a1:04:72:41:ce:0e:2f:1c:84:1f:9c:ab:3f:79:2e:
9b:7f:35:9d:c7:df:03:1f:f7:02:36:d7:5c:33:36:87:4a:38:
2e:1f:24:98:ed:a4:a4:29:aa:75:bb:a7:98:dc:90:eb:e1:27:
b6:02:4d:6e:1a:66:67:e3:7b:b1:e9:c3:08:fb:85:30:69:c0:
81:b7:53:d1:a6:76:e4:07:18:df:5a:43:d3:44:29:1c:34:0e:
c0:d0:e4:8a:26:6f:a0:f5:4d:02:5f:65:35:7a:92:4b:1d:ec:
59:ba:49:c9:d0:e8:97:64:8e:fe:4e:cb:99:e9:02:a4:4d:23:
ba:50:dd:8f:ec:a5:cc:34:88:1b:d2:8a:9b:0a:fc:1a:d8:7e:
5a:1a:f4:be:2c:ca:ca:d3:ae:74:97:44:e2:5c:00:04:3d:db:
78:87:cb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:42:32 2026 by rpki-client