This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
File: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft (raw, json)
Hash identifier: A0Y6XAybzs0/g2tK7CJYIr2AhMES7EDuy0EZsdognAY=
Subject key identifier: 06:4A:FF:91:92:0C:54:2E:69:5C:D2:16:CC:CD:DA:A9:C9:77:9A:1D
Authority key identifier: 9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF
Certificate issuer: /CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
Certificate serial: 7C212306DB1632CF337671838C2E9B6E10B26C8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
Manifest number: 0150
Signing time: Wed 21 Jan 2026 09:56:50 +0000
Manifest this update: Wed 21 Jan 2026 09:51:50 +0000
Manifest next update: Mon 26 Jan 2026 15:24:50 +0000
Files and hashes: 1: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl (hash: jyGBDsPUI4xo3qXBT4uLNVyb1LN2SW2NSfa5QA9vclU=)
2: 34352e3233322e3132302e302f32322d3234203d3e203237373335.roa (hash: ZdahpsYhKxImC1xoOj9copAjk7XNZ3lvcTlbe0B1BwA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl
rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 15:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:21:23:06:db:16:32:cf:33:76:71:83:8c:2e:9b:6e:10:b2:6c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
Validity
Not Before: Jan 21 09:51:50 2026 GMT
Not After : Jan 26 15:24:50 2026 GMT
Subject: CN=064AFF91920C542E695CD216CCCDDAA9C9779A1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:1c:52:72:4e:b1:af:4b:d2:cf:c8:0a:c0:
8b:d3:39:46:a6:93:28:59:81:c3:7a:8c:da:ce:5f:
da:e0:60:50:ce:3e:c6:05:c2:e8:82:76:45:cd:0c:
18:08:87:16:7d:06:45:7d:8e:6f:dc:c8:a7:ad:18:
f4:34:7d:c6:89:e8:c0:af:94:26:f6:bf:9b:42:b0:
b7:fc:6c:d7:32:cf:ee:d9:98:38:1e:a5:b9:4c:8d:
88:2c:ae:98:c7:f3:d1:12:49:01:e8:d6:58:ae:fb:
4a:45:f2:54:68:d6:f0:79:e7:58:fa:6b:58:02:c1:
39:fa:bb:70:fc:d2:bb:5e:d4:aa:e1:39:76:9f:bc:
0b:a1:22:99:d4:41:8d:0c:f2:66:74:aa:8c:a6:89:
9e:8b:73:1c:83:e1:9d:7e:9b:e7:7b:7d:b4:b1:96:
6d:18:3d:30:08:f4:4c:6d:e7:3d:2a:a6:8c:ae:85:
ed:1e:22:e5:ca:ae:c9:05:b5:e3:8b:c4:e8:6a:d0:
a6:09:82:93:a3:39:52:76:38:8c:5a:5b:93:4b:22:
aa:b3:35:c6:a0:4e:fc:b4:eb:d4:55:79:1a:5c:63:
7c:6a:2e:b4:06:4d:12:f7:16:8c:59:5d:6b:23:cd:
3f:df:86:c0:14:23:6d:2b:b8:40:46:82:e7:76:65:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4A:FF:91:92:0C:54:2E:69:5C:D2:16:CC:CD:DA:A9:C9:77:9A:1D
X509v3 Authority Key Identifier:
keyid:9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:59:69:c1:91:b0:10:78:07:62:58:b5:81:18:cf:4a:02:c4:
83:84:40:ed:44:4b:7e:85:5c:d6:9b:8d:f8:7d:db:11:18:47:
80:7c:ee:5f:cb:06:e6:38:33:cb:77:f8:c6:f3:43:a0:e7:e4:
10:4d:27:10:15:a5:aa:f5:3d:74:fa:20:de:ba:dd:90:78:53:
ed:55:d2:de:a6:2c:78:04:37:6a:e0:ff:08:d0:b0:9f:3d:1f:
6a:00:5d:35:e2:67:2b:2b:95:2c:e0:04:ec:e2:7b:a5:2f:d6:
74:1f:f0:5e:76:d2:d5:27:3c:1a:77:86:60:fa:7a:43:84:16:
a5:c7:0b:14:88:7a:87:26:2c:ad:15:0c:ef:0a:b8:e2:b1:77:
4d:63:ef:b3:b5:8f:4a:dd:ad:d2:32:3c:c8:98:5f:e6:9c:73:
dd:27:b1:92:c5:39:71:1d:c2:b5:53:53:d7:d5:f2:f1:72:bd:
23:08:22:0d:27:5c:2a:bb:7c:3e:38:7e:5e:5c:7e:d8:b8:cc:
c1:fe:55:2c:ab:00:c1:c4:e6:2e:22:db:df:24:0e:da:26:07:
73:f8:51:ea:b3:c3:de:48:40:d7:fa:d9:d5:14:2c:38:b1:f0:
d8:f3:ad:af:c6:a8:4b:37:d4:1e:3e:56:1f:7d:0e:21:3a:80:
72:9f:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 16:45:23 2026 by rpki-client