
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
File: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft (raw, json)
Hash identifier: hTg4xC4YGEKlDdwm4jGtKMWX6oLTYKLnwEKZ+4zxuXk=
Subject key identifier: 31:AB:52:20:2B:1C:D3:9D:03:48:F1:96:B9:A7:5D:AE:BD:23:64:06
Authority key identifier: 9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF
Certificate issuer: /CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
Certificate serial: 2253B201A485CD63E6513928F49FADCFC21B1819
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
Manifest number: 0165
Signing time: Tue 10 Mar 2026 06:25:10 +0000
Manifest this update: Tue 10 Mar 2026 06:20:10 +0000
Manifest next update: Sat 14 Mar 2026 15:07:10 +0000
Files and hashes: 1: 34352e3233322e3132302e302f32322d3234203d3e203237373335.roa (hash: ZdahpsYhKxImC1xoOj9copAjk7XNZ3lvcTlbe0B1BwA=)
2: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl (hash: noefUHjRNgtec/nP3x2ClksyFpfCIr+/mIcuuc0z6H4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl
rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 13 Mar 2026 23:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:53:b2:01:a4:85:cd:63:e6:51:39:28:f4:9f:ad:cf:c2:1b:18:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
Validity
Not Before: Mar 10 06:20:10 2026 GMT
Not After : Mar 14 15:07:10 2026 GMT
Subject: CN=31AB52202B1CD39D0348F196B9A75DAEBD236406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:97:af:66:08:73:d4:93:02:20:fa:c8:e3:
d6:72:a1:1f:45:fb:b7:40:8a:ac:85:5e:5b:fc:11:
3c:d3:93:00:f0:d4:72:05:e5:2e:a3:c4:42:b9:fa:
7d:56:cf:4b:34:81:7a:60:d7:8e:8e:47:99:6d:cd:
dd:fa:42:06:71:b0:75:66:7c:a1:bd:70:c1:21:5e:
10:02:63:93:c1:54:59:38:9f:50:ea:d1:92:9d:e6:
ab:ed:07:59:bd:34:f1:79:7e:cb:d4:71:22:fa:75:
49:2f:0f:6c:6c:e5:77:72:1e:8d:bf:71:ed:de:5a:
9b:70:a5:8b:ed:da:7b:61:0f:53:c6:5c:63:cc:bf:
68:9e:d6:a6:f7:46:82:81:16:ea:1f:5d:cb:47:97:
e3:78:7a:3f:77:b3:81:6f:5a:2e:ad:c8:d3:1c:0f:
58:10:7c:4b:79:23:b5:b9:01:ca:91:2e:88:a0:c9:
ea:dc:76:09:ac:16:fd:02:9e:9f:4d:4e:77:13:e7:
2e:db:bf:d9:4f:55:9e:4e:cf:b5:fa:90:97:9c:d0:
99:bb:59:f4:86:62:12:be:4c:98:d6:8c:86:31:ce:
e8:aa:0b:ea:b9:68:89:b1:f4:8c:b5:30:ff:0b:90:
43:34:8e:fb:41:bf:9d:d8:3d:6f:2b:13:97:0f:b3:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AB:52:20:2B:1C:D3:9D:03:48:F1:96:B9:A7:5D:AE:BD:23:64:06
X509v3 Authority Key Identifier:
keyid:9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ba:61:e8:8c:47:55:78:6b:bd:a3:18:54:84:8d:0f:48:58:
3a:c3:0f:58:1e:81:ff:a7:4e:67:2b:67:2f:38:9a:10:b4:6c:
c0:92:e3:3f:b7:82:55:c3:60:3c:01:b9:c3:ab:93:f3:74:85:
b9:0a:24:01:9c:b7:9e:dd:4c:85:ed:5c:73:ee:53:22:15:4e:
98:54:8c:69:37:3e:81:44:87:9d:4c:07:55:59:f5:8c:c5:64:
00:a3:95:8d:e5:f7:df:e2:83:f0:d5:77:3b:1f:9f:39:86:95:
b0:a6:4e:5c:87:7a:28:bf:c7:13:7f:e8:8a:14:db:67:28:7c:
28:29:a5:4e:a4:5a:29:cf:e7:19:d0:d4:59:b8:26:3b:09:9f:
07:82:b1:10:67:f2:f8:d3:0c:62:2b:a3:71:cb:7d:3e:4c:e3:
3e:2e:4c:55:5a:88:3d:52:75:f2:2b:56:b4:42:14:9b:0d:0e:
71:c4:d4:d5:eb:6c:b9:23:f3:4b:9a:ff:ed:8f:de:d0:55:8f:
2f:fb:9d:82:95:d7:8a:ed:eb:06:dc:ac:8e:a8:27:21:06:1b:
60:1e:8e:da:8d:d7:8b:cb:13:b6:59:08:1b:b0:e1:42:7a:77:
77:8e:de:eb:bf:b3:c3:9c:4a:ae:b3:7b:e6:df:4d:ae:0a:a9:
55:9f:f6:62
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIlOyAaSFzWPmUTko9J+tz8IbGBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURDM0M5QjIwQkU2NzE0MTBBNDZFRTdCMTQ5MUQxRURG
Q0Y4RDNGRjAeFw0yNjAzMTAwNjIwMTBaFw0yNjAzMTQxNTA3MTBaMDMxMTAvBgNV
BAMTKDMxQUI1MjIwMkIxQ0QzOUQwMzQ4RjE5NkI5QTc1REFFQkQyMzY0MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzZevZghz1JMCIPrI49ZyoR9F
+7dAiqyFXlv8ETzTkwDw1HIF5S6jxEK5+n1Wz0s0gXpg146OR5ltzd36QgZxsHVm
fKG9cMEhXhACY5PBVFk4n1Dq0ZKd5qvtB1m9NPF5fsvUcSL6dUkvD2xs5XdyHo2/
ce3eWptwpYvt2nthD1PGXGPMv2ie1qb3RoKBFuofXctHl+N4ej93s4FvWi6tyNMc
D1gQfEt5I7W5AcqRLoigyercdgmsFv0Cnp9NTncT5y7bv9lPVZ5Oz7X6kJec0Jm7
WfSGYhK+TJjWjIYxzuiqC+q5aImx9Iy1MP8LkEM0jvtBv53YPW8rE5cPs9czAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUMatSICsc050DSPGWuaddrr0jZAYwHwYDVR0j
BBgwFoAUncPJsgvmcUEKRu57FJHR7fz40/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTI1NjY2RkIzQkQ2NzY4QTJEODg1MDhCOUJFMTdENjQz
NTAzRjBGQkRCRjc2NTMwNjY1QjIyMkIxNEMxNUY1LzAvOURDM0M5QjIwQkU2NzE0
MTBBNDZFRTdCMTQ5MUQxRURGQ0Y4RDNGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85REMzQzlCMjBCRTY3MTQxMEE0
NkVFN0IxNDkxRDFFREZDRjhEM0ZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0UyNTY2NkZCM0JENjc2OEEyRDg4NTA4QjlCRTE3RDY0MzUwM0YwRkJE
QkY3NjUzMDY2NUIyMjJCMTRDMTVGNS8wLzlEQzNDOUIyMEJFNjcxNDEwQTQ2RUU3
QjE0OTFEMUVERkNGOEQzRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABumHojEdVeGu9oxhUhI0PSFg6
ww9YHoH/p05nK2cvOJoQtGzAkuM/t4JVw2A8AbnDq5PzdIW5CiQBnLee3UyF7Vxz
7lMiFU6YVIxpNz6BRIedTAdVWfWMxWQAo5WN5fff4oPw1Xc7H585hpWwpk5ch3oo
v8cTf+iKFNtnKHwoKaVOpFopz+cZ0NRZuCY7CZ8HgrEQZ/L40wxiK6Nxy30+TOM+
LkxVWog9UnXyK1a0QhSbDQ5xxNTV62y5I/NLmv/tj97QVY8v+52CldeK7esG3KyO
qCchBhtgHo7ajdeLyxO2WQgbsOFCend3jt7rv7PDnEqus3vm302uCqlVn/Zi
-----END CERTIFICATE-----
Generated at Tue Mar 10 17:57:17 2026 by rpki-client