This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
File: 85E8329CBFB72C73936DE19616620415214EDD8A.mft (raw, json)
Hash identifier: LNLa4phwr6C4vf4tbqMDob+eJxWxTtFS/Wk6TnDNuo8=
Subject key identifier: 10:77:01:97:D6:E9:C8:77:73:C4:D6:55:D9:30:51:80:D3:9C:CD:67
Authority key identifier: 85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A
Certificate issuer: /CN=85E8329CBFB72C73936DE19616620415214EDD8A
Certificate serial: 5AB77175C11FABCF0AEF708C4E005DDD247D977D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
Manifest number: 97
Signing time: Mon 17 Nov 2025 15:13:56 +0000
Manifest this update: Mon 17 Nov 2025 15:08:56 +0000
Manifest next update: Sat 22 Nov 2025 23:07:56 +0000
Files and hashes: 1: 323830333a3261303a3a2f33322d3332203d3e203135383330.roa (hash: FinVDUnkz/2J0I+Wwphci+vFr8uTAAULrMYfWm5GuWU=)
2: 85E8329CBFB72C73936DE19616620415214EDD8A.crl (hash: Sj/XUcEJQ14/t0iyHNd0+e4g0zTM/gaoVu8sfRY7f44=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.crl
rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 22 Nov 2025 16:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b7:71:75:c1:1f:ab:cf:0a:ef:70:8c:4e:00:5d:dd:24:7d:97:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85E8329CBFB72C73936DE19616620415214EDD8A
Validity
Not Before: Nov 17 15:08:56 2025 GMT
Not After : Nov 22 23:07:56 2025 GMT
Subject: CN=10770197D6E9C87773C4D655D9305180D39CCD67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:52:6e:ee:4d:6a:a0:bf:b5:cd:d8:99:88:
5d:6c:0b:7e:6e:65:ee:a1:53:04:e4:0d:5f:83:9a:
d7:17:f7:91:8a:c2:51:81:f5:56:28:7b:c3:cf:6a:
a9:24:56:5b:18:bb:a4:e4:de:56:c6:ce:7b:e7:48:
d1:0b:a8:72:55:d8:5f:c3:e6:f9:39:e0:9b:96:5a:
39:be:3b:d9:b5:7d:d6:1f:ff:1f:e3:96:9e:79:3c:
38:13:6c:83:44:a3:5f:39:bc:c5:96:de:34:76:13:
a4:cd:f2:aa:0b:8e:d6:36:19:56:1f:e8:92:67:3b:
53:d4:6b:b6:7a:d7:0c:5d:4d:50:57:ef:2e:03:fa:
09:a2:42:e9:1f:fd:29:a2:14:38:bb:c9:a4:43:fd:
f6:7c:e5:7f:a8:f7:3a:6e:19:4b:7b:a7:f5:ec:e3:
0a:01:98:7d:07:89:f8:0c:5e:eb:5b:34:59:87:31:
3e:c1:ea:4a:2f:35:d2:fb:16:14:8c:d6:0d:9e:85:
4e:e6:b8:9b:70:96:94:8a:4e:59:5a:7c:6e:a9:29:
83:28:3c:58:97:fe:6c:03:3a:ac:a2:d3:29:c6:6d:
97:80:8b:90:9b:9d:ea:e2:55:c0:3f:6d:fb:c1:46:
01:cb:30:47:68:5e:d0:57:8d:49:2f:c9:72:18:a5:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:77:01:97:D6:E9:C8:77:73:C4:D6:55:D9:30:51:80:D3:9C:CD:67
X509v3 Authority Key Identifier:
keyid:85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8f:f2:f3:31:72:77:93:43:58:2b:d3:05:11:a5:6c:72:08:
af:56:cd:6f:e8:50:f4:64:2f:b4:6f:57:68:48:97:8f:e5:b3:
7e:2f:2c:76:de:38:41:cb:4a:21:a6:0c:dc:b9:4d:74:8c:52:
62:8c:a5:b4:de:86:9c:95:e2:97:3f:90:26:cd:55:10:55:b3:
eb:7d:b9:7a:e9:89:11:42:9e:11:22:12:be:c2:0c:88:d9:51:
65:01:e1:04:b4:b0:b3:19:f2:5e:06:a7:fe:bc:66:f4:db:a5:
b7:86:2e:82:0e:6d:4a:ec:13:32:b8:e4:0f:50:2a:07:47:c8:
60:4a:2e:b0:cd:23:d7:09:71:0c:0e:79:06:fb:71:82:b3:38:
b7:dd:d4:7d:10:c8:ec:1e:11:b2:56:c3:a8:95:5e:db:25:87:
60:ef:cf:00:14:5b:35:5c:4c:be:a2:70:bc:c7:8c:e6:c4:87:
b3:05:b5:f0:74:85:11:4b:61:91:5e:3a:03:3a:8c:00:1d:2e:
35:4e:f6:cf:f1:9a:bf:d9:1f:bc:03:56:ab:7c:f4:50:cf:e6:
16:a3:14:6a:34:ba:ac:d1:d0:f1:85:98:57:ce:c3:00:27:64:
a4:68:ea:4c:0f:bf:bc:4d:9e:38:76:04:4f:9d:3e:d1:93:9e:
bc:97:3b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 15:11:05 2025 by rpki-client