This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
File: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json)
Hash identifier: NrJLTso3Ujls8ediCCjCaBdSXI64ioJC/pWS26ddotM=
Subject key identifier: A5:33:E0:88:2A:47:75:F3:36:F9:A7:C0:85:32:C7:93:B6:C0:4E:A8
Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
Certificate issuer: /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Certificate serial: 1B06A9B6DD3F2631ADEFF70122FAFF0E808D663D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
Manifest number: 013B
Signing time: Tue 09 Dec 2025 12:01:26 +0000
Manifest this update: Tue 09 Dec 2025 11:56:26 +0000
Manifest next update: Sun 14 Dec 2025 05:24:26 +0000
Files and hashes: 1: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: oO7wKo0+SVqOjkWZN+0gQ07+aVmVbN4/1cQXmOBOt+E=)
2: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: Fu425esiIngca3W9F9CTzsdmwjumE6h34NRyIrWaAZA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Dec 2025 05:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:06:a9:b6:dd:3f:26:31:ad:ef:f7:01:22:fa:ff:0e:80:8d:66:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Validity
Not Before: Dec 9 11:56:26 2025 GMT
Not After : Dec 14 05:24:26 2025 GMT
Subject: CN=A533E0882A4775F336F9A7C08532C793B6C04EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:3c:fa:2b:6d:5a:2b:75:54:f1:ee:db:5e:
97:27:da:58:24:3e:86:c2:f4:d7:d9:7a:25:b0:8f:
9a:1b:04:5f:b9:f6:fb:3c:16:ae:e1:cd:25:81:33:
99:8f:bb:91:1b:0f:45:8c:ec:91:35:4f:03:c0:94:
58:2c:77:f9:d6:df:39:9f:74:54:0d:56:f7:9f:b5:
3b:42:89:6c:08:97:dd:d1:cb:44:32:47:d5:1c:64:
7e:3d:98:27:54:e1:f6:58:18:73:27:f1:c8:69:5c:
74:3d:05:d6:bc:1e:3c:cf:cd:81:7d:fd:6a:8a:f4:
d7:bf:20:ca:5f:e4:9c:34:1c:ff:bf:4a:6a:8a:5a:
bd:45:78:6e:4b:13:81:e6:97:bd:6e:96:6e:65:97:
d2:b5:73:25:41:39:e0:85:f0:bc:19:54:c3:d1:bb:
e2:de:ca:64:de:bd:f0:e0:78:45:9d:33:b3:9f:a8:
62:4c:69:fc:18:ca:3b:0c:08:18:81:df:6d:06:22:
35:26:a7:d7:f8:e7:4a:7d:70:ce:00:5f:ae:a3:d9:
04:e4:a4:2a:5d:17:2c:08:20:0a:3a:3e:3c:32:74:
71:8f:51:43:06:54:8a:f4:cf:7e:05:30:9f:bf:f0:
ea:7f:8f:c9:c6:f4:9f:c5:35:6c:01:65:8a:5e:3d:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:33:E0:88:2A:47:75:F3:36:F9:A7:C0:85:32:C7:93:B6:C0:4E:A8
X509v3 Authority Key Identifier:
keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:15:10:c6:d0:17:98:64:92:9a:7e:d0:f5:b1:6a:50:8a:95:
bf:29:08:cf:67:04:c1:9d:bb:50:28:14:ae:48:64:90:50:4c:
55:7c:0a:71:65:88:4e:63:ac:14:d0:52:a8:4a:d5:09:64:2e:
c8:d9:f5:51:7f:f9:94:79:04:1b:b9:a3:95:31:d3:81:14:44:
81:82:a0:26:69:f6:fa:1f:3f:bc:07:3d:cc:81:97:9f:b2:97:
ba:d9:6d:e7:9e:0d:36:83:0c:11:53:ab:33:f4:a5:94:92:2e:
43:8b:8c:8a:44:c3:65:6c:b4:e0:4f:87:52:f2:cc:d8:59:30:
e6:3b:32:93:b3:39:8e:be:17:82:2a:4e:a4:dd:51:bf:80:96:
b7:b1:b7:be:9c:63:ee:fc:ba:3e:8c:b7:8b:63:b9:96:d2:d6:
e0:06:18:2e:b2:db:f0:14:f0:9c:09:f1:9d:cb:01:f7:9d:f0:
b8:93:34:5c:f5:7e:06:f0:1f:a8:5a:5b:f6:8c:c7:63:7b:b2:
1d:20:35:0a:7e:92:07:5c:5c:c2:02:18:a7:45:88:8b:9e:2f:
28:11:d1:26:84:d3:00:cc:d5:1c:f7:e0:c2:fc:f6:51:58:45:
39:fd:5c:7d:37:9a:0e:57:d2:26:ee:ca:4f:30:cd:6e:bb:63:
7f:aa:97:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:34:23 2025 by rpki-client