This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft
File: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft (raw, json)
Hash identifier: GJ5JX4YL+6KwRNYbj0cOALfv9qkjuAEsH5xSJsjT/kg=
Subject key identifier: 34:94:79:D9:7A:A1:16:E6:07:9B:5C:10:55:47:5D:29:E5:22:31:EA
Authority key identifier: AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C
Certificate issuer: /CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C
Certificate serial: 323233D00CB9844F344C99C3786BB59CFF7802CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft
Manifest number: 0143
Signing time: Sun 14 Dec 2025 09:34:14 +0000
Manifest this update: Sun 14 Dec 2025 09:29:14 +0000
Manifest next update: Sat 20 Dec 2025 04:25:14 +0000
Files and hashes: 1: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl (hash: ih0gxuiQJi375+y+AG1lBMF5igqJiUkRDQ+qiQOll7E=)
2: 323830333a346135303a3a2f33322d3438203d3e20323733313736.roa (hash: 1S7U/necixh7xAZEJOiccJW6Tn6fQBFFDZB4GRKHA+s=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl
rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 04:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:32:33:d0:0c:b9:84:4f:34:4c:99:c3:78:6b:b5:9c:ff:78:02:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C
Validity
Not Before: Dec 14 09:29:14 2025 GMT
Not After : Dec 20 04:25:14 2025 GMT
Subject: CN=349479D97AA116E6079B5C1055475D29E52231EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:42:0f:ac:cd:d1:30:0c:d2:14:62:89:a1:
84:df:57:7c:29:9d:59:a6:c5:b6:6e:8d:e7:08:15:
ea:ad:b2:a2:1d:df:78:df:0b:49:2c:6d:ac:5f:b1:
eb:f5:9b:8e:bb:70:4f:1b:3e:a1:03:ac:50:f1:d8:
66:1b:c7:2d:c7:e5:bb:bf:e4:cc:dc:ff:7c:d7:22:
ab:9d:a0:bf:b5:44:79:dc:b9:80:d8:c4:d4:b0:e7:
51:a9:a7:2d:fd:f7:6c:68:31:39:65:cd:53:dc:d6:
76:26:fc:c1:58:c4:2b:15:66:a3:ff:6b:6d:6a:f0:
0e:34:39:16:40:4d:ea:65:4f:61:7f:47:12:e5:e9:
49:df:ac:ef:fa:78:e5:8f:4f:f2:5e:14:0f:f7:87:
b6:ff:39:48:1d:a6:19:dd:1e:94:88:13:cb:ff:1c:
3c:2a:b4:1b:de:e1:25:4f:06:26:89:be:b7:64:23:
3e:df:26:4a:3a:0b:59:08:9a:05:ea:f0:fa:61:6a:
5f:28:08:01:be:6c:69:62:24:70:1c:40:47:d8:b8:
52:a3:62:b2:7e:80:ca:18:85:d8:cb:18:02:d0:4b:
e7:9f:58:83:29:19:f9:47:17:38:63:3f:e1:0e:5c:
fa:21:4e:e6:f7:99:ce:54:6d:3b:e7:8c:19:0b:63:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:94:79:D9:7A:A1:16:E6:07:9B:5C:10:55:47:5D:29:E5:22:31:EA
X509v3 Authority Key Identifier:
keyid:AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ef:35:01:72:f4:d0:5c:ff:f8:61:75:1f:6d:b7:76:b4:23:
5c:c2:e3:cd:13:4e:8a:8d:c1:45:e5:fd:83:4a:47:8b:99:cd:
d2:3b:28:7b:4e:7e:c9:7f:40:c5:1f:f3:29:cf:42:d6:06:21:
f2:48:8a:bf:a7:64:ef:8e:fc:6c:a1:9a:24:4a:be:c9:a8:52:
79:8c:2f:69:7f:d2:d7:3f:2c:7f:82:3a:73:32:2e:41:7a:e5:
17:74:c0:15:53:ef:33:67:ca:d1:e2:19:c1:75:6c:9c:14:91:
b6:3e:ad:a1:3b:dd:71:d0:16:76:ff:4b:11:95:01:64:1b:ad:
97:ec:26:b7:5e:12:67:8d:85:bc:c2:f9:d3:d9:38:8e:69:87:
9e:21:39:ba:76:29:7f:a8:8b:c4:df:74:97:03:9a:e7:94:66:
d2:b9:56:01:a8:19:cd:a6:2d:9b:da:96:b5:b4:63:8d:2f:d7:
f0:cc:db:60:3e:25:c9:2d:14:b5:ed:3b:22:e5:1b:81:75:ca:
51:43:e8:42:fb:74:bf:a2:24:10:6d:01:c3:3f:15:30:12:b0:
0a:7e:7f:62:9c:ec:1f:de:a6:88:70:84:a1:47:37:5c:cb:b7:
8e:f4:74:79:4d:b6:06:5a:11:e5:2c:54:b5:c1:e6:4b:0b:67:
15:e3:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 05:59:49 2025 by rpki-client