This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/A3D5847870400288733F35669D7F1880025D0D1A.mft
File: A3D5847870400288733F35669D7F1880025D0D1A.mft (raw, json)
Hash identifier: 1tZoK55nPE4VQO4BobUBxwQSnCYjgEAurL25s4KtJGM=
Subject key identifier: 1D:20:49:73:43:AF:F7:89:04:C1:93:29:EB:34:B3:5D:F1:01:C6:FA
Authority key identifier: A3:D5:84:78:70:40:02:88:73:3F:35:66:9D:7F:18:80:02:5D:0D:1A
Certificate issuer: /CN=A3D5847870400288733F35669D7F1880025D0D1A
Certificate serial: 4324C04E8805D91A31D80AAD911803FE1DFFC0BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3D5847870400288733F35669D7F1880025D0D1A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/A3D5847870400288733F35669D7F1880025D0D1A.mft
Manifest number: 014A
Signing time: Sun 21 Dec 2025 09:14:51 +0000
Manifest this update: Sun 21 Dec 2025 09:09:51 +0000
Manifest next update: Sat 27 Dec 2025 01:53:51 +0000
Files and hashes: 1: 323830333a366631303a3a2f33322d3332203d3e20323732313233.roa (hash: dlzYdtM2o1G7tlgXoJ4yEjaCmEQede64GaPq9/cY5zQ=)
2: A3D5847870400288733F35669D7F1880025D0D1A.crl (hash: BuU3zKPFwEGCnbFhUbWjnodS9XupzzGNYK1Cr+am6E4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/A3D5847870400288733F35669D7F1880025D0D1A.crl
rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/A3D5847870400288733F35669D7F1880025D0D1A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3D5847870400288733F35669D7F1880025D0D1A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 27 Dec 2025 01:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:24:c0:4e:88:05:d9:1a:31:d8:0a:ad:91:18:03:fe:1d:ff:c0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3D5847870400288733F35669D7F1880025D0D1A
Validity
Not Before: Dec 21 09:09:51 2025 GMT
Not After : Dec 27 01:53:51 2025 GMT
Subject: CN=1D20497343AFF78904C19329EB34B35DF101C6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:e3:8e:fb:00:bb:e6:b5:65:76:51:6c:95:
52:ee:e2:2a:ba:75:a8:98:c5:5c:01:c7:e7:52:71:
b6:d2:43:bf:5b:b7:2e:0a:43:2a:6f:4c:ed:c7:12:
75:6e:5b:73:c0:4a:f2:f7:a9:4a:0a:c9:1e:71:e7:
e5:df:d3:6f:6c:eb:18:38:64:bd:06:62:3d:ae:b8:
19:81:e6:22:90:ff:ff:f4:9b:50:05:cb:e2:3e:17:
a1:c3:ce:1d:12:b8:6f:e2:57:bd:0d:9f:d9:b8:af:
d9:9b:50:85:ba:f1:26:48:3a:9f:0f:f2:a8:cf:50:
1a:c7:03:eb:af:4d:ee:ba:d3:a7:c9:17:08:10:55:
51:7e:4a:5a:07:ae:46:cd:cb:c8:19:e2:bf:8c:b9:
a4:41:70:9a:2f:2c:90:7a:56:53:90:19:d3:27:cf:
13:58:fe:3d:89:e9:6e:fa:54:b6:71:9d:59:d5:c2:
e7:6f:04:51:0d:2a:20:d0:b7:04:36:2d:e8:b1:79:
94:e1:f1:ad:64:7c:13:fd:ab:7b:6a:7a:fa:80:f0:
fb:f3:48:65:02:bf:8e:ff:a1:b0:98:7c:6b:1f:40:
e3:d5:98:34:e7:a1:73:42:dd:11:9e:b4:8b:84:38:
b5:34:80:a3:50:a0:d9:21:b2:09:2d:91:65:1b:11:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:20:49:73:43:AF:F7:89:04:C1:93:29:EB:34:B3:5D:F1:01:C6:FA
X509v3 Authority Key Identifier:
keyid:A3:D5:84:78:70:40:02:88:73:3F:35:66:9D:7F:18:80:02:5D:0D:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/A3D5847870400288733F35669D7F1880025D0D1A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3D5847870400288733F35669D7F1880025D0D1A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/A3D5847870400288733F35669D7F1880025D0D1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:49:98:6f:b9:d9:28:44:8e:91:a8:3d:de:77:c1:fb:21:c2:
18:ba:91:4e:d2:fc:7f:e2:d7:a3:2f:76:d9:47:03:b0:92:a9:
19:3b:d2:8f:f4:7d:81:a8:18:7f:07:a3:4f:4a:4c:70:17:5c:
f9:05:66:e1:cd:d0:66:8c:af:af:71:1f:22:c9:03:ce:b2:6a:
a7:fe:6d:20:4d:c3:55:70:f4:4b:9f:06:d0:1c:36:09:ac:c4:
f7:00:69:fb:25:ba:01:54:25:39:c1:b4:1c:90:2c:0e:c6:22:
97:80:3d:73:fc:7c:d4:eb:fd:76:6c:a7:67:2d:63:5e:49:4f:
e3:85:ab:69:04:a4:0d:02:41:ac:7f:ac:88:50:64:5b:e6:25:
59:0c:15:16:9a:a5:c5:0b:88:ba:75:9c:ba:63:77:b7:77:3b:
f9:df:be:be:9f:41:ed:ee:84:ef:1c:4a:68:94:20:68:7e:ca:
3a:e8:5d:a2:83:a2:b9:86:79:15:dd:2f:76:a5:c6:74:5b:c8:
67:b0:b5:ca:b2:a5:b4:47:bb:14:01:a8:ca:94:0c:6a:0b:b2:
d4:a2:c6:ab:8c:c6:ee:df:5d:8d:85:c8:c6:b1:c0:e2:9b:2d:
ee:d4:08:4c:85:1c:fb:1d:a4:0f:80:b0:bb:23:31:74:39:72:
a1:5c:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:11:28 2025 by rpki-client