This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
File: BCDD50591AFBE01DD1E89006B709D14B69D79567.mft (raw, json)
Hash identifier: d7UO3JC30IldiM3D6W2OwX+vpisSyn7uGaerzgduXYk=
Subject key identifier: 01:D8:E9:F9:49:99:EE:09:9D:D3:AC:ED:56:ED:D2:C0:66:34:3E:80
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Certificate issuer: /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial: 3A09034544B1BD6532A55E2DE43E90ABE3333B22
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
Manifest number: 0147
Signing time: Wed 03 Dec 2025 16:29:32 +0000
Manifest this update: Wed 03 Dec 2025 16:24:32 +0000
Manifest next update: Tue 09 Dec 2025 08:26:32 +0000
Files and hashes: 1: 3138362e302e3138302e302f32322d3234203d3e20323633323434.roa (hash: 0DlXsm98HlB5uDzTYzIjyDBNM1DJ5k3QRekEzRjOxzQ=)
2: 3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa (hash: r3mpym8MNwnvHxIuYSgXnngQZcrxT6L1+B3uUPWi9dY=)
3: BCDD50591AFBE01DD1E89006B709D14B69D79567.crl (hash: CIayMjirX3ENsYVkWx7Puqi8fCAguZiLYThypPet2Gg=)
4: 3139302e3130362e33322e302f32312d3234203d3e20323633323434.roa (hash: IKpYtNnPqJi7A2I065akkFAJXM/1P20XrCW6mLLJ8DY=)
5: 323830303a6362303a3a2f33322d3438203d3e20323633323434.roa (hash: HG79+FZ1IJmtzxISYDc5++PcOk2TMTwJhOCfg+BwQeE=)
6: 3133312e37322e3133322e302f32322d3234203d3e20323633323434.roa (hash: 9BHe64mInmx7D9r4r9/CtM7RjflnHnNO52klk8Xfo/4=)
7: 3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa (hash: xopTA6jKSIsdkIE6jBzhXIFqdR5+llPDfkKoskVciXA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 16:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:09:03:45:44:b1:bd:65:32:a5:5e:2d:e4:3e:90:ab:e3:33:3b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Validity
Not Before: Dec 3 16:24:32 2025 GMT
Not After : Dec 9 08:26:32 2025 GMT
Subject: CN=01D8E9F94999EE099DD3ACED56EDD2C066343E80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:26:58:b7:dd:bb:3c:1a:f3:4a:8f:d0:9c:f3:
eb:46:cf:fc:9e:74:26:4d:82:22:12:b8:86:83:f2:
dd:e3:99:29:23:59:b7:07:a4:22:8b:37:61:bd:41:
3f:8c:18:5f:f1:86:f7:85:d7:1c:82:83:d7:ea:eb:
3f:5f:7b:b5:32:5f:1f:c8:58:a5:ed:ec:2b:01:04:
1b:56:ff:4b:f7:96:9f:bd:b9:46:3b:dd:d1:d7:76:
e6:c0:17:05:aa:75:8e:8f:2a:c7:e1:80:98:20:bf:
84:81:9c:d7:4a:45:b8:ff:66:74:37:26:e2:50:4d:
62:0c:bc:e6:20:c1:ae:c9:40:f7:2c:9b:6e:a7:43:
cb:f3:c5:ee:29:f1:fa:1d:0b:a3:80:4b:93:35:53:
7a:ae:27:29:25:c7:a0:4c:24:6a:e2:2f:bf:bc:7e:
06:48:68:53:cf:9b:ff:dc:0a:dd:9a:5f:ba:f7:49:
be:1d:7f:3b:c2:60:66:9c:24:fb:80:01:59:ad:51:
9d:ea:c1:dd:11:b1:2e:f3:b7:9b:fd:d4:3c:e2:9f:
c4:d2:d8:73:da:b9:2f:d8:99:23:82:34:a3:25:2a:
45:1c:be:e8:81:1d:2a:94:38:5f:6f:85:41:79:f2:
9e:43:27:57:ae:f3:28:5c:c6:4c:ce:be:c8:d2:3c:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D8:E9:F9:49:99:EE:09:9D:D3:AC:ED:56:ED:D2:C0:66:34:3E:80
X509v3 Authority Key Identifier:
keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d0:db:a4:97:61:07:5f:9c:e6:53:da:ea:15:08:66:51:22:
75:79:46:2e:a5:15:49:4d:af:18:c4:23:7e:36:86:97:94:60:
1b:2a:99:54:f7:18:05:0e:bb:38:f2:5c:67:e3:3b:b3:98:fd:
28:f4:e9:fd:1e:15:52:65:fc:52:23:18:c6:79:7f:e9:08:b2:
cf:82:cf:9b:2d:63:b2:0f:2d:6a:2e:c5:1d:9f:79:62:5b:3e:
8e:2f:d6:55:25:21:c7:07:eb:6a:2c:72:1a:d4:e3:1c:db:21:
26:65:62:04:94:c8:b7:e2:a8:ee:b0:47:4d:ac:75:f2:37:75:
e6:52:1c:65:59:f0:29:02:7d:f5:2f:2a:53:7e:13:1c:09:05:
fd:e5:13:ff:f9:47:41:10:51:cb:68:e9:fe:ea:7a:70:46:79:
c7:be:01:64:08:14:fe:7a:27:76:23:12:dd:00:cf:7c:b9:e1:
a2:55:41:54:48:a6:46:64:b9:33:fc:3f:bf:9e:b9:40:39:6d:
0e:34:5a:4b:d3:bc:1a:d8:96:a5:f4:50:e4:fb:59:10:54:93:
db:57:b2:cc:d6:5b:ef:48:42:68:b6:39:0b:6c:d7:36:b8:1c:
e8:26:51:2f:14:75:8f:85:61:7a:df:19:8f:d8:a5:4b:98:dd:
83:14:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 16:20:50 2025 by rpki-client