This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.mft
File: D17A3829AD924E36C68D46B4C17B189D22C8B741.mft (raw, json)
Hash identifier: b/9AJX97kRmvUBl/IKxYAHqjprL84cZrFLt3A5p6WI8=
Subject key identifier: C8:A9:B8:45:A1:6C:99:03:5D:62:86:AF:B3:7D:3D:FA:9C:3C:DE:F9
Authority key identifier: D1:7A:38:29:AD:92:4E:36:C6:8D:46:B4:C1:7B:18:9D:22:C8:B7:41
Certificate issuer: /CN=D17A3829AD924E36C68D46B4C17B189D22C8B741
Certificate serial: 3D17ECF21488C5C0CE880D9F3D88FE05786A5FB8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.mft
Manifest number: 0143
Signing time: Sat 06 Dec 2025 12:23:21 +0000
Manifest this update: Sat 06 Dec 2025 12:18:20 +0000
Manifest next update: Thu 11 Dec 2025 14:26:20 +0000
Files and hashes: 1: D17A3829AD924E36C68D46B4C17B189D22C8B741.crl (hash: elmtjYQc4UIX+XDAWMx/AIysnjcbsN6h8O/eNxieI0Q=)
2: 323830313a31653a633830303a3a2f36342d3634203d3e203139343239.roa (hash: mv6PEhzVEWhR5Eu+zCxtfFppGnkmxsq7cr0OMG227H4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.crl
rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 14:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:17:ec:f2:14:88:c5:c0:ce:88:0d:9f:3d:88:fe:05:78:6a:5f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D17A3829AD924E36C68D46B4C17B189D22C8B741
Validity
Not Before: Dec 6 12:18:20 2025 GMT
Not After : Dec 11 14:26:20 2025 GMT
Subject: CN=C8A9B845A16C99035D6286AFB37D3DFA9C3CDEF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:d1:00:a8:21:2f:ac:3e:ce:23:d6:6e:12:
70:62:ea:81:03:fd:a5:34:2f:00:a3:90:37:3a:33:
63:0d:aa:a8:cc:76:db:13:31:79:26:aa:0b:0c:ac:
c9:1b:c6:69:6e:36:57:3a:16:dc:b9:29:d3:5e:85:
23:cd:2b:ac:e9:95:97:82:f8:5c:f0:63:a1:49:3a:
a2:9a:9e:bd:93:c3:04:66:64:07:56:be:3c:ee:b9:
ce:04:9f:e2:43:6a:45:81:af:f0:ce:42:05:1d:8d:
1b:7d:a0:1a:30:06:72:94:fd:a1:49:fb:65:31:e2:
12:e6:44:9c:f5:8b:a2:b5:6e:63:24:38:3a:66:0f:
10:23:30:d5:34:9b:35:bd:9b:6d:44:9d:bf:cd:7d:
79:c4:8d:56:ea:b2:fc:69:a1:67:34:d4:ea:02:36:
c6:dd:fb:b5:df:e3:9f:d4:15:76:c1:be:fd:ee:30:
1d:3b:8c:6e:72:65:b8:31:ac:4d:24:a8:70:91:63:
3f:24:5e:08:40:f1:a5:bb:f4:30:7f:33:f3:9a:fd:
e6:a3:44:6e:e5:2a:64:24:9d:d8:f7:93:ca:05:b2:
37:65:78:0c:57:59:8f:69:61:08:9c:c7:54:ff:17:
b7:b8:0d:db:f7:09:ca:ac:74:f7:a8:12:03:52:89:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A9:B8:45:A1:6C:99:03:5D:62:86:AF:B3:7D:3D:FA:9C:3C:DE:F9
X509v3 Authority Key Identifier:
keyid:D1:7A:38:29:AD:92:4E:36:C6:8D:46:B4:C1:7B:18:9D:22:C8:B7:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:49:de:6d:d9:94:48:d1:fe:80:da:03:36:19:48:82:f9:69:
ea:48:ee:a1:e7:c8:3c:1d:98:ca:53:39:85:fd:de:57:61:85:
c6:b2:72:53:36:d9:c6:c5:d8:f4:d6:74:78:95:46:20:0d:3f:
13:51:f1:f9:be:39:e3:1f:f9:0e:11:c5:2a:b8:b1:e8:1c:19:
dc:38:12:af:9b:65:ea:fa:04:41:9e:1d:36:20:ba:e6:17:25:
6f:15:fc:c8:53:5f:64:a9:ee:d5:28:0f:03:5c:b4:6b:7d:1d:
98:7a:43:1a:1e:6a:4e:a4:27:fb:cf:c3:ef:98:64:aa:e5:7f:
dc:b8:78:a0:e8:92:95:49:04:d1:fd:d9:cf:05:c0:62:22:df:
50:36:98:9b:ec:9a:2c:42:a9:ed:94:2f:63:21:78:4c:da:92:
7d:4b:0e:a7:52:8e:cf:77:08:fa:70:dd:0c:a7:36:01:9f:44:
62:56:c7:b7:24:4f:70:16:7e:40:37:d5:52:a3:61:ff:8a:b9:
33:f6:20:83:b5:38:3b:6d:7d:5c:df:ee:e5:89:20:38:3a:5c:
17:3b:35:74:af:2f:5e:98:c3:f6:a6:cc:62:05:b4:b7:7b:99:
b3:c6:2a:a2:b9:b9:db:7b:7d:6a:49:e1:bb:9e:68:65:ca:a2:
42:00:86:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 22:26:58 2025 by rpki-client