This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.mft
File: 4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.mft (raw, json)
Hash identifier: 1wCDW9cTkn6ThteFFzkdA0FQp/rX1fXIN82LjRkwCt8=
Subject key identifier: 22:D9:CC:17:ED:A4:1E:4E:84:92:B2:43:0E:40:67:48:AD:A4:57:73
Authority key identifier: 4E:F7:2C:A9:E6:16:1B:75:48:13:6A:AB:8B:CF:62:02:8B:A3:3A:F0
Certificate issuer: /CN=4EF72CA9E6161B7548136AAB8BCF62028BA33AF0
Certificate serial: 262E352B6E6A160384924146398B1890DE221FF9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.mft
Manifest number: 0149
Signing time: Tue 09 Dec 2025 17:19:27 +0000
Manifest this update: Tue 09 Dec 2025 17:14:27 +0000
Manifest next update: Sun 14 Dec 2025 12:36:27 +0000
Files and hashes: 1: 34352e3233392e39362e302f32322d3232203d3e20323636383634.roa (hash: lUzSyKyOcVKSQ0nH7A5eAltr6084wGumJYul19vQ14I=)
2: 4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.crl (hash: vqAXeBvLnOu94vTcYHvoaD+NtMOZzUqNrXgpON5/53Q=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.crl
rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Dec 2025 12:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:2e:35:2b:6e:6a:16:03:84:92:41:46:39:8b:18:90:de:22:1f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EF72CA9E6161B7548136AAB8BCF62028BA33AF0
Validity
Not Before: Dec 9 17:14:27 2025 GMT
Not After : Dec 14 12:36:27 2025 GMT
Subject: CN=22D9CC17EDA41E4E8492B2430E406748ADA45773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:fa:52:83:19:ad:d0:ba:eb:0c:a6:f1:4a:
e3:df:8a:24:8c:c5:49:9d:0f:93:02:c8:5e:13:7d:
46:cd:91:96:2d:bb:c9:5c:76:4b:df:15:ff:f5:2e:
89:d5:11:2c:2a:7d:c7:60:17:a8:5a:2c:41:47:3d:
e7:0c:9a:a7:27:fd:8e:9c:02:3d:a4:4b:d4:9a:ec:
f8:07:50:87:c7:ab:81:4b:c3:9e:71:d0:0a:32:da:
9f:b7:21:9d:28:22:e9:ea:7a:05:56:1f:7a:a9:d0:
f0:24:1d:dd:ff:2f:b8:24:f3:ad:e5:e9:38:6c:96:
0c:0d:4a:b9:e5:15:1c:46:37:ec:be:49:5f:45:17:
64:8b:ab:ec:99:3f:2b:6b:9f:58:95:66:2c:68:20:
de:61:2f:58:2a:02:27:55:2f:89:53:28:1e:87:c4:
83:c3:5c:7a:26:11:9c:36:09:42:e0:ac:a5:0e:4c:
00:6e:5b:c8:96:c8:4c:74:a7:16:5c:59:55:bc:25:
b8:09:a9:c7:c5:e1:04:60:75:7a:21:97:60:2a:e3:
ff:06:a5:00:37:2e:31:1c:f7:11:a6:7a:21:64:84:
c6:cd:1e:52:2d:57:f5:92:e2:09:d1:d1:b2:7f:44:
20:c8:70:74:9f:ff:0e:88:b1:a3:08:b5:38:33:76:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D9:CC:17:ED:A4:1E:4E:84:92:B2:43:0E:40:67:48:AD:A4:57:73
X509v3 Authority Key Identifier:
keyid:4E:F7:2C:A9:E6:16:1B:75:48:13:6A:AB:8B:CF:62:02:8B:A3:3A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:61:2c:57:a6:8a:2a:6d:c1:c6:e1:fc:d8:39:84:1f:a8:c6:
6d:18:9d:39:dd:30:de:37:5b:ea:da:76:24:6f:2c:ae:4b:cf:
69:d2:2c:3d:a2:79:bf:36:f4:87:44:39:b1:b7:4e:60:1e:8c:
a7:79:eb:df:ba:02:4b:22:21:71:1e:97:80:b9:67:f7:f0:74:
8a:9d:65:7c:e9:8d:e2:1a:a7:f4:7f:94:4e:6b:49:ce:71:21:
a3:90:29:15:56:53:4e:3c:ad:5a:fb:ae:a4:b3:42:ce:a9:eb:
d5:ad:a8:75:70:04:cf:f5:6d:9e:fa:90:93:75:e5:26:01:e9:
82:5c:d8:08:d8:f6:0e:f3:e1:46:c4:82:f2:59:a0:48:44:2c:
3d:86:71:06:2e:07:e0:b5:cf:c9:5c:64:6b:87:1b:09:a4:31:
0a:c7:59:14:3f:71:3d:e9:b3:0b:02:4b:cb:9e:a6:78:d8:b3:
ea:49:6c:5c:5c:30:33:d5:32:84:95:db:e5:97:2e:14:21:d3:
2a:97:cc:3c:59:56:ae:b7:fa:c2:c7:9d:ce:e0:80:a3:e2:f5:
99:91:30:6b:b4:7b:20:0e:31:fb:a7:8e:a7:b3:74:b5:48:09:
a0:89:ac:14:92:b8:5d:6b:68:a5:83:62:7d:a1:17:cc:07:1f:
8e:66:d1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:13:28 2025 by rpki-client