This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
File: 2D420DA52C4FED64C64081F978E8485CD8161A81.mft (raw, json)
Hash identifier: /GKq5wdu9XDpbsvO3RA/WpWT2c2tySoPGS0JY6w++t8=
Subject key identifier: 9B:2B:7D:7D:C9:34:43:56:DA:A9:C3:04:08:DF:F3:76:00:66:2F:D0
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Certificate issuer: /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial: 768F63203BF5F203DEDD113781306AAF39D81ECA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
Manifest number: 0159
Signing time: Tue 27 Jan 2026 20:27:56 +0000
Manifest this update: Tue 27 Jan 2026 20:22:56 +0000
Manifest next update: Sun 01 Feb 2026 02:40:56 +0000
Files and hashes: 1: 3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa (hash: +DpAbksORTScTSriBErvBnV4AH2ePw0j36QFfH02aFI=)
2: 34352e3137332e302e302f32322d3234203d3e203631343531.roa (hash: AdjIKz6Nels2dhwXWp6EKIPfwBZmvhJdNx8CyYWHGao=)
3: 3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa (hash: sIOThUcQTanpBtFFWyJfRelgsmR3o4AWTlypmW/lm64=)
4: 2D420DA52C4FED64C64081F978E8485CD8161A81.crl (hash: P3N96YMveFk90JKazLNcVarNl8bgTx/HA58KtlEC+iU=)
5: 323830333a633036303a3a2f33322d3332203d3e203631343531.roa (hash: L+ywmizwf83korHEOAc77B04u3MNpX37wQ9frbNDUX0=)
6: 3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa (hash: RmhvMSewm57XjZWYjQ6FqQiuRZEOLVHefEqSR3AIuXM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 02:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8f:63:20:3b:f5:f2:03:de:dd:11:37:81:30:6a:af:39:d8:1e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Validity
Not Before: Jan 27 20:22:56 2026 GMT
Not After : Feb 1 02:40:56 2026 GMT
Subject: CN=9B2B7D7DC9344356DAA9C30408DFF37600662FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bc:65:3a:ff:5e:81:3d:78:f8:66:e0:41:5d:
12:20:9c:49:60:92:c4:13:57:f9:98:20:d9:37:eb:
19:6b:8e:ff:a4:73:87:8e:de:03:16:7f:e7:bd:47:
53:10:3b:c0:f3:b5:eb:65:12:4c:4b:ba:d9:26:5d:
be:0d:04:9e:24:25:d6:d9:96:07:fa:11:4c:ca:d4:
7a:3b:43:45:9e:dc:ce:34:57:54:d9:75:26:f5:b1:
1f:93:23:85:68:31:7b:24:c3:d6:f3:44:f3:93:3a:
6d:0f:21:3e:7f:00:fa:e0:fd:ab:79:05:23:cd:ee:
a0:0b:f5:bb:8f:18:69:8d:8c:90:0a:1e:ba:a3:47:
9c:9b:34:f3:c5:9a:41:eb:b5:fe:e1:e2:e4:49:6b:
b6:9f:94:c4:de:e0:5f:c7:e7:d6:c7:21:23:b0:78:
ec:64:77:27:95:0d:cf:36:03:8f:bb:6a:31:5c:5d:
91:9f:b3:ac:08:16:78:9b:b0:5b:7f:4f:96:20:62:
77:12:83:d4:5f:9e:b2:3d:52:cc:c8:93:37:8a:1f:
8f:a8:b7:e9:cd:60:ed:e3:d6:66:51:0b:9f:7e:7d:
7b:3e:86:e0:e5:5e:59:cb:6c:9a:5a:4c:4d:09:80:
ba:44:b3:21:18:41:16:43:fd:69:13:73:fa:ad:cf:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:7D:7D:C9:34:43:56:DA:A9:C3:04:08:DF:F3:76:00:66:2F:D0
X509v3 Authority Key Identifier:
keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:54:97:2a:cc:2e:f8:96:bc:d7:b1:00:3e:f2:2f:4c:ec:43:
6d:80:51:16:66:46:1b:ba:fb:69:95:32:bc:c9:64:09:74:93:
08:06:d4:7c:83:9f:0a:0e:38:30:ad:5b:07:e9:74:86:eb:85:
2c:ce:6d:ca:c4:c1:ce:bd:54:5f:9b:a2:89:c5:33:f0:4f:a5:
b7:74:65:df:8e:10:7f:93:79:70:09:43:2a:27:0f:5d:59:6b:
06:97:b3:44:d4:9a:da:a2:60:bd:62:97:fb:e4:35:01:d4:c9:
b9:84:f2:fb:a2:0a:a9:ff:3a:fb:ca:32:3c:1a:28:f4:95:5a:
7b:f4:88:20:64:78:1d:0b:ab:cb:84:e9:d5:e4:de:7b:d9:59:
55:6c:e7:d6:0d:70:8c:26:61:a0:e2:9b:9e:fa:9c:9d:0d:b9:
43:63:33:1e:e0:8d:0d:e5:4a:c8:31:f1:7a:c3:97:22:1e:70:
44:b8:2d:89:f3:73:31:49:0c:69:5f:18:f6:ee:2d:57:b2:10:
d5:9b:5e:ec:26:4f:1f:80:30:a2:85:f0:c6:db:51:77:6e:c7:
63:04:74:e3:c8:b7:3c:12:68:5b:47:98:3e:46:de:c1:a0:c4:
3a:73:6d:50:4f:92:20:16:9a:32:d7:c5:cf:26:0e:db:34:de:
25:0b:89:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 03:38:44 2026 by rpki-client