This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
File: 2D420DA52C4FED64C64081F978E8485CD8161A81.mft (raw, json)
Hash identifier: /4NkCYtNxpRHntOmDeEPifeG2jKOQ6ig+JnZkzMclzQ=
Subject key identifier: D0:C6:D3:B4:30:ED:37:CD:FF:3B:84:DC:C1:0C:0E:69:38:B7:D2:5A
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Certificate issuer: /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial: 02A7EF5AC7AB4352A880006E89CC538AB6EBD55B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
Manifest number: 013E
Signing time: Mon 08 Dec 2025 20:31:33 +0000
Manifest this update: Mon 08 Dec 2025 20:26:33 +0000
Manifest next update: Sat 13 Dec 2025 07:21:33 +0000
Files and hashes: 1: 34352e3137332e302e302f32322d3234203d3e203631343531.roa (hash: GGuVym2kL4T0FmdZd9rq4sGSSWcGiS/epeSrSrFw9qw=)
2: 3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa (hash: /Z7LPAsuTjZ5cwTBvnVpQcKSEa9rH/diyzx0Hq8W+6o=)
3: 3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa (hash: 1oYXiRs6rlIee7gSCsds1xIN8M3Wto/5rLLuEM7RJ/4=)
4: 323830333a633036303a3a2f33322d3332203d3e203631343531.roa (hash: y+kZpxvB2vqV6FoA3lmooqJCJtir3RHk1ikwbeAOmdU=)
5: 3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa (hash: rZzDnwa0MPMnAUQI/T5MjhsAO3J26Ue6xAm2FQO/eiA=)
6: 2D420DA52C4FED64C64081F978E8485CD8161A81.crl (hash: +iR/jE3rAxXgB86tbLvk5rgKjn7TyqvV0uIdfvKdbTI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 13 Dec 2025 07:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a7:ef:5a:c7:ab:43:52:a8:80:00:6e:89:cc:53:8a:b6:eb:d5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Validity
Not Before: Dec 8 20:26:33 2025 GMT
Not After : Dec 13 07:21:33 2025 GMT
Subject: CN=D0C6D3B430ED37CDFF3B84DCC10C0E6938B7D25A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:34:11:a6:d9:47:4e:43:31:08:a7:80:2f:
41:59:52:cc:a5:7c:03:bc:23:3a:64:1c:46:9c:10:
c8:57:c8:3f:6e:b7:43:2b:52:7c:c1:a6:df:4e:98:
db:a9:b4:c5:35:b1:3f:e4:dd:da:47:e5:d9:67:c8:
45:65:40:58:53:65:16:7c:2c:50:aa:a9:aa:01:02:
8d:8d:08:5d:3b:21:08:f1:32:33:8c:c6:aa:bc:a9:
b7:ce:bb:f1:ca:46:c9:e8:70:1c:8b:18:65:b3:80:
80:6c:03:2f:10:ca:5c:c8:8e:c7:39:18:99:c2:a6:
fd:07:1e:06:49:2b:b8:51:82:45:b7:80:cb:99:be:
2b:18:2f:10:54:63:91:f7:be:e8:90:99:6c:58:6d:
ca:85:e2:ca:2c:a1:8a:e9:61:fd:58:38:0b:d9:55:
be:d0:59:6e:71:a1:9b:95:b5:60:9c:51:d5:a9:ab:
81:66:fb:f7:ba:0d:dd:81:40:a4:3f:00:4f:91:e2:
a1:41:59:5f:68:58:37:3b:a7:59:8d:1b:be:a8:19:
e7:99:65:22:5c:f0:66:46:14:46:87:ae:24:d3:ee:
3d:b5:2c:a0:bd:da:2d:5e:c2:0c:e1:61:b8:62:e0:
73:61:6b:ee:a9:ef:53:9e:e9:0f:2b:79:b7:3d:d0:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C6:D3:B4:30:ED:37:CD:FF:3B:84:DC:C1:0C:0E:69:38:B7:D2:5A
X509v3 Authority Key Identifier:
keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:55:dd:a5:de:cd:38:ed:ff:db:52:08:57:89:b0:c7:e5:03:
6e:83:99:d2:e3:2c:2a:58:ff:27:4c:de:c1:c2:de:2f:f5:00:
db:37:61:bb:6d:69:3b:72:bd:e1:66:32:7f:03:ce:ba:66:e1:
e1:84:5d:5a:82:04:0e:fc:fa:5c:df:8b:65:5e:82:6b:9e:8f:
f7:20:a2:4f:30:fc:07:06:95:cb:18:1c:57:d0:b6:3c:85:f1:
fc:02:5e:f6:8b:0c:2f:76:0a:11:60:a6:dd:f3:e2:69:12:57:
c1:e4:68:5f:36:b3:af:e9:e3:2f:8d:77:17:03:84:26:1d:4e:
5e:ad:25:72:3d:92:bd:72:86:0f:d2:d5:59:5c:f9:f4:02:31:
78:ec:31:9e:5b:20:1d:99:1c:f3:56:ef:be:76:6c:4b:c2:3e:
3f:9a:e5:26:8f:12:be:a6:9a:87:e0:37:53:6c:10:74:bf:7b:
28:b0:ad:98:0c:f6:70:53:47:72:33:3c:bf:a8:c5:cc:8a:c6:
e1:3a:c8:c7:e2:98:73:99:5e:3e:99:f0:96:b6:a5:8d:5b:0c:
54:ab:b4:f0:74:c1:2b:14:58:6a:18:89:8e:2e:c6:4e:76:43:
4b:8c:81:20:20:d4:03:12:77:d0:a4:9d:19:11:f4:b5:5e:44:
36:26:43:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:38:51 2025 by rpki-client