This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft
File: 89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft (raw, json)
Hash identifier: K3ASbG9XGFaa8nCb8W/07+ZcAUSWxCxWmFIGk7DdrCQ=
Subject key identifier: 1A:19:E7:62:53:A7:AC:91:8A:B5:D6:4E:82:DC:E6:DA:3A:54:0E:27
Authority key identifier: 89:D9:CC:04:70:C7:AC:B3:61:4E:88:23:D1:7A:12:7C:C1:79:6D:04
Certificate issuer: /CN=89D9CC0470C7ACB3614E8823D17A127CC1796D04
Certificate serial: 230DCF25231234977EA787C20ED2757497459EB3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft
Manifest number: 0148
Signing time: Thu 18 Dec 2025 22:07:25 +0000
Manifest this update: Thu 18 Dec 2025 22:02:25 +0000
Manifest next update: Tue 23 Dec 2025 23:21:25 +0000
Files and hashes: 1: 89D9CC0470C7ACB3614E8823D17A127CC1796D04.crl (hash: RIt9Ye3FRDa/ihuGilTndSWFClWehlJYNXHeQ6Hfu7o=)
2: 3230312e3135382e302e302f32312d3234203d3e203238353134.roa (hash: Ea8o3oZdw6ZJj9JYOtchjRQ9TOMSE5LkhaJDTyIxyKA=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.crl
rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 23:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:0d:cf:25:23:12:34:97:7e:a7:87:c2:0e:d2:75:74:97:45:9e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89D9CC0470C7ACB3614E8823D17A127CC1796D04
Validity
Not Before: Dec 18 22:02:25 2025 GMT
Not After : Dec 23 23:21:25 2025 GMT
Subject: CN=1A19E76253A7AC918AB5D64E82DCE6DA3A540E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3c:91:0a:37:e6:09:32:73:de:a5:52:1b:0e:
9a:c2:be:9d:a7:1d:4d:f0:25:b0:5f:4d:5e:33:3f:
9a:66:34:67:9e:7c:03:41:48:4b:7c:39:12:45:50:
30:d4:dc:f0:c4:b1:92:b4:0d:65:0f:6c:14:24:72:
f0:4e:af:46:50:fd:66:9d:69:f9:cd:24:75:3b:3d:
1a:ce:e3:c9:d0:d5:e7:bc:d7:0d:a9:6d:df:20:bf:
ef:58:f2:90:f4:91:ce:58:7b:44:4a:36:d8:25:da:
15:1a:90:37:06:4e:f7:ce:d3:3c:50:45:b6:fc:6d:
42:b0:54:1a:7d:60:79:9f:41:00:1e:3e:05:f4:4a:
c6:44:37:3b:8f:95:4b:5a:a7:20:ec:b7:d2:c6:8c:
ee:ca:32:a8:f7:dd:14:58:1b:4c:33:14:86:a4:b9:
02:68:c0:f0:70:26:be:0d:0c:f7:02:b9:0b:eb:51:
3a:49:56:f5:1f:f6:7a:ce:19:16:bd:fd:59:3f:88:
f1:90:8b:56:d7:2f:73:87:e0:8c:5f:46:2c:cf:af:
0a:1a:d1:fb:9c:9d:eb:1d:b7:73:03:e4:2c:35:d0:
ec:dd:dd:bb:fb:9f:1c:46:42:20:c0:e3:30:dd:c9:
20:e5:b9:16:5c:22:fc:aa:8c:ac:e6:18:84:4a:80:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:19:E7:62:53:A7:AC:91:8A:B5:D6:4E:82:DC:E6:DA:3A:54:0E:27
X509v3 Authority Key Identifier:
keyid:89:D9:CC:04:70:C7:AC:B3:61:4E:88:23:D1:7A:12:7C:C1:79:6D:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:35:3d:32:0a:8d:25:10:28:15:93:82:50:26:56:e1:46:7d:
75:75:d2:f4:86:c5:9b:9c:98:c7:4a:de:a8:37:d5:3b:a2:b1:
17:64:03:db:5b:15:47:b9:f3:60:76:98:64:43:33:e9:f3:87:
ab:10:53:3d:76:ff:7e:47:40:50:4c:ce:00:16:bd:90:76:f1:
a9:cb:21:0d:71:09:2a:d4:49:68:be:af:d7:01:01:b6:5b:23:
f5:3b:ef:00:50:c8:66:04:8a:7b:28:16:9c:05:29:19:c8:b7:
68:99:aa:73:d0:c7:26:03:e4:a3:4d:c0:e4:4c:fc:68:af:a6:
8e:c8:44:3d:63:43:5a:8b:f6:24:c6:e4:fe:e9:27:26:4e:e3:
98:dd:f9:63:77:72:34:08:31:97:ac:77:06:67:bb:71:cb:74:
92:30:0d:40:d3:64:45:41:a9:28:fd:95:15:5d:fc:c4:60:9e:
c4:8d:7b:9b:3e:01:6c:91:29:d3:8e:c0:c6:33:e5:59:ed:f0:
22:c7:60:f2:50:ef:cc:7f:76:9f:7d:59:78:21:fc:c9:29:fd:
24:d9:2d:83:35:69:df:5b:d7:b9:0e:9a:1e:3b:dc:1b:40:a9:
52:74:a9:16:e4:0e:39:68:55:79:dc:6d:89:b7:de:b5:61:01:
f3:8c:06:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:55:07 2025 by rpki-client