This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
File: 0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft (raw, json)
Hash identifier: 1b6xnW2IwwmndCKwYBCaug5J1RXasHM5fMtB9PINPmw=
Subject key identifier: A3:41:36:AF:72:6F:8A:F3:DE:55:E6:D8:E8:9B:57:8C:B9:4F:F8:A0
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Certificate issuer: /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial: 4BDDA8B939375B7721BAEC42C09B5326A35AF67B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
Manifest number: 0149
Signing time: Mon 08 Dec 2025 14:02:51 +0000
Manifest this update: Mon 08 Dec 2025 13:57:51 +0000
Manifest next update: Sun 14 Dec 2025 08:47:51 +0000
Files and hashes: 1: 34352e3138392e3139362e302f32342d3234203d3e20323639383538.roa (hash: hAF4R+hD0YTTUSsp8hohgdmpSs18UeLNslce1gQ0WDo=)
2: 34352e3138392e3139392e302f32342d3234203d3e20323639383538.roa (hash: C3IX2Ld4McOnmmoQVxQacw/eOCRCKY6ZhhRNBqlXkp0=)
3: 34352e3138392e3139372e302f32342d3234203d3e20323639383538.roa (hash: WIggVM1yi48ELLS46jHgJqM5lqF55JMqa6uoxRasWig=)
4: 34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa (hash: 41SOVAodcLKyryMiH1QxQTtYKkrqbxoQgUAQXwth9BY=)
5: 0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl (hash: q2zjsvpYN0okGgVNWS66SzWzFid0QtymiWy/E+ttZUs=)
6: 34352e3138392e3139362e302f32322d3232203d3e20323639383538.roa (hash: QqOAGWp08U34ckYPMhETMjIGHRx7qgeH6jP3fxVt52Y=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Dec 2025 08:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:dd:a8:b9:39:37:5b:77:21:ba:ec:42:c0:9b:53:26:a3:5a:f6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Validity
Not Before: Dec 8 13:57:51 2025 GMT
Not After : Dec 14 08:47:51 2025 GMT
Subject: CN=A34136AF726F8AF3DE55E6D8E89B578CB94FF8A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:e2:dc:96:9a:be:68:ff:53:92:9f:69:6e:
3c:d9:72:34:a0:dc:25:0e:e1:5e:8c:9c:bb:f7:dd:
ff:63:98:62:9f:26:b5:52:7a:21:ca:93:94:b4:3c:
74:82:5f:d1:db:1b:77:ae:30:86:d7:a3:66:de:50:
97:4c:4c:93:c7:82:cd:9b:35:93:56:b0:1d:29:be:
13:d9:3b:b8:09:2f:ae:fe:7c:d1:fb:27:25:9b:ed:
9b:42:72:f1:e0:68:3b:bf:86:d3:0a:fc:0f:b0:55:
0e:6c:c7:d0:ae:d8:7d:c9:99:ae:f9:94:a4:38:6d:
59:10:8a:ae:4a:ef:ec:0a:ff:bc:27:1a:66:1e:06:
61:d0:00:5b:52:78:4f:59:65:ba:98:16:98:7e:0a:
dd:0e:50:3b:73:74:37:23:59:11:80:6d:c6:b8:b8:
07:9f:b5:a6:0a:d7:01:11:c8:66:53:2f:1b:a4:79:
20:97:86:83:90:10:b4:50:e8:19:49:b2:ea:99:c3:
52:14:c4:c6:a3:cb:23:cc:0f:e4:06:98:aa:a9:b9:
a6:95:cb:46:57:84:58:24:79:95:5d:5e:d3:a1:82:
b0:76:67:c9:29:84:08:44:9a:99:ae:d8:b6:7d:a1:
18:42:70:99:38:81:1a:08:9e:07:0f:3b:5a:d8:4d:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:41:36:AF:72:6F:8A:F3:DE:55:E6:D8:E8:9B:57:8C:B9:4F:F8:A0
X509v3 Authority Key Identifier:
keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ae:dd:17:db:59:23:8a:7f:0d:ce:00:67:a0:7c:a1:16:6c:
2f:b1:4c:22:42:77:b5:a0:85:8a:b6:79:50:55:fb:04:5e:00:
5b:20:0c:bd:6a:a4:ee:5c:44:59:1b:87:22:4b:ff:05:e0:b7:
a8:fe:12:09:bb:ed:b5:47:ae:d7:e8:0f:25:30:81:d3:82:fc:
36:32:db:a8:f3:b0:7a:95:3d:0c:75:be:91:e1:dd:db:02:5f:
52:22:bf:c3:c3:44:cb:34:d9:31:96:e4:21:a0:99:6c:9b:2e:
8f:6d:70:30:da:63:82:f7:ef:83:05:51:a4:48:49:75:41:63:
be:e1:d9:39:e4:9a:77:60:b5:b6:a6:f3:00:5c:f7:9e:76:e5:
49:9f:b1:33:f5:87:3f:1e:89:81:f9:e6:94:2d:65:1a:50:99:
4f:c6:d8:a1:4e:9b:1f:6e:74:d4:74:72:b1:01:22:1d:d1:d7:
f0:ed:63:33:7b:9b:60:c8:a2:ab:28:5e:71:78:bd:ad:72:ca:
71:21:3b:51:1c:f8:14:b0:7c:fa:8a:b7:b5:ed:61:f6:e7:03:
8c:67:4e:b0:f2:f0:63:1c:41:50:78:28:49:3b:6f:5b:18:61:
23:51:fd:11:06:83:7d:bd:ca:43:3a:4f:1a:43:88:14:8d:0e:
b6:e5:f1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:33:20 2025 by rpki-client