This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft
File: 864255909469F50CE15FE2F07B617FAAD2741BE0.mft (raw, json)
Hash identifier: K7C4poafOvgwsEfPnhbrK9Frurzg4+0CI+532enkQIY=
Subject key identifier: 87:41:4F:B3:28:53:36:23:31:94:73:D4:83:BC:0E:62:41:86:CE:D5
Authority key identifier: 86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0
Certificate issuer: /CN=864255909469F50CE15FE2F07B617FAAD2741BE0
Certificate serial: 4771DCB923F928F6BA20D88F150C12C186B98132
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft
Manifest number: 012E
Signing time: Mon 17 Nov 2025 14:53:46 +0000
Manifest this update: Mon 17 Nov 2025 14:48:46 +0000
Manifest next update: Sun 23 Nov 2025 04:31:46 +0000
Files and hashes: 1: 864255909469F50CE15FE2F07B617FAAD2741BE0.crl (hash: RK5AXwxe0j1lXLA7AzegZQ8q7VMSlL5IJ5pthqSIPTw=)
2: 323830333a616631303a3a2f33322d3332203d3e20323732313232.roa (hash: vc8OTOt3siLEEkeHcBsWTWr4S72f3+sI9SPidoH5RF0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl
rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 22 Nov 2025 16:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:71:dc:b9:23:f9:28:f6:ba:20:d8:8f:15:0c:12:c1:86:b9:81:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864255909469F50CE15FE2F07B617FAAD2741BE0
Validity
Not Before: Nov 17 14:48:46 2025 GMT
Not After : Nov 23 04:31:46 2025 GMT
Subject: CN=87414FB328533623319473D483BC0E624186CED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:10:e7:88:dc:c4:0c:70:c5:55:ff:0e:25:
b6:2c:e7:4d:e7:67:84:8e:26:f9:cb:6b:db:7b:31:
99:94:6d:c0:f0:b0:9d:cc:95:75:56:9c:d3:4e:2c:
6b:d3:8f:8e:4d:6a:6b:21:23:b3:e3:30:1c:72:e6:
d2:3c:d4:92:52:5f:04:87:cb:cb:07:9c:e7:01:2f:
80:1f:2f:3b:39:1e:1c:4a:af:7e:75:89:e4:b0:cc:
b4:7a:a4:5b:e6:b9:4e:6d:9e:2a:9d:32:74:4f:04:
df:c7:6f:af:52:d6:a4:64:22:4e:b9:33:63:11:8a:
60:16:88:86:0c:b4:b7:55:ab:a9:76:5b:ab:c1:d0:
98:53:7e:af:bd:ea:05:86:15:bb:1e:43:41:ab:41:
d1:c1:af:d6:30:60:51:aa:97:bb:aa:b8:4e:17:26:
b2:e4:5e:e2:9c:80:0e:e2:92:a0:df:f6:40:72:7e:
9a:d9:b1:96:1e:f4:d7:d4:5e:dc:e6:c4:51:5e:1b:
5f:82:db:cd:7f:e2:b1:bf:b6:06:9d:f0:70:61:8c:
5a:ec:ed:9c:63:91:4f:42:f4:03:46:d3:c6:19:73:
68:45:5e:31:0f:5b:47:52:b2:46:49:8f:a7:5d:1a:
86:61:cb:e6:94:69:76:a5:a5:66:cd:14:ae:e1:c8:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:41:4F:B3:28:53:36:23:31:94:73:D4:83:BC:0E:62:41:86:CE:D5
X509v3 Authority Key Identifier:
keyid:86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c0:8a:d8:3e:5e:3c:e7:9f:d8:45:60:cf:c7:42:82:d4:40:
04:3b:a8:0b:c4:32:fa:9b:35:6c:87:21:c0:47:d3:32:d4:95:
7f:4b:1c:a5:1f:9e:f2:67:54:21:70:0e:ba:1e:d5:8b:8e:f0:
5c:e3:70:2c:7b:9c:ae:ea:c2:52:b4:ab:3b:2b:4c:63:1a:20:
ca:94:f1:3e:df:b1:db:5f:76:39:f4:41:64:ee:ac:03:ce:2b:
c4:e1:85:76:bd:2e:8e:92:51:60:3a:ae:34:1a:e1:8f:13:0a:
e2:0d:68:ed:59:18:76:8f:ec:0b:b8:c6:42:21:4b:b9:78:bb:
60:39:17:e1:6e:02:f5:6f:d3:b6:f7:56:0d:32:06:63:ea:3b:
44:dd:8a:00:bd:3f:50:6f:76:75:11:0d:4f:a8:bb:91:ba:bb:
39:0d:14:48:3d:85:f4:ba:ba:6b:b7:e4:35:68:24:92:6a:cc:
cf:53:e9:75:91:37:6f:16:7e:cd:ba:67:f5:50:51:67:b1:d2:
ab:dd:5e:17:87:79:10:5f:98:6f:29:3f:80:9d:6b:5f:8e:f3:
ff:96:41:9a:6c:ad:f7:8d:5f:e2:ad:2c:d3:e8:da:20:0d:60:
d5:14:59:41:11:09:15:22:58:e8:52:64:d6:ec:d2:05:2c:6e:
42:80:db:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 19 12:33:20 2025 by rpki-client