This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
File: 3424CAC085E77B82A8878925FC49A646944DB380.mft (raw, json)
Hash identifier: kKPDR0pAmAonyWVU7Bc64WKHn+8+xTola3EVS8U9w1g=
Subject key identifier: 0C:1B:B9:51:47:02:DE:C8:E1:62:C3:12:C9:D4:55:77:88:AF:59:29
Authority key identifier: 34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
Certificate issuer: /CN=3424CAC085E77B82A8878925FC49A646944DB380
Certificate serial: 40B9404E47B87CBCCBFC1ADAA402FAC4AC05A955
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
Manifest number: 013E
Signing time: Sat 22 Nov 2025 06:43:14 +0000
Manifest this update: Sat 22 Nov 2025 06:38:14 +0000
Manifest next update: Fri 28 Nov 2025 04:17:14 +0000
Files and hashes: 1: 323830333a666634303a3a2f33322d3332203d3e20323633373939.roa (hash: P8b7ZOEerp/NGHhCOgMX088+SfPKoRjkexqL8HKe8+4=)
2: 3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa (hash: 256L5xAhaOtJaHtIXft9UY+WCURmLfsxx/fWc1QYxOY=)
3: 3424CAC085E77B82A8878925FC49A646944DB380.crl (hash: RnAyJlinjoVESO7GFcZeLS1bzhWXqzmDMlnoQNS5y/A=)
4: 3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa (hash: EXnLTY5U73HI8SEYhr8O6uuT4l4emJMRsqDGEG/d054=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Nov 2025 18:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b9:40:4e:47:b8:7c:bc:cb:fc:1a:da:a4:02:fa:c4:ac:05:a9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3424CAC085E77B82A8878925FC49A646944DB380
Validity
Not Before: Nov 22 06:38:14 2025 GMT
Not After : Nov 28 04:17:14 2025 GMT
Subject: CN=0C1BB9514702DEC8E162C312C9D4557788AF5929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:51:0e:87:1b:ae:e2:c1:f7:c7:24:b8:a3:
10:58:28:0d:d3:25:40:34:3e:9f:38:ae:86:6e:27:
0b:29:92:ea:29:a0:1c:56:a1:f2:89:80:f4:4a:df:
87:6f:65:aa:f0:9d:ad:d8:2e:cf:41:0e:1e:e5:0c:
ff:35:6e:31:ce:32:df:09:a0:61:35:a7:7e:fd:68:
fc:b5:d0:88:ef:ac:35:8d:dc:6d:bf:ce:40:c0:08:
21:fb:a9:7a:ed:75:a9:56:73:c5:79:98:d3:0a:05:
e7:35:bd:60:d5:4b:58:cd:e8:41:de:4b:24:44:a2:
db:0c:87:9e:63:ba:c4:7d:3a:65:d3:f2:66:56:c8:
71:63:77:be:f6:16:4f:86:13:4e:83:0e:5c:ae:71:
92:5a:0e:26:a5:9a:6b:14:4f:db:b0:b1:9e:7b:e3:
c2:e2:3b:6a:f3:40:4c:36:4f:87:d5:44:66:86:b6:
74:d7:c2:61:bf:8b:bd:bd:66:6b:ce:a8:76:49:98:
f4:db:73:01:24:60:e0:a8:db:97:cb:1e:d2:4b:6b:
2f:b4:62:61:52:95:1a:0c:1c:d3:94:5e:73:83:6f:
7a:91:75:6b:65:59:dd:1f:0e:df:75:13:d2:12:b2:
f9:57:2b:38:ac:97:d8:0b:d0:10:c5:2a:49:58:eb:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1B:B9:51:47:02:DE:C8:E1:62:C3:12:C9:D4:55:77:88:AF:59:29
X509v3 Authority Key Identifier:
keyid:34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:17:6e:60:62:b6:f8:71:c7:72:f1:7e:b0:e5:c0:8b:38:f9:
c2:b0:7e:e8:6f:e9:06:bb:5e:f2:f0:f2:dd:a8:90:36:ea:4f:
a8:59:c9:5f:a0:09:22:84:88:9e:fa:b1:d6:6b:ac:26:37:22:
e2:56:07:7a:c8:2b:a9:84:18:16:90:68:fa:92:f9:73:96:e4:
7e:5c:18:88:82:e2:30:6a:fc:34:3a:27:69:21:af:d9:37:08:
11:c6:c9:d6:68:90:ea:02:87:42:ec:a2:b2:96:1f:7a:b4:2d:
0c:3f:5a:9b:0d:f0:0b:b6:d2:63:c1:5e:ae:49:d8:a6:f9:54:
27:44:03:3d:f1:37:1c:10:8d:e2:97:e4:f7:53:62:64:2c:55:
2d:86:72:2b:0d:1f:08:6d:06:b6:c3:65:b9:c3:2b:e2:06:1a:
57:3e:fd:80:27:ef:a6:31:3b:a4:21:77:5c:67:62:a0:36:6f:
2b:55:11:84:87:b4:6b:56:cc:14:3a:6d:f0:dc:fc:c9:01:68:
41:72:e7:2b:e5:94:6b:09:56:64:f9:99:9d:eb:3b:79:9c:c8:
5b:83:ba:43:dd:cb:7c:74:04:bc:d7:19:1b:2b:1c:96:8e:69:
08:e6:71:54:77:7d:8a:ea:80:04:a7:c4:96:8f:23:e5:c3:b7:
22:e7:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 20:33:13 2025 by rpki-client