This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.mft
File: BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.mft (raw, json)
Hash identifier: 0RgHplcJm8A+zKt/UMd3Su2d52VSDmzVh/T/tfvt+ng=
Subject key identifier: 88:8F:E3:ED:96:E3:47:4D:74:F9:52:A9:E0:C8:37:19:17:F9:1D:A8
Authority key identifier: BA:AC:19:52:28:2A:23:54:3D:0C:7E:9E:FF:AA:B7:C6:B7:E0:E6:D9
Certificate issuer: /CN=BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9
Certificate serial: 7A4289B1D107FB7894A94C94881A2AA2F0DC3159
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.mft
Manifest number: 67
Signing time: Wed 03 Dec 2025 11:16:41 +0000
Manifest this update: Wed 03 Dec 2025 11:11:41 +0000
Manifest next update: Mon 08 Dec 2025 10:45:41 +0000
Files and hashes: 1: BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.crl (hash: Uq4Y5Pi8WXqQc2jx0oj/9Xhr1UwiQDXAeL9tsDyZ4kM=)
2: 323830313a31643a633830303a3a2f34382d3438203d3e203237393531.roa (hash: eRA51InoFfbUQH4QJDMlvrHhuieUMfGl89GSTYzDZJQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.crl
rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:42:89:b1:d1:07:fb:78:94:a9:4c:94:88:1a:2a:a2:f0:dc:31:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9
Validity
Not Before: Dec 3 11:11:41 2025 GMT
Not After : Dec 8 10:45:41 2025 GMT
Subject: CN=888FE3ED96E3474D74F952A9E0C8371917F91DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:87:0f:5b:67:8d:bb:0d:11:37:a0:15:6b:
23:b4:d5:54:fa:4d:f4:e0:5a:f5:0b:3b:e6:10:19:
a5:3c:6e:fd:c0:b4:c4:a8:bd:1b:dd:be:c0:47:fd:
c1:fc:81:a7:ed:ca:b5:32:21:aa:79:0c:ac:74:d6:
e3:6e:79:00:f3:ef:56:d4:19:4b:18:cb:31:b8:bf:
1a:f0:0b:20:d4:43:34:92:b4:72:18:30:33:29:08:
31:5a:90:a3:9f:8f:55:a9:2e:0b:a6:b5:ee:80:7a:
0c:fd:76:1c:5b:93:0d:80:1f:b9:47:a6:b7:71:8e:
6b:81:b9:15:6b:cd:ff:3b:37:9f:af:3a:9b:01:30:
49:1f:fe:65:56:70:85:4e:c9:c0:fe:d6:e6:56:57:
cb:2a:38:ad:47:76:84:e2:78:f7:d0:c3:84:3e:5b:
a5:20:17:58:fa:69:63:30:93:2d:af:d3:a1:53:85:
1c:c7:fa:b0:75:df:51:53:b5:6d:09:45:86:7f:45:
c0:f8:e6:50:ee:db:e7:e1:c1:3b:86:c3:cc:a3:32:
b7:9d:4c:87:3e:d6:63:0e:68:d0:64:59:81:4a:84:
53:66:80:4b:a8:53:56:13:b0:7d:ad:d6:44:07:ff:
44:64:ac:af:d8:44:b4:5a:75:d7:4b:63:4a:46:ec:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8F:E3:ED:96:E3:47:4D:74:F9:52:A9:E0:C8:37:19:17:F9:1D:A8
X509v3 Authority Key Identifier:
keyid:BA:AC:19:52:28:2A:23:54:3D:0C:7E:9E:FF:AA:B7:C6:B7:E0:E6:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:94:06:13:44:b3:7c:f3:bf:b6:18:9f:18:42:fd:69:39:0f:
10:f1:30:b8:49:73:2e:88:53:18:16:1e:77:96:07:d3:22:f9:
1a:4c:aa:78:e9:11:0e:90:4a:bd:1a:cf:ca:bc:2d:11:4d:30:
e3:49:6d:3b:3d:96:54:a1:2f:6e:9a:ae:47:b7:06:2e:83:08:
c7:55:ea:80:b0:71:fc:0a:04:2c:b6:3f:2f:18:78:2c:be:96:
dd:fd:9e:f2:84:89:a7:00:0c:e8:5a:77:64:cf:25:ed:82:3a:
b6:61:16:5e:f6:f8:64:f4:c0:b5:9f:c6:c1:f9:ae:e9:8b:64:
88:af:ed:31:05:73:11:bc:9c:7b:fc:ac:ac:08:44:9d:d3:5c:
da:d9:de:81:43:05:12:32:ef:81:86:bc:a2:a2:0c:0e:ae:4b:
8f:8e:c8:72:b4:d9:06:4f:04:a0:b1:35:22:5d:f0:cf:93:03:
5a:3e:0a:4e:2a:58:f8:df:85:57:54:25:20:f0:43:ac:e3:b0:
f2:07:c1:f7:9b:c6:4f:21:20:76:62:c7:56:eb:1a:ff:f1:20:
66:50:32:95:2f:c6:89:e2:9b:e8:0d:3a:d1:87:a3:83:20:a1:
1c:d6:27:96:cd:a4:b0:e7:98:90:9f:03:13:79:d1:04:a0:1a:
14:fb:f8:3c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUekKJsdEH+3iUqUyUiBoqovDcMVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFBQzE5NTIyODJBMjM1NDNEMEM3RTlFRkZBQUI3QzZC
N0UwRTZEOTAeFw0yNTEyMDMxMTExNDFaFw0yNTEyMDgxMDQ1NDFaMDMxMTAvBgNV
BAMTKDg4OEZFM0VEOTZFMzQ3NEQ3NEY5NTJBOUUwQzgzNzE5MTdGOTFEQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uYcPW2eNuw0RN6AVayO01VT6
TfTgWvULO+YQGaU8bv3AtMSovRvdvsBH/cH8gaftyrUyIap5DKx01uNueQDz71bU
GUsYyzG4vxrwCyDUQzSStHIYMDMpCDFakKOfj1WpLgumte6Aegz9dhxbkw2AH7lH
prdxjmuBuRVrzf87N5+vOpsBMEkf/mVWcIVOycD+1uZWV8sqOK1HdoTiePfQw4Q+
W6UgF1j6aWMwky2v06FThRzH+rB131FTtW0JRYZ/RcD45lDu2+fhwTuGw8yjMred
TIc+1mMOaNBkWYFKhFNmgEuoU1YTsH2t1kQH/0RkrK/YRLRadddLY0pG7KyNAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUiI/j7ZbjR010+VKp4Mg3GRf5HagwHwYDVR0j
BBgwFoAUuqwZUigqI1Q9DH6e/6q3xrfg5tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNjEzRTk5NDU5NkRCQTZBOUFDMEZFNUU0Nzk0MTM2OEVE
RjgyMUI5NjgwRTA2QkEyQzg5NjAwODM0OUMxMTc2LzAvQkFBQzE5NTIyODJBMjM1
NDNEMEM3RTlFRkZBQUI3QzZCN0UwRTZEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQUFDMTk1MjI4MkEyMzU0M0Qw
QzdFOUVGRkFBQjdDNkI3RTBFNkQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjYxM0U5OTQ1OTZEQkE2QTlBQzBGRTVFNDc5NDEzNjhFREY4MjFCOTY4
MEUwNkJBMkM4OTYwMDgzNDlDMTE3Ni8wL0JBQUMxOTUyMjgyQTIzNTQzRDBDN0U5
RUZGQUFCN0M2QjdFMEU2RDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBblAYTRLN887+2GJ8YQv1pOQ8Q
8TC4SXMuiFMYFh53lgfTIvkaTKp46REOkEq9Gs/KvC0RTTDjSW07PZZUoS9umq5H
twYugwjHVeqAsHH8CgQstj8vGHgsvpbd/Z7yhImnAAzoWndkzyXtgjq2YRZe9vhk
9MC1n8bB+a7pi2SIr+0xBXMRvJx7/KysCESd01za2d6BQwUSMu+BhryiogwOrkuP
jshytNkGTwSgsTUiXfDPkwNaPgpOKlj434VXVCUg8EOs47DyB8H3m8ZPISB2YsdW
6xr/8SBmUDKVL8aJ4pvoDTrRh6ODIKEc1ieWzaSw55iQnwMTedEEoBoU+/g8
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:18:23 2025 by rpki-client