This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.mft
File: EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.mft (raw, json)
Hash identifier: M7+hp5OLiUYPWLPePyhF6vVbKmI5Ml9r6SHG7JahXAE=
Subject key identifier: 1E:1D:B0:23:A6:F6:03:9C:ED:97:3F:96:AE:28:23:6D:46:79:7A:3F
Authority key identifier: EF:B3:9A:52:5E:EB:65:C9:FE:9C:A4:4F:A6:CD:FC:90:61:E1:F6:63
Certificate issuer: /CN=EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663
Certificate serial: 2D5F4E67CE2C0D5B8587269D86C8549F28A1F04A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.mft
Manifest number: F0
Signing time: Mon 08 Dec 2025 14:53:21 +0000
Manifest this update: Mon 08 Dec 2025 14:48:21 +0000
Manifest next update: Sun 14 Dec 2025 12:08:21 +0000
Files and hashes: 1: EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.crl (hash: M/z1PT45kkIpiPdc0wfLG/6HJVFCaVKsuxdH6D0O5eg=)
2: 323830363a3432393a3a2f33322d3438203d3e20323732343035.roa (hash: 04uNrjD9SyoFrwTu2gLzy2dGE0C+WA5gVuPESuhnxDs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.crl
rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Dec 2025 12:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:5f:4e:67:ce:2c:0d:5b:85:87:26:9d:86:c8:54:9f:28:a1:f0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663
Validity
Not Before: Dec 8 14:48:21 2025 GMT
Not After : Dec 14 12:08:21 2025 GMT
Subject: CN=1E1DB023A6F6039CED973F96AE28236D46797A3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:e2:20:0c:20:5e:21:bf:c9:58:ae:86:ab:
3b:78:d2:e4:d1:8f:0a:0b:d8:c8:ef:38:72:a2:3a:
c7:1b:7f:7b:7b:7b:00:9c:ef:b2:b7:ab:a7:7b:a7:
bf:36:02:98:07:ec:30:57:04:32:5a:e9:a0:55:f3:
da:fc:68:41:3e:93:e3:c1:ce:6c:e2:1f:7d:a2:38:
bf:b1:94:db:65:eb:9d:aa:f1:f5:c0:fa:14:9c:42:
18:d6:10:ef:49:b3:97:26:ac:5d:e0:9e:99:69:38:
6e:12:d4:11:c9:3b:c5:fe:ca:cc:a7:ac:3e:5e:31:
0d:1b:44:4a:0b:b6:1e:d8:15:6e:c5:5b:22:02:ea:
a2:20:6b:d8:54:24:d7:04:74:35:ba:e6:05:0e:ff:
6e:c7:0c:80:95:1a:9b:21:e5:e1:a7:43:95:1e:02:
ed:df:6a:84:9e:cf:3f:c9:19:fe:c0:d7:06:6f:99:
79:d7:2b:14:66:41:96:5e:58:b9:bb:b8:c2:87:fd:
22:cd:80:6f:91:f2:d3:fb:c5:27:4c:0f:a9:ef:8d:
e6:c7:88:59:19:07:7c:7e:49:e5:ba:37:c5:31:dc:
90:48:8e:99:20:d0:dd:be:af:db:85:3b:65:f6:79:
c4:fd:ae:a0:48:75:74:c7:89:9a:c5:48:5e:44:7a:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1D:B0:23:A6:F6:03:9C:ED:97:3F:96:AE:28:23:6D:46:79:7A:3F
X509v3 Authority Key Identifier:
keyid:EF:B3:9A:52:5E:EB:65:C9:FE:9C:A4:4F:A6:CD:FC:90:61:E1:F6:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:29:67:d9:30:81:f7:1e:98:82:a3:fb:9e:47:d9:ac:7c:fb:
3b:38:ec:be:74:be:fd:17:b9:3f:9c:56:e2:14:06:5b:55:74:
fd:48:ae:6a:a7:55:4c:5d:86:0c:ff:78:bd:6e:73:ce:a9:e3:
89:6b:3d:ab:0a:f0:0a:60:83:c0:ae:2a:bb:b4:79:42:75:b3:
fd:59:6d:55:01:55:c3:64:ca:20:fd:cb:66:c6:a8:4b:56:31:
fe:4c:41:cf:8b:ce:90:af:d2:25:81:84:66:f9:70:1d:71:ff:
66:b8:41:13:50:39:56:19:ab:43:9b:da:a9:db:6d:94:fb:83:
00:65:b8:9e:a4:c2:d9:b1:a2:27:00:b2:e3:c7:1b:80:4d:cf:
64:dc:ff:c8:53:1b:22:c6:d3:23:77:ed:70:53:06:dc:f9:65:
64:61:d4:99:99:d8:a5:6a:2c:9d:48:79:6d:16:08:f8:a8:63:
ee:94:89:7b:f7:d2:73:ea:6c:c3:f6:ca:d7:ca:4a:9c:c2:57:
7e:8a:9a:62:f5:f0:e5:e2:62:50:57:3f:ec:4f:25:22:65:dc:
d2:a7:8b:74:c7:89:04:59:2d:c3:14:72:29:ac:ae:f4:07:d7:
37:d8:2f:aa:c5:91:7e:f7:2e:47:88:a8:fb:ae:fd:a1:48:1b:
3d:71:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 00:24:09 2025 by rpki-client