This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
File: 4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft (raw, json)
Hash identifier: DN6lYzAUh4ri7gVWOAIHj+rrWw11Vg4PrywzXuWR+i4=
Subject key identifier: BF:55:51:55:50:E2:46:BC:8A:05:4D:2A:BE:C3:2B:68:F5:06:7F:AD
Authority key identifier: 4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
Certificate issuer: /CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Certificate serial: 33E3367D0A7EFC4A4CC33538E29C0DFF1A7FE30A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
Manifest number: 0149
Signing time: Tue 09 Dec 2025 16:08:41 +0000
Manifest this update: Tue 09 Dec 2025 16:03:41 +0000
Manifest next update: Mon 15 Dec 2025 11:09:41 +0000
Files and hashes: 1: 323830333a356239303a3a2f33322d3438203d3e20323733303438.roa (hash: vbmhuabCX3kIp1FpRu5OFaEVu9ZZo5hsFff0qsFsrQQ=)
2: 4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl (hash: sTs4ZJd8LkS99lOTzc4PHDEY+OQI0UnZFZZ98qWSc7Q=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl
rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Dec 2025 08:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e3:36:7d:0a:7e:fc:4a:4c:c3:35:38:e2:9c:0d:ff:1a:7f:e3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Validity
Not Before: Dec 9 16:03:41 2025 GMT
Not After : Dec 15 11:09:41 2025 GMT
Subject: CN=BF55515550E246BC8A054D2ABEC32B68F5067FAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1b:4f:24:67:2d:57:f6:b1:eb:32:ab:24:ec:
d9:94:22:c0:ab:b0:18:90:25:ed:73:f3:c2:7d:89:
fe:96:9f:ae:ca:b0:cb:a9:4b:55:35:72:37:6f:aa:
39:11:20:8d:d0:91:e4:79:38:d5:24:76:82:0e:0d:
a5:6c:9c:70:af:44:8a:d1:d4:a8:25:50:78:1f:10:
ed:8e:64:96:23:64:ea:76:b8:57:6a:c7:45:06:61:
75:d1:aa:ed:55:71:80:8c:a1:47:f8:ba:7f:54:18:
90:9a:60:5c:03:e3:00:fc:00:e3:61:2d:b5:eb:a3:
3d:42:e1:76:78:6d:cd:0b:4d:bb:74:68:04:2d:a7:
2c:61:e8:6b:dc:63:f1:cb:96:8f:47:2d:21:23:ab:
5f:ab:80:72:0c:f2:b3:d2:bd:a6:2c:0a:b7:ce:be:
08:8a:09:d8:a2:d4:78:47:99:a9:b6:ba:89:63:2e:
37:d2:09:7d:53:06:e0:46:c8:61:91:45:6f:40:48:
4e:be:43:a6:c5:5d:f6:50:d9:12:20:c3:33:20:03:
04:e5:f5:61:3d:aa:1b:30:28:0f:04:fa:31:c9:5e:
18:8a:6c:29:58:a5:ff:29:62:17:dc:37:89:ef:c7:
06:3c:90:48:e3:2f:81:cc:8f:1f:01:cb:05:6e:1b:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:55:51:55:50:E2:46:BC:8A:05:4D:2A:BE:C3:2B:68:F5:06:7F:AD
X509v3 Authority Key Identifier:
keyid:4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:30:3c:b8:9a:a0:85:3e:89:73:11:64:5b:23:82:1e:a7:95:
93:ea:84:3d:1f:13:9b:c9:89:8b:00:f8:f0:e5:2f:63:1c:d6:
57:b1:fd:bc:75:8e:39:55:53:1b:3b:a3:44:ba:86:82:f6:1f:
82:2b:10:67:e2:f6:cb:c3:3a:dc:f7:b6:bf:b8:f7:28:3b:e0:
60:1c:96:3f:40:9d:91:3a:2a:33:84:c2:82:14:6c:b3:98:5d:
d3:6d:54:c8:4a:52:cc:93:bb:a9:ef:bf:a0:1a:68:55:9b:21:
76:12:43:9a:38:b8:ef:9a:be:77:59:57:88:40:d9:1c:8d:12:
13:6a:6d:d3:92:70:53:dd:53:18:c7:18:0f:94:4e:e4:87:af:
02:a1:32:69:27:f9:9d:4e:60:af:34:52:c5:ac:43:fd:f9:f4:
6c:1c:14:6f:ff:cb:ff:fc:f5:24:a2:d8:25:58:0f:21:d3:87:
99:ac:7f:5c:62:32:07:a7:a1:a4:ba:4e:62:6d:81:48:8b:e5:
24:47:5c:56:90:e0:49:60:f2:e2:74:ee:9a:02:22:50:14:57:
da:9b:f3:d9:bd:21:b8:05:1d:dd:40:35:37:ba:3e:8d:d0:32:
ea:51:a1:06:27:63:e8:8a:9a:95:9e:4a:6d:3b:ea:26:1f:49:
71:fc:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 08:34:09 2025 by rpki-client