This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
File: 4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft (raw, json)
Hash identifier: e0hA+kUaMPAQHJFhXA5StYowQ4V7DzT28ypMxuBTS6g=
Subject key identifier: 52:BA:92:FC:07:89:E4:D9:E4:CE:1C:E2:21:72:69:17:15:BB:A4:1A
Authority key identifier: 4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
Certificate issuer: /CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Certificate serial: 23D93254549B58D87B7633004934F3E711B60D4E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
Manifest number: 0150
Signing time: Mon 22 Dec 2025 12:27:31 +0000
Manifest this update: Mon 22 Dec 2025 12:22:31 +0000
Manifest next update: Sat 27 Dec 2025 06:29:31 +0000
Files and hashes: 1: 323830333a356239303a3a2f33322d3438203d3e20323733303438.roa (hash: vbmhuabCX3kIp1FpRu5OFaEVu9ZZo5hsFff0qsFsrQQ=)
2: 4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl (hash: jicE0mrdwjsGO68JDJwyGIQmtBomwlTL8yLGAsRnsz0=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl
rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 27 Dec 2025 06:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d9:32:54:54:9b:58:d8:7b:76:33:00:49:34:f3:e7:11:b6:0d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Validity
Not Before: Dec 22 12:22:31 2025 GMT
Not After : Dec 27 06:29:31 2025 GMT
Subject: CN=52BA92FC0789E4D9E4CE1CE22172691715BBA41A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:72:fc:db:24:e0:a8:38:51:d5:da:3e:a3:1a:
2f:f0:b2:0a:2a:f2:16:ee:8f:6f:37:6f:73:a9:49:
28:f1:7f:a9:c4:fb:e0:16:45:f4:f1:11:7e:50:39:
19:6e:50:6f:22:b5:34:8c:fb:f8:be:13:7f:17:d7:
66:5d:48:5e:12:b1:e8:16:75:ee:43:13:35:c6:ca:
78:cc:4b:3d:a5:c7:4d:95:8d:68:f2:30:ec:78:13:
b8:36:0f:5e:41:a2:2f:d4:f0:40:aa:87:d2:a8:2a:
2d:27:c1:50:78:a9:ef:9d:6b:50:55:77:7b:89:7a:
17:14:3c:66:45:67:8c:a1:18:25:de:c1:64:e4:c0:
2b:78:ae:f0:a8:07:54:da:da:79:69:bf:42:7d:86:
aa:46:17:28:c1:20:54:81:c7:87:71:c8:fc:4a:dc:
1f:e3:d1:ec:50:3c:ee:52:6c:b5:cc:ec:fd:d2:d0:
66:d9:a0:41:55:c0:36:63:ca:ca:4d:a0:33:92:29:
af:14:67:15:64:5c:eb:73:56:60:37:25:70:03:df:
39:ea:91:17:0c:89:d1:27:8d:2e:51:18:d3:d7:78:
0a:9b:6f:c9:15:ac:3d:cc:b6:c5:c7:76:86:0b:0c:
69:c7:a7:59:b9:c5:56:6b:dc:46:e4:7f:b8:a5:db:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BA:92:FC:07:89:E4:D9:E4:CE:1C:E2:21:72:69:17:15:BB:A4:1A
X509v3 Authority Key Identifier:
keyid:4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0a:10:ad:69:92:7b:4b:e5:57:ad:18:55:2e:42:27:0a:a0:
4d:7e:b0:13:6e:35:84:61:a0:62:6a:51:ce:52:cf:99:44:47:
31:c6:08:fd:80:7e:0d:30:98:f7:9f:8d:7b:ba:26:09:c3:72:
0c:8b:5a:37:c5:12:93:02:28:5c:06:32:ae:3f:9c:00:79:1b:
7d:55:f8:33:c5:6d:fa:e9:3d:01:4a:ad:0f:b3:69:60:c7:f0:
0b:83:70:0f:c1:9c:c4:9c:d5:07:df:e1:db:2c:46:73:be:a9:
32:77:77:44:1d:9f:9c:35:32:a2:91:04:b9:bc:9d:95:22:09:
37:6b:87:53:89:31:5e:5a:2e:de:3c:74:78:f9:17:2a:6b:f3:
07:aa:b2:ae:38:3d:a4:4e:d7:7d:90:c9:54:96:72:95:4d:9b:
c3:06:4f:2c:d2:c9:0f:b0:cd:2f:a9:fd:c1:76:60:d9:7d:5d:
39:4d:8b:3a:57:5b:4b:31:63:a7:ad:1d:f3:1c:bd:28:cb:cb:
54:08:4e:54:08:3f:60:56:a4:39:b9:71:ea:0a:d5:60:9c:7f:
2e:21:d3:cc:ad:d9:fc:ff:2f:df:c8:98:b9:27:a4:99:88:ac:
95:a0:d4:ac:f2:38:11:6b:f9:3e:de:18:52:e1:89:30:4c:7a:
27:92:47:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:56:51 2025 by rpki-client