This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
File: 4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft (raw, json)
Hash identifier: tXbUqULBGk6Uu8II9G41f1U940I0f+yuVj/tlZK+/jk=
Subject key identifier: 28:01:95:56:AA:D6:34:10:D7:BA:F1:0B:5C:B0:02:63:D8:E1:69:D4
Authority key identifier: 4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
Certificate issuer: /CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Certificate serial: 58B92DD111CFD49E598BA18D1DFADE194D6D7B2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
Manifest number: 013C
Signing time: Tue 18 Nov 2025 18:19:53 +0000
Manifest this update: Tue 18 Nov 2025 18:14:53 +0000
Manifest next update: Sun 23 Nov 2025 10:57:53 +0000
Files and hashes: 1: 4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl (hash: p55syKYT98t7xWVe+rDXxGqpMk5vbAeZiKFVJCX8x9g=)
2: 323830333a356239303a3a2f33322d3438203d3e20323733303438.roa (hash: vbmhuabCX3kIp1FpRu5OFaEVu9ZZo5hsFff0qsFsrQQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl
rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 22 Nov 2025 16:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b9:2d:d1:11:cf:d4:9e:59:8b:a1:8d:1d:fa:de:19:4d:6d:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Validity
Not Before: Nov 18 18:14:53 2025 GMT
Not After : Nov 23 10:57:53 2025 GMT
Subject: CN=28019556AAD63410D7BAF10B5CB00263D8E169D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:d3:ae:b5:ff:01:d5:ba:08:8b:93:9e:9d:
30:39:3b:34:10:24:20:fd:ee:8b:11:9a:a4:9c:2b:
2d:b5:6a:06:ed:2f:f5:6f:5f:dc:44:40:fc:d3:a9:
50:f8:3b:6d:29:d5:c4:3b:8a:3a:c4:5d:d7:22:1f:
d1:f1:41:c0:60:27:f3:4c:79:db:86:ba:f4:ec:85:
73:bd:c1:d0:69:ea:ec:f6:d5:f5:c0:f9:dc:af:59:
e1:25:f6:ab:1f:b8:18:ee:22:90:35:9a:59:8d:65:
55:f9:96:3c:10:23:ec:5f:51:95:e5:9e:37:41:a9:
8f:72:10:64:1e:2a:56:4b:ab:00:c1:fc:16:4c:b6:
78:d1:ea:15:86:07:1e:b0:e2:d1:78:9e:73:19:0d:
d6:9f:88:43:18:c6:01:23:6e:fa:60:62:db:26:1d:
e0:54:67:83:1d:e2:a4:0b:6d:39:18:48:d6:3a:6c:
52:5f:97:1b:22:19:79:49:c5:4a:43:cb:6d:86:1c:
52:9c:87:43:16:4c:b1:05:ee:b5:0c:56:8d:92:20:
0a:ff:3c:c3:a1:76:64:64:6e:b2:fc:88:e4:34:b3:
cb:f1:7c:3f:c7:e3:3c:77:ee:2d:3f:82:d0:07:80:
cf:1a:51:2d:2d:0b:0a:a5:32:da:00:16:3b:84:0c:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:95:56:AA:D6:34:10:D7:BA:F1:0B:5C:B0:02:63:D8:E1:69:D4
X509v3 Authority Key Identifier:
keyid:4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:52:e1:d9:1a:fb:89:f9:64:03:5d:35:00:32:9d:4b:1a:ac:
e9:ec:5d:3e:3b:6d:2e:8e:09:83:a9:dd:9f:b7:62:d8:ed:a5:
22:bc:58:d5:7e:fe:8e:ac:9a:2a:a7:13:d4:af:bb:5f:38:d6:
6a:45:e3:33:20:bd:80:86:f0:d0:af:26:9d:92:45:df:05:f7:
04:92:38:cd:31:e1:cd:b6:d7:7f:05:20:95:78:b2:d8:a0:92:
de:fb:76:c4:74:1d:a3:fa:89:aa:5f:99:21:1b:9c:18:98:c6:
51:44:08:e9:a7:ec:3d:96:36:4a:05:b1:07:7f:a0:40:45:63:
b6:7f:c7:e6:ba:bf:8b:de:63:eb:78:33:05:bb:32:14:19:a2:
21:6f:68:ff:ce:59:51:bd:cf:03:18:9a:08:60:ab:24:47:1c:
95:e2:c1:10:ac:cf:44:b4:6f:a0:ee:8f:32:ce:cb:fb:e8:44:
7d:af:46:e3:35:cd:69:97:96:b2:68:f6:cd:0b:1b:64:6c:08:
1f:9e:6f:ad:de:dd:5e:d9:90:10:97:9b:3f:3e:ea:0a:5d:3e:
28:b1:1a:5e:29:0d:64:43:b7:f9:75:ac:6c:5c:c9:b3:23:8f:
f3:f2:df:90:66:9a:fa:33:3f:e3:95:c5:6d:31:be:5b:b9:1a:
4a:bb:fe:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 19 03:57:20 2025 by rpki-client