This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
File: 4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft (raw, json)
Hash identifier: G9YHormfYUw7QDoXxPTNKlcUbdTYBjQpkiG70iURnBI=
Subject key identifier: D1:8A:72:E2:26:EE:8A:C0:38:16:46:4A:FD:9A:6A:6D:14:F3:89:C1
Authority key identifier: 4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
Certificate issuer: /CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Certificate serial: 3459F23A8FEAC01A8945B05F8B921689BABAC3B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
Manifest number: 0141
Signing time: Fri 28 Nov 2025 11:57:54 +0000
Manifest this update: Fri 28 Nov 2025 11:52:54 +0000
Manifest next update: Tue 02 Dec 2025 18:44:54 +0000
Files and hashes: 1: 4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl (hash: N6VgTvRuG+nrg8PhAOvlRMrd3Lb6xfBP+PmgtVAuJCc=)
2: 323830333a356239303a3a2f33322d3438203d3e20323733303438.roa (hash: vbmhuabCX3kIp1FpRu5OFaEVu9ZZo5hsFff0qsFsrQQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl
rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 02 Dec 2025 18:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:59:f2:3a:8f:ea:c0:1a:89:45:b0:5f:8b:92:16:89:ba:ba:c3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Validity
Not Before: Nov 28 11:52:54 2025 GMT
Not After : Dec 2 18:44:54 2025 GMT
Subject: CN=D18A72E226EE8AC03816464AFD9A6A6D14F389C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:cd:95:01:49:27:fe:c6:72:8f:6c:83:e2:
ee:bd:38:86:e4:08:48:a0:73:85:ee:18:11:c0:be:
0f:aa:3f:24:b4:5b:ed:4a:02:46:ed:15:66:52:93:
f7:31:a7:4a:b4:5e:5d:2f:dc:f6:ec:8a:be:d3:ba:
6c:d8:52:e4:45:bb:16:39:48:a8:50:08:95:21:26:
bc:03:ae:60:49:89:41:2f:d0:04:a7:5c:62:45:a5:
56:d0:f2:82:fc:e8:a7:ad:4a:2b:3e:c0:29:86:74:
df:19:28:c4:93:ae:e3:cf:0e:84:ec:0c:03:bd:b0:
28:a9:c7:d8:f6:a9:4f:32:39:fa:7b:74:2d:4f:4d:
be:5c:93:e5:2c:13:f9:b8:2e:4c:4c:90:13:b0:a4:
d8:97:1b:0f:bf:96:91:ed:6c:0c:f0:98:e7:89:6d:
2a:f7:dd:8c:5b:b0:68:d8:f0:6b:3a:82:b8:d8:07:
b1:d4:e0:eb:f3:69:f6:c4:ce:27:58:be:97:8b:26:
e8:39:ef:0b:ad:75:f5:5e:91:50:7c:99:40:e6:e9:
98:96:15:e4:ca:21:4f:ec:4e:29:c6:4f:1d:dc:4b:
c2:cf:35:8c:ee:72:cf:22:69:de:05:95:ce:c1:fc:
98:c5:94:4d:b9:d8:53:fa:1a:7f:ef:b7:1a:d6:19:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:72:E2:26:EE:8A:C0:38:16:46:4A:FD:9A:6A:6D:14:F3:89:C1
X509v3 Authority Key Identifier:
keyid:4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ea:be:57:ca:8e:43:42:4f:4c:66:4d:1b:e4:20:0a:54:61:
70:9a:16:70:e2:41:49:16:11:4a:c7:64:87:3c:c0:73:6f:72:
aa:f5:cc:be:81:b4:c5:4f:d2:69:bc:53:28:17:64:7e:14:5d:
09:0c:b5:26:0c:3d:bd:e7:ab:2b:00:b8:45:0b:13:6a:67:77:
22:b4:8f:d9:15:54:64:16:79:86:75:37:b1:7f:14:ac:7e:0f:
6a:df:30:73:9b:75:e3:66:90:49:43:60:2e:80:f9:af:3e:f0:
46:2f:ae:b0:32:76:e1:ef:eb:1f:79:14:93:93:aa:7c:fe:51:
47:4c:8c:9a:1e:94:ab:ef:77:c4:c4:9d:26:e6:ea:be:af:ba:
45:98:29:d2:01:bd:cb:76:95:12:7c:43:49:08:23:8f:ca:c2:
a4:b2:3f:d7:68:fc:07:b2:60:15:73:89:fa:37:44:41:a8:75:
2e:03:48:8d:3b:41:f1:a8:a6:53:b7:06:ed:b8:08:20:30:ea:
a6:5f:c5:54:42:94:86:59:25:c1:ef:0b:95:e5:cc:ca:4a:c0:
9d:be:47:6a:a9:24:5f:c1:a4:df:52:47:a1:ba:21:78:e9:72:
30:0f:7d:a9:1d:7c:be:e7:c0:d4:6e:ba:60:8a:6f:b6:0d:9a:
8a:bf:39:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 29 06:02:04 2025 by rpki-client