This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
File: C2B7A28859947C52A387BB628764F91AAA1D05B9.mft (raw, json)
Hash identifier: BylclB84ZR5qAYAa4NBM+R9xxGcYaSqh+43AqaAyREw=
Subject key identifier: B2:87:6D:7D:C0:D6:42:CA:1F:B1:3A:EE:93:B4:2E:B5:88:1F:CC:32
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Certificate issuer: /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial: 59ADEF448C7ECECC9A7D1751012C4569CAD32C03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
Manifest number: 0148
Signing time: Sat 20 Dec 2025 01:49:39 +0000
Manifest this update: Sat 20 Dec 2025 01:44:39 +0000
Manifest next update: Wed 24 Dec 2025 17:03:39 +0000
Files and hashes: 1: 3230302e372e3135322e302f32312d3231203d3e203532333939.roa (hash: qN6PWVdhlYeh+pExEFjWEkybemAdFRxw+muHyVxoxow=)
2: 3230302e372e3135362e302f32322d3232203d3e203532333939.roa (hash: cudxMuP1NLYJpaoKjvogUZG4DBlwgoxjbQOATaywuvk=)
3: 323830333a396530303a3a2f33322d3438203d3e203532333939.roa (hash: 9QGGJHjoDWdFBsUA/rne9TxfJ4eMkwgtI+73Z1bOy+w=)
4: C2B7A28859947C52A387BB628764F91AAA1D05B9.crl (hash: Gv2aSPHcDCyd/d1CSKsxoUBY8qwbxdOem+Q5bqIqQr4=)
5: 3230302e372e3135322e302f32342d3234203d3e203532333939.roa (hash: 0mITqxC0YrEaSs1Y5J2VAX0IqdjRDjHIVbiUQfkZWY8=)
6: 3230302e372e3135382e302f32332d3233203d3e203532333939.roa (hash: W/gfwsv+vW7p2pP/biCil1Hn0xnNZ7cWVTp+Qe5ZoFI=)
7: 3230302e372e3135392e302f32342d3234203d3e203532333939.roa (hash: IWfnAn+Qrn7YZCvCSwQoOVSefvM54cyaszZ7ibhJK54=)
8: 3230302e372e3135322e302f32322d3232203d3e203532333939.roa (hash: CE/fDlOwnj7sVpU2xVsBb7AauCCHxIIGyUptT06BDI8=)
9: 3133382e3131372e3132392e302f32342d3234203d3e203532333939.roa (hash: UGbEuJCSuNVxuP4prZyrKIhjBfbBL7xkb1oWWGG6u5k=)
10: 3230302e372e3135372e302f32342d3234203d3e203532333939.roa (hash: viy2p7K0zzuBQWhHiZiCjvfk0wWBWv0BnvOfBkQZjj4=)
11: 3133382e3131372e3133312e302f32342d3234203d3e203532333939.roa (hash: w0l39Mm3z+BR/+csmol1pQCSrJwdO4QRUfcXzTnqRgE=)
12: 3230302e372e3135362e302f32342d3234203d3e203532333939.roa (hash: T69h9tp/7geqcstojxrKd2FTVA37N6zfqofmje3Uftk=)
13: 3230302e372e3135322e302f32332d3233203d3e203532333939.roa (hash: V/AAp5ObrWQz4lFvLSFEt6qm5nS9eOZYnMVuZgte0hE=)
14: 3230302e372e3135332e302f32342d3234203d3e203532333939.roa (hash: tS6WLWeshqGwJp7Sf3de0IYQxs2uMGeKv6u+N0DIxrc=)
15: 3230302e372e3135342e302f32332d3233203d3e203532333939.roa (hash: B+++dx8tkB5oDuN1jMf5RD25rBDQaKAGYfjRw8+Pf2k=)
16: 3133382e3131372e3133302e302f32342d3234203d3e203532333939.roa (hash: Zl9IXLKvkmk32SHbg7RUs5lSEct4jtnf2b8bJRd7VR8=)
17: 3133382e3131372e3132382e302f32332d3233203d3e203532333939.roa (hash: Q830yrb3QPvCFlbuTwOgEGj/cmSyPNxoT4kUd3Ypu1I=)
18: 3133382e3131372e3133302e302f32332d3233203d3e203532333939.roa (hash: 12kURaH18ZNQHLu5ZGQqPONoS6DgF1rVeBFt5JD3m8E=)
19: 3133382e3131372e3132382e302f32342d3234203d3e203532333939.roa (hash: GmFDeynk5sAlj+bgBTO8IzFt/LP8iPD4VCzXq2zgmhg=)
20: 3133382e3131372e3132382e302f32322d3232203d3e203532333939.roa (hash: 8x4mKjKvDeL+L6tN5ga40l4SaaVrvmJdXSBlvuC9ojM=)
21: 3230302e372e3135362e302f32332d3233203d3e203532333939.roa (hash: qpMmobFwr2a+rtgEoMKwrV6c5Y1YZ0se8yPBRaYKo0U=)
22: 3230302e372e3135352e302f32342d3234203d3e203532333939.roa (hash: kFihP2Kcgc1cd82JY3hTSs2ocKmKrS6iKn+FgxdiUt0=)
23: 3230302e372e3135342e302f32342d3234203d3e203532333939.roa (hash: dhtadjMc7BR0aR6e+vQ34l/0FBFG16/F4z0TkQ0/Q5U=)
24: 3230302e372e3135382e302f32342d3234203d3e203532333939.roa (hash: 7xmx4h/ZlDYKo7lSuFKhrOIlE9OS/VDIdWZ+NBlQeBM=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 17:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ad:ef:44:8c:7e:ce:cc:9a:7d:17:51:01:2c:45:69:ca:d3:2c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Validity
Not Before: Dec 20 01:44:39 2025 GMT
Not After : Dec 24 17:03:39 2025 GMT
Subject: CN=B2876D7DC0D642CA1FB13AEE93B42EB5881FCC32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:ea:e5:e7:77:55:cf:b0:d3:ef:73:51:2d:
ce:9a:1b:49:0c:68:06:91:31:4f:c9:13:c7:2f:30:
8e:1f:39:a6:b9:b4:2d:64:f5:eb:c2:39:3e:82:0c:
f5:a5:ba:b6:2b:4e:b0:0e:77:10:ca:56:1c:54:f3:
0f:e9:57:a3:82:6c:f6:b7:52:5d:53:39:2e:ec:56:
ea:f3:03:2a:52:e9:c2:ca:5e:59:70:a2:02:9a:f6:
45:b4:4b:87:49:f5:ed:7d:d1:2e:f7:37:33:00:5d:
32:f7:c3:7b:4f:e0:d4:e1:5b:07:d8:a1:c7:d7:a2:
ff:4e:9c:b4:d4:22:68:85:b3:66:79:e4:6f:e8:6c:
fa:a3:aa:f4:65:6c:3f:dd:21:bf:00:f9:93:09:b2:
d6:cf:3e:42:1f:a3:3e:86:54:e7:36:61:04:67:24:
dd:82:9f:00:b1:f3:40:65:7f:65:a2:98:7d:c0:b2:
41:e1:0b:26:7a:38:81:a1:4a:88:12:05:a9:65:b6:
21:f8:eb:87:9f:b8:ff:85:d6:65:7b:3d:3a:f2:0b:
fa:0f:b2:9e:a6:01:5e:3d:c8:0f:ce:5a:47:7a:da:
23:06:e6:23:89:d7:ed:8a:a0:f2:df:52:84:18:2c:
00:2a:65:82:c2:76:7e:85:10:bf:9d:a9:9b:af:c9:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:87:6D:7D:C0:D6:42:CA:1F:B1:3A:EE:93:B4:2E:B5:88:1F:CC:32
X509v3 Authority Key Identifier:
keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:89:51:d5:03:6b:36:83:c3:a8:88:cb:a8:d1:df:24:19:58:
a1:e3:59:2e:80:60:8e:2d:b2:58:be:e7:32:9f:79:da:d2:d1:
8c:26:81:49:44:4f:31:f8:a7:49:53:cb:0a:f5:57:fc:db:59:
a8:cf:4a:af:2e:28:66:3d:d1:c2:53:a5:71:a4:22:9f:2b:42:
63:31:e5:ff:83:e6:3a:f4:74:8b:bd:67:9d:77:59:97:7c:1b:
99:fa:1e:13:38:b4:3d:45:13:a3:e0:84:df:62:55:1c:60:d1:
fb:22:cb:67:5a:d6:17:d4:b9:fd:5b:3b:1b:6f:1d:52:c2:a0:
11:ba:a7:67:5c:b4:ff:af:ca:d3:e5:18:85:f6:f8:14:e5:32:
60:d1:1a:2c:73:a7:52:45:6d:e9:b0:46:1b:63:91:d0:33:13:
20:b3:eb:5a:b7:be:6e:bb:41:44:41:f9:a0:89:ae:e4:82:79:
91:c8:ea:9c:e5:21:c7:e4:88:eb:e7:8e:56:28:7a:46:5a:09:
cb:7c:5d:9d:5b:91:c7:8d:5e:48:84:ce:97:13:9b:af:35:83:
10:95:96:dd:7d:61:82:97:a1:24:8b:84:e0:b4:f4:56:b9:a1:
ba:53:0f:55:db:2d:c7:e3:69:01:0c:cc:72:41:c7:bc:a3:3b:
b3:43:20:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:29:09 2025 by rpki-client