This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
File: 8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft (raw, json)
Hash identifier: XsEw8t6UUwd+9iCV8YpbyayO5bSlUgWKxgDATtljR20=
Subject key identifier: B6:FE:62:42:0D:C5:7E:B7:92:D5:35:CC:4B:4E:7B:02:99:1B:D4:A2
Authority key identifier: 8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
Certificate issuer: /CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Certificate serial: 383E2B91244F20D2852B1C8DD4A7B47771FCD0BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
Manifest number: 0150
Signing time: Sat 20 Dec 2025 20:01:19 +0000
Manifest this update: Sat 20 Dec 2025 19:56:19 +0000
Manifest next update: Fri 26 Dec 2025 02:37:19 +0000
Files and hashes: 1: 8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl (hash: xIfKJRm3ZHWKHRMBDuNvBIpCh/6Tnw5RbMu9yuPAHr4=)
2: 3230302e312e3136312e302f32342d3234203d3e20323639393431.roa (hash: Mn9HP51sd3nq80GCLvFm4IDufKTTGBNvzNiXgOdxkOg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 26 Dec 2025 02:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:3e:2b:91:24:4f:20:d2:85:2b:1c:8d:d4:a7:b4:77:71:fc:d0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Validity
Not Before: Dec 20 19:56:19 2025 GMT
Not After : Dec 26 02:37:19 2025 GMT
Subject: CN=B6FE62420DC57EB792D535CC4B4E7B02991BD4A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:cb:6a:55:97:91:cf:91:3b:32:15:b7:cd:
1f:a5:48:19:b4:88:0e:c9:3d:e0:e6:c8:ca:6d:26:
ad:49:42:e6:e7:51:bd:05:49:24:4e:eb:fa:97:26:
0c:8a:72:30:38:fe:78:37:f2:68:78:75:ac:d0:92:
4a:fe:05:48:8f:6b:a2:43:3d:1c:ef:e4:c8:5d:c7:
ed:e5:62:a4:22:a8:3d:9d:31:40:92:39:bf:ca:bf:
a2:f3:0e:8d:81:0b:4a:03:ae:dd:46:38:55:45:07:
a1:8c:1a:04:6f:1f:9d:89:d9:fa:08:47:0f:8d:1a:
c7:6a:f7:a6:b8:4e:5d:9f:86:9e:04:04:fa:63:0e:
8b:f3:0e:7d:4f:c6:32:e3:65:a9:b2:00:2a:f0:34:
1b:71:3a:eb:c9:64:bb:c1:b6:e8:ad:7d:1c:57:0a:
53:a8:48:e2:b8:73:bf:69:72:75:7b:a6:f7:50:9c:
fe:e2:a4:32:90:29:d7:27:35:b7:4e:a4:10:44:52:
ae:6a:78:05:dc:6a:a4:c2:a4:c5:ff:e4:60:cd:bc:
cb:a7:ca:38:4a:08:a9:f6:e6:f5:71:60:52:a0:e8:
67:e8:8b:5a:df:c3:93:47:cc:70:63:4b:19:8b:cc:
e2:53:05:00:41:7a:1e:34:de:e6:f7:0d:5c:53:ae:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:62:42:0D:C5:7E:B7:92:D5:35:CC:4B:4E:7B:02:99:1B:D4:A2
X509v3 Authority Key Identifier:
keyid:8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:37:80:4f:0e:c8:f7:19:b6:91:7d:8d:9b:31:35:ea:9c:f5:
13:9a:af:4e:f3:eb:a3:b9:97:e8:36:e0:59:71:f1:60:5d:81:
8b:70:25:28:cb:4e:c6:fc:ce:8d:52:9e:a3:48:59:cc:b1:df:
cf:f1:a8:76:b6:38:56:14:0b:51:81:f8:19:e3:e1:cf:4a:65:
aa:42:bf:2a:27:f2:e0:56:d6:fa:ca:56:4a:bc:44:86:40:43:
24:c4:2f:de:82:06:d0:8f:e0:67:36:03:be:88:9c:34:a3:8c:
7d:2c:18:7a:45:3e:b7:86:f4:12:1c:03:2a:2c:96:9a:29:52:
3c:46:71:be:e7:42:d3:13:fb:e0:3e:57:08:6e:a7:9e:e4:8b:
65:73:9a:83:36:90:ab:38:3b:a9:82:b8:65:8c:ef:2b:00:76:
67:43:a3:31:88:16:30:85:f1:6b:2c:06:1e:5c:f9:50:f5:a0:
d3:44:87:5f:39:4e:9a:fb:8e:5d:d4:94:b1:36:97:de:b0:d9:
20:9a:42:ca:c5:d3:98:0e:e9:ed:80:f7:fa:8d:b0:79:81:53:
4e:f5:6b:cf:63:b8:89:bb:18:64:cc:40:f2:af:6f:94:f9:22:
c2:51:ee:4c:c5:62:e5:40:47:e5:50:2a:19:ea:c8:8b:97:2e:
af:18:37:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 00:29:30 2025 by rpki-client