This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
File: 8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft (raw, json)
Hash identifier: nl3lwu7OIhN9oIv3NYy90t071jb6oELYkwodwZx2RXM=
Subject key identifier: 52:09:8D:3A:A3:A2:F6:9A:8D:6B:F2:09:B8:BB:DC:53:64:DF:6F:B8
Authority key identifier: 8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
Certificate issuer: /CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Certificate serial: 5A5C7662CD762F603550860A4F453480CE0F941E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
Manifest number: 0149
Signing time: Sun 07 Dec 2025 06:44:00 +0000
Manifest this update: Sun 07 Dec 2025 06:39:00 +0000
Manifest next update: Fri 12 Dec 2025 06:08:00 +0000
Files and hashes: 1: 8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl (hash: VS9ZF19uAv2DOPtfxzeHWaNAU4d9yNC93mgqXGdxyWU=)
2: 3230302e312e3136312e302f32342d3234203d3e20323639393431.roa (hash: Mn9HP51sd3nq80GCLvFm4IDufKTTGBNvzNiXgOdxkOg=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 12 Dec 2025 06:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5c:76:62:cd:76:2f:60:35:50:86:0a:4f:45:34:80:ce:0f:94:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Validity
Not Before: Dec 7 06:39:00 2025 GMT
Not After : Dec 12 06:08:00 2025 GMT
Subject: CN=52098D3AA3A2F69A8D6BF209B8BBDC5364DF6FB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:e1:2b:d5:91:19:7a:8c:81:3b:c7:3b:8a:
48:47:7d:3b:d5:fc:e0:ce:bb:3a:80:1c:d8:aa:12:
44:8c:6d:84:ad:2a:ee:c6:2b:a8:84:b1:cc:81:3f:
f0:e0:e4:03:d5:3f:5e:0f:e2:43:ab:bb:53:30:19:
63:e6:20:27:ce:da:b9:e3:c8:76:79:30:9d:07:51:
a2:55:69:9e:d8:55:34:d9:90:c1:f0:56:d6:11:f7:
82:2f:b3:44:fb:9d:b4:b9:56:3d:bf:0c:f8:97:76:
61:3a:a3:98:4a:e7:30:1d:ae:65:4e:f7:01:8c:88:
cb:77:27:f2:8a:6b:3a:9a:1b:76:c6:a2:49:70:1d:
46:f1:55:58:2c:d1:08:2a:85:b6:fd:4e:73:3d:6f:
44:55:a2:55:9b:d8:80:d8:d8:fc:13:2b:4d:6a:2b:
ee:d3:40:18:61:10:e7:e5:b3:da:40:72:3d:e8:2d:
0e:00:19:9f:3c:4c:7a:9b:f9:76:76:db:34:b1:90:
33:7a:fe:dd:94:62:1a:54:aa:92:cb:a7:d9:63:69:
05:ce:a7:a9:64:2b:c4:8e:17:aa:8f:61:bb:28:c6:
14:b4:4c:b6:54:ea:6d:20:95:e1:f0:f3:12:e0:55:
d0:ef:7e:78:b9:a9:3b:ce:ee:dd:49:ed:0a:5b:98:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:09:8D:3A:A3:A2:F6:9A:8D:6B:F2:09:B8:BB:DC:53:64:DF:6F:B8
X509v3 Authority Key Identifier:
keyid:8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:24:66:6e:e9:1f:d1:ee:b9:3b:b9:9f:a2:d5:7a:cf:ab:e6:
1d:62:b2:30:d9:d5:62:14:1d:bc:c9:bf:54:c9:e9:f3:99:9b:
88:de:54:c5:e5:b2:c4:de:14:c8:65:de:b1:dd:71:8f:78:50:
45:83:4a:ef:a1:69:20:da:84:47:75:18:58:4e:aa:f3:3b:b4:
51:3c:65:85:fb:4b:17:9d:d2:48:f9:5c:df:0b:69:ed:c3:de:
b7:23:2b:b6:0a:dd:62:e7:52:b7:2c:29:d1:11:08:ae:8a:a0:
da:c0:ba:3a:34:9e:d1:35:b4:ed:b5:48:1e:95:ff:cd:ba:70:
5f:f6:bd:e2:b9:b6:c2:6e:0d:56:58:c9:da:aa:e8:5b:7d:3d:
d4:b3:37:61:48:32:59:b3:49:67:59:57:b2:6d:fc:9b:e6:cd:
79:aa:8c:57:f7:d1:db:f3:4d:95:39:90:c7:b1:a2:58:30:45:
d7:d5:03:0b:f4:cf:2e:60:9f:f5:4a:8e:b1:ac:5d:9d:7c:ad:
44:f3:8a:1f:5c:c4:e6:92:c3:bd:5e:62:f5:9a:13:63:67:2d:
2b:e7:70:e1:86:cf:c0:d7:d1:41:89:73:02:a0:c8:3b:55:b1:
96:2f:11:57:ac:b2:81:33:36:55:e7:d8:c7:f4:e1:46:5e:bd:
3e:b2:c1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 16:22:56 2025 by rpki-client