This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
File: 8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft (raw, json)
Hash identifier: DkMhTbEI6fr0jTYz04Jh60v12iR6JVuer+UP3VeeXIc=
Subject key identifier: 7C:A9:0F:AB:DC:E6:72:69:E0:6B:EF:D5:B6:43:07:7D:0C:1B:C6:20
Authority key identifier: 8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
Certificate issuer: /CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Certificate serial: 3EF26D2503CAC776FD483D663F41B95E08B79385
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
Manifest number: 014A
Signing time: Tue 09 Dec 2025 06:13:02 +0000
Manifest this update: Tue 09 Dec 2025 06:08:02 +0000
Manifest next update: Sat 13 Dec 2025 15:24:02 +0000
Files and hashes: 1: 3230302e312e3136312e302f32342d3234203d3e20323639393431.roa (hash: Mn9HP51sd3nq80GCLvFm4IDufKTTGBNvzNiXgOdxkOg=)
2: 8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl (hash: gGrtxeBoMdZ7EeOB9AhllKbinmChoQJoqmQDiuiykyc=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 13 Dec 2025 15:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f2:6d:25:03:ca:c7:76:fd:48:3d:66:3f:41:b9:5e:08:b7:93:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Validity
Not Before: Dec 9 06:08:02 2025 GMT
Not After : Dec 13 15:24:02 2025 GMT
Subject: CN=7CA90FABDCE67269E06BEFD5B643077D0C1BC620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:01:b1:09:38:30:b2:b8:cc:04:50:1d:06:
14:7c:8e:3a:4b:97:48:3e:e0:d3:13:3d:4f:1d:33:
89:9b:c8:1c:76:99:32:0f:49:f5:4b:d3:a1:ba:8f:
ab:ec:55:1e:5e:9a:30:d2:88:1b:e2:1f:ad:49:5c:
19:0a:39:b9:f0:c0:19:34:de:fb:b7:65:91:6a:76:
ec:47:4d:81:49:2a:ab:35:7f:19:3a:90:31:69:ff:
6e:ea:1d:ab:e0:66:2e:93:47:e5:f6:b9:26:fe:c5:
c2:5b:79:48:47:c0:56:c3:ec:d9:55:03:40:18:0b:
60:ae:51:7f:67:84:5e:90:04:a7:37:de:9d:68:0e:
99:62:ff:2e:b2:8e:6d:08:dd:5e:31:fd:20:e6:3e:
e6:4f:a9:b4:83:d4:2c:3e:59:4f:23:91:a0:45:24:
a5:55:e1:9e:7d:e5:fb:80:ad:0a:66:c8:41:fe:ed:
fb:f8:d4:56:23:85:da:68:13:11:4a:53:2b:a4:dc:
91:8f:85:6c:aa:25:83:34:3a:71:8a:56:8e:43:5e:
b8:2f:ac:42:42:42:4e:09:73:e1:27:fe:8a:40:52:
79:4b:75:c7:dc:55:80:99:ab:e1:5d:fe:ca:08:3c:
9b:8a:26:27:de:ed:26:76:ac:0c:6f:2b:27:6d:1d:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A9:0F:AB:DC:E6:72:69:E0:6B:EF:D5:B6:43:07:7D:0C:1B:C6:20
X509v3 Authority Key Identifier:
keyid:8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:93:e8:f7:0e:95:30:0d:0b:9e:b4:30:94:32:13:40:53:24:
c6:61:e7:14:92:81:67:99:f3:c2:0c:39:3c:d3:22:09:87:63:
7c:2e:b7:bd:55:eb:fd:b7:55:30:f3:4b:b2:aa:aa:b8:9c:e5:
0f:94:20:0e:c3:8f:81:1b:92:e2:a9:63:22:a5:fe:a2:cc:57:
9d:58:bc:80:b0:5d:a9:9d:30:cc:76:bb:17:44:78:7b:7f:4b:
61:42:82:02:12:a3:3d:25:84:70:b7:26:ab:17:82:09:5a:08:
d6:a2:52:c3:8a:7b:40:9f:5a:a4:20:27:4f:08:3f:2e:0f:e5:
1c:c9:f0:a6:f6:ad:d7:7f:a3:e6:7e:13:c6:6c:f1:da:45:a8:
a4:d2:f2:6f:ca:7a:ed:10:2f:c9:22:a2:f6:51:33:f4:66:c6:
46:93:a8:c9:26:72:61:e4:b4:2c:aa:c2:97:3f:51:6b:85:3b:
58:3b:7d:17:3e:2f:c8:b7:9b:ce:77:0f:74:90:30:33:43:6d:
f2:f7:e8:38:32:1d:b4:25:13:0b:59:08:86:5c:2c:80:7f:83:
97:49:ae:36:fd:1d:7e:fc:36:3f:81:1c:63:bb:52:d8:20:d3:
ee:74:88:5a:a5:19:4d:54:f4:81:f4:67:32:96:d9:df:88:30:
8b:74:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 16:59:57 2025 by rpki-client