This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
File: 8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft (raw, json)
Hash identifier: jCTWjfdKfbNPcAp19Im125rP3XJWs8V4hBzN3bsnVVo=
Subject key identifier: D7:69:55:1B:C8:E1:E5:AF:CB:54:AE:41:D8:ED:D8:F2:CD:55:AE:7E
Authority key identifier: 8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
Certificate issuer: /CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Certificate serial: 6CBC44326F591441EEB8FE4D8F8E9094BA8038EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
Manifest number: 0143
Signing time: Fri 28 Nov 2025 04:08:38 +0000
Manifest this update: Fri 28 Nov 2025 04:03:38 +0000
Manifest next update: Wed 03 Dec 2025 11:21:38 +0000
Files and hashes: 1: 3230302e312e3136312e302f32342d3234203d3e20323639393431.roa (hash: Mn9HP51sd3nq80GCLvFm4IDufKTTGBNvzNiXgOdxkOg=)
2: 8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl (hash: 38RstIG2Wn+ZDmh5h/agWYLAjx7PiSJfGkWWKSr1BoI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 02 Dec 2025 11:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:bc:44:32:6f:59:14:41:ee:b8:fe:4d:8f:8e:90:94:ba:80:38:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Validity
Not Before: Nov 28 04:03:38 2025 GMT
Not After : Dec 3 11:21:38 2025 GMT
Subject: CN=D769551BC8E1E5AFCB54AE41D8EDD8F2CD55AE7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:8d:52:13:41:62:54:1b:5f:c3:87:4b:08:
c5:58:52:bf:5b:1e:eb:05:48:15:1c:3a:9d:4f:4b:
27:bf:6a:52:2c:74:ca:ed:56:c5:a1:98:d8:cd:e4:
0b:8f:55:1c:27:f4:ff:a3:04:71:2a:4e:c2:2c:1f:
df:f9:3b:47:d5:b8:a2:b8:3f:da:e2:bc:fa:ff:23:
76:ee:43:2f:7a:ff:68:ed:6d:73:30:71:3c:75:b0:
1c:6d:55:6b:78:d0:9e:0c:16:82:6b:45:3d:a6:af:
d2:3d:c5:c8:fc:68:3f:6b:af:48:fb:f3:61:ef:a8:
41:1b:a6:b6:83:9e:3d:b5:ce:6e:35:b9:ff:61:d6:
52:1b:cf:f3:da:68:23:1c:07:af:7b:5d:8a:cc:b4:
4a:37:f8:dd:28:52:be:a2:2e:ef:88:95:e0:cb:e4:
27:65:f5:9b:ce:72:64:c0:1d:ea:a1:56:c0:f4:70:
59:10:e5:ae:9b:f8:98:3a:f6:3c:23:fa:81:e3:ff:
8b:80:f8:2b:40:3a:c7:51:a0:39:0e:d2:ea:fb:1d:
e9:8e:a5:93:b6:bb:cf:5e:28:06:b2:e2:3a:51:31:
b3:0c:41:94:9e:e1:79:97:f1:9b:39:5d:5a:37:f7:
a6:a6:d2:7a:9d:a8:7d:bf:04:2f:bc:a8:f0:9b:eb:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:69:55:1B:C8:E1:E5:AF:CB:54:AE:41:D8:ED:D8:F2:CD:55:AE:7E
X509v3 Authority Key Identifier:
keyid:8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5d:df:95:4f:fe:ac:18:42:da:8a:0b:e3:b4:68:04:fc:99:
35:0f:64:2f:a1:94:82:7b:b5:11:96:4c:53:0b:ec:cc:47:5c:
c7:30:e1:ca:fd:6b:74:30:0d:a3:44:94:82:62:b4:cb:a9:bd:
22:15:d5:80:6d:96:d8:09:a3:8e:a4:ba:43:63:46:91:94:9f:
2d:03:e9:e1:b1:68:c9:97:6a:ca:7a:f3:2f:05:ad:ea:bf:a0:
04:53:9d:6c:54:95:28:ac:5f:97:80:6e:1d:c5:94:5f:34:64:
f9:d2:18:86:8c:af:ce:11:f4:ea:97:5a:b0:c6:cd:6b:91:f3:
24:04:92:5c:ec:ea:3d:be:63:56:84:55:5a:c7:8d:0c:77:b9:
a8:ad:59:9d:00:b2:4c:2c:ce:d8:39:9c:ea:cf:da:eb:02:53:
cc:42:69:b5:90:94:0e:38:4a:91:7f:12:c9:36:d8:f2:69:bc:
58:14:28:6f:82:e6:73:24:53:4e:ea:b7:3e:d2:c3:a0:a2:d6:
84:5d:49:ac:46:7d:85:cb:6d:b1:06:90:63:0a:d2:4e:cd:97:
80:c4:ff:40:f4:04:42:9a:14:47:fd:68:03:44:39:b9:5f:92:
09:ed:ea:c0:09:00:de:fc:f6:5f:85:56:cf:d9:1d:09:c0:10:
0f:e2:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 13:38:33 2025 by rpki-client