This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.mft
File: CF5339F87B278717067560B9059C3098661F754B.mft (raw, json)
Hash identifier: q5mlAf/0Zzws3OIcNxsmUxB5meyI7rU0HGGVOjTZs8s=
Subject key identifier: 20:7F:08:9A:1B:60:DB:40:C6:7C:D6:56:B9:6D:C7:65:97:8C:74:33
Authority key identifier: CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
Certificate issuer: /CN=CF5339F87B278717067560B9059C3098661F754B
Certificate serial: 0586B68A5DADC6068F2CFC058C16A20E73A0386A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.mft
Manifest number: 014B
Signing time: Wed 17 Dec 2025 14:43:10 +0000
Manifest this update: Wed 17 Dec 2025 14:38:10 +0000
Manifest next update: Mon 22 Dec 2025 22:01:10 +0000
Files and hashes: 1: 3132382e3230312e3136332e302f32342d3234203d3e20323635373632.roa (hash: KQTsA5mc2GTGTF1wsHWD30k3BsqT8H5Plr9IR6lWRLo=)
2: 3132382e3230312e3136302e302f32322d3234203d3e20323635373632.roa (hash: wkLvUdFcHRDtq+AprdgKUhVzO9p8+REYkPdnfhQh0Cs=)
3: 323830333a666263303a3a2f33322d3438203d3e20323635373632.roa (hash: pUxYM/RnOoHUsn+QfV+gl9+QuXNwiSS1kfuKc4dXFLw=)
4: 3132382e3230312e3136312e302f32342d3237203d3e20323635373632.roa (hash: dCKe424d3Jct/FaPfWgMVaf1YgO+ytiFEo1QBlyDGBo=)
5: 3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa (hash: p0j+mCH5u6PyKkXtQD05XppdRH8jOAH65jI3rvaJ80c=)
6: CF5339F87B278717067560B9059C3098661F754B.crl (hash: 7UzW4qg//DOHmBJbGQpVE9YkJd/zgbmNQ3VqSWviXdw=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl
rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:86:b6:8a:5d:ad:c6:06:8f:2c:fc:05:8c:16:a2:0e:73:a0:38:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF5339F87B278717067560B9059C3098661F754B
Validity
Not Before: Dec 17 14:38:10 2025 GMT
Not After : Dec 22 22:01:10 2025 GMT
Subject: CN=207F089A1B60DB40C67CD656B96DC765978C7433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:cf:2a:99:66:98:83:22:f0:70:ac:ca:bd:
e1:4c:4b:f7:a9:75:15:d6:84:6f:3f:7d:cf:de:32:
01:41:56:ea:8b:4f:d8:7d:94:f0:ea:7d:83:b8:c9:
d8:c8:9c:98:65:58:ee:2a:a9:dd:22:8d:10:ae:e3:
48:4c:4b:ff:ee:51:2f:33:b0:ce:59:04:b8:3d:90:
8b:75:ad:36:e1:d4:18:f4:b1:2d:7c:5e:c9:29:94:
a0:3d:3e:7c:c0:72:1b:08:55:38:a9:a4:c4:36:ee:
58:46:db:96:2b:a3:12:16:90:ed:29:35:85:ae:8a:
33:67:fe:8e:0d:d1:35:6e:94:2d:5e:c3:28:7d:c7:
24:95:12:d7:4e:fb:2c:75:e3:9d:bf:a9:de:82:c4:
63:a5:86:fd:9e:32:a0:04:79:e8:7f:98:98:a3:2d:
f2:af:74:13:04:bf:c5:79:db:a7:a5:81:3c:1b:79:
4c:9b:0d:8f:42:2c:66:4c:e2:fe:f1:79:15:05:ef:
07:6e:a6:40:6f:1b:cf:54:ea:8c:d9:cf:db:94:43:
6d:8d:ea:90:2c:5f:dc:1e:ac:a5:df:fb:77:fb:73:
f3:b9:a6:a8:b6:55:da:d9:42:e3:2f:c6:0d:a3:94:
5a:1a:af:26:17:33:2b:e8:c2:a1:32:96:bc:a2:40:
a4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7F:08:9A:1B:60:DB:40:C6:7C:D6:56:B9:6D:C7:65:97:8C:74:33
X509v3 Authority Key Identifier:
keyid:CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c3:a5:0f:5d:14:21:84:82:5d:bc:ef:fd:ca:82:e9:45:c6:
37:d4:63:3d:1d:a7:c0:7d:14:ee:6f:8c:38:7c:59:8e:57:0e:
c4:f8:93:98:41:ce:6f:2f:a0:bd:be:2c:f9:cc:01:3a:43:d7:
c6:59:22:4d:da:f5:11:57:ee:6b:34:58:a4:72:69:9b:63:dc:
6a:49:15:aa:1b:bc:04:db:10:bf:94:5b:2e:43:a7:75:97:e1:
e6:a4:d8:3d:12:67:67:68:1b:5b:66:40:b4:1e:d9:a8:ed:f6:
37:5a:02:a6:d9:83:9e:fd:23:f0:a5:c2:62:76:e6:fc:36:e6:
7c:35:8f:05:b6:b6:73:44:85:24:93:a9:f4:ce:5a:14:ba:b1:
23:bf:9d:d5:22:0c:72:ea:a1:74:13:b0:ef:96:b1:b9:67:f4:
c3:d9:ce:b9:66:2a:c6:80:64:aa:5c:2f:80:c8:fe:09:55:84:
24:80:c1:dc:2e:a4:a4:e5:07:1a:b3:84:68:17:39:7a:c5:81:
75:25:c4:62:fc:9e:5e:d3:de:56:f0:69:4c:d0:dd:36:c3:b1:
e1:1b:05:0f:ad:63:de:5f:e4:c0:09:40:ec:b1:33:3c:b5:f2:
82:76:29:da:86:33:7d:e0:31:af:7d:6d:f8:d5:a7:cc:44:fe:
4b:77:a8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:40:17 2025 by rpki-client